Skip to content

Commit

Permalink
Add profiles for jami and postman (#5691)
Browse files Browse the repository at this point in the history
  • Loading branch information
Kobaxidze256 authored Mar 15, 2023
1 parent 8779a4f commit 58732a6
Show file tree
Hide file tree
Showing 5 changed files with 62 additions and 0 deletions.
3 changes: 3 additions & 0 deletions etc/inc/disable-programs.inc
Original file line number Diff line number Diff line change
Expand Up @@ -320,6 +320,7 @@ blacklist ${HOME}/.config/PacmanLogViewer
blacklist ${HOME}/.config/PawelStolowski
blacklist ${HOME}/.config/Philipp Schmieder
blacklist ${HOME}/.config/Pinta
blacklist ${HOME}/.config/Postman
blacklist ${HOME}/.config/QGIS
blacklist ${HOME}/.config/QMediathekView
blacklist ${HOME}/.config/QQ
Expand Down Expand Up @@ -480,6 +481,7 @@ blacklist ${HOME}/.config/inox
blacklist ${HOME}/.config/iridium
blacklist ${HOME}/.config/itch
blacklist ${HOME}/.config/jami
blacklist ${HOME}/.config/jami.net
blacklist ${HOME}/.config/jd-gui.cfg
blacklist ${HOME}/.config/jgit
blacklist ${HOME}/.config/k3brc
Expand Down Expand Up @@ -1183,6 +1185,7 @@ blacklist ${HOME}/Arduino
blacklist ${HOME}/Monero/wallets
blacklist ${HOME}/Nextcloud
blacklist ${HOME}/Nextcloud/Notes
blacklist ${HOME}/Postman
blacklist ${HOME}/Seafile/.seafile-data
blacklist ${HOME}/SoftMaker
blacklist ${HOME}/Standard Notes Backups
Expand Down
18 changes: 18 additions & 0 deletions etc/profile-a-l/jami.profile
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
# Firejail profile for jami
# Description: An encrypted peer-to-peer messenger
# This file is overwritten after every install/update
# Persistent local customizations
include jami.local
# Persistent global definitions
# added by caller profile
#include globals.local

noblacklist ${HOME}/.config/jami.net

mkdir ${HOME}/.config/jami.net
mkdir ${HOME}/Videos/Jami
whitelist ${HOME}/.config/jami.net
whitelist ${HOME}/Videos/Jami

# Redirect
include jami-gnome.profile
10 changes: 10 additions & 0 deletions etc/profile-m-z/Postman.profile
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
# Firejail profile for Postman
# This file is overwritten after every install/update
# Persistent local customizations
include Postman.local
# Persistent global definitions
# added by included profile
#include globals.local

# Redirect
include postman.profile
28 changes: 28 additions & 0 deletions etc/profile-m-z/postman.profile
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
# Firejail profile for postman
# Description: API testing platform
# This file is overwritten after every install/update
# Persistent local customizations
include postman.local
# Persistent global definitions
include globals.local

noblacklist ${HOME}/.config/Postman
noblacklist ${HOME}/Postman

mkdir ${HOME}/.config/Postman
mkdir ${HOME}/Postman
whitelist ${HOME}/.config/Postman
whitelist ${HOME}/Postman
include whitelist-run-common.inc

protocol unix,inet,inet6,netlink

private-bin electron,electron[0-9],electron[0-9][0-9],locale,node,Postman,postman,sh
private-etc alternatives,ca-certificates,crypto-policies,fonts,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,nsswitch.conf,pki,resolv.conf,ssl
# private-opt breaks file-copy-limit, use a whitelist instead of draining RAM
# https://github.com/netblue30/firejail/discussions/5307
#private-opt postman
whitelist /opt/postman

# Redirect
include electron-common.profile
3 changes: 3 additions & 0 deletions src/firecfg/firecfg.config
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,7 @@ Natron
PCSX2
PPSSPPQt
PPSSPPSDL
Postman
QMediathekView
QOwnNotes
Screenshot
Expand Down Expand Up @@ -421,6 +422,7 @@ ipcalc
ipcalc-ng
iridium
iridium-browser
jami
jd-gui
jdownloader
jerry
Expand Down Expand Up @@ -682,6 +684,7 @@ plv
pngquant
polari
porn-cli
postman
ppsspp
pragha
presentations18
Expand Down

0 comments on commit 58732a6

Please sign in to comment.