diff options
author | 2017-08-25 16:41:27 -0400 | |
---|---|---|
committer | 2017-08-27 04:54:08 -0400 | |
commit | f6f1cc2f83ccf2878fe36b9c5d303557dae85f67 (patch) | |
tree | c3a9357729fbb4c66ca22fff9aaa7683a9c96b2c | |
parent | merges (diff) | |
download | firejail-f6f1cc2f83ccf2878fe36b9c5d303557dae85f67.tar.gz firejail-f6f1cc2f83ccf2878fe36b9c5d303557dae85f67.tar.zst firejail-f6f1cc2f83ccf2878fe36b9c5d303557dae85f67.zip |
Fix MulitMC5 and Xonotic
-rw-r--r-- | etc/disable-programs.inc | 1 | ||||
-rw-r--r-- | etc/lollypop.profile | 2 | ||||
-rw-r--r-- | etc/multimc5.profile | 5 | ||||
-rw-r--r-- | etc/xonotic.profile | 3 |
4 files changed, 7 insertions, 4 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index d02377036..736ac1e89 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -296,6 +296,7 @@ blacklist ${HOME}/.local/share/ktorrentrc | |||
296 | blacklist ${HOME}/.local/share/kwrite | 296 | blacklist ${HOME}/.local/share/kwrite |
297 | blacklist ${HOME}/.local/share/lollypop | 297 | blacklist ${HOME}/.local/share/lollypop |
298 | blacklist ${HOME}/.local/share/meld | 298 | blacklist ${HOME}/.local/share/meld |
299 | blacklist ${HOME}/.local/share/multimc | ||
299 | blacklist ${HOME}/.local/share/multimc5 | 300 | blacklist ${HOME}/.local/share/multimc5 |
300 | blacklist ${HOME}/.local/share/mupen64plus | 301 | blacklist ${HOME}/.local/share/mupen64plus |
301 | blacklist ${HOME}/.local/share/nautilus | 302 | blacklist ${HOME}/.local/share/nautilus |
diff --git a/etc/lollypop.profile b/etc/lollypop.profile index 587a46353..c0c762c02 100644 --- a/etc/lollypop.profile +++ b/etc/lollypop.profile | |||
@@ -25,7 +25,7 @@ seccomp | |||
25 | shell none | 25 | shell none |
26 | 26 | ||
27 | private-dev | 27 | private-dev |
28 | private-etc fonts | 28 | private-etc asound.conf,ca-certificates,fonts,host.conf,hostname,hosts,pulse,resolv.conf,ssl |
29 | private-tmp | 29 | private-tmp |
30 | 30 | ||
31 | noexec ${HOME} | 31 | noexec ${HOME} |
diff --git a/etc/multimc5.profile b/etc/multimc5.profile index 161a38583..3423c2a88 100644 --- a/etc/multimc5.profile +++ b/etc/multimc5.profile | |||
@@ -6,6 +6,7 @@ include /etc/firejail/multimc5.local | |||
6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
7 | 7 | ||
8 | noblacklist ${HOME}/.java | 8 | noblacklist ${HOME}/.java |
9 | noblacklist ${HOME}/.local/share/multimc | ||
9 | noblacklist ${HOME}/.local/share/multimc5 | 10 | noblacklist ${HOME}/.local/share/multimc5 |
10 | noblacklist ${HOME}/.multimc5 | 11 | noblacklist ${HOME}/.multimc5 |
11 | 12 | ||
@@ -14,8 +15,8 @@ include /etc/firejail/disable-devel.inc | |||
14 | include /etc/firejail/disable-passwdmgr.inc | 15 | include /etc/firejail/disable-passwdmgr.inc |
15 | include /etc/firejail/disable-programs.inc | 16 | include /etc/firejail/disable-programs.inc |
16 | 17 | ||
17 | mkdir ${HOME}/.local/share/multimc5 | 18 | mkdir ${HOME}/.local/share/multimc |
18 | mkdir ${HOME}/.multimc5 | 19 | whitelist ${HOME}/.local/share/multimc |
19 | whitelist ${HOME}/.local/share/multimc5 | 20 | whitelist ${HOME}/.local/share/multimc5 |
20 | whitelist ${HOME}/.multimc5 | 21 | whitelist ${HOME}/.multimc5 |
21 | include /etc/firejail/whitelist-common.inc | 22 | include /etc/firejail/whitelist-common.inc |
diff --git a/etc/xonotic.profile b/etc/xonotic.profile index 3df7a5e94..6dc62c33b 100644 --- a/etc/xonotic.profile +++ b/etc/xonotic.profile | |||
@@ -31,7 +31,8 @@ shell none | |||
31 | disable-mnt | 31 | disable-mnt |
32 | private-bin bash,blind-id,darkplaces-glx,darkplaces-sdl,dash,dirname,grep,ldd,netstat,ps,readlink,sh,uname,xonotic,xonotic-glx,xonotic-linux32-dedicated,xonotic-linux32-glx,xonotic-linux32-sdl,xonotic-linux64-dedicated,xonotic-linux64-glx,xonotic-linux64-sdl,xonotic-sdl | 32 | private-bin bash,blind-id,darkplaces-glx,darkplaces-sdl,dash,dirname,grep,ldd,netstat,ps,readlink,sh,uname,xonotic,xonotic-glx,xonotic-linux32-dedicated,xonotic-linux32-glx,xonotic-linux32-sdl,xonotic-linux64-dedicated,xonotic-linux64-glx,xonotic-linux64-sdl,xonotic-sdl |
33 | private-dev | 33 | private-dev |
34 | private-etc asound.conf,ca-certificates,drirc,fonts,group,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,localtime,nsswitch.conf,passwd,pulse,resolv.conf,ssl | 34 | # private-etc breaks audio on some distros |
35 | #private-etc asound.conf,ca-certificates,drirc,fonts,group,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,localtime,nsswitch.conf,passwd,pulse,resolv.conf,ssl | ||
35 | private-tmp | 36 | private-tmp |
36 | 37 | ||
37 | noexec ${HOME} | 38 | noexec ${HOME} |