From eaa4bf7b3f1636e4b9010b7131e680dd556cad95 Mon Sep 17 00:00:00 2001 From: Sean Whitton Date: Thu, 16 Jun 2016 21:17:47 +0900 Subject: add Propellor.Property.Firejail --- src/Propellor/Property/Firejail.hs | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 src/Propellor/Property/Firejail.hs (limited to 'src/Propellor/Property') diff --git a/src/Propellor/Property/Firejail.hs b/src/Propellor/Property/Firejail.hs new file mode 100644 index 00000000..98f7ab78 --- /dev/null +++ b/src/Propellor/Property/Firejail.hs @@ -0,0 +1,29 @@ +-- | Maintainer: Sean Whitton + +module Propellor.Property.Firejail ( + installed, + jailed, +) where + +import Propellor.Base +import qualified Propellor.Property.Apt as Apt +import qualified Propellor.Property.File as File + +-- | Ensures that Firejail is installed +installed :: Property DebianLike +installed = Apt.installed ["firejail"] + +-- | For each program name passed, create symlinks in @/usr/local/bin@ that +-- will launch that program in a Firejail sandbox. +-- +-- The profile for the sandbox will be the same as if the user had run +-- @firejail@ directly without passing @--profile@ (see "SECURITY PROFILES" in +-- firejail(1)). +-- +-- See "DESKTOP INTEGRATION" in firejail(1). +jailed :: [String] -> Property DebianLike +jailed ps = (jailed' `applyToList` ps) `requires` installed + +jailed' :: String -> Property UnixLike +jailed' p = ("/usr/local/bin" p) + `File.isSymlinkedTo` File.LinkTarget "/usr/bin/firejail" -- cgit v1.2.3 From c1b209031a5a584417fc72edf8e77ff0c21f5a88 Mon Sep 17 00:00:00 2001 From: Sean Whitton Date: Sun, 19 Jun 2016 19:53:55 +0900 Subject: describe Firejail.jailed --- src/Propellor/Property/Firejail.hs | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'src/Propellor/Property') diff --git a/src/Propellor/Property/Firejail.hs b/src/Propellor/Property/Firejail.hs index 98f7ab78..2aa6cf3a 100644 --- a/src/Propellor/Property/Firejail.hs +++ b/src/Propellor/Property/Firejail.hs @@ -22,7 +22,9 @@ installed = Apt.installed ["firejail"] -- -- See "DESKTOP INTEGRATION" in firejail(1). jailed :: [String] -> Property DebianLike -jailed ps = (jailed' `applyToList` ps) `requires` installed +jailed ps = (jailed' `applyToList` ps) + `requires` installed + `describe` unwords ("firejail jailed":ps) jailed' :: String -> Property UnixLike jailed' p = ("/usr/local/bin" p) -- cgit v1.2.3 From 0e09a8cfdffb2cd99cf86c04bade4a9261101a2c Mon Sep 17 00:00:00 2001 From: Sean Whitton Date: Sun, 19 Jun 2016 20:06:47 +0900 Subject: haddock tweak Slashes inside @monospace@ get misinterpreted. --- src/Propellor/Property/Firejail.hs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/Propellor/Property') diff --git a/src/Propellor/Property/Firejail.hs b/src/Propellor/Property/Firejail.hs index 2aa6cf3a..b7841e07 100644 --- a/src/Propellor/Property/Firejail.hs +++ b/src/Propellor/Property/Firejail.hs @@ -13,7 +13,7 @@ import qualified Propellor.Property.File as File installed :: Property DebianLike installed = Apt.installed ["firejail"] --- | For each program name passed, create symlinks in @/usr/local/bin@ that +-- | For each program name passed, create symlinks in /usr/local/bin that -- will launch that program in a Firejail sandbox. -- -- The profile for the sandbox will be the same as if the user had run -- cgit v1.2.3