aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2023-08-11 19:07:32 -0300
committerLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2023-09-06 04:01:27 -0300
commit8e99a8c2e3385fb43241426c1df390c31f5e9913 (patch)
treeb88fde969bb4c634bd655c83eba879608256994d
parentbuild: add missing dbus/x11 commands to arg1 list (diff)
downloadfirejail-8e99a8c2e3385fb43241426c1df390c31f5e9913.tar.gz
firejail-8e99a8c2e3385fb43241426c1df390c31f5e9913.tar.zst
firejail-8e99a8c2e3385fb43241426c1df390c31f5e9913.zip
profiles: fix some comments
Changes: * Turn very long end-of-line comments into normal comments * Turn multi-line end-of-line comments into normal comments * Fix a comment being below instead of above the relevant entry * Turn some comments that look like code into end-of-line comments
-rw-r--r--etc/inc/disable-common.inc10
-rw-r--r--etc/profile-a-l/chromium-common.profile4
-rw-r--r--etc/profile-a-l/digikam.profile6
-rw-r--r--etc/profile-a-l/dino.profile3
-rw-r--r--etc/profile-m-z/okular.profile3
-rw-r--r--etc/profile-m-z/pycharm-community.profile4
-rw-r--r--etc/profile-m-z/rpcs3.profile3
-rw-r--r--etc/profile-m-z/wireshark.profile3
-rw-r--r--etc/profile-m-z/yelp.profile6
9 files changed, 25 insertions, 17 deletions
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc
index 1b0e00bc6..37ca604b7 100644
--- a/etc/inc/disable-common.inc
+++ b/etc/inc/disable-common.inc
@@ -33,7 +33,8 @@ blacklist-nolog ${HOME}/.viminfo
33blacklist-nolog /tmp/clipmenu* 33blacklist-nolog /tmp/clipmenu*
34 34
35# X11 session autostart 35# X11 session autostart
36# blacklist ${HOME}/.xpra - this will kill --x11=xpra cmdline option for all programs 36# this will kill --x11=xpra cmdline option for all programs
37#blacklist ${HOME}/.xpra
37blacklist ${HOME}/.Xsession 38blacklist ${HOME}/.Xsession
38blacklist ${HOME}/.blackbox 39blacklist ${HOME}/.blackbox
39blacklist ${HOME}/.config/autostart 40blacklist ${HOME}/.config/autostart
@@ -241,8 +242,9 @@ blacklist /var/lib/mysql/mysql.sock
241blacklist /var/lib/mysqld/mysql.sock 242blacklist /var/lib/mysqld/mysql.sock
242blacklist /var/lib/pacman 243blacklist /var/lib/pacman
243blacklist /var/lib/upower 244blacklist /var/lib/upower
244# blacklist /var/log - a virtual /var/log directory (mostly empty) is build up by default for 245# a virtual /var/log directory (mostly empty) is build up by default for every
245# every sandbox, unless --writable-var-log switch is activated 246# sandbox, unless --writable-var-log switch is activated
247#blacklist /var/log
246blacklist /var/mail 248blacklist /var/mail
247blacklist /var/opt 249blacklist /var/opt
248blacklist /var/run/acpid.socket 250blacklist /var/run/acpid.socket
@@ -611,8 +613,8 @@ blacklist /tmp/tmux-*
611blacklist ${PATH}/gnome-terminal 613blacklist ${PATH}/gnome-terminal
612blacklist ${PATH}/gnome-terminal.wrapper 614blacklist ${PATH}/gnome-terminal.wrapper
613blacklist ${PATH}/kgx 615blacklist ${PATH}/kgx
614# blacklist ${PATH}/konsole
615# konsole doesn't seem to have this problem - last tested on Ubuntu 16.04 616# konsole doesn't seem to have this problem - last tested on Ubuntu 16.04
617#blacklist ${PATH}/konsole
616blacklist ${PATH}/lilyterm 618blacklist ${PATH}/lilyterm
617blacklist ${PATH}/lxterminal 619blacklist ${PATH}/lxterminal
618blacklist ${PATH}/mate-terminal 620blacklist ${PATH}/mate-terminal
diff --git a/etc/profile-a-l/chromium-common.profile b/etc/profile-a-l/chromium-common.profile
index 878e0fe1d..ea24aa102 100644
--- a/etc/profile-a-l/chromium-common.profile
+++ b/etc/profile-a-l/chromium-common.profile
@@ -39,7 +39,9 @@ blacklist ${PATH}/curl
39blacklist ${PATH}/wget 39blacklist ${PATH}/wget
40blacklist ${PATH}/wget2 40blacklist ${PATH}/wget2
41 41
42#dbus-user none - prevents access to passwords saved in GNOME Keyring and KWallet, also breaks Gnome connector. 42# This prevents access to passwords saved in GNOME Keyring and KWallet, also
43# breaks Gnome connector.
44#dbus-user none
43 45
44# The file dialog needs to work without d-bus. 46# The file dialog needs to work without d-bus.
45?HAS_NODBUS: env NO_CHROME_KDE_FILE_DIALOG=1 47?HAS_NODBUS: env NO_CHROME_KDE_FILE_DIALOG=1
diff --git a/etc/profile-a-l/digikam.profile b/etc/profile-a-l/digikam.profile
index 05f0dfba8..7c0b902b9 100644
--- a/etc/profile-a-l/digikam.profile
+++ b/etc/profile-a-l/digikam.profile
@@ -37,8 +37,10 @@ protocol unix,inet,inet6,netlink
37# QtWebengine needs chroot to set up its own sandbox 37# QtWebengine needs chroot to set up its own sandbox
38seccomp !chroot 38seccomp !chroot
39 39
40# private-dev - prevents libdc1394 loading; this lib is used to connect to a camera device 40# private-dev prevents libdc1394 from loading; this lib is used to connect to a
41# private-etc alternatives,ca-certificates,crypto-policies,pki,ssl 41# camera device
42#private-dev
43#private-etc alternatives,ca-certificates,crypto-policies,pki,ssl
42private-tmp 44private-tmp
43 45
44# dbus-user none 46# dbus-user none
diff --git a/etc/profile-a-l/dino.profile b/etc/profile-a-l/dino.profile
index fe2b59a1e..44a3f0846 100644
--- a/etc/profile-a-l/dino.profile
+++ b/etc/profile-a-l/dino.profile
@@ -40,7 +40,8 @@ tracelog
40disable-mnt 40disable-mnt
41private-bin dino 41private-bin dino
42private-dev 42private-dev
43# private-etc alternatives,ca-certificates,crypto-policies,fonts,pki,ssl -- breaks server connection 43# breaks server connection
44#private-etc alternatives,ca-certificates,crypto-policies,fonts,pki,ssl
44private-tmp 45private-tmp
45 46
46dbus-user filter 47dbus-user filter
diff --git a/etc/profile-m-z/okular.profile b/etc/profile-m-z/okular.profile
index 8e0758c37..bf6b9249f 100644
--- a/etc/profile-m-z/okular.profile
+++ b/etc/profile-m-z/okular.profile
@@ -62,7 +62,8 @@ tracelog
62private-bin kbuildsycoca4,kdeinit4,lpr,okular,unar,unrar 62private-bin kbuildsycoca4,kdeinit4,lpr,okular,unar,unrar
63private-dev 63private-dev
64private-etc @x11,cups 64private-etc @x11,cups
65# private-tmp - on KDE we need access to the real /tmp for data exchange with email clients 65# on KDE we need access to the real /tmp for data exchange with email clients
66#private-tmp
66 67
67# dbus-user none 68# dbus-user none
68# dbus-system none 69# dbus-system none
diff --git a/etc/profile-m-z/pycharm-community.profile b/etc/profile-m-z/pycharm-community.profile
index 875b83e8e..fa307fc88 100644
--- a/etc/profile-m-z/pycharm-community.profile
+++ b/etc/profile-m-z/pycharm-community.profile
@@ -34,8 +34,8 @@ nou2f
34novideo 34novideo
35tracelog 35tracelog
36 36
37# private-etc alternatives,fonts,passwd - minimal required to run but will probably break 37# minimum required to run but will probably break the program!
38# program! 38#private-etc alternatives,fonts,passwd
39private-dev 39private-dev
40private-tmp 40private-tmp
41 41
diff --git a/etc/profile-m-z/rpcs3.profile b/etc/profile-m-z/rpcs3.profile
index 405ab818d..603ec8ff4 100644
--- a/etc/profile-m-z/rpcs3.profile
+++ b/etc/profile-m-z/rpcs3.profile
@@ -54,7 +54,8 @@ tracelog
54 54
55disable-mnt 55disable-mnt
56#private-cache 56#private-cache
57#private-etc alternatives,ca-certificates,crypto-policies,machine-id,pki,resolv.conf,ssl # seems to need awk 57# seems to need awk
58#private-etc alternatives,ca-certificates,crypto-policies,machine-id,pki,resolv.conf,ssl
58private-tmp 59private-tmp
59 60
60dbus-user none 61dbus-user none
diff --git a/etc/profile-m-z/wireshark.profile b/etc/profile-m-z/wireshark.profile
index d1b757a25..dedb78d11 100644
--- a/etc/profile-m-z/wireshark.profile
+++ b/etc/profile-m-z/wireshark.profile
@@ -38,7 +38,8 @@ nosound
38notv 38notv
39nou2f 39nou2f
40novideo 40novideo
41# protocol unix,inet,inet6,netlink,packet,bluetooth - commented out in case they bring in new protocols 41# commented out in case they bring in new protocols
42#protocol unix,inet,inet6,netlink,packet,bluetooth
42#seccomp 43#seccomp
43tracelog 44tracelog
44 45
diff --git a/etc/profile-m-z/yelp.profile b/etc/profile-m-z/yelp.profile
index f5dd0c309..f957954dd 100644
--- a/etc/profile-m-z/yelp.profile
+++ b/etc/profile-m-z/yelp.profile
@@ -33,16 +33,14 @@ include whitelist-var-common.inc
33 33
34apparmor 34apparmor
35caps.drop all 35caps.drop all
36# machine-id breaks sound - add the next line to your yelp.local if you don't need sound support. 36#machine-id # add this to your yelp.local if you don't need sound support.
37#machine-id
38net none 37net none
39nodvd 38nodvd
40nogroups 39nogroups
41noinput 40noinput
42nonewprivs 41nonewprivs
43noroot 42noroot
44# nosound - add the next line to your yelp.local if you don't need sound support. 43#nosound # add this to your yelp.local if you don't need sound support.
45#nosound
46notv 44notv
47nou2f 45nou2f
48novideo 46novideo