logo

badwolf

minimalist and privacy-oriented web browser based on WebKitGTK git clone https://anongit.hacktivis.me/git/badwolf.git/

usr.bin.badwolf (2038B)

    

  1. # BadWolf: Minimalist and privacy-oriented WebKitGTK+ browser
  2. # Copyright © 2019-2021 Badwolf Authors <https://hacktivis.me/projects/badwolf>
  3. # SPDX-License-Identifier: BSD-3-Clause
  4. #
  5. # Made on Gentoo Linux with PREFIX=/usr
  6. #include <tunables/global>
  8. /usr/bin/badwolf {
  9. 	#include <abstractions/enchant>
  10. 	#include <abstractions/gnome>
  11. 	#include <abstractions/ibus>
  12. 	#include <abstractions/uim>
  13. 	#include <abstractions/private-files-strict>
  15. 	/usr/bin/badwolf mr,
  16. 	/usr/bin/bwrap Cx,
  17. 	/usr/libexec/webkit2gtk-4.0/WebKitNetworkProcess Cx,
  18. 	/usr/libexec/webkit2gtk-4.0/WebKitWebProcess Cx,
  20. 	owner @{PROC}/@{pid}/cmdline r,
  21. 	owner @{PROC}/@{pid}/fd/ r,
  23. 	owner @{HOME}/.local/share/badwolf/ r,
  24. 	owner @{HOME}/.local/share/badwolf/** r,
  26. 	deny @{HOME}/.local/share/webkitgtk/** rwmlk,
  28. 	/ r,
  29. 	/** r,
  31. 	#include <local/usr.bin.badwolf>
  33. 	profile /usr/libexec/webkit2gtk-4.0/WebKitNetworkProcess {
  34. 		#include <abstractions/base>
  35. 		#include <abstractions/nameservice>
  36. 		#include <abstractions/ssl_certs>
  37. 		#include <abstractions/private-files-strict>
  39. 		network inet stream,
  40. 		network inet6 stream,
  42. 		/usr/libexec/webkit2gtk-4.0/WebKitNetworkProcess mr,
  43. 		/** r,
  44. 		owner /** w,
  45. 	}
  47. 	profile /usr/libexec/webkit2gtk-4.0/WebKitWebProcess {
  48. 		#include <abstractions/base>
  49. 		#include <abstractions/fonts>
  50. 		#include <abstractions/gnome>
  51. 		#include <abstractions/gstreamer>
  52. 		#include <abstractions/audio>
  53. 		#include <abstractions/mesa>
  54. 		#include <abstractions/dri-common>
  55. 		#include <abstractions/dri-enumerate>
  57. 		/usr/libexec/webkit2gtk-4.0/WebKitWebProcess mr,
  59. 		owner @{PROC}/@{pid}/cmdline r,
  60. 		owner @{PROC}/@{pid}/fd/ r,
  62. 		/etc/passwd r,
  63. 		/etc/group r,
  64. 		/etc/nsswitch.conf r,
  65. 		/dev/ r,
  67. 		owner @{HOME}/.local/share/badwolf/webkit-web-extension/ r,
  68. 		owner @{HOME}/.local/share/badwolf/webkit-web-extension/** mr,
  69. 	}
  71. 	profile /usr/bin/bwrap {
  72. 		#include <abstractions/base>
  74. 		deny capability sys_admin,
  76. 		/usr/bin/bwrap mr,
  77. 		@{PROC}/sys/kernel/overflowuid r,
  78. 		@{PROC}/sys/kernel/overflowgid r,
  79. 		owner @{PROC}/@{pid}/fd/ r,
  80. 	}
  81. }