diff options
author | netblue30 <netblue30@yahoo.com> | 2016-07-08 09:00:27 -0400 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2016-07-08 09:00:27 -0400 |
commit | 442655366ff4f32139cad216390eae8e9d12eda7 (patch) | |
tree | 5d067e0856afc5cc2d22643c19a157d6e775d876 | |
parent | pulseaudio fix (diff) | |
download | firejail-442655366ff4f32139cad216390eae8e9d12eda7.tar.gz firejail-442655366ff4f32139cad216390eae8e9d12eda7.tar.zst firejail-442655366ff4f32139cad216390eae8e9d12eda7.zip |
nosound
-rw-r--r-- | etc/atom-beta.profile | 2 | ||||
-rw-r--r-- | etc/atom.profile | 1 | ||||
-rw-r--r-- | etc/bitlbee.profile | 2 | ||||
-rw-r--r-- | etc/cpio.profile | 1 | ||||
-rw-r--r-- | etc/deluge.profile | 1 | ||||
-rw-r--r-- | etc/dnscrypt-proxy.profile | 1 | ||||
-rw-r--r-- | etc/dnsmasq.profile | 1 | ||||
-rw-r--r-- | etc/fbreader.profile | 1 | ||||
-rw-r--r-- | etc/filezilla.profile | 2 | ||||
-rw-r--r-- | etc/gthumb.profile | 1 | ||||
-rw-r--r-- | etc/gwenview.profile | 1 | ||||
-rw-r--r-- | etc/gzip.profile | 1 | ||||
-rw-r--r-- | etc/hedgewars.profile | 1 | ||||
-rw-r--r-- | etc/less.profile | 1 | ||||
-rw-r--r-- | etc/libreoffice.profile | 1 | ||||
-rw-r--r-- | etc/mcabber.profile | 1 | ||||
-rw-r--r-- | etc/okular.profile | 1 | ||||
-rw-r--r-- | etc/pix.profile | 1 | ||||
-rw-r--r-- | etc/qbittorrent.profile | 1 | ||||
-rw-r--r-- | etc/quiterss.profile | 1 | ||||
-rw-r--r-- | etc/rtorrent.profile | 1 | ||||
-rw-r--r-- | etc/server.profile | 1 | ||||
-rw-r--r-- | etc/strings.profile | 1 | ||||
-rw-r--r-- | etc/uget-gtk.profile | 1 | ||||
-rw-r--r-- | etc/unbound.profile | 1 | ||||
-rw-r--r-- | etc/wesnoth.profile | 1 | ||||
-rw-r--r-- | etc/xzdec.profile | 1 |
27 files changed, 30 insertions, 0 deletions
diff --git a/etc/atom-beta.profile b/etc/atom-beta.profile index e2c3000c9..3c753e86c 100644 --- a/etc/atom-beta.profile +++ b/etc/atom-beta.profile | |||
@@ -15,3 +15,5 @@ seccomp | |||
15 | shell none | 15 | shell none |
16 | 16 | ||
17 | private-dev | 17 | private-dev |
18 | nosound | ||
19 | |||
diff --git a/etc/atom.profile b/etc/atom.profile index f996ea79e..8304cd379 100644 --- a/etc/atom.profile +++ b/etc/atom.profile | |||
@@ -15,3 +15,4 @@ seccomp | |||
15 | shell none | 15 | shell none |
16 | 16 | ||
17 | private-dev | 17 | private-dev |
18 | nosound | ||
diff --git a/etc/bitlbee.profile b/etc/bitlbee.profile index e63802c8a..4666d2fe7 100644 --- a/etc/bitlbee.profile +++ b/etc/bitlbee.profile | |||
@@ -10,3 +10,5 @@ private | |||
10 | private-dev | 10 | private-dev |
11 | protocol unix,inet,inet6 | 11 | protocol unix,inet,inet6 |
12 | seccomp | 12 | seccomp |
13 | nosound | ||
14 | |||
diff --git a/etc/cpio.profile b/etc/cpio.profile index b0e59c106..b4d232496 100644 --- a/etc/cpio.profile +++ b/etc/cpio.profile | |||
@@ -16,6 +16,7 @@ net none | |||
16 | shell none | 16 | shell none |
17 | tracelog | 17 | tracelog |
18 | net none | 18 | net none |
19 | nosound | ||
19 | 20 | ||
20 | 21 | ||
21 | 22 | ||
diff --git a/etc/deluge.profile b/etc/deluge.profile index 61bc80bd5..8fde9acf9 100644 --- a/etc/deluge.profile +++ b/etc/deluge.profile | |||
@@ -17,4 +17,5 @@ shell none | |||
17 | private-bin deluge,sh,python,uname | 17 | private-bin deluge,sh,python,uname |
18 | whitelist /tmp/.X11-unix | 18 | whitelist /tmp/.X11-unix |
19 | private-dev | 19 | private-dev |
20 | nosound | ||
20 | 21 | ||
diff --git a/etc/dnscrypt-proxy.profile b/etc/dnscrypt-proxy.profile index bd7e19dc2..90c244e03 100644 --- a/etc/dnscrypt-proxy.profile +++ b/etc/dnscrypt-proxy.profile | |||
@@ -8,5 +8,6 @@ include /etc/firejail/disable-passwdmgr.inc | |||
8 | 8 | ||
9 | private | 9 | private |
10 | private-dev | 10 | private-dev |
11 | nosound | ||
11 | seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open | 12 | seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open |
12 | 13 | ||
diff --git a/etc/dnsmasq.profile b/etc/dnsmasq.profile index 6b199c34b..1c01d44e4 100644 --- a/etc/dnsmasq.profile +++ b/etc/dnsmasq.profile | |||
@@ -11,5 +11,6 @@ netfilter | |||
11 | nonewprivs | 11 | nonewprivs |
12 | private | 12 | private |
13 | private-dev | 13 | private-dev |
14 | nosound | ||
14 | protocol unix,inet,inet6,netlink | 15 | protocol unix,inet,inet6,netlink |
15 | seccomp | 16 | seccomp |
diff --git a/etc/fbreader.profile b/etc/fbreader.profile index 24b35df9a..de31ce8de 100644 --- a/etc/fbreader.profile +++ b/etc/fbreader.profile | |||
@@ -18,3 +18,4 @@ shell none | |||
18 | private-bin fbreader,FBReader | 18 | private-bin fbreader,FBReader |
19 | whitelist /tmp/.X11-unix | 19 | whitelist /tmp/.X11-unix |
20 | private-dev | 20 | private-dev |
21 | nosound | ||
diff --git a/etc/filezilla.profile b/etc/filezilla.profile index 390769382..551c17a78 100644 --- a/etc/filezilla.profile +++ b/etc/filezilla.profile | |||
@@ -18,3 +18,5 @@ shell none | |||
18 | private-bin filezilla,uname,sh,python,lsb_release,fzputtygen,fzsftp | 18 | private-bin filezilla,uname,sh,python,lsb_release,fzputtygen,fzsftp |
19 | whitelist /tmp/.X11-unix | 19 | whitelist /tmp/.X11-unix |
20 | private-dev | 20 | private-dev |
21 | nosound | ||
22 | |||
diff --git a/etc/gthumb.profile b/etc/gthumb.profile index 44e7051a5..c673a1297 100644 --- a/etc/gthumb.profile +++ b/etc/gthumb.profile | |||
@@ -17,3 +17,4 @@ shell none | |||
17 | private-bin gthumb | 17 | private-bin gthumb |
18 | whitelist /tmp/.X11-unix | 18 | whitelist /tmp/.X11-unix |
19 | private-dev | 19 | private-dev |
20 | nosound | ||
diff --git a/etc/gwenview.profile b/etc/gwenview.profile index 65cc084e6..67f10c4e1 100644 --- a/etc/gwenview.profile +++ b/etc/gwenview.profile | |||
@@ -13,6 +13,7 @@ nogroups | |||
13 | private-dev | 13 | private-dev |
14 | protocol unix | 14 | protocol unix |
15 | seccomp | 15 | seccomp |
16 | nosound | ||
16 | 17 | ||
17 | #Experimental: | 18 | #Experimental: |
18 | #shell none | 19 | #shell none |
diff --git a/etc/gzip.profile b/etc/gzip.profile index 8d35c9f66..cc19e7608 100644 --- a/etc/gzip.profile +++ b/etc/gzip.profile | |||
@@ -5,3 +5,4 @@ net none | |||
5 | shell none | 5 | shell none |
6 | private-dev | 6 | private-dev |
7 | private-tmp | 7 | private-tmp |
8 | nosound | ||
diff --git a/etc/hedgewars.profile b/etc/hedgewars.profile index c5d863bd5..11cd844ce 100644 --- a/etc/hedgewars.profile +++ b/etc/hedgewars.profile | |||
@@ -12,6 +12,7 @@ noroot | |||
12 | private-dev | 12 | private-dev |
13 | seccomp | 13 | seccomp |
14 | tracelog | 14 | tracelog |
15 | nosound | ||
15 | 16 | ||
16 | mkdir ~/.hedgewars | 17 | mkdir ~/.hedgewars |
17 | whitelist ~/.hedgewars | 18 | whitelist ~/.hedgewars |
diff --git a/etc/less.profile b/etc/less.profile index 9cad7ceb6..0c43111d7 100644 --- a/etc/less.profile +++ b/etc/less.profile | |||
@@ -5,3 +5,4 @@ net none | |||
5 | shell none | 5 | shell none |
6 | private-dev | 6 | private-dev |
7 | private-tmp | 7 | private-tmp |
8 | nosound | ||
diff --git a/etc/libreoffice.profile b/etc/libreoffice.profile index 6cbdbfd66..77a00ebef 100644 --- a/etc/libreoffice.profile +++ b/etc/libreoffice.profile | |||
@@ -15,4 +15,5 @@ tracelog | |||
15 | 15 | ||
16 | private-dev | 16 | private-dev |
17 | whitelist /tmp/.X11-unix/ | 17 | whitelist /tmp/.X11-unix/ |
18 | nosound | ||
18 | 19 | ||
diff --git a/etc/mcabber.profile b/etc/mcabber.profile index 6b236a9a7..48b46dba0 100644 --- a/etc/mcabber.profile +++ b/etc/mcabber.profile | |||
@@ -18,3 +18,4 @@ private-bin mcabber | |||
18 | private-etc null | 18 | private-etc null |
19 | private-dev | 19 | private-dev |
20 | shell none | 20 | shell none |
21 | nosound | ||
diff --git a/etc/okular.profile b/etc/okular.profile index b1efc4753..c9c342b15 100644 --- a/etc/okular.profile +++ b/etc/okular.profile | |||
@@ -14,6 +14,7 @@ noroot | |||
14 | private-dev | 14 | private-dev |
15 | protocol unix | 15 | protocol unix |
16 | seccomp | 16 | seccomp |
17 | nosound | ||
17 | 18 | ||
18 | #Experimental: | 19 | #Experimental: |
19 | #net none | 20 | #net none |
diff --git a/etc/pix.profile b/etc/pix.profile index 87056e32c..81ab7486f 100644 --- a/etc/pix.profile +++ b/etc/pix.profile | |||
@@ -18,4 +18,5 @@ shell none | |||
18 | private-bin pix | 18 | private-bin pix |
19 | whitelist /tmp/.X11-unix | 19 | whitelist /tmp/.X11-unix |
20 | private-dev | 20 | private-dev |
21 | nosound | ||
21 | 22 | ||
diff --git a/etc/qbittorrent.profile b/etc/qbittorrent.profile index c5b9a72e6..138b6db55 100644 --- a/etc/qbittorrent.profile +++ b/etc/qbittorrent.profile | |||
@@ -17,3 +17,4 @@ seccomp | |||
17 | #private-bin qbittorrent | 17 | #private-bin qbittorrent |
18 | whitelist /tmp/.X11-unix | 18 | whitelist /tmp/.X11-unix |
19 | private-dev | 19 | private-dev |
20 | nosound | ||
diff --git a/etc/quiterss.profile b/etc/quiterss.profile index 3e5dde36e..f2b9959f6 100644 --- a/etc/quiterss.profile +++ b/etc/quiterss.profile | |||
@@ -22,6 +22,7 @@ nogroups | |||
22 | noroot | 22 | noroot |
23 | private-bin quiterss | 23 | private-bin quiterss |
24 | private-dev | 24 | private-dev |
25 | nosound | ||
25 | #private-etc X11,ssl | 26 | #private-etc X11,ssl |
26 | protocol unix,inet,inet6 | 27 | protocol unix,inet,inet6 |
27 | seccomp | 28 | seccomp |
diff --git a/etc/rtorrent.profile b/etc/rtorrent.profile index 1226a51cd..15df2c374 100644 --- a/etc/rtorrent.profile +++ b/etc/rtorrent.profile | |||
@@ -16,3 +16,4 @@ shell none | |||
16 | private-bin rtorrent | 16 | private-bin rtorrent |
17 | whitelist /tmp/.X11-unix | 17 | whitelist /tmp/.X11-unix |
18 | private-dev | 18 | private-dev |
19 | nosound | ||
diff --git a/etc/server.profile b/etc/server.profile index 1b3cb7207..88331d951 100644 --- a/etc/server.profile +++ b/etc/server.profile | |||
@@ -8,6 +8,7 @@ include /etc/firejail/disable-passwdmgr.inc | |||
8 | 8 | ||
9 | private | 9 | private |
10 | private-dev | 10 | private-dev |
11 | nosound | ||
11 | private-tmp | 12 | private-tmp |
12 | seccomp | 13 | seccomp |
13 | 14 | ||
diff --git a/etc/strings.profile b/etc/strings.profile index 9bc67cfb8..881edf4ad 100644 --- a/etc/strings.profile +++ b/etc/strings.profile | |||
@@ -5,3 +5,4 @@ net none | |||
5 | shell none | 5 | shell none |
6 | private-dev | 6 | private-dev |
7 | private-tmp | 7 | private-tmp |
8 | nosound | ||
diff --git a/etc/uget-gtk.profile b/etc/uget-gtk.profile index 2c3c62c5f..269f8f0fd 100644 --- a/etc/uget-gtk.profile +++ b/etc/uget-gtk.profile | |||
@@ -22,4 +22,5 @@ shell none | |||
22 | private-bin uget-gtk | 22 | private-bin uget-gtk |
23 | whitelist /tmp/.X11-unix | 23 | whitelist /tmp/.X11-unix |
24 | private-dev | 24 | private-dev |
25 | nosound | ||
25 | 26 | ||
diff --git a/etc/unbound.profile b/etc/unbound.profile index 4365e4fee..5e2cb5f65 100644 --- a/etc/unbound.profile +++ b/etc/unbound.profile | |||
@@ -8,5 +8,6 @@ include /etc/firejail/disable-passwdmgr.inc | |||
8 | 8 | ||
9 | private | 9 | private |
10 | private-dev | 10 | private-dev |
11 | nosound | ||
11 | seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open | 12 | seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open |
12 | 13 | ||
diff --git a/etc/wesnoth.profile b/etc/wesnoth.profile index cd0c6406f..8bd6ef8e1 100644 --- a/etc/wesnoth.profile +++ b/etc/wesnoth.profile | |||
@@ -15,6 +15,7 @@ protocol unix,inet,inet6 | |||
15 | seccomp | 15 | seccomp |
16 | 16 | ||
17 | private-dev | 17 | private-dev |
18 | nosound | ||
18 | 19 | ||
19 | whitelist /tmp/.X11-unix | 20 | whitelist /tmp/.X11-unix |
20 | 21 | ||
diff --git a/etc/xzdec.profile b/etc/xzdec.profile index 1bff66965..ddf2061bf 100644 --- a/etc/xzdec.profile +++ b/etc/xzdec.profile | |||
@@ -5,3 +5,4 @@ net none | |||
5 | shell none | 5 | shell none |
6 | private-dev | 6 | private-dev |
7 | private-tmp | 7 | private-tmp |
8 | nosound | ||