diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index cf0db34d054..b1e5a9e6454 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -609,6 +609,7 @@ blacklist ${HOME}/.surf blacklist ${HOME}/.sword blacklist ${HOME}/.sylpheed-2.0 blacklist ${HOME}/.synfig +blacklist ${HOME}/.config/teams-for-linux blacklist ${HOME}/.tconn blacklist ${HOME}/.teeworlds blacklist ${HOME}/.thunderbird @@ -757,3 +758,4 @@ blacklist /var/games/slashem blacklist /var/games/vulturesclaw blacklist /var/games/vultureseye blacklist /var/lib/games/Maelstrom-Scores + diff --git a/etc/teams-for-linux.profile b/etc/teams-for-linux.profile new file mode 100644 index 00000000000..51a76bad458 --- /dev/null +++ b/etc/teams-for-linux.profile @@ -0,0 +1,42 @@ +# Firejail profile for teams-for-linux +# Description: Teams for Linux is an Electron application for Microsoft's team collaboration and chat program +# This file is overwritten after every install/update +# Persistent local customizations +include teams-for-linux.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.config/teams-for-linux + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc + +mkdir ${HOME}/.config/teams-for-linux +whitelist ${HOME}/.config/teams-for-linux +whitelist ${DOWNLOADS} +include whitelist-common.inc +include whitelist-var-common.inc + +caps.drop all +netfilter +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +novideo +protocol unix,inet,inet6,netlink +seccomp +shell none + +disable-mnt +private-bin sh,xdg-mime,tr,sed,echo,head,cut,xdg-open,grep,egrep,bash,zsh,teams-for-linux +private-cache +private-dev +private-etc fonts,machine-id,localtime,ld.so.cache,ca-certificates,ssl,pki,crypto-policies,resolv.conf +private-tmp diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index b73536daed3..d21abbc9ad3 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -525,6 +525,7 @@ sylpheed synfigstudio sysprof sysprof-cli +teams-for-linux teamspeak3 teeworlds telegram