Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

New profile: luarocks #4596

Draft
wants to merge 13 commits into
base: master
Choose a base branch
from
Draft

New profile: luarocks #4596

wants to merge 13 commits into from

Commits on Oct 7, 2021

  1. Add profile for luarocks 

    DO NOT MERGE! Please review.

MERGE BLOCKER: firecfg does not create the necessary symlink in
/usr/local/bin
/usr/bin/luarocks however is a proper working binary.

Another annoyance from this: Neovim has a package manager called packer,
which pollutes $HOME with manifest-5-[1-4].zip and a pile of .rockspec
and .src.rock files.
    @matu3ba
    matu3ba committed Oct 7, 2021
    Configuration menu
    Copy the full SHA
    990ffbb View commit details
    Browse the repository at this point in the history

Commits on Oct 8, 2021

  1. use allow-lua as its smaller. 

    Co-authored-by: rusty-snake <[email protected]>
    @matu3ba @rusty-snake
    matu3ba and rusty-snake authored Oct 8, 2021
    Configuration menu
    Copy the full SHA
    eb7dab0 View commit details
    Browse the repository at this point in the history

  2. remove disable-write-mnt 

    Co-authored-by: rusty-snake <[email protected]>
    @matu3ba @rusty-snake
    matu3ba and rusty-snake authored Oct 8, 2021
    Configuration menu
    Copy the full SHA
    4e670d2 View commit details
    Browse the repository at this point in the history

  3. shortening (default-disabled) private-etc 

    Co-authored-by: rusty-snake <[email protected]>
    @matu3ba @rusty-snake
    matu3ba and rusty-snake authored Oct 8, 2021
    Configuration menu
    Copy the full SHA
    5df4c63 View commit details
    Browse the repository at this point in the history

  4. remove private-bin and s/allow/whitelist

    @matu3ba
    matu3ba committed Oct 8, 2021
    Configuration menu
    Copy the full SHA
    f6f0021 View commit details
    Browse the repository at this point in the history

  5. add luarocks to firecfg.config

    @matu3ba
    matu3ba committed Oct 8, 2021
    Configuration menu
    Copy the full SHA
    65242d9 View commit details
    Browse the repository at this point in the history

  6. fix allow-lua.inc and disable-interpreters.inc 

    noblacklist in allow-lua.inc must corresponds to blacklist section for
lua in disable-interpreters.inc
    @matu3ba
    matu3ba committed Oct 8, 2021
    Configuration menu
    Copy the full SHA
    4c5ca65 View commit details
    Browse the repository at this point in the history

  7. add seccomp.block-secondary 

    Co-authored-by: rusty-snake <[email protected]>
    @matu3ba @rusty-snake
    matu3ba and rusty-snake authored Oct 8, 2021
    Configuration menu
    Copy the full SHA
    161df63 View commit details
    Browse the repository at this point in the history

  8. update luarocks profile 

    * disable /run/user/userid
* use well tested whitelist-usr-share-common.inc
* use disable-X11.inc
    @matu3ba
    matu3ba committed Oct 8, 2021
    Configuration menu
    Copy the full SHA
    29ef011 View commit details
    Browse the repository at this point in the history

  9. Merge branch 'luarocks' of github.com:matu3ba/firejail into luarocks

    @matu3ba
    matu3ba committed Oct 8, 2021
    Configuration menu
    Copy the full SHA
    e610d2e View commit details
    Browse the repository at this point in the history

  10. update luarocks profile 

    * dont break various application sandboxes with
  noblacklist /usr/include/lua*
  Instead insert it manually for luarocks.
* remove redundant `blacklist /usr/share/lua` from
  disable-interpreters.inc
    @matu3ba
    matu3ba committed Oct 8, 2021
    Configuration menu
    Copy the full SHA
    f3e9ea0 View commit details
    Browse the repository at this point in the history

  11. add whitelist-var-common and whitelist-run-common

    @matu3ba
    matu3ba committed Oct 8, 2021
    Configuration menu
    Copy the full SHA
    ce1b231 View commit details
    Browse the repository at this point in the history

  12. fix order

    @matu3ba
    matu3ba committed Oct 8, 2021
    Configuration menu
    Copy the full SHA
    1d1f524 View commit details
    Browse the repository at this point in the history