aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2019-02-20 04:03:00 +0000
committerLibravatar GitHub <noreply@github.com>2019-02-20 04:03:00 +0000
commitf636d1f775e6e7c825496d66b03cd28872987e68 (patch)
tree56d402a0ab68cd53501b8b571ee37e4259c590ab
parentMerge pull request #2426 from glitsj16/font-manager (diff)
parentAdd subdownloader config to disable-programs.inc (diff)
downloadfirejail-f636d1f775e6e7c825496d66b03cd28872987e68.tar.gz
firejail-f636d1f775e6e7c825496d66b03cd28872987e68.tar.zst
firejail-f636d1f775e6e7c825496d66b03cd28872987e68.zip
Merge pull request #2427 from glitsj16/subdownloader
Add subdownloader profile
-rw-r--r--etc/disable-programs.inc1
-rw-r--r--etc/subdownloader.profile46
-rw-r--r--src/firecfg/firecfg.config1
3 files changed, 48 insertions, 0 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 6bcb5e46c..0c7a8b020 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -93,6 +93,7 @@ blacklist ${HOME}/.config/Rocket.Chat
93blacklist ${HOME}/.config/Signal 93blacklist ${HOME}/.config/Signal
94blacklist ${HOME}/.config/Slack 94blacklist ${HOME}/.config/Slack
95blacklist ${HOME}/.config/Standard Notes 95blacklist ${HOME}/.config/Standard Notes
96blacklist ${HOME}/.config/SubDownloader
96blacklist ${HOME}/.config/Thunar 97blacklist ${HOME}/.config/Thunar
97blacklist ${HOME}/.config/VirtualBox 98blacklist ${HOME}/.config/VirtualBox
98blacklist ${HOME}/.config/Wire 99blacklist ${HOME}/.config/Wire
diff --git a/etc/subdownloader.profile b/etc/subdownloader.profile
new file mode 100644
index 000000000..009cf65df
--- /dev/null
+++ b/etc/subdownloader.profile
@@ -0,0 +1,46 @@
1# Firejail profile for subdownloader
2# Description: Automatic download/upload of subtitles using fast hashing
3# This file is overwritten after every install/update
4# Persistent local customizations
5include subdownloader.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/SubDownloader
10noblacklist ${VIDEOS}
11
12# Allow python (blacklisted by disable-interpreters.inc)
13noblacklist ${PATH}/python2*
14noblacklist ${PATH}/python3*
15noblacklist /usr/lib/python2*
16noblacklist /usr/lib/python3*
17
18include disable-common.inc
19include disable-devel.inc
20include disable-interpreters.inc
21include disable-passwdmgr.inc
22include disable-programs.inc
23include disable-xdg.inc
24
25apparmor
26caps.drop all
27netfilter
28nodbus
29nodvd
30nogroups
31nonewprivs
32noroot
33notv
34nou2f
35protocol unix,inet,inet6
36seccomp
37shell none
38
39private-cache
40private-dev
41private-etc alternatives,fonts
42private-tmp
43
44# memory-deny-write-execute - Breaks on Arch
45noexec ${HOME}
46noexec /tmp
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index bb035445f..cddb4bb12 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -415,6 +415,7 @@ steam
415steam-native 415steam-native
416stellarium 416stellarium
417strings 417strings
418subdownloader
418supertux2 419supertux2
419supertuxkart 420supertuxkart
420surf 421surf