mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
New profile: aria2p/aria2rpc
https://github.com/pawamoy/aria2p is Command-line tool and library to interact with an aria2c daemon process with JSON-RPC. aria2rpc from https://github.com/aria2/aria2 is command line tool for connecting to a remote instance of aria2c
This commit is contained in:
parent
afce4679bf
commit
c869f11d55
2 changed files with 130 additions and 0 deletions
65
etc/profile-a-l/aria2p.profile
Normal file
65
etc/profile-a-l/aria2p.profile
Normal file
|
|
@ -0,0 +1,65 @@
|
|||
# Firejail profile for aria2p
|
||||
# Description: Command-line tool and library to interact with an aria2c daemon process with JSON-RPC.
|
||||
# This file is overwritten after every install/update
|
||||
quiet
|
||||
# Persistent local customizations
|
||||
include aria2p.local
|
||||
# Persistent global definitions
|
||||
include globals.local
|
||||
|
||||
# Allow python (blacklisted by disable-interpreters.inc)
|
||||
include allow-python3.inc
|
||||
|
||||
blacklist /usr/libexec
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
include disable-exec.inc
|
||||
include disable-interpreters.inc
|
||||
include disable-proc.inc
|
||||
include disable-programs.inc
|
||||
include disable-shell.inc
|
||||
#include disable-write-mnt.inc
|
||||
# xclip and xsel require X11.
|
||||
#include disable-X11.inc
|
||||
include disable-xdg.inc
|
||||
|
||||
include whitelist-common.inc
|
||||
include whitelist-run-common.inc
|
||||
include whitelist-runuser-common.inc
|
||||
include whitelist-usr-share-common.inc
|
||||
include whitelist-var-common.inc
|
||||
|
||||
apparmor
|
||||
caps.drop all
|
||||
ipc-namespace
|
||||
machine-id
|
||||
netfilter
|
||||
no3d
|
||||
nodvd
|
||||
nogroups
|
||||
noinput
|
||||
nonewprivs
|
||||
noprinters
|
||||
noroot
|
||||
nosound
|
||||
notpm
|
||||
notv
|
||||
nou2f
|
||||
novideo
|
||||
protocol unix,inet,inet6
|
||||
seccomp
|
||||
seccomp.block-secondary
|
||||
tracelog
|
||||
|
||||
disable-mnt
|
||||
private
|
||||
private-bin aria2p,cat,python*,wl-copy,wl-paste,xclip,xsel
|
||||
private-dev
|
||||
private-tmp
|
||||
|
||||
dbus-user none
|
||||
dbus-system none
|
||||
|
||||
deterministic-shutdown
|
||||
memory-deny-write-execute
|
||||
65
etc/profile-a-l/aria2rpc.profile
Normal file
65
etc/profile-a-l/aria2rpc.profile
Normal file
|
|
@ -0,0 +1,65 @@
|
|||
# Firejail profile for aria2rpc
|
||||
# Description: Command line tool for connecting to a remote instance of aria2c
|
||||
# This file is overwritten after every install/update
|
||||
quiet
|
||||
# Persistent local customizations
|
||||
include aria2rpc.local
|
||||
# Persistent global definitions
|
||||
include globals.local
|
||||
|
||||
# Allow ruby (blacklisted by disable-interpreters.inc)
|
||||
include allow-ruby.inc
|
||||
|
||||
blacklist ${RUNUSER}
|
||||
blacklist /usr/libexec
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
include disable-exec.inc
|
||||
include disable-interpreters.inc
|
||||
include disable-proc.inc
|
||||
include disable-programs.inc
|
||||
include disable-shell.inc
|
||||
#include disable-write-mnt.inc
|
||||
include disable-X11.inc
|
||||
include disable-xdg.inc
|
||||
|
||||
include whitelist-common.inc
|
||||
include whitelist-run-common.inc
|
||||
#include whitelist-runuser-common.inc
|
||||
include whitelist-usr-share-common.inc
|
||||
include whitelist-var-common.inc
|
||||
|
||||
apparmor
|
||||
caps.drop all
|
||||
ipc-namespace
|
||||
machine-id
|
||||
netfilter
|
||||
no3d
|
||||
nodvd
|
||||
nogroups
|
||||
noinput
|
||||
nonewprivs
|
||||
noprinters
|
||||
noroot
|
||||
nosound
|
||||
notpm
|
||||
notv
|
||||
nou2f
|
||||
novideo
|
||||
protocol inet,inet6
|
||||
seccomp
|
||||
seccomp.block-secondary
|
||||
tracelog
|
||||
|
||||
disable-mnt
|
||||
private
|
||||
private-bin aria2rpc,env,ruby*
|
||||
private-dev
|
||||
private-tmp
|
||||
|
||||
dbus-user none
|
||||
dbus-system none
|
||||
|
||||
deterministic-shutdown
|
||||
memory-deny-write-execute
|
||||
Loading…
Add table
Add a link
Reference in a new issue