Administrator Guide

"enableRestrictedFSAccess": "No"
}
},
{
"executableFullPath": "/usr/bin/vlc_support",
"executableDesktopFilePath": "/usr/share/applications/
vlc_support.desktop",
"highSecurityGranularSettings": {
"blockCriticalAccess": "No",
"enableRestrictedUserEnvironment": "Yes",
"enableRestrictedCommunicationAccess": "No",
"enableRestrictedFSAccess": "No"
}
}
]
}
}
}
NOTE: If the application metadata namely executableFullPath and executableDesktopFilePath are not
available for a given application, you cannot install that application in the High security profile.
Use this metadata to set granular parameters for the application. The following is an example of the metadata json file with
granular settings for the VLC application:
{
"application": "vlc",
"applicationType": "external",
"appVersion": "1.3.00.16851",
"autoUpdate": true,
"osType": "HybridClient",
"osSubType": [
"Ubuntu 20.04 Desktop"
],
"installerParameters": "",
"userPromptTimeOut": "2",
"applicationinstallationTimeOut": "60",
"filecheckSum": "63xxxxxxxxxxxxxxxxxxxxxxxx",
"dependencies": "",
"securityConfigSettings": {
"firejailProfileSettings": {
"Version":"0.9.62",
"values": [
{
"executableFullPath": "/usr/bin/vlc",
"executableDesktopFilePath": "/usr/share/applications/vlc.desktop",
"highSecurityGranularSettings": {
"blockCriticalAccess": {
"blockSensitiveFileAccess":"Yes",
"blockDevelopmentToolsAcces":"No",
"blockExecuteAccess":"No",
"blockInterpreterToolsAccess":"No",
"blockPasswordManagerAccess":"Yes",
"blockConfigFilesAccess":"Yes"
},
"enableRestrictedUserEnvironment": {
"enableNewIPCNamespace":"No",
"disabl3dHwAccl":"No",
"disableDvd":"No",
"disableSupplementryGroups":"No",
"disableSound":"Yes",
"disableTv":"No",
"disableU2f":"No",
"disableVideo":"No",
"disableUserShell":"Yes"
},
"enableRestrictedCommunicationAccess": {
"enableMachineIdSpoofing":"No",
"blockNetworkAccess":"No",
"enableFirewallForNewNW":"Yes",
"disableDbusAccess":"No"
86
Device security