Skip to content

Commit

Permalink
whitelist /var
Browse files Browse the repository at this point in the history
  • Loading branch information
netblue30 committed Oct 4, 2017
1 parent 63e177a commit c0bb67f
Show file tree
Hide file tree
Showing 13 changed files with 27 additions and 1 deletion.
2 changes: 2 additions & 0 deletions etc/gedit.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,8 @@ include /etc/firejail/disable-common.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

include /etc/firejail/whitelist-var-common.inc

caps.drop all
# net none - makes settings immutable
no3d
Expand Down
2 changes: 2 additions & 0 deletions etc/gnome-2048.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,8 @@ include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

include /etc/firejail/whitelist-var-common.inc

mkdir ${HOME}/.local/share/gnome-2048
whitelist ${HOME}/.local/share/gnome-2048
include /etc/firejail/whitelist-common.inc
Expand Down
2 changes: 2 additions & 0 deletions etc/gnome-books.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,8 @@ include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

include /etc/firejail/whitelist-var-common.inc

caps.drop all
netfilter
no3d
Expand Down
2 changes: 2 additions & 0 deletions etc/gnome-chess.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,8 @@ include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

include /etc/firejail/whitelist-var-common.inc

caps.drop all
no3d
nodvd
Expand Down
2 changes: 2 additions & 0 deletions etc/gnome-clocks.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,8 @@ include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

include /etc/firejail/whitelist-var-common.inc

caps.drop all
netfilter
no3d
Expand Down
4 changes: 3 additions & 1 deletion etc/gnome-contacts.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,8 @@ include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc
include /etc/firejail/whitelist-common.inc

include /etc/firejail/whitelist-var-common.inc

caps.drop all
netfilter
no3d
Expand All @@ -21,7 +23,7 @@ noroot
nosound
notv
novideo
protocol unix,inet,inet6
protocol unix,inet,inet6,netlink
seccomp

disable-mnt
Expand Down
2 changes: 2 additions & 0 deletions etc/gnome-font-viewer.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,8 @@ include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

include /etc/firejail/whitelist-var-common.inc

caps.drop all
netfilter
no3d
Expand Down
2 changes: 2 additions & 0 deletions etc/gnome-maps.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,8 @@ include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

include /etc/firejail/whitelist-var-common.inc

caps.drop all
netfilter
nodvd
Expand Down
2 changes: 2 additions & 0 deletions etc/gnome-music.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,8 @@ include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

include /etc/firejail/whitelist-var-common.inc

caps.drop all
netfilter
no3d
Expand Down
2 changes: 2 additions & 0 deletions etc/gnome-photos.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,8 @@ include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

include /etc/firejail/whitelist-var-common.inc

caps.drop all
netfilter
nodvd
Expand Down
2 changes: 2 additions & 0 deletions etc/gnome-weather.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,8 @@ include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

include /etc/firejail/whitelist-var-common.inc

caps.drop all
netfilter
no3d
Expand Down
2 changes: 2 additions & 0 deletions etc/rhythmbox.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,8 @@ include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

include /etc/firejail/whitelist-var-common.inc

caps.drop all
netfilter
# no3d
Expand Down
2 changes: 2 additions & 0 deletions etc/totem.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,8 @@ include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

include /etc/firejail/whitelist-var-common.inc

caps.drop all
netfilter
nogroups
Expand Down

0 comments on commit c0bb67f

Please sign in to comment.