Mirrors/workspaces-images
1
0
Fork 0
mirror of https://github.com/kasmtech/workspaces-images.git synced 2026-01-23 02:25:16 +00:00
Code Issues Projects Releases Wiki Activity

VNC-235 Close browser sandbox breakout via file manager

Browse source
This commit is contained in:
Dmitry Maksyoma 2025-08-04 21:13:39 +12:00
parent 0a570ad58c
commit de1d63bd19
No known key found for this signature in database
9 changed files with 20 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
dockerfile-kasm-brave
View file

@ -34,6 +34,8 @@ RUN chmod +x $STARTUPDIR/custom_startup.sh
ENV KASM_RESTRICTED_FILE_CHOOSER=1
COPY ./src/ubuntu/install/gtk/ $INST_SCRIPTS/gtk/
RUN bash $INST_SCRIPTS/gtk/install_restricted_file_chooser.sh
COPY ./src/ubuntu/install/close_browser_breakout_via_file_manager/ $INST_SCRIPTS/close_browser_breakout_via_file_manager/
RUN bash $INST_SCRIPTS/close_browser_breakout_via_file_manager/replace_thunar_with_empty_script.sh
######### End Customizations ###########

2
dockerfile-kasm-chrome
View file

@ -38,6 +38,8 @@ RUN chmod +x $STARTUPDIR/custom_startup.sh
ENV KASM_RESTRICTED_FILE_CHOOSER=1
COPY ./src/ubuntu/install/gtk/ $INST_SCRIPTS/gtk/
RUN bash $INST_SCRIPTS/gtk/install_restricted_file_chooser.sh
COPY ./src/ubuntu/install/close_browser_breakout_via_file_manager/ $INST_SCRIPTS/close_browser_breakout_via_file_manager/
RUN bash $INST_SCRIPTS/close_browser_breakout_via_file_manager/replace_thunar_with_empty_script.sh
######### End Customizations ###########

2
dockerfile-kasm-chromium
View file

@ -37,6 +37,8 @@ RUN chmod +x $STARTUPDIR/custom_startup.sh
ENV KASM_RESTRICTED_FILE_CHOOSER=1
COPY ./src/ubuntu/install/gtk/ $INST_SCRIPTS/gtk/
RUN bash $INST_SCRIPTS/gtk/install_restricted_file_chooser.sh
COPY ./src/ubuntu/install/close_browser_breakout_via_file_manager/ $INST_SCRIPTS/close_browser_breakout_via_file_manager/
RUN bash $INST_SCRIPTS/close_browser_breakout_via_file_manager/replace_thunar_with_empty_script.sh
######### End Customizations ###########

2
dockerfile-kasm-edge
View file

@ -23,6 +23,8 @@ RUN apt-get remove -y xfce4-panel
ENV KASM_RESTRICTED_FILE_CHOOSER=1
COPY ./src/ubuntu/install/gtk/ $INST_SCRIPTS/gtk/
RUN bash $INST_SCRIPTS/gtk/install_restricted_file_chooser.sh
COPY ./src/ubuntu/install/close_browser_breakout_via_file_manager/ $INST_SCRIPTS/close_browser_breakout_via_file_manager/
RUN bash $INST_SCRIPTS/close_browser_breakout_via_file_manager/replace_thunar_with_empty_script.sh
# Security modifications
COPY ./src/ubuntu/install/misc/single_app_security.sh $INST_SCRIPTS/misc/

2
dockerfile-kasm-firefox
View file

@ -38,6 +38,8 @@ RUN chmod +x $STARTUPDIR/custom_startup.sh
ENV KASM_RESTRICTED_FILE_CHOOSER=1
COPY ./src/ubuntu/install/gtk/ $INST_SCRIPTS/gtk/
RUN bash $INST_SCRIPTS/gtk/install_restricted_file_chooser.sh
COPY ./src/ubuntu/install/close_browser_breakout_via_file_manager/ $INST_SCRIPTS/close_browser_breakout_via_file_manager/
RUN bash $INST_SCRIPTS/close_browser_breakout_via_file_manager/replace_thunar_with_empty_script.sh
######### End Customizations ###########

2
dockerfile-kasm-tor-browser
View file

@ -27,6 +27,8 @@ RUN bash $INST_SCRIPTS/misc/single_app_security.sh -t && rm -rf $INST_SCRIPTS/m
ENV KASM_RESTRICTED_FILE_CHOOSER=1
COPY ./src/ubuntu/install/gtk/ $INST_SCRIPTS/gtk/
RUN bash $INST_SCRIPTS/gtk/install_restricted_file_chooser.sh
COPY ./src/ubuntu/install/close_browser_breakout_via_file_manager/ $INST_SCRIPTS/close_browser_breakout_via_file_manager/
RUN bash $INST_SCRIPTS/close_browser_breakout_via_file_manager/replace_thunar_with_empty_script.sh
# Setup the custom startup script that will be invoked when the container starts
#ENV LAUNCH_URL about:blank

2
dockerfile-kasm-vivaldi
View file

@ -38,6 +38,8 @@ RUN chmod +x $STARTUPDIR/custom_startup.sh
ENV KASM_RESTRICTED_FILE_CHOOSER=1
COPY ./src/ubuntu/install/gtk/ $INST_SCRIPTS/gtk/
RUN bash $INST_SCRIPTS/gtk/install_restricted_file_chooser.sh
COPY ./src/ubuntu/install/close_browser_breakout_via_file_manager/ $INST_SCRIPTS/close_browser_breakout_via_file_manager/
RUN bash $INST_SCRIPTS/close_browser_breakout_via_file_manager/replace_thunar_with_empty_script.sh
######### End Customizations ###########

5
src/ubuntu/install/close_browser_breakout_via_file_manager/replace_thunar_with_empty_script.sh Executable file
View file

@ -0,0 +1,5 @@
#!/bin/bash
set -e
cp /dockerstartup/install/close_browser_breakout_via_file_manager/script_that_just_exits /usr/bin/thunar

1
src/ubuntu/install/close_browser_breakout_via_file_manager/script_that_just_exits Executable file
View file

@ -0,0 +1 @@
#!/bin/sh