Merge branch 'master' of http://github.com/netblue30/firejail

4 files changed, 15 insertions, 5 deletions

diff --git a/README b/README
index b9509f65a..fa15353c6 100644
--- a/README
+++ b/README
@@ -114,6 +114,8 @@ bn0785ac (https://github.com/bn0785ac)
         - fixed bnox, dnox profiles
         - support all tor-browser langpacks
         - chromium canary (inox-family) fixes
+        - allow multithreading for cin and natron
+        - fix dbus access for libreoffice on KDE
 BogDan Vatra (https://github.com/bog-dan-ro)
         - zoom profile
 Bruno Nova (https://github.com/brunonova)
diff --git a/etc/cin.profile b/etc/cin.profile
index 0a5b0c728..356509da0 100644
--- a/etc/cin.profile
+++ b/etc/cin.profile
@@ -18,15 +18,17 @@ ipc-namespace
 net none
 nodbus
 nodvd
-nogroups
-nonewprivs
+#nogroups
+#nonewprivs
 notv
 noroot
 protocol unix
+
+# if an 1-1.2% gap per thread hurts you, comment seccomp
 seccomp
 shell none
 
-private-bin cin,ffmpeg
+#private-bin cin,ffmpeg
 private-dev
 
 noexec ${HOME}
diff --git a/etc/libreoffice.profile b/etc/libreoffice.profile
index 18fcc59c6..4aafd7c7a 100644
--- a/etc/libreoffice.profile
+++ b/etc/libreoffice.profile
@@ -29,7 +29,7 @@ include /etc/firejail/whitelist-var-common.inc
 caps.drop all
 machine-id
 netfilter
-nodbus
+#nodbus
 nodvd
 nogroups
 #nonewprivs - fix for Ubuntu 18.04/Debian 10
diff --git a/etc/natron.profile b/etc/natron.profile
index f6ebf2b65..e7c597fe2 100644
--- a/etc/natron.profile
+++ b/etc/natron.profile
@@ -5,6 +5,12 @@ include /etc/firejail/natron.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
+# Allow access to python
+noblacklist ${PATH}/python2*
+noblacklist ${PATH}/python3*
+noblacklist /usr/lib/python2*
+noblacklist /usr/lib/python3*
+
 noblacklist ${HOME}/.Natron
 noblacklist ${HOME}/.cache/INRIA/Natron
 noblacklist ${HOME}/.config/INRIA
@@ -12,7 +18,7 @@ noblacklist /opt/natron
 
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
-include /etc/firejail/disable-interpreters.inc
+#include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc