diff --git a/roles/browsers/files/chromium.sh b/roles/browsers/files/chromium.sh new file mode 100644 index 0000000..9b3cc9a --- /dev/null +++ b/roles/browsers/files/chromium.sh @@ -0,0 +1,11 @@ +#!/bin/sh + +FIREJAIL="" + +hash firejail 2> /dev/null + +if [ $? -eq 0 ]; then + FIREJAIL=firejail +fi + +$FIREJAIL /usr/bin/chromium "$@" diff --git a/roles/browsers/files/firefox.sh b/roles/browsers/files/firefox.sh new file mode 100755 index 0000000..7685cbc --- /dev/null +++ b/roles/browsers/files/firefox.sh @@ -0,0 +1,11 @@ +#!/bin/sh + +FIREJAIL="" + +hash firejail 2> /dev/null + +if [ $? -eq 0 ]; then + FIREJAIL=firejail +fi + +$FIREJAIL /usr/bin/firefox "$@" diff --git a/roles/browsers/tasks/main.yml b/roles/browsers/tasks/main.yml index f2c3363..8fdf07a 100644 --- a/roles/browsers/tasks/main.yml +++ b/roles/browsers/tasks/main.yml @@ -8,9 +8,19 @@ - name: Install Firefox pacman: name=firefox state=present +- name: Jail Firefox + copy: src=firefox.sh dest=/usr/local/bin/firefox mode=0755 + tags: + - firejail + - name: Install Chromium pacman: name=chromium state=present +- name: Jail Chromium + copy: src=chromium.sh dest=/usr/local/bin/chromium mode=0755 + tags: + - firejail + - name: Download Chromium Pepper Flash command: cower -dq chromium-pepper-flash chdir=/home/{{ user.name }}/{{ aur.dir }} diff --git a/roles/chat/files/weechat.sh b/roles/chat/files/weechat.sh new file mode 100755 index 0000000..44e989f --- /dev/null +++ b/roles/chat/files/weechat.sh @@ -0,0 +1,11 @@ +#!/bin/sh + +FIREJAIL="" + +hash firejail 2> /dev/null + +if [ $? -eq 0 ]; then + FIREJAIL=firejail +fi + +$FIREJAIL /usr/bin/weechat "$@" diff --git a/roles/chat/tasks/weechat.yml b/roles/chat/tasks/weechat.yml index 8784f67..6c8f3c4 100644 --- a/roles/chat/tasks/weechat.yml +++ b/roles/chat/tasks/weechat.yml @@ -4,6 +4,12 @@ tags: - weechat +- name: Jail weechat + copy: src=weechat.sh dest=/usr/local/bin/weechat mode=0755 + tags: + - weechat + - firejail + - name: Install dunst pacman: name=dunst state=present tags: diff --git a/roles/rtorrent/files/rtorrent.sh b/roles/rtorrent/files/rtorrent.sh new file mode 100755 index 0000000..32e6b33 --- /dev/null +++ b/roles/rtorrent/files/rtorrent.sh @@ -0,0 +1,11 @@ +#!/bin/sh + +FIREJAIL="" + +hash firejail 2> /dev/null + +if [ $? -eq 0 ]; then + FIREJAIL=firejail +fi + +$FIREJAIL /usr/bin/rtorrent "$@" diff --git a/roles/rtorrent/tasks/main.yml b/roles/rtorrent/tasks/main.yml index 2d895ab..64e3247 100644 --- a/roles/rtorrent/tasks/main.yml +++ b/roles/rtorrent/tasks/main.yml @@ -1,3 +1,8 @@ --- - name: Install rtorrent pacman: name=rtorrent state=present + +- name: Jail rtorrent + copy: src=rtorrent.sh dest=/usr/local/bin/rtorrent mode=0755 + tags: + - firejail