summaryrefslogtreecommitdiff
path: root/nonprism-testing/iceweasel-hardened-preferences/ice.weasel-hardened.sh
diff options
context:
space:
mode:
authorGaming4JC <g4jc@openmailbox.org>2016-11-24 00:18:31 -0500
committerGaming4JC <g4jc@openmailbox.org>2016-11-24 00:18:31 -0500
commit1939da5efd11dcc05bfac7b5c73defd98096e5ca (patch)
tree051557ecedfe43d9b2e17e00fc51b3eb1cf0c035 /nonprism-testing/iceweasel-hardened-preferences/ice.weasel-hardened.sh
parent76b6e0c2916bc036f5ee4cfb967d01626ad153cd (diff)
downloadabslibre-1939da5efd11dcc05bfac7b5c73defd98096e5ca.tar.gz
abslibre-1939da5efd11dcc05bfac7b5c73defd98096e5ca.tar.bz2
abslibre-1939da5efd11dcc05bfac7b5c73defd98096e5ca.zip
pkill work around
Diffstat (limited to 'nonprism-testing/iceweasel-hardened-preferences/ice.weasel-hardened.sh')
-rwxr-xr-xnonprism-testing/iceweasel-hardened-preferences/ice.weasel-hardened.sh24
1 files changed, 24 insertions, 0 deletions
diff --git a/nonprism-testing/iceweasel-hardened-preferences/ice.weasel-hardened.sh b/nonprism-testing/iceweasel-hardened-preferences/ice.weasel-hardened.sh
new file mode 100755
index 000000000..2808c6cb4
--- /dev/null
+++ b/nonprism-testing/iceweasel-hardened-preferences/ice.weasel-hardened.sh
@@ -0,0 +1,24 @@
+#!/bin/sh
+
+##############################################
+# IceWeasel-Hardened Jail and Cleaner Script #
+##############################################
+echo "Closing any other instances of IceWeasel to avoid crashes..."
+pkill iceweasel
+wait
+echo "Copying Hardened Prefs..."
+cp /usr/lib/iceweasel/browser/defaults/preferences/iceweasel-branding.js /usr/lib/iceweasel/browser/defaults/preferences/firefox-branding.js
+wait
+echo "Waking the IceWeasel..."
+
+# Trap cleaner function for IceWeasel exit cleaning
+function finish {
+echo "Removing hardened preferences..."
+echo "" > /usr/lib/iceweasel/browser/defaults/preferences/firefox-branding.js
+ }
+
+## Firejail IceWeasel startup
+/usr/bin/firejail --seccomp --noroot --nogroups --caps.drop=all --private-etc=/etc/user.js --private-bin=bash,sed,ls,cat,iceweasel --private-tmp --private-home=~/.mozilla --whitelist=~/Downloads /usr/bin/iceweasel --private-window
+
+## Exiting IceWeasel triggers the trap
+trap finish EXIT \ No newline at end of file