added gpredict profile

This commit is contained in:
Fred-Barclay 2016-04-19 00:06:13 +10:00
parent 96e801fd8a
commit bc5a06e997
7 changed files with 32 additions and 3 deletions

View file

@ -168,6 +168,7 @@ realinstall:
install -c -m 0644 .etc/warzone2100.profile $(DESTDIR)/$(sysconfdir)/firejail/.
install -c -m 0644 .etc/okular.profile $(DESTDIR)/$(sysconfdir)/firejail/.
install -c -m 0644 .etc/gwenview.profile $(DESTDIR)/$(sysconfdir)/firejail/.
install -c -m 0644 .etc/gpredict.profile $(DESTDIR)/$(sysconfdir)/firejail/.
sh -c "if [ ! -f $(DESTDIR)/$(sysconfdir)/firejail/login.users ]; then install -c -m 0644 etc/login.users $(DESTDIR)/$(sysconfdir)/firejail/.; fi;"
sh -c "if [ ! -f $(DESTDIR)/$(sysconfdir)/firejail/firejail.config ]; then install -c -m 0644 etc/firejail.config $(DESTDIR)/$(sysconfdir)/firejail/.; fi;"
rm -fr .etc

3
README
View file

@ -31,9 +31,10 @@ Fred-Barclay (https://github.com/Fred-Barclay)
- added PaleMoon profile
- split Icedove and Thunderbird profiles
- added 0ad profile
- fixed version for deb packages
- fixed version for .deb packages
- added Warzone2100 profile
- blacklisted VeraCrypt
- added Gpredict profile
avoidr (https://github.com/avoidr)
- whitelist fix
- recently-used.xbel fix

View file

@ -282,5 +282,5 @@ $ man firejail-profile
## New security profiles
lxterminal, Epiphany, cherrytree, Polari, Vivaldi, Atril, qutebrowser, SlimJet, Battle for Wesnoth, Hedgewars, qTox,
OpenSSH client, OpenBox window manager, Dillo, cmus, dnsmasq, PaleMoon, Icedove, abrowser, 0ad, netsurf,
Warzone2100, okular, gwenview
Warzone2100, okular, gwenview, Gpredict

View file

@ -8,6 +8,7 @@ blacklist ${HOME}/.Wolfram Research
blacklist ${HOME}/.config/mupen64plus
blacklist ${HOME}/.config/transmission
blacklist ${HOME}/.config/uGet
blacklist ${HOME}/.config/Gpredict
blacklist ~/.kde/share/apps/okular
blacklist ~/.kde/share/config/okularrc
blacklist ~/.kde/share/config/okularpartrc

23
etc/gpredict.profile Normal file
View file

@ -0,0 +1,23 @@
# Firejail profile for gpredict.
# Noblacklist
noblacklist ~/.config/Gpredict
# Include
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc
# Call these options
caps.drop all
netfilter
noroot
protocol unix,inet,inet6,netlink
seccomp
tracelog
# Whitelist
mkdir ~/.config
mkdir ~/.config/Gpredict
whitelist ~/.config/Gpredict

View file

@ -87,4 +87,4 @@
/etc/firejail/warzone2100.profile
/etc/firejail/okular.profile
/etc/firejail/gwenview.profile
/etc/firejail/gpredict.profile

View file

@ -2,6 +2,9 @@
# This is the list of programs handled by firecfg utility
#
# astronomy
gpredict
# browsers/email
firefox
iceweasel