From 73f3bf0ef1a764453cfab59df6e9d651f97a28d1 Mon Sep 17 00:00:00 2001 From: Gaming4JC Date: Thu, 24 Nov 2016 16:43:04 -0500 Subject: hardened scripts ready for release! --- .../icedove-hardened.sh | 24 ++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100755 nonprism/icedove-hardened-preferences/icedove-hardened.sh (limited to 'nonprism/icedove-hardened-preferences/icedove-hardened.sh') diff --git a/nonprism/icedove-hardened-preferences/icedove-hardened.sh b/nonprism/icedove-hardened-preferences/icedove-hardened.sh new file mode 100755 index 000000000..919c1c75e --- /dev/null +++ b/nonprism/icedove-hardened-preferences/icedove-hardened.sh @@ -0,0 +1,24 @@ +#!/bin/sh + +############################################## +# IceDove-Hardened Jail and Cleaner Script # +############################################## +echo "Closing any other instances of IceDove to avoid crashes..." +pkill -x icedove +wait +echo "Copying Hardened Prefs..." +cp /usr/lib/icedove/defaults/preferences/icedove-branding.js /usr/lib/icedove/defaults/preferences/thunderbird-branding.js +wait +echo "Waking the IceDove..." + +# Trap cleaner function for IceDove exit cleaning +function finish { +echo "Removing hardened preferences..." +echo "" > /usr/lib/icedove/defaults/preferences/thunderbird-branding.js + } + +## Firejail IceDove startup +/usr/bin/firejail --profile=/etc/firejail/icedove.profile --private-bin=bash,gpg2,icedove --private-tmp --private-etc=nsswitch.conf,resolv.conf --private-dev --nogroups /usr/bin/icedove + +## Exiting IceDove triggers the trap +trap finish EXIT \ No newline at end of file -- cgit v1.2.3