cool profiles - Githubissues

chiraag-nataraj / firejail-profiles

Tight Firejail profiles

GNU General Public License v2.0

143 stars 10 forks source link

cool profiles #18

Open nyancat18 opened 7 years ago

nyancat18 commented 7 years ago

[ ] openvpn
[x] ~eddie (for airvpn...A VERY COOL vpn but premium)~,
[ ] i2p (taking as base the i2prouter with systemd services installed at /opt)
[ ] freenet
[x] dia (ms visio like)
[x] geany (a COOL IDE)

chiraag-nataraj commented 7 years ago

Added Dia! 😄

chiraag-nataraj commented 7 years ago

With respect to geany, won't the profile depend on which plugins you need? Like, if you're never going to use the C stuff, then giving geany access to gcc is a terrible idea.

chiraag-nataraj commented 6 years ago

@nyancat18 What level of security would you like for geany? That is, what exactly do you use it for? Because that will definitely determine how restricted the profile is. I can also completely leave off private-bin, but that's not exactly that secure...

chiraag-nataraj commented 6 years ago

I would recommend that you use systemd to sandbox system services like openvpn (and related VPN services), i2p, and freenet. You get the same granularity as with firejail (sometimes more), and with system services, you get the full range of options systemd has to offer (unlike with user services, where firejail is really useful).

chiraag-nataraj commented 6 years ago

I'll try to bring in a profile for geany though.

chiraag-nataraj commented 6 years ago

Done!

chiraag-nataraj commented 6 years ago

After reconsidering, I'll try to bring in a profile for openvpn, i2p, and freenet. Since I don't have AirVPN, I can't test eddie at all, but if you want to bring in a profile for that, I'd be happy to merge it. Re-opening as a result.