diff options
author | Tad <tad@spotco.us> | 2019-03-20 19:20:19 -0400 |
---|---|---|
committer | Tad <tad@spotco.us> | 2019-03-20 19:20:19 -0400 |
commit | fb69bf3e4fdd1a5250b057f87e22939cd2e52d56 (patch) | |
tree | 7ac805edadb52652efe322aade165e6cb7f98b70 | |
parent | Five more game profiles (diff) | |
download | firejail-fb69bf3e4fdd1a5250b057f87e22939cd2e52d56.tar.gz firejail-fb69bf3e4fdd1a5250b057f87e22939cd2e52d56.tar.zst firejail-fb69bf3e4fdd1a5250b057f87e22939cd2e52d56.zip |
Add a profile for DCSS
-rw-r--r-- | README.md | 2 | ||||
-rw-r--r-- | RELNOTES | 2 | ||||
-rw-r--r-- | etc/crawl-tiles.profile | 7 | ||||
-rw-r--r-- | etc/crawl.profile | 45 | ||||
-rw-r--r-- | src/firecfg/firecfg.config | 2 |
5 files changed, 56 insertions, 2 deletions
@@ -102,4 +102,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe | |||
102 | ## Current development version: 0.9.59 | 102 | ## Current development version: 0.9.59 |
103 | 103 | ||
104 | ## New profiles: | 104 | ## New profiles: |
105 | crow, nyx, klavaro, mypaint, celluoid, nano, transgui, sysprof, simplescreenrecorder, geekbench, xfce4-mixer, pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring, regextester, hardinfo, gnome-system-log, gnome-nettool, netactview, redshift, devhelp, assogiate, subdownloader, font-manager, exfalso, gconf-editor, dconf-editor, mpdris2, sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings, code-oss, pragha, Maelstrom, ostrichriders, bzflag, freeciv, lincity-ng, megaglest, openttd | 105 | crow, nyx, klavaro, mypaint, celluoid, nano, transgui, sysprof, simplescreenrecorder, geekbench, xfce4-mixer, pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring, regextester, hardinfo, gnome-system-log, gnome-nettool, netactview, redshift, devhelp, assogiate, subdownloader, font-manager, exfalso, gconf-editor, dconf-editor, mpdris2, sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings, code-oss, pragha, Maelstrom, ostrichriders, bzflag, freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles |
@@ -7,7 +7,7 @@ firejail (0.9.59) baseline; urgency=low | |||
7 | * new profiles: font-manager, exfalso, gconf-editor, dconf-editor | 7 | * new profiles: font-manager, exfalso, gconf-editor, dconf-editor |
8 | * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings | 8 | * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings |
9 | * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag | 9 | * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag |
10 | * new profiles: freeciv, lincity-ng, megaglest, openttd | 10 | * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles |
11 | * memory-deny-write-execute now also blocks memfd_create | 11 | * memory-deny-write-execute now also blocks memfd_create |
12 | * drop support for flatpak/snap packages | 12 | * drop support for flatpak/snap packages |
13 | 13 | ||
diff --git a/etc/crawl-tiles.profile b/etc/crawl-tiles.profile new file mode 100644 index 000000000..39151865e --- /dev/null +++ b/etc/crawl-tiles.profile | |||
@@ -0,0 +1,7 @@ | |||
1 | # Firejail profile alias for crawl | ||
2 | # This file is overwritten after every install/update | ||
3 | |||
4 | ignore no3d | ||
5 | |||
6 | # Redirect | ||
7 | include crawl.profile | ||
diff --git a/etc/crawl.profile b/etc/crawl.profile new file mode 100644 index 000000000..af78ac738 --- /dev/null +++ b/etc/crawl.profile | |||
@@ -0,0 +1,45 @@ | |||
1 | # Firejail profile for crawl-tiles | ||
2 | # Description: Roguelike dungeon exploration game | ||
3 | # This file is overwritten after every install/update | ||
4 | # Persistent local customizations | ||
5 | include crawl-tiles.local | ||
6 | # Persistent global definitions | ||
7 | include globals.local | ||
8 | |||
9 | noblacklist ${HOME}/.crawl | ||
10 | |||
11 | include disable-common.inc | ||
12 | include disable-devel.inc | ||
13 | include disable-exec.inc | ||
14 | include disable-interpreters.inc | ||
15 | include disable-passwdmgr.inc | ||
16 | include disable-programs.inc | ||
17 | include disable-xdg.inc | ||
18 | |||
19 | mkdir ${HOME}/.crawl | ||
20 | whitelist ${HOME}/.crawl | ||
21 | include whitelist-common.inc | ||
22 | include whitelist-var-common.inc | ||
23 | |||
24 | caps.drop all | ||
25 | ipc-namespace | ||
26 | net none | ||
27 | no3d | ||
28 | nodbus | ||
29 | nodvd | ||
30 | nogroups | ||
31 | nonewprivs | ||
32 | noroot | ||
33 | nosound | ||
34 | notv | ||
35 | nou2f | ||
36 | novideo | ||
37 | protocol unix | ||
38 | seccomp | ||
39 | shell none | ||
40 | |||
41 | disable-mnt | ||
42 | private-bin crawl,crawl-tiles | ||
43 | private-cache | ||
44 | private-dev | ||
45 | private-tmp | ||
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 790768290..90dd07dea 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config | |||
@@ -106,6 +106,8 @@ code-oss | |||
106 | conkeror | 106 | conkeror |
107 | conky | 107 | conky |
108 | corebird | 108 | corebird |
109 | crawl | ||
110 | crawl-tiles | ||
109 | crow | 111 | crow |
110 | cryptocat | 112 | cryptocat |
111 | cvlc | 113 | cvlc |