-
Notifications
You must be signed in to change notification settings - Fork 569
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
New profile for man,psi,smuxi; fix pidgin (#3590)
* Profile for Psi * Fix pidgin buddy icon * Profile for man * Add profile for smuxi * Comment man in firecfg * Add pinentry programs * Update etc/profile-m-z/psi.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
- Loading branch information
1 parent
3801eb3
commit c542881
Showing
6 changed files
with
213 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,66 @@ | ||
| # Firejail profile for man | ||
| # Description: manpage viewer | ||
| quiet | ||
| # This file is overwritten after every install/update | ||
| # Persistent local customizations | ||
| include man.local | ||
| # Persistent global definitions | ||
| include globals.local | ||
|
|
||
| blacklist ${RUNUSER} | ||
|
|
||
| noblacklist ${HOME}/.local/share/man | ||
|
|
||
| include disable-common.inc | ||
| include disable-devel.inc | ||
| include disable-exec.inc | ||
| include disable-interpreters.inc | ||
| include disable-passwdmgr.inc | ||
| include disable-programs.inc | ||
| include disable-xdg.inc | ||
|
|
||
| mkdir ${HOME}/.local/share/man | ||
| whitelist ${HOME}/.local/share/man | ||
| whitelist ${HOME}/.manpath | ||
| whitelist /usr/share/groff | ||
| whitelist /usr/share/info | ||
| whitelist /usr/share/lintian | ||
| whitelist /usr/share/locale | ||
| whitelist /usr/share/man | ||
| whitelist /var/cache/man | ||
| include whitelist-common.inc | ||
| include whitelist-usr-share-common.inc | ||
| include whitelist-var-common.inc | ||
|
|
||
| apparmor | ||
| caps.drop all | ||
| ipc-namespace | ||
| machine-id | ||
| net none | ||
| no3d | ||
| nodvd | ||
| nogroups | ||
| nonewprivs | ||
| noroot | ||
| nosound | ||
| notv | ||
| novideo | ||
| nou2f | ||
| protocol unix | ||
| seccomp | ||
| shell none | ||
| tracelog | ||
| x11 none | ||
|
|
||
| disable-mnt | ||
| private-bin apropos,bash,cat,catman,col,gpreconv,groff,grotty,gunzip,gzip,less,man,most,nroff,preconv,sed,sh,tbl,tr,troff,whatis,which,xtotroff, | ||
| zcat,zsoelim | ||
| private-cache | ||
| private-dev | ||
| private-etc alternatives,fonts,locale,locale.alias,locale.conf,man_db.conf,manpath.config,selinux,sysless,xdg | ||
| private-tmp | ||
|
|
||
| dbus-user none | ||
| dbus-system none | ||
|
|
||
| memory-deny-write-execute |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,78 @@ | ||
| # Firejail profile for psi | ||
| # Description: Native XMPP client with GPG support | ||
| # This file is overwritten after every install/update | ||
| # Persistent local customizations | ||
| include psi.local | ||
| # Persistent global definitions | ||
| include globals.local | ||
|
|
||
| # Uncomment for GPG | ||
| # noblacklist ${HOME}/.gnupg | ||
| noblacklist ${HOME}/.cache/psi | ||
| noblacklist ${HOME}/.cache/Psi | ||
| noblacklist ${HOME}/.config/psi | ||
| noblacklist ${HOME}/.local/share/psi | ||
| noblacklist ${HOME}/.local/share/Psi | ||
|
|
||
| include disable-common.inc | ||
| include disable-devel.inc | ||
| include disable-exec.inc | ||
| include disable-interpreters.inc | ||
| include disable-passwdmgr.inc | ||
| include disable-programs.inc | ||
| include disable-shell.inc | ||
| include disable-xdg.inc | ||
|
|
||
| # Uncomment for GPG | ||
| # mkdir ${HOME}/.gnupg | ||
| mkdir ${HOME}/.cache/psi | ||
| mkdir ${HOME}/.cache/Psi | ||
| mkdir ${HOME}/.config/psi | ||
| mkdir ${HOME}/.local/share/psi | ||
| mkdir ${HOME}/.local/share/Psi | ||
| # Uncomment for GPG | ||
| # whitelist ${HOME}/.gnupg | ||
| whitelist ${HOME}/.cache/psi | ||
| whitelist ${HOME}/.cache/Psi | ||
| whitelist ${HOME}/.config/psi | ||
| whitelist ${HOME}/.local/share/psi | ||
| whitelist ${HOME}/.local/share/Psi | ||
| whitelist ${DOWNLOADS} | ||
| # Uncomment for GPG | ||
| # whitelist /usr/share/gnupg | ||
| # whitelist /usr/share/gnupg2 | ||
| whitelist /usr/share/psi | ||
| # Uncomment for GPG | ||
| # whitelist ${RUNUSER}/gnupg | ||
| # whitelist ${RUNUSER}/keyring | ||
| include whitelist-common.inc | ||
| include whitelist-runuser-common.inc | ||
| include whitelist-usr-share-common.inc | ||
| include whitelist-var-common.inc | ||
|
|
||
| apparmor | ||
| caps.drop all | ||
| netfilter | ||
| nodvd | ||
| nogroups | ||
| nonewprivs | ||
| noroot | ||
| notv | ||
| novideo | ||
| nou2f | ||
| protocol unix,inet,inet6,netlink | ||
| seccomp !chroot | ||
| shell none | ||
| # breaks on Arch | ||
| # tracelog | ||
|
|
||
| disable-mnt | ||
| # Add "gpg,gpg2,gpg-agent,pinentry-curses,pinentry-emacs,pinentry-fltk,pinentry-gnome3,pinentry-gtk,pinentry-gtk2,pinentry-gtk-2,pinentry-qt,pinentry-qt4,pinentry-tty,pinentry-x2go,pinentry-kwallet" for GPG | ||
| private-bin getopt,psi | ||
| private-cache | ||
| private-dev | ||
| private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,drirc,fonts,gcrypt,group,hostname,hosts,ld.so.cache,ld.so.conf,machine-id,passwd,pki,pulse,resolv.conf,selinux,ssl,xdg | ||
| private-tmp | ||
|
|
||
| dbus-user none | ||
| dbus-system none |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,55 @@ | ||
| # Firejail profile for smuxi-frontend-gnome | ||
| # Description: Multi protocol chat client with Twitter support | ||
| # This file is overwritten after every install/update | ||
| # Persistent local customizations | ||
| include smuxi-frontend-gnome.local | ||
| # Persistent global definitions | ||
| include globals.local | ||
|
|
||
| noblacklist ${HOME}/.cache/smuxi | ||
| noblacklist ${HOME}/.config/smuxi | ||
| noblacklist ${HOME}/.local/share/smuxi | ||
|
|
||
| include disable-common.inc | ||
| include disable-devel.inc | ||
| include disable-exec.inc | ||
| include disable-interpreters.inc | ||
| include disable-passwdmgr.inc | ||
| include disable-programs.inc | ||
| include disable-xdg.inc | ||
|
|
||
| mkdir ${HOME}/.cache/smuxi | ||
| mkdir ${HOME}/.config/smuxi | ||
| mkdir ${HOME}/.local/share/smuxi | ||
| whitelist ${HOME}/.cache/smuxi | ||
| whitelist ${HOME}/.config/smuxi | ||
| whitelist ${HOME}/.local/share/smuxi | ||
| whitelist ${DOWNLOADS} | ||
| include whitelist-common.inc | ||
| include whitelist-runuser-common.inc | ||
| include whitelist-usr-share-common.inc | ||
| include whitelist-var-common.inc | ||
|
|
||
| apparmor | ||
| caps.drop all | ||
| netfilter | ||
| nodvd | ||
| nogroups | ||
| nonewprivs | ||
| noroot | ||
| notv | ||
| nou2f | ||
| protocol unix,inet,inet6,netlink | ||
| seccomp | ||
| shell none | ||
| tracelog | ||
|
|
||
| disable-mnt | ||
| private-bin bash,mono,mono-sgen,sh,smuxi-frontend-gnome | ||
| private-cache | ||
| private-dev | ||
| private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,hostname,hosts,ld.so.cache,ld.so.conf,machine-id,mono,passwd,pki,pulse,resolv.conf,selinux,ssl,xdg | ||
| private-tmp | ||
|
|
||
| dbus-user none | ||
| dbus-system none |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters