Skip to content

Commit

Permalink
Merge pull request #4681 from jmetrius/openstego-profile
Browse files Browse the repository at this point in the history
Add OpenStego profile
  • Loading branch information
netblue30 authored Nov 13, 2021
2 parents 0a9330d + 0b08f8b commit 9230773
Show file tree
Hide file tree
Showing 3 changed files with 60 additions and 0 deletions.
1 change: 1 addition & 0 deletions etc/inc/disable-programs.inc
Original file line number Diff line number Diff line change
Expand Up @@ -1120,6 +1120,7 @@ blacklist ${HOME}/TeamSpeak3-Client-linux_x86
blacklist ${HOME}/hyperrogue.ini
blacklist ${HOME}/i2p
blacklist ${HOME}/mps
blacklist ${HOME}/openstego.ini
blacklist ${HOME}/wallet.dat
blacklist ${HOME}/yt-dlp.conf
blacklist ${RUNUSER}/*firefox*
Expand Down
58 changes: 58 additions & 0 deletions etc/profile-m-z/openstego.profile
Original file line number Diff line number Diff line change
@@ -0,0 +1,58 @@
# Firejail profile for OpenStego
# Description: Steganography application that provides data hiding and watermarking functionality
# This file is overwritten after every install/update
# Persistent local customizations
include openstego.local
# Persistent global definitions
include globals.local

noblacklist ${HOME}/openstego.ini

# Allow java (blacklisted by disable-devel.inc)
include allow-java.inc

include disable-common.inc
include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc

mkfile ${HOME}/openstego.ini
whitelist ${HOME}/openstego.ini
whitelist ${HOME}/.java
whitelist ${PICTURES}
whitelist ${DOCUMENTS}
whitelist ${DESKTOP}
whitelist /usr/share/java
include whitelist-common.inc
include whitelist-run-common.inc
include whitelist-runuser-common.inc
include whitelist-usr-share-common.inc
include whitelist-var-common.inc

caps.drop all
machine-id
net none
no3d
nogroups
noinput
nonewprivs
noroot
nosound
notv
nou2f
novideo
seccomp
seccomp.block-secondary
shell none
tracelog

disable-mnt
private-bin bash,dirname,openstego,readlink,sh
private-cache
private-dev
private-tmp

dbus-user none
dbus-system none
1 change: 1 addition & 0 deletions src/firecfg/firecfg.config
Original file line number Diff line number Diff line change
Expand Up @@ -616,6 +616,7 @@ openmw-launcher
openoffice.org
openshot
openshot-qt
openstego
openttd
opera
opera-beta
Expand Down

0 comments on commit 9230773

Please sign in to comment.