summaryrefslogtreecommitdiff
path: root/nonprism-testing/iceweasel-hardened-preferences/icewease-hardened
blob: 18602dfc4ba53ea3e7b61e2d71808e9099f9d6d1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
#!/bin/sh
##############################################
# IceWeasel-Hardened Jail and Cleaner Script #
##############################################
echo "Closing any other instances of IceWeasel to avoid crashes..."
pkill iceweasel
wait
echo "Copying Hardened Prefs..."
cp /usr/lib/iceweasel/browser/defaults/preferences/iceweasel-branding.js /usr/lib/iceweasel/browser/defaults/preferences/firefox-branding.js
wait
echo "Waking the IceWeasel..."

# Trap cleaner function for IceWeasel exit cleaning
function finish {
echo "Removing hardened preferences..."
echo "" > /usr/lib/iceweasel/browser/defaults/preferences/firefox-branding.js
    }

## Firejail IceWeasel startup
firejail --seccomp --noroot --nogroups --caps.drop=all --private-etc=/etc/user.js --private-bin=bash,sed,ls,cat,iceweasel --private-tmp --private-home=~/.mozilla --whitelist=~/Downloads /usr/bin/iceweasel --private-window

## Exiting IceWeasel triggers the trap
trap finish EXIT