aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2019-11-25 14:24:22 +0100
committerLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2019-11-25 14:24:22 +0100
commit90b7dd85bef308f4608be56c8326d61172dbefb2 (patch)
treed2df952cf83fc4e1e85c45b1958ae0a44647c3ed
parentapparmor: misc fix for pcscd (diff)
downloadfirejail-90b7dd85bef308f4608be56c8326d61172dbefb2.tar.gz
firejail-90b7dd85bef308f4608be56c8326d61172dbefb2.tar.zst
firejail-90b7dd85bef308f4608be56c8326d61172dbefb2.zip
various fixups
-rw-r--r--README.md2
-rw-r--r--RELNOTES2
-rw-r--r--etc/audio-recorder.profile3
-rw-r--r--etc/ddgtk.profile3
-rw-r--r--etc/drawio.profile4
-rw-r--r--etc/gmpc.profile5
-rw-r--r--etc/profanity.profile2
-rw-r--r--etc/unf.profile3
8 files changed, 11 insertions, 13 deletions
diff --git a/README.md b/README.md
index e1deba279..94bf09c07 100644
--- a/README.md
+++ b/README.md
@@ -122,4 +122,4 @@ gnome-sound-recorder, godot, jerry, keepassxc-cli, keepassxc-proxy, klatexformul
122pandoc, qgis, rhythmbox-client, tcpdump, teams-for-linux, tshark, xlinks, zeal, mpg123, conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, 122pandoc, qgis, rhythmbox-client, tcpdump, teams-for-linux, tshark, xlinks, zeal, mpg123, conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump,
123mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss, mpg123-portaudio, mpg123-pulse, mpg123-strip, out123, pavucontrol-qt, 123mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss, mpg123-portaudio, mpg123-pulse, mpg123-strip, out123, pavucontrol-qt,
124gnome-characters, gnome-character-map, rsync, Whalebird, tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat, kiwix-desktop, ar, 124gnome-characters, gnome-character-map, rsync, Whalebird, tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat, kiwix-desktop, ar,
125gnome-latex, pngquant, kalgebra, kalgebramobile, signal-cli, amuled, kfind, profanity 125gnome-latex, pngquant, kalgebra, kalgebramobile, signal-cli, amuled, kfind, profanity, audio-recorder, cameramonitor, ddgtk, drawio, electron-mail, gmpc, unf
diff --git a/RELNOTES b/RELNOTES
index 9044ed4d3..9cdb71961 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -23,6 +23,8 @@ firejail (0.9.61) baseline; urgency=low
23 * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless 23 * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
24 * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra 24 * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
25 * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity 25 * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
26 * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
27 * new profiles: electron-mail
26 -- netblue30 <netblue30@yahoo.com> Sat, 1 Jun 2019 08:00:00 -0500 28 -- netblue30 <netblue30@yahoo.com> Sat, 1 Jun 2019 08:00:00 -0500
27 29
28firejail (0.9.60) baseline; urgency=low 30firejail (0.9.60) baseline; urgency=low
diff --git a/etc/audio-recorder.profile b/etc/audio-recorder.profile
index 6d9ccb33f..afd1033de 100644
--- a/etc/audio-recorder.profile
+++ b/etc/audio-recorder.profile
@@ -8,7 +8,6 @@ include audio-recorder.local
8include globals.local 8include globals.local
9 9
10noblacklist ${MUSIC} 10noblacklist ${MUSIC}
11whitelist ${DOWNLOADS}
12 11
13include disable-common.inc 12include disable-common.inc
14include disable-devel.inc 13include disable-devel.inc
@@ -18,6 +17,8 @@ include disable-passwdmgr.inc
18include disable-programs.inc 17include disable-programs.inc
19include disable-xdg.inc 18include disable-xdg.inc
20 19
20whitelist ${MUSIC}
21whitelist ${DOWNLOADS}
21whitelist /usr/share/audio-recorder 22whitelist /usr/share/audio-recorder
22include whitelist-common.inc 23include whitelist-common.inc
23include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
diff --git a/etc/ddgtk.profile b/etc/ddgtk.profile
index 8727a3cb3..ef65046e1 100644
--- a/etc/ddgtk.profile
+++ b/etc/ddgtk.profile
@@ -10,8 +10,6 @@ include globals.local
10include allow-python2.inc 10include allow-python2.inc
11include allow-python3.inc 11include allow-python3.inc
12 12
13whitelist ${DOWNLOADS}
14
15include disable-common.inc 13include disable-common.inc
16include disable-devel.inc 14include disable-devel.inc
17include disable-exec.inc 15include disable-exec.inc
@@ -20,6 +18,7 @@ include disable-passwdmgr.inc
20include disable-programs.inc 18include disable-programs.inc
21include disable-xdg.inc 19include disable-xdg.inc
22 20
21whitelist ${DOWNLOADS}
23whitelist /usr/share/ddgtk 22whitelist /usr/share/ddgtk
24include whitelist-common.inc 23include whitelist-common.inc
25include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
diff --git a/etc/drawio.profile b/etc/drawio.profile
index b50fc6b66..d4fd735a1 100644
--- a/etc/drawio.profile
+++ b/etc/drawio.profile
@@ -8,8 +8,6 @@ include globals.local
8 8
9noblacklist ${HOME}/.config/draw.io 9noblacklist ${HOME}/.config/draw.io
10 10
11whitelist ${DOWNLOADS}
12
13include disable-common.inc 11include disable-common.inc
14include disable-devel.inc 12include disable-devel.inc
15include disable-exec.inc 13include disable-exec.inc
@@ -20,7 +18,7 @@ include disable-xdg.inc
20 18
21mkdir ${HOME}/.config/draw.io 19mkdir ${HOME}/.config/draw.io
22whitelist ${HOME}/.config/draw.io 20whitelist ${HOME}/.config/draw.io
23 21whitelist ${DOWNLOADS}
24include whitelist-common.inc 22include whitelist-common.inc
25include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 24include whitelist-var-common.inc
diff --git a/etc/gmpc.profile b/etc/gmpc.profile
index b13050dbd..b1546db30 100644
--- a/etc/gmpc.profile
+++ b/etc/gmpc.profile
@@ -7,7 +7,6 @@ include gmpc.local
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/gmpc 9noblacklist ${HOME}/.config/gmpc
10
11noblacklist ${MUSIC} 10noblacklist ${MUSIC}
12 11
13include disable-common.inc 12include disable-common.inc
@@ -20,7 +19,7 @@ include disable-xdg.inc
20 19
21mkdir ${HOME}/.config/gmpc 20mkdir ${HOME}/.config/gmpc
22whitelist ${HOME}/.config/gmpc 21whitelist ${HOME}/.config/gmpc
23 22whitelist ${MUSIC}
24whitelist /usr/share/gmpc 23whitelist /usr/share/gmpc
25include whitelist-common.inc 24include whitelist-common.inc
26include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
@@ -49,6 +48,6 @@ disable-mnt
49private-cache 48private-cache
50private-etc alternatives,fonts 49private-etc alternatives,fonts
51private-tmp 50private-tmp
51writable-run-user
52 52
53# memory-deny-write-execute - breaks on Arch 53# memory-deny-write-execute - breaks on Arch
54writable-run-user
diff --git a/etc/profanity.profile b/etc/profanity.profile
index 84f70ad4d..6ca9314e9 100644
--- a/etc/profanity.profile
+++ b/etc/profanity.profile
@@ -44,7 +44,7 @@ shell none
44private-bin profanity 44private-bin profanity
45private-cache 45private-cache
46private-dev 46private-dev
47private-etc alternatives,localtime,mime.types,resolv.conf,ssl 47private-etc alternatives,ca-certificates,crypto-policies,localtime,mime.types,nsswitch.conf,pki,resolv.conf,ssl
48private-tmp 48private-tmp
49 49
50memory-deny-write-execute 50memory-deny-write-execute
diff --git a/etc/unf.profile b/etc/unf.profile
index ea08ff699..1f0b2aa32 100644
--- a/etc/unf.profile
+++ b/etc/unf.profile
@@ -7,8 +7,6 @@ include unf.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10whitelist ${DOWNLOADS}
11
12include disable-common.inc 10include disable-common.inc
13include disable-devel.inc 11include disable-devel.inc
14include disable-exec.inc 12include disable-exec.inc
@@ -17,6 +15,7 @@ include disable-passwdmgr.inc
17include disable-programs.inc 15include disable-programs.inc
18include disable-xdg.inc 16include disable-xdg.inc
19 17
18whitelist ${DOWNLOADS}
20include whitelist-common.inc 19include whitelist-common.inc
21include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
22include whitelist-var-common.inc 21include whitelist-var-common.inc