diff options
author | 2021-04-20 09:14:31 +0200 | |
---|---|---|
committer | 2021-04-20 09:17:47 +0200 | |
commit | 51e67fd4599766fe3342e7c3f252ea6f6f9c3dd4 (patch) | |
tree | 0fb67fa902c320e12f21e74eb322bb9530a6f63f | |
parent | Update Librewolf profile and Add Sway profile (#4164) (diff) | |
download | firejail-51e67fd4599766fe3342e7c3f252ea6f6f9c3dd4.tar.gz firejail-51e67fd4599766fe3342e7c3f252ea6f6f9c3dd4.tar.zst firejail-51e67fd4599766fe3342e7c3f252ea6f6f9c3dd4.zip |
profile fixes
README.md/RELNOTES:
- Add new profiles
etr.profile:
- adding passwd to private-etc makes it work for me
file-roller.profile
- add netfilter
- add zstd to private-bin
- add cp,mv,rm to private-bin which seems to be necessary in some
cases.
#4113 is likely fixed with this but wait for OP.
-rw-r--r-- | README.md | 2 | ||||
-rw-r--r-- | RELNOTES | 2 | ||||
-rw-r--r-- | etc/profile-a-l/etr.profile | 2 | ||||
-rw-r--r-- | etc/profile-a-l/file-roller.profile | 4 |
4 files changed, 5 insertions, 5 deletions
@@ -333,4 +333,4 @@ Stats: | |||
333 | vmware-view, display-im6.q16, ipcalc, ipcalc-ng, ebook-convert, ebook-edit, ebook-meta, ebook-polish, lzop, | 333 | vmware-view, display-im6.q16, ipcalc, ipcalc-ng, ebook-convert, ebook-edit, ebook-meta, ebook-polish, lzop, |
334 | avidemux, calligragemini, vmware-player, vmware-workstation, gget, com.github.phase1geo.minder, nextcloud-desktop, | 334 | avidemux, calligragemini, vmware-player, vmware-workstation, gget, com.github.phase1geo.minder, nextcloud-desktop, |
335 | pcsxr, PPSSPPSDL, openmw, openmw-launcher, jami-gnome, PCSX2, bcompare, b2sum, cksum, md5sum, sha1sum, sha224sum, | 335 | pcsxr, PPSSPPSDL, openmw, openmw-launcher, jami-gnome, PCSX2, bcompare, b2sum, cksum, md5sum, sha1sum, sha224sum, |
336 | sha256sum, sha384sum, sha512sum, sum, librewold-nightly | 336 | sha256sum, sha384sum, sha512sum, sum, librewold-nightly, Quodlibet, tmux, sway |
@@ -18,7 +18,7 @@ firejail (0.9.65) baseline; urgency=low | |||
18 | * gget, com.github.phase1geo.minder, nextcloud-desktop, pcsxr | 18 | * gget, com.github.phase1geo.minder, nextcloud-desktop, pcsxr |
19 | * PPSSPPSDL, openmw, openmw-launcher, jami-gnome, PCSX2, sum | 19 | * PPSSPPSDL, openmw, openmw-launcher, jami-gnome, PCSX2, sum |
20 | * bcompare, b2sum, cksum, md5sum, sha1sum, sha224sum, sha256sum | 20 | * bcompare, b2sum, cksum, md5sum, sha1sum, sha224sum, sha256sum |
21 | * sha384sum, sha512sum, librewold-nightly | 21 | * sha384sum, sha512sum, librewold-nightly, Quodlibet, tmux, sway |
22 | -- netblue30 <netblue30@yahoo.com> Tue, 9 Feb 2021 09:00:00 -0500 | 22 | -- netblue30 <netblue30@yahoo.com> Tue, 9 Feb 2021 09:00:00 -0500 |
23 | 23 | ||
24 | firejail (0.9.64.4) baseline; urgency=low | 24 | firejail (0.9.64.4) baseline; urgency=low |
diff --git a/etc/profile-a-l/etr.profile b/etc/profile-a-l/etr.profile index 1c34335d2..f55d23778 100644 --- a/etc/profile-a-l/etr.profile +++ b/etc/profile-a-l/etr.profile | |||
@@ -44,7 +44,7 @@ disable-mnt | |||
44 | private-bin etr | 44 | private-bin etr |
45 | private-cache | 45 | private-cache |
46 | private-dev | 46 | private-dev |
47 | # private-etc alternatives,drirc,machine-id,openal | 47 | # private-etc alternatives,drirc,machine-id,openal,passwd |
48 | private-tmp | 48 | private-tmp |
49 | 49 | ||
50 | dbus-user none | 50 | dbus-user none |
diff --git a/etc/profile-a-l/file-roller.profile b/etc/profile-a-l/file-roller.profile index 2a1eb2001..e61c3d1ff 100644 --- a/etc/profile-a-l/file-roller.profile +++ b/etc/profile-a-l/file-roller.profile | |||
@@ -20,9 +20,9 @@ include whitelist-var-common.inc | |||
20 | 20 | ||
21 | apparmor | 21 | apparmor |
22 | caps.drop all | 22 | caps.drop all |
23 | #ipc-namespace - causing issues launching on archlinux | ||
24 | machine-id | 23 | machine-id |
25 | # net none - breaks on older Ubuntu versions | 24 | # net none - breaks on older Ubuntu versions |
25 | netfilter | ||
26 | no3d | 26 | no3d |
27 | nodvd | 27 | nodvd |
28 | nogroups | 28 | nogroups |
@@ -38,7 +38,7 @@ seccomp.block-secondary | |||
38 | shell none | 38 | shell none |
39 | tracelog | 39 | tracelog |
40 | 40 | ||
41 | private-bin 7z,7za,7zr,ar,arj,bash,brotli,bzip2,compress,cpio,dpkg-deb,file-roller,gtar,gzip,isoinfo,lha,lrzip,lsar,lz4,lzip,lzma,lzop,p7zip,rar,rzip,sh,tar,unace,unalz,unar,uncompress,unrar,unsquashfs,unstuff,unzip,xz,zip,zoo | 41 | private-bin 7z,7za,7zr,ar,arj,bash,brotli,bzip2,compress,cp,cpio,dpkg-deb,file-roller,gtar,gzip,isoinfo,lha,lrzip,lsar,lz4,lzip,lzma,lzop,mv,p7zip,rar,rm,rzip,sh,tar,unace,unalz,unar,uncompress,unrar,unsquashfs,unstuff,unzip,xz,zip,zoo,zstd |
42 | private-cache | 42 | private-cache |
43 | private-dev | 43 | private-dev |
44 | private-etc dconf,fonts,gtk-3.0,xdg | 44 | private-etc dconf,fonts,gtk-3.0,xdg |