diff options
| author | Florian Fischer <florian.fischer@muhq.space> | 2023-04-15 17:58:34 +0200 |
|---|---|---|
| committer | Florian Fischer <florian.fischer@muhq.space> | 2023-04-15 17:58:34 +0200 |
| commit | eb6014f11a9a0c31c1ca61e5a6f054f8b211ea1f (patch) | |
| tree | 4239f693ebdb0f1e51308e67c0e68a0d266cfe71 /config | |
| parent | 0e986bb5aa13e2d1bac080e243963b9cb870f12b (diff) | |
| download | dotfiles-eb6014f11a9a0c31c1ca61e5a6f054f8b211ea1f.tar.gz dotfiles-eb6014f11a9a0c31c1ca61e5a6f054f8b211ea1f.zip | |
firejail: add fish alias for jailed programs and add local mutt profile
Diffstat (limited to 'config')
| -rw-r--r-- | config/firejail/neomutt.local | 19 | ||||
| -rw-r--r-- | config/fish/config.fish | 4 | ||||
| -rw-r--r-- | config/fish/firejail-alias | 6 |
3 files changed, 29 insertions, 0 deletions
diff --git a/config/firejail/neomutt.local b/config/firejail/neomutt.local new file mode 100644 index 0000000..7d37493 --- /dev/null +++ b/config/firejail/neomutt.local @@ -0,0 +1,19 @@ +whitelist ${HOME}/.local/share/maildir +noblacklist ${HOME}/.cache/mutt +whitelist ${HOME}/.cache/mutt + +# allow mbsync to read its config +whitelist-ro ${HOME}/.mbsyncrc + +# Allow khard to query my contacts +include allow-python3.inc +noblacklist ${HOME}/.local/share/contacts +whitelist-ro ${HOME}/.local/share/contacts +whitelist-ro ${HOME}/.config/khard + +# Allow vis to read its config +whitelist-ro ${HOME}/.config/vis + +# Allow access to my password-store +noblacklist ${HOME}/.password-store +whitelist-ro ${HOME}/.password-store diff --git a/config/fish/config.fish b/config/fish/config.fish index 18faa7f..6728957 100644 --- a/config/fish/config.fish +++ b/config/fish/config.fish @@ -95,3 +95,7 @@ else set -g theme_display_user yes end +if type -q firejail + source "$DOTFILES_LOCATION/config/fish/firejail-alias" +end + diff --git a/config/fish/firejail-alias b/config/fish/firejail-alias new file mode 100644 index 0000000..31e1555 --- /dev/null +++ b/config/fish/firejail-alias @@ -0,0 +1,6 @@ +set jailed gimp imv +for prog in $jailed + alias $prog "firejail $prog" +end + +alias -- neomutt "firejail --profile=/etc/firejail/neomutt.profile bash -c 'neomutt; gpgconf --kill gpg-agent'" |