This commit is contained in:
netblue30 2024-12-18 09:44:45 -05:00
parent 93e02ba202
commit f358159795
2 changed files with 31 additions and 24 deletions

6
README
View file

@ -730,6 +730,8 @@ KOLANICH (https://github.com/KOLANICH)
- update fix_private-bin.py
- fix meld
- temporary fix to the bug caused by apparmor profiles stacking
Konstantin (https://github.com/konstantin1722)
- obsidian profile
kortewegdevries (https://github.com/kortewegdevries)
- a whole bunch of new profiles and fixes
- whitelisting evolution, kmail
@ -771,6 +773,8 @@ Lockdis (https://github.com/Lockdis)
- Added crow, nyx, and google-earth-pro profiles
luca0N (https://github.com/luca0N)
- fixed crawl profile
Lucas (https://github.com/lucasmz-dev)
- disable-common: add bubblejail paths
Lukáš Krejčí (https://github.com/lskrejci)
- fixed parsing of --keep-var-tmp
luzpaz (https://github.com/luzpaz)
@ -1059,6 +1063,8 @@ rusty-snake (https://github.com/rusty-snake)
- some typo fixes
- added profile templates
- added sort.py to contrib
Sadoon Al-Bader (https://github.com/Sadoon-AlBader)
- fix misc in kmail and transmission-qt & add kontact.profile
sak96 (https://github.com/sak96)
- discord profile fixes
- Fix Firefox 'Profile not found' for psd (v6.45)

View file

@ -382,34 +382,35 @@ Run it over the profiles in /etc/profiles:
$ /usr/lib/firejail/profstats /etc/firejail/*.profile
No include .local found in /etc/firejail/noprofile.profile
Warning: multiple caps in /etc/firejail/tidal-hifi.profile
Warning: multiple caps in /etc/firejail/tqemu.profile
Warning: multiple caps in /etc/firejail/transmission-daemon.profile
Stats:
profiles 1249
include local profile 1248 (include profile-name.local)
include globals 1217 (include globals.local)
blacklist ~/.ssh 1117 (include disable-common.inc)
seccomp 1127
capabilities 1242
noexec 1125 (include disable-exec.inc)
noroot 1030
memory-deny-write-execute 285
restrict-namespaces 981
apparmor 788
private-bin 750
private-dev 1090
private-etc 763
private-lib 78
private-tmp 959
whitelist home directory 609
whitelist var 907 (include whitelist-var-common.inc)
whitelist run/user 1214 (include whitelist-runuser-common.inc
profiles 1305
include local profile 1304 (include profile-name.local)
include globals 1271 (include globals.local)
blacklist ~/.ssh 1167 (include disable-common.inc)
seccomp 1178
capabilities 1298
noexec 1178 (include disable-exec.inc)
noroot 1077
memory-deny-write-execute 309
restrict-namespaces 1026
apparmor 833
private-bin 790
private-dev 1140
private-etc 811
private-lib 85
private-tmp 1004
whitelist home directory 642
whitelist var 950 (include whitelist-var-common.inc)
whitelist run/user 1268 (include whitelist-runuser-common.inc
or blacklist ${RUNUSER})
whitelist usr/share 690 (include whitelist-usr-share-common.inc
net none 420
dbus-user none 705
dbus-user filter 164
dbus-system none 889
whitelist usr/share 732 (include whitelist-usr-share-common.inc
net none 443
dbus-user none 738
dbus-user filter 192
dbus-system none 939
dbus-system filter 13
```