Administrator Guide

● Medium—This profile enables you to install the following types of third-party application packages or files:
○ Dell-signed Debian files
○ Custom-signed Debian files
NOTE: Before you install a custom-signed Debian package, you must upload the corresponding certificate by
using Wyse Management Suite.
○ Unsigned Debian files with or without metadata
NOTE: The firewall and Kernel hardening features are disabled. If metadata is available, the default firejail profile
is enabled. If metadata is not available, and if the desktop file of the application is available in /usr/share/
application location, the default firejail profile is enabled. If metadata is not available, and if the desktop file of
the application is not available in /usr/share/application location, the default firejail profile is disabled. For
more information about how to configure the application metadata for firejail profile, see Configuring metadata for
firejail profiles.
● Low—This profile enables you to install all types of file extensions, such as, Debian, Bundle, Python script, Shell script,
Javascript, Image file extensions, and VLC extensions.
NOTE: The firewall and Kernel hardening features are disabled. Both default and custom firejail profiles are disabled.
For more information about security profiles, see the Dell Hybrid Client 1.x Security Configuration Guide at www.dell.com/
support.
NOTE: In all the security profiles, both Dell-signed and custom-signed—with signature verified in medium and high
profiles) (debian and bundle) applications are allowed for installation.
7. If you select the Security Profile as Medium, browse and select the application certificate.
8. If you select the Security Profile as High, do the following:
a. Browse and select the application certificate.
b. Specify a port number or a range of port numbers in a Comma-Separated Value (CSV) format.
9. Click Save & Publish.
Configuring metadata for Firejail profiles
To configure the Firejail profile in Medium and High security modes, the administrator must add the metadata along with the
application package. Depending on the application that needs to be installed, you must modify the metadata, create a JSON file,
and then bundle the file along with the Debian package of the application. The bundled package can be deployed to Dell Hybrid
Client using Wyse Management Suite.
Use this metadata if you do not want to set granular parameters for the application. The following is an example of the metadata
json file for the VLC application:
{
"application": "vlc",
"applicationType": "external",
"appVersion": "1.3.00.16851",
"autoUpdate": true,
"osType": "HybridClient",
"osSubType": [
"Ubuntu 20.04 Desktop"
],
"installerParameters": "",
"userPromptTimeOut": "2",
"applicationinstallationTimeOut": "60",
"filecheckSum": "63xxxxxxxxxxxxxxxxxxxxx",
"dependencies": "",
"securityConfigSettings": {
"firejailProfileSettings": {
"version": "0.9.62",
"values": [
{
"executableFullPath": "/usr/bin/vlc",
"executableDesktopFilePath": "/usr/share/applications/vlc.desktop",
"highSecurityGranularSettings": {
"blockCriticalAccess": "Yes",
"enableRestrictedUserEnvironment": "Yes",
"enableRestrictedCommunicationAccess": "Yes",
Device security
85