(originally from my proposal on moby/moby#17142 (comment) but generic)
The profile would generate artificats of an apparmor profile and seccomp filters.
Obviously doesn't have to be toml since that's super hipster :p
Assumptions
aa-genprof it is never
This is a fork of haasn "Firefox bullshit removal" Also heavily based off pyllyukko "Firefox hardening" https://github.com/pyllyukko/user.js/
This guide has been tested to work on Firefox 68.1.0ESR and will probably work with other versions
Instead of manually editing about:config, make changes to the user.js file
###How to use the user.js file
Getting Started
Https://wizardforcel.gitbooks.io/web-hacking-101/content/ Web Hacking 101 Chinese Https://wizardforcel.gitbooks.io/asani/content/ Easy to get Android security Chinese version Https://wizardforcel.gitbooks.io/lpad/content/ Android penetration test study manual Chinese version Https://wizardforcel.gitbooks.io/kali-linux-web-pentest-cookbook/content/ Kali Linux Web Penetration Test Cheats Chinese Version Https://github.com/hardenedlinux/linux-exploit-development-tutorial Linux exploit Development Primer Https://www.gitbook.com/book/t0data/burpsuite/details burpsuite actual guide Http://www.kanxue.com/?article-read-1108.htm=&winzoom=1 Penetration Testing Node.js Application Https://github.com/qazbnm456/awesome-web-security Web Security Information and Resources List
| #!/bin/bash -e | |
| # Creates a systemd-nspawn container with Alpine | |
| MIRROR=http://dl-cdn.alpinelinux.org/alpine | |
| VERSION=${VERSION:-v3.19} | |
| APKTOOLS_VERSION=2.14.4-r0 | |
| wget_or_curl () { | |
| if command -v wget >/dev/null; then |
| // Turn off "Sends data to servers when leaving pages" | |
| user_pref("beacon.enabled", false); | |
| // Prevention of some telemetry related to the newtab | |
| user_pref("browser.newtabpage.directory.ping", ""); | |
| user_pref("browser.newtabpage.directory.source", ""); | |
| user_pref("browser.newtabpage.enhanced", false); | |
| // "In the release channels the Mozilla location service is used to help in figuring out regional search defaults." | |
| // Which means sending collectable data |
This is a quick-and-dirty guide to setting up a Raspberry Pi as a "router on a stick" to PrivateInternetAccess VPN.
Install Raspbian Jessie (2016-05-27-raspbian-jessie.img) to your Pi's sdcard.
Use the Raspberry Pi Configuration tool or sudo raspi-config to: