aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar Fred Barclay <Fred-Barclay@users.noreply.github.com>2017-06-15 12:02:43 -0500
committerLibravatar Fred Barclay <Fred-Barclay@users.noreply.github.com>2017-06-15 12:02:43 -0500
commit05fbfe63890826cb46e140da556010449695b6f2 (patch)
tree35938387a749bb5f847af16411bd0520537fae6a
parentUncomment private-dev for vlc profile. (diff)
downloadfirejail-05fbfe63890826cb46e140da556010449695b6f2.tar.gz
firejail-05fbfe63890826cb46e140da556010449695b6f2.tar.zst
firejail-05fbfe63890826cb46e140da556010449695b6f2.zip
test: add novideo to profiles (part 1)
Diffstat
-rw-r--r--etc/0ad.profile1
-rw-r--r--etc/7z.profile2
-rw-r--r--etc/atom-beta.profile1
-rw-r--r--etc/atom.profile1
-rw-r--r--etc/atool.profile1
-rw-r--r--etc/atril.profile1
-rw-r--r--etc/audacity.profile1
-rw-r--r--etc/aweather.profile1
-rw-r--r--etc/baloo_file.profile1
-rw-r--r--etc/bibletime.profile1
-rw-r--r--etc/bleachbit.profile1
-rw-r--r--etc/bless.profile1
-rw-r--r--etc/brasero.profile2
-rw-r--r--etc/catfish.profile1
-rw-r--r--etc/cherrytree.profile1
-rw-r--r--etc/clementine.profile1
-rw-r--r--etc/clipit.profile1
-rw-r--r--etc/deadbeef.profile1
-rw-r--r--etc/deluge.profile1
-rw-r--r--etc/dia.profile1
-rw-r--r--etc/dino.profile1
-rw-r--r--etc/dragon.profile1
-rw-r--r--etc/dropbox.profile1
-rw-r--r--etc/elinks.profile3
-rw-r--r--etc/engrampa.profile1
-rw-r--r--etc/eog.profile1
-rw-r--r--etc/eom.profile1
-rw-r--r--etc/evince.profile1
28 files changed, 30 insertions, 2 deletions
diff --git a/etc/0ad.profile b/etc/0ad.profile
index 596cb845a..e946c1418 100644
--- a/etc/0ad.profile
+++ b/etc/0ad.profile
@@ -29,6 +29,7 @@ netfilter
29nogroups 29nogroups
30nonewprivs 30nonewprivs
31noroot 31noroot
32novideo
32protocol unix,inet,inet6 33protocol unix,inet,inet6
33seccomp 34seccomp
34shell none 35shell none
diff --git a/etc/7z.profile b/etc/7z.profile
index 9cd8ade75..c7c857dc8 100644
--- a/etc/7z.profile
+++ b/etc/7z.profile
@@ -15,6 +15,8 @@ blacklist /tmp/.X11-unix
15 15
16tracelog 16tracelog
17net none 17net none
18nosound
19novideo
18shell none 20shell none
19private-dev 21private-dev
20nosound 22nosound
diff --git a/etc/atom-beta.profile b/etc/atom-beta.profile
index 5a42e28e8..367aa5672 100644
--- a/etc/atom-beta.profile
+++ b/etc/atom-beta.profile
@@ -19,6 +19,7 @@ nogroups
19nonewprivs 19nonewprivs
20noroot 20noroot
21nosound 21nosound
22novideo
22protocol unix,inet,inet6,netlink 23protocol unix,inet,inet6,netlink
23seccomp 24seccomp
24shell none 25shell none
diff --git a/etc/atom.profile b/etc/atom.profile
index fc9e49eab..726682617 100644
--- a/etc/atom.profile
+++ b/etc/atom.profile
@@ -19,6 +19,7 @@ nogroups
19nonewprivs 19nonewprivs
20noroot 20noroot
21nosound 21nosound
22novideo
22protocol unix,inet,inet6,netlink 23protocol unix,inet,inet6,netlink
23seccomp 24seccomp
24shell none 25shell none
diff --git a/etc/atool.profile b/etc/atool.profile
index 3f4b60312..a66b4b1c5 100644
--- a/etc/atool.profile
+++ b/etc/atool.profile
@@ -16,6 +16,7 @@ nogroups
16nonewprivs 16nonewprivs
17noroot 17noroot
18nosound 18nosound
19novideo
19protocol unix 20protocol unix
20seccomp 21seccomp
21netfilter 22netfilter
diff --git a/etc/atril.profile b/etc/atril.profile
index a9199f512..0abad494a 100644
--- a/etc/atril.profile
+++ b/etc/atril.profile
@@ -18,6 +18,7 @@ nogroups
18nonewprivs 18nonewprivs
19noroot 19noroot
20nosound 20nosound
21novideo
21protocol unix 22protocol unix
22seccomp 23seccomp
23shell none 24shell none
diff --git a/etc/audacity.profile b/etc/audacity.profile
index 67b625f2b..5b38d84e8 100644
--- a/etc/audacity.profile
+++ b/etc/audacity.profile
@@ -21,6 +21,7 @@ no3d
21nogroups 21nogroups
22nonewprivs 22nonewprivs
23noroot 23noroot
24novideo
24protocol unix 25protocol unix
25seccomp 26seccomp
26shell none 27shell none
diff --git a/etc/aweather.profile b/etc/aweather.profile
index 73bf1cc5a..9d8e336cd 100644
--- a/etc/aweather.profile
+++ b/etc/aweather.profile
@@ -22,6 +22,7 @@ nogroups
22nonewprivs 22nonewprivs
23noroot 23noroot
24nosound 24nosound
25novideo
25protocol unix,inet,inet6 26protocol unix,inet,inet6
26seccomp 27seccomp
27shell none 28shell none
diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile
index 9caef7508..2fe6d1927 100644
--- a/etc/baloo_file.profile
+++ b/etc/baloo_file.profile
@@ -22,6 +22,7 @@ nogroups
22nonewprivs 22nonewprivs
23noroot 23noroot
24nosound 24nosound
25novideo
25protocol unix 26protocol unix
26# Baloo makes ioprio_set system calls, which are blacklisted by default. 27# Baloo makes ioprio_set system calls, which are blacklisted by default.
27seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,name_to_handle_at,open_by_handle_at,create_module,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,chroot,tuxcall,reboot,mfsservctl,get_kernel_syms,bpf,clock_settime,personality,process_vm_writev,query_module,settimeofday,stime,umount,userfaultfd,ustat,vm86,vm86old 28seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,name_to_handle_at,open_by_handle_at,create_module,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,chroot,tuxcall,reboot,mfsservctl,get_kernel_syms,bpf,clock_settime,personality,process_vm_writev,query_module,settimeofday,stime,umount,userfaultfd,ustat,vm86,vm86old
diff --git a/etc/bibletime.profile b/etc/bibletime.profile
index 9b205456a..2162151a1 100644
--- a/etc/bibletime.profile
+++ b/etc/bibletime.profile
@@ -29,6 +29,7 @@ nogroups
29nonewprivs 29nonewprivs
30noroot 30noroot
31nosound 31nosound
32novideo
32protocol unix,inet,inet6,netlink 33protocol unix,inet,inet6,netlink
33seccomp 34seccomp
34shell none 35shell none
diff --git a/etc/bleachbit.profile b/etc/bleachbit.profile
index 40c7a5c83..345dd119a 100644
--- a/etc/bleachbit.profile
+++ b/etc/bleachbit.profile
@@ -20,6 +20,7 @@ nogroups
20nonewprivs 20nonewprivs
21noroot 21noroot
22nosound 22nosound
23novideo
23protocol unix 24protocol unix
24seccomp 25seccomp
25shell none 26shell none
diff --git a/etc/bless.profile b/etc/bless.profile
index 436c06a15..c9ccfc02e 100644
--- a/etc/bless.profile
+++ b/etc/bless.profile
@@ -28,6 +28,7 @@ nogroups
28nonewprivs 28nonewprivs
29noroot 29noroot
30nosound 30nosound
31novideo
31protocol unix 32protocol unix
32seccomp 33seccomp
33shell none 34shell none
diff --git a/etc/brasero.profile b/etc/brasero.profile
index ac9ea8a7c..d013e0b8e 100644
--- a/etc/brasero.profile
+++ b/etc/brasero.profile
@@ -20,9 +20,9 @@ nogroups
20nonewprivs 20nonewprivs
21noroot 21noroot
22nosound 22nosound
23novideo
23protocol unix 24protocol unix
24seccomp 25seccomp
25netfilter
26shell none 26shell none
27tracelog 27tracelog
28 28
diff --git a/etc/catfish.profile b/etc/catfish.profile
index e0039a042..0deaca1b5 100644
--- a/etc/catfish.profile
+++ b/etc/catfish.profile
@@ -19,6 +19,7 @@ nogroups
19nonewprivs 19nonewprivs
20noroot 20noroot
21nosound 21nosound
22novideo
22protocol unix 23protocol unix
23seccomp 24seccomp
24shell none 25shell none
diff --git a/etc/cherrytree.profile b/etc/cherrytree.profile
index 258be50d6..0ac71ca3c 100644
--- a/etc/cherrytree.profile
+++ b/etc/cherrytree.profile
@@ -20,6 +20,7 @@ nogroups
20nonewprivs 20nonewprivs
21noroot 21noroot
22nosound 22nosound
23novideo
23seccomp 24seccomp
24protocol unix,inet,inet6,netlink 25protocol unix,inet,inet6,netlink
25tracelog 26tracelog
diff --git a/etc/clementine.profile b/etc/clementine.profile
index 0f585e43e..ccacc632d 100644
--- a/etc/clementine.profile
+++ b/etc/clementine.profile
@@ -14,6 +14,7 @@ include /etc/firejail/disable-passwdmgr.inc
14caps.drop all 14caps.drop all
15nonewprivs 15nonewprivs
16noroot 16noroot
17novideo
17protocol unix,inet,inet6 18protocol unix,inet,inet6
18# Clementine makes ioprio_set system calls, which are blacklisted by default. 19# Clementine makes ioprio_set system calls, which are blacklisted by default.
19seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,name_to_handle_at,open_by_handle_at,create_module,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,chroot,tuxcall,reboot,mfsservctl,get_kernel_syms,bpf,clock_settime,personality,process_vm_writev,query_module,settimeofday,stime,umount,userfaultfd,ustat,vm86,vm86old 20seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,name_to_handle_at,open_by_handle_at,create_module,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,chroot,tuxcall,reboot,mfsservctl,get_kernel_syms,bpf,clock_settime,personality,process_vm_writev,query_module,settimeofday,stime,umount,userfaultfd,ustat,vm86,vm86old
diff --git a/etc/clipit.profile b/etc/clipit.profile
index cd744a022..b671b253b 100644
--- a/etc/clipit.profile
+++ b/etc/clipit.profile
@@ -15,6 +15,7 @@ caps.drop all
15netfilter 15netfilter
16nonewprivs 16nonewprivs
17noroot 17noroot
18novideo
18protocol unix,inet,inet6 19protocol unix,inet,inet6
19seccomp 20seccomp
20 21
diff --git a/etc/deadbeef.profile b/etc/deadbeef.profile
index 8d50dedda..486df1d99 100644
--- a/etc/deadbeef.profile
+++ b/etc/deadbeef.profile
@@ -20,6 +20,7 @@ no3d
20nogroups 20nogroups
21nonewprivs 21nonewprivs
22noroot 22noroot
23novideo
23protocol unix,inet,inet6 24protocol unix,inet,inet6
24seccomp 25seccomp
25shell none 26shell none
diff --git a/etc/deluge.profile b/etc/deluge.profile
index db2d339c7..4e7d90e53 100644
--- a/etc/deluge.profile
+++ b/etc/deluge.profile
@@ -24,6 +24,7 @@ netfilter
24nonewprivs 24nonewprivs
25noroot 25noroot
26nosound 26nosound
27novideo
27protocol unix,inet,inet6 28protocol unix,inet,inet6
28seccomp 29seccomp
29 30
diff --git a/etc/dia.profile b/etc/dia.profile
index fc564b96d..4e009afd7 100644
--- a/etc/dia.profile
+++ b/etc/dia.profile
@@ -14,6 +14,7 @@ caps.drop all
14netfilter 14netfilter
15nonewprivs 15nonewprivs
16noroot 16noroot
17novideo
17protocol unix,inet,inet6 18protocol unix,inet,inet6
18seccomp 19seccomp
19 20
diff --git a/etc/dino.profile b/etc/dino.profile
index a979cad7c..6d63e894e 100644
--- a/etc/dino.profile
+++ b/etc/dino.profile
@@ -26,6 +26,7 @@ nogroups
26nonewprivs 26nonewprivs
27noroot 27noroot
28nosound 28nosound
29novideo
29protocol unix,inet,inet6 30protocol unix,inet,inet6
30seccomp 31seccomp
31shell none 32shell none
diff --git a/etc/dragon.profile b/etc/dragon.profile
index 661f663c3..d099f1d9d 100644
--- a/etc/dragon.profile
+++ b/etc/dragon.profile
@@ -18,6 +18,7 @@ netfilter
18nogroups 18nogroups
19nonewprivs 19nonewprivs
20noroot 20noroot
21novideo
21shell none 22shell none
22seccomp 23seccomp
23protocol unix,inet,inet6 24protocol unix,inet,inet6
diff --git a/etc/dropbox.profile b/etc/dropbox.profile
index e0097a8ea..19076704b 100644
--- a/etc/dropbox.profile
+++ b/etc/dropbox.profile
@@ -14,6 +14,7 @@ include /etc/firejail/disable-passwdmgr.inc
14caps 14caps
15nonewprivs 15nonewprivs
16noroot 16noroot
17novideo
17protocol unix,inet,inet6 18protocol unix,inet,inet6
18seccomp 19seccomp
19 20
diff --git a/etc/elinks.profile b/etc/elinks.profile
index 76a7e6b94..597e43fb8 100644
--- a/etc/elinks.profile
+++ b/etc/elinks.profile
@@ -14,11 +14,12 @@ include /etc/firejail/disable-devel.inc
14include /etc/firejail/disable-passwdmgr.inc 14include /etc/firejail/disable-passwdmgr.inc
15 15
16caps.drop all 16caps.drop all
17no3d
17nogroups 18nogroups
18nonewprivs 19nonewprivs
19noroot 20noroot
20nosound 21nosound
21no3d 22novideo
22protocol unix,inet,inet6 23protocol unix,inet,inet6
23seccomp 24seccomp
24netfilter 25netfilter
diff --git a/etc/engrampa.profile b/etc/engrampa.profile
index f409a8dd4..081a5f6b0 100644
--- a/etc/engrampa.profile
+++ b/etc/engrampa.profile
@@ -16,6 +16,7 @@ nogroups
16nonewprivs 16nonewprivs
17noroot 17noroot
18nosound 18nosound
19novideo
19protocol unix 20protocol unix
20seccomp 21seccomp
21netfilter 22netfilter
diff --git a/etc/eog.profile b/etc/eog.profile
index 447a41a86..1b9926ec9 100644
--- a/etc/eog.profile
+++ b/etc/eog.profile
@@ -24,6 +24,7 @@ nogroups
24nonewprivs 24nonewprivs
25noroot 25noroot
26nosound 26nosound
27novideo
27protocol unix 28protocol unix
28seccomp 29seccomp
29shell none 30shell none
diff --git a/etc/eom.profile b/etc/eom.profile
index d2622ebcf..b5eedd989 100644
--- a/etc/eom.profile
+++ b/etc/eom.profile
@@ -19,6 +19,7 @@ nogroups
19nonewprivs 19nonewprivs
20noroot 20noroot
21nosound 21nosound
22novideo
22protocol unix 23protocol unix
23seccomp 24seccomp
24shell none 25shell none
diff --git a/etc/evince.profile b/etc/evince.profile
index 51ed3fbf3..6719244da 100644
--- a/etc/evince.profile
+++ b/etc/evince.profile
@@ -22,6 +22,7 @@ nogroups
22nonewprivs 22nonewprivs
23noroot 23noroot
24nosound 24nosound
25novideo
25protocol unix 26protocol unix
26seccomp 27seccomp
27shell none 28shell none
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-01 05:49:27 +0000