summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar bn0785ac <33168871+bn0785ac@users.noreply.github.com>2018-05-01 11:02:01 -0400
committerLibravatar Fred Barclay <Fred-Barclay@users.noreply.github.com>2018-05-01 10:02:01 -0500
commitecbc26fc3b4737a368b701f32ca7c225f86b4e37 (patch)
treeeff5f0e95afe183e48894466d18f7f9b56f8cd7c
parentMerge branch 'master' of http://github.com/netblue30/firejail (diff)
downloadfirejail-ecbc26fc3b4737a368b701f32ca7c225f86b4e37.tar.gz
firejail-ecbc26fc3b4737a368b701f32ca7c225f86b4e37.tar.zst
firejail-ecbc26fc3b4737a368b701f32ca7c225f86b4e37.zip
Repairing programs (#1894)
cin keeps seccomp (but i've recovered multithreading its mandatory for video editing) libreoffice its fixed (linux-kde) natron works (multithread )
-rw-r--r--etc/cin.profile8
-rw-r--r--etc/libreoffice.profile2
-rw-r--r--etc/natron.profile8
3 files changed, 13 insertions, 5 deletions
diff --git a/etc/cin.profile b/etc/cin.profile
index 0a5b0c728..512fa2050 100644
--- a/etc/cin.profile
+++ b/etc/cin.profile
@@ -18,15 +18,17 @@ ipc-namespace
18net none 18net none
19nodbus 19nodbus
20nodvd 20nodvd
21nogroups 21#nogroups
22nonewprivs 22#nonewprivs
23notv 23notv
24noroot 24noroot
25protocol unix 25protocol unix
26
27#if an 1-1.2% gap per thread hurts you, feel free to comment seccomp
26seccomp 28seccomp
27shell none 29shell none
28 30
29private-bin cin,ffmpeg 31#private-bin cin,ffmpeg
30private-dev 32private-dev
31 33
32noexec ${HOME} 34noexec ${HOME}
diff --git a/etc/libreoffice.profile b/etc/libreoffice.profile
index 18fcc59c6..4aafd7c7a 100644
--- a/etc/libreoffice.profile
+++ b/etc/libreoffice.profile
@@ -29,7 +29,7 @@ include /etc/firejail/whitelist-var-common.inc
29caps.drop all 29caps.drop all
30machine-id 30machine-id
31netfilter 31netfilter
32nodbus 32#nodbus
33nodvd 33nodvd
34nogroups 34nogroups
35#nonewprivs - fix for Ubuntu 18.04/Debian 10 35#nonewprivs - fix for Ubuntu 18.04/Debian 10
diff --git a/etc/natron.profile b/etc/natron.profile
index f6ebf2b65..b933604f8 100644
--- a/etc/natron.profile
+++ b/etc/natron.profile
@@ -5,6 +5,12 @@ include /etc/firejail/natron.local
5# Persistent global definitions 5# Persistent global definitions
6include /etc/firejail/globals.local 6include /etc/firejail/globals.local
7 7
8#fixing it
9noblacklist ${PATH}/python2*
10noblacklist ${PATH}/python3*
11noblacklist /usr/lib/python2*
12noblacklist /usr/lib/python3*
13
8noblacklist ${HOME}/.Natron 14noblacklist ${HOME}/.Natron
9noblacklist ${HOME}/.cache/INRIA/Natron 15noblacklist ${HOME}/.cache/INRIA/Natron
10noblacklist ${HOME}/.config/INRIA 16noblacklist ${HOME}/.config/INRIA
@@ -12,7 +18,7 @@ noblacklist /opt/natron
12 18
13include /etc/firejail/disable-common.inc 19include /etc/firejail/disable-common.inc
14include /etc/firejail/disable-devel.inc 20include /etc/firejail/disable-devel.inc
15include /etc/firejail/disable-interpreters.inc 21#include /etc/firejail/disable-interpreters.inc
16include /etc/firejail/disable-passwdmgr.inc 22include /etc/firejail/disable-passwdmgr.inc
17include /etc/firejail/disable-programs.inc 23include /etc/firejail/disable-programs.inc
18 24