Skip to content

Commit

Permalink
merges
Browse files Browse the repository at this point in the history
  • Loading branch information
netblue30 committed Oct 25, 2020
1 parent c3ff78f commit e4d053e
Show file tree
Hide file tree
Showing 3 changed files with 27 additions and 20 deletions.
1 change: 1 addition & 0 deletions README
Original file line number Diff line number Diff line change
Expand Up @@ -525,6 +525,7 @@ KOLANICH (https://github.com/KOLANICH)
- fix meld
kortewegdevries (https://github.com/kortewegdevries)
- a whole bunch of new profiles and fixes
- whitelisting evolution, kmail
Kristóf Marussy (https://github.com/kris7t)
- dns support
Kunal Mehta (https://github.com/legoktm)
Expand Down
44 changes: 25 additions & 19 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -158,36 +158,42 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe

## Current development version: 0.9.65

Milestone page: https://github.com/netblue30/firejail/milestone/1
Release discussion: https://github.com/netblue30/firejail/issues/3696



### Profile Statistics

A small tool to print profile statistics. Compile as usual and run in /etc/profiles:
`````
$ sudo cp src/prfostats/profstats /etc/firejail/.
$ cd /etc/firejail
$ ./profstats *.profile
Warning: multiple caps in transmission-daemon.profile
Stats:
profiles 1029
include local profile 1029 (include profile-name.local)
include globals 1029 (include globals.local)
blacklist ~/.ssh 1005 (include disable-common.inc)
seccomp 975
capabilities 1028
noexec 899 (include disable-exec.inc)
memory-deny-write-execute 220
apparmor 549
private-bin 542
profiles 1031
include local profile 1031 (include profile-name.local)
include globals 1031 (include globals.local)
blacklist ~/.ssh 1007 (include disable-common.inc)
seccomp 976
capabilities 1030
noexec 901 (include disable-exec.inc)
memory-deny-write-execute 221
apparmor 555
private-bin 544
private-dev 897
private-etc 431
private-tmp 784
whitelist home directory 469
whitelist var 695 (include whitelist-var-common.inc)
whitelist run/user 334 (include whitelist-runuser-common.inc
private-etc 435
private-tmp 785
whitelist home directory 474
whitelist var 699 (include whitelist-var-common.inc)
whitelist run/user 336 (include whitelist-runuser-common.inc
or blacklist ${RUNUSER})
whitelist usr/share 354 (include whitelist-usr-share-common.inc
net none 332
whitelist usr/share 359 (include whitelist-usr-share-common.inc
net none 333
dbus-user none 523
dbus-system none 627
`````
dbus-system none 632
### New profiles:
2 changes: 1 addition & 1 deletion etc/profile-a-l/kmail.profile
Original file line number Diff line number Diff line change
Expand Up @@ -104,7 +104,7 @@ whitelist /usr/share/qlogging-categories5
whitelist /var/mail
whitelist /var/spool/mail
include whitelist-common.inc
include whitelist-runnuser-common.inc
include whitelist-runuser-common.inc
include whitelist-usr-share-common.inc
include whitelist-var-common.inc

Expand Down

0 comments on commit e4d053e

Please sign in to comment.