diff options
author | glitsj16 <glitsj16@users.noreply.github.com> | 2019-01-22 05:56:28 +0000 |
---|---|---|
committer | GitHub <noreply@github.com> | 2019-01-22 05:56:28 +0000 |
commit | 55a6decde008e428c182138873772cd4c2014c99 (patch) | |
tree | ce1a32557678da243889ddefd50b1dcc96dd552a | |
parent | fix typo (diff) | |
parent | Fix github-desktop for appimage usage (diff) | |
download | firejail-55a6decde008e428c182138873772cd4c2014c99.tar.gz firejail-55a6decde008e428c182138873772cd4c2014c99.tar.zst firejail-55a6decde008e428c182138873772cd4c2014c99.zip |
Merge pull request #2362 from glitsj16/github-desktop
Refactoring github-desktop profile and firecfg
-rw-r--r-- | etc/github-desktop.profile (renamed from etc/desktop.profile) | 26 | ||||
-rw-r--r-- | src/firecfg/firecfg.config | 2 |
2 files changed, 16 insertions, 12 deletions
diff --git a/etc/desktop.profile b/etc/github-desktop.profile index bfb1618b2..9ac212fe8 100644 --- a/etc/desktop.profile +++ b/etc/github-desktop.profile | |||
@@ -1,4 +1,4 @@ | |||
1 | # Firejail profile for desktop | 1 | # Firejail profile for github-desktop |
2 | # Description: Extend your GitHub workflow beyond your browser with GitHub Desktop | 2 | # Description: Extend your GitHub workflow beyond your browser with GitHub Desktop |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | # Persistent local customizations | 4 | # Persistent local customizations |
@@ -6,8 +6,8 @@ include github-desktop.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | whitelist ${HOME}/.gitconfig | 9 | noblacklist ${HOME}/.gitconfig |
10 | whitelist ${HOME}/.config/GitHub Desktop | 10 | noblacklist ${HOME}/.config/GitHub Desktop |
11 | 11 | ||
12 | include disable-common.inc | 12 | include disable-common.inc |
13 | include disable-passwdmgr.inc | 13 | include disable-passwdmgr.inc |
@@ -15,8 +15,6 @@ include disable-programs.inc | |||
15 | include disable-devel.inc | 15 | include disable-devel.inc |
16 | include disable-interpreters.inc | 16 | include disable-interpreters.inc |
17 | 17 | ||
18 | include whitelist-common.inc | ||
19 | |||
20 | caps.drop all | 18 | caps.drop all |
21 | netfilter | 19 | netfilter |
22 | # no3d | 20 | # no3d |
@@ -31,14 +29,20 @@ novideo | |||
31 | protocol unix,inet,inet6,netlink | 29 | protocol unix,inet,inet6,netlink |
32 | seccomp | 30 | seccomp |
33 | 31 | ||
32 | # Note: On debian-based distributions the binary might be located in | ||
33 | # /opt/GitHub Desktop/github-desktop, and therefore not be in PATH. | ||
34 | # If that's the case you can start GitHub Desktop with firejail via | ||
35 | # `firejail "/opt/GitHub Desktop/github-desktop"`. | ||
36 | |||
34 | disable-mnt | 37 | disable-mnt |
35 | # private-bin Atom,desktop | 38 | # private-bin github-desktop |
36 | # private-cache | 39 | private-cache |
37 | # private-dev | 40 | ?HAS_APPIMAGE: ignore private-dev |
41 | private-dev | ||
38 | # private-etc none | 42 | # private-etc none |
39 | # private-lib | 43 | # private-lib |
40 | # private-tmp | 44 | private-tmp |
41 | 45 | ||
42 | # memory-deny-write-execute | 46 | # memory-deny-write-execute |
43 | # noexec ${HOME} | 47 | noexec ${HOME} |
44 | # noexec /tmp | 48 | noexec /tmp |
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index ac94d16d6..21dcd8f20 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config | |||
@@ -10,7 +10,6 @@ Discord | |||
10 | DiscordCanary | 10 | DiscordCanary |
11 | FossaMail | 11 | FossaMail |
12 | Fritzing | 12 | Fritzing |
13 | GitHub Desktop | ||
14 | JDownloader | 13 | JDownloader |
15 | Mathematica | 14 | Mathematica |
16 | Natron | 15 | Natron |
@@ -173,6 +172,7 @@ gimp | |||
173 | gimp-2.10 | 172 | gimp-2.10 |
174 | gimp-2.8 | 173 | gimp-2.8 |
175 | gitg | 174 | gitg |
175 | github-desktop | ||
176 | gitter | 176 | gitter |
177 | gjs | 177 | gjs |
178 | globaltime | 178 | globaltime |