diff options
author | SYN-cook <syncookongit@gmail.com> | 2017-04-03 23:28:50 +0200 |
---|---|---|
committer | Fred Barclay <Fred-Barclay@users.noreply.github.com> | 2017-04-03 21:28:50 +0000 |
commit | 6e23a6dd6367ad8240601a5fc32fb75ce5f64e07 (patch) | |
tree | 33f060c9294c5387075dd91ede31ee7e26073b57 | |
parent | fix firejail bash completion (diff) | |
download | firejail-6e23a6dd6367ad8240601a5fc32fb75ce5f64e07.tar.gz firejail-6e23a6dd6367ad8240601a5fc32fb75ce5f64e07.tar.zst firejail-6e23a6dd6367ad8240601a5fc32fb75ce5f64e07.zip |
mediathekview profile (#1190)
* create mediathekview.profile
* update mediathekview
* update mediathekview
* blacklist mediathekview
* add mediathekview
* add mediathekview
-rw-r--r-- | README.md | 2 | ||||
-rw-r--r-- | RELNOTES | 2 | ||||
-rw-r--r-- | etc/disable-programs.inc | 1 | ||||
-rw-r--r-- | etc/mediathekview.profile | 25 | ||||
-rw-r--r-- | platform/debian/conffiles | 1 | ||||
-rw-r--r-- | src/firecfg/firecfg.config | 1 |
6 files changed, 30 insertions, 2 deletions
@@ -195,4 +195,4 @@ goobox, gpa, gpg, gpg-agent, highlight, img2txt, k3b, kate, lynx, mediainfo, nau | |||
195 | simple-scan, skanlite, ssh-agent, tracker, transmission-cli, transmission-show, w3m, xfburn, xpra, wget, | 195 | simple-scan, skanlite, ssh-agent, tracker, transmission-cli, transmission-show, w3m, xfburn, xpra, wget, |
196 | xed, pluma, Cryptocat, Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5, | 196 | xed, pluma, Cryptocat, Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5, |
197 | PDFSam, Pithos, Xonotic, wireshark, keepassx2, QupZilla, FossaMail, Uzbl browser, xmms, iridium browser, | 197 | PDFSam, Pithos, Xonotic, wireshark, keepassx2, QupZilla, FossaMail, Uzbl browser, xmms, iridium browser, |
198 | Kino, Thunar, Geeqie, Engrampa, Scribus, mousepad, gpicview, keepassxc, cvlc | 198 | Kino, Thunar, Geeqie, Engrampa, Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView |
@@ -42,7 +42,7 @@ firejail (0.9.45) baseline; urgency=low | |||
42 | * new profiles: Gnome Contacts, JD-GUI, Lollypop, MultiMC5, PDFSam, Pithos, | 42 | * new profiles: Gnome Contacts, JD-GUI, Lollypop, MultiMC5, PDFSam, Pithos, |
43 | * new profies: Xonotic, wireshark, keepassx2, QupZilla, FossaMail, | 43 | * new profies: Xonotic, wireshark, keepassx2, QupZilla, FossaMail, |
44 | * new profiles: Uzbl browser, iridium browser, Thunar, Geeqie, Engrampa | 44 | * new profiles: Uzbl browser, iridium browser, Thunar, Geeqie, Engrampa |
45 | * new profiles: Scribus, mousepad, gpicview, keepassxc, cvlc | 45 | * new profiles: Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView |
46 | * bugfixes | 46 | * bugfixes |
47 | -- netblue30 <netblue30@yahoo.com> Sun, 23 Oct 2016 08:00:00 -0500 | 47 | -- netblue30 <netblue30@yahoo.com> Sun, 23 Oct 2016 08:00:00 -0500 |
48 | 48 | ||
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index da80376d1..032d50b36 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -236,6 +236,7 @@ blacklist ${HOME}/.local/share/zathura | |||
236 | blacklist ${HOME}/.lv2 | 236 | blacklist ${HOME}/.lv2 |
237 | blacklist ${HOME}/.mcabber | 237 | blacklist ${HOME}/.mcabber |
238 | blacklist ${HOME}/.mcabberrc | 238 | blacklist ${HOME}/.mcabberrc |
239 | blacklist ${HOME}/.mediathek3 | ||
239 | blacklist ${HOME}/.mozilla | 240 | blacklist ${HOME}/.mozilla |
240 | blacklist ${HOME}/.mozilla/seamonkey | 241 | blacklist ${HOME}/.mozilla/seamonkey |
241 | blacklist ${HOME}/.mpdconf | 242 | blacklist ${HOME}/.mpdconf |
diff --git a/etc/mediathekview.profile b/etc/mediathekview.profile new file mode 100644 index 000000000..ec5b507ae --- /dev/null +++ b/etc/mediathekview.profile | |||
@@ -0,0 +1,25 @@ | |||
1 | # This file is overwritten during software install. | ||
2 | # Persistent customizations should go in a .local file. | ||
3 | include /etc/firejail/mediathekview.local | ||
4 | |||
5 | # MediathekView profile | ||
6 | noblacklist ~/.mediathek3 | ||
7 | noblacklist ~/.config/vlc | ||
8 | include /etc/firejail/disable-common.inc | ||
9 | include /etc/firejail/disable-programs.inc | ||
10 | include /etc/firejail/disable-devel.inc | ||
11 | include /etc/firejail/disable-passwdmgr.inc | ||
12 | |||
13 | caps.drop all | ||
14 | netfilter | ||
15 | nonewprivs | ||
16 | noroot | ||
17 | protocol unix,inet,inet6 | ||
18 | seccomp | ||
19 | tracelog | ||
20 | |||
21 | noexec ${HOME} | ||
22 | noexec /tmp | ||
23 | |||
24 | private-dev | ||
25 | private-tmp | ||
diff --git a/platform/debian/conffiles b/platform/debian/conffiles index ea6519750..b1d0eef27 100644 --- a/platform/debian/conffiles +++ b/platform/debian/conffiles | |||
@@ -256,3 +256,4 @@ | |||
256 | /etc/firejail/geeqie.profile | 256 | /etc/firejail/geeqie.profile |
257 | /etc/firejail/engrampa.profile | 257 | /etc/firejail/engrampa.profile |
258 | /etc/firejail/scribus.profile | 258 | /etc/firejail/scribus.profile |
259 | /etc/firejail/mediathekview.profile | ||
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index c5c3d474e..88b5c59c3 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config | |||
@@ -128,6 +128,7 @@ gpicview | |||
128 | img2txt | 128 | img2txt |
129 | k3b | 129 | k3b |
130 | mediainfo | 130 | mediainfo |
131 | mediathekview | ||
131 | mpv | 132 | mpv |
132 | nautilus | 133 | nautilus |
133 | parole | 134 | parole |