aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2021-01-27 23:35:12 +0000
committerLibravatar GitHub <noreply@github.com>2021-01-27 23:35:12 +0000
commitfb4705b4dd6c03c63754e5a6ff52b190e5164e28 (patch)
treee42dc77ef71cc9d756f4459acf235c137d96692b
parentreadme.md (diff)
downloadfirejail-fb4705b4dd6c03c63754e5a6ff52b190e5164e28.tar.gz
firejail-fb4705b4dd6c03c63754e5a6ff52b190e5164e28.tar.zst
firejail-fb4705b4dd6c03c63754e5a6ff52b190e5164e28.zip
streamline 'Allow xxx' comments (#3922)
* add comment: allow python * add comment: allow python * reorder allow comments * fix perl allow comment * add comment: allow python * add comment: allow lua, perl & python * reorder allow comments * add comment: allow python * add comment: allow python * add comment: allow lua, perl & python * fix allow comments * add comment: allow python * add comment: allow python * fix spacing in comments * add comment: allow python * add comment: allow python * fix comment * add comment: allow perl & python * add comment: allow lua & python * add comment: allow lua, perl & python * fix allow comments * add comment: allow perl & python * streamline allow python comments
-rw-r--r--etc/inc/firefox-common-addons.inc3
-rw-r--r--etc/profile-a-l/alacarte.profile1
-rw-r--r--etc/profile-a-l/celluloid.profile6
-rw-r--r--etc/profile-a-l/dia.profile1
-rw-r--r--etc/profile-a-l/file-manager-common.profile2
-rw-r--r--etc/profile-a-l/fractal.profile1
-rw-r--r--etc/profile-a-l/gummi.profile5
-rw-r--r--etc/profile-a-l/hexchat.profile6
-rw-r--r--etc/profile-a-l/jumpnbump-menu.profile1
-rw-r--r--etc/profile-a-l/kazam.profile1
-rw-r--r--etc/profile-a-l/lyx.profile5
-rw-r--r--etc/profile-m-z/meld.profile7
-rw-r--r--etc/profile-m-z/menulibre.profile1
-rw-r--r--etc/profile-m-z/mirage.profile1
-rw-r--r--etc/profile-m-z/mpv.profile1
-rw-r--r--etc/profile-m-z/nicotine.profile1
-rw-r--r--etc/profile-m-z/onboard.profile1
-rw-r--r--etc/profile-m-z/pkglog.profile2
-rw-r--r--etc/profile-m-z/playonlinux.profile5
-rw-r--r--etc/profile-m-z/smplayer.profile3
-rw-r--r--etc/profile-m-z/straw-viewer.profile5
-rw-r--r--etc/profile-m-z/totem.profile3
-rw-r--r--etc/profile-m-z/youtube-viewer.profile3
23 files changed, 50 insertions, 15 deletions
diff --git a/etc/inc/firefox-common-addons.inc b/etc/inc/firefox-common-addons.inc
index 03f09fece..ca7731442 100644
--- a/etc/inc/firefox-common-addons.inc
+++ b/etc/inc/firefox-common-addons.inc
@@ -58,11 +58,12 @@ whitelist ${HOME}/.wine-pipelight64
58whitelist ${HOME}/.zotero 58whitelist ${HOME}/.zotero
59whitelist ${HOME}/dwhelper 59whitelist ${HOME}/dwhelper
60 60
61# GNOME Shell integration (chrome-gnome-shell) needs dbus and python 3 (blacklisted by disable-interpreters.inc) 61# GNOME Shell integration (chrome-gnome-shell) needs dbus and python
62noblacklist ${HOME}/.local/share/gnome-shell 62noblacklist ${HOME}/.local/share/gnome-shell
63whitelist ${HOME}/.local/share/gnome-shell 63whitelist ${HOME}/.local/share/gnome-shell
64ignore dbus-user none 64ignore dbus-user none
65ignore dbus-system none 65ignore dbus-system none
66# Allow python (blacklisted by disable-interpreters.inc)
66include allow-python3.inc 67include allow-python3.inc
67 68
68# KeePassXC Browser Integration 69# KeePassXC Browser Integration
diff --git a/etc/profile-a-l/alacarte.profile b/etc/profile-a-l/alacarte.profile
index 98188d2a7..57b5e5d95 100644
--- a/etc/profile-a-l/alacarte.profile
+++ b/etc/profile-a-l/alacarte.profile
@@ -6,6 +6,7 @@ include alacarte.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9# Allow python (blacklisted by disable-interpreters.inc)
9include allow-python2.inc 10include allow-python2.inc
10include allow-python3.inc 11include allow-python3.inc
11 12
diff --git a/etc/profile-a-l/celluloid.profile b/etc/profile-a-l/celluloid.profile
index d379651c7..6a76dc129 100644
--- a/etc/profile-a-l/celluloid.profile
+++ b/etc/profile-a-l/celluloid.profile
@@ -10,13 +10,13 @@ noblacklist ${HOME}/.config/celluloid
10noblacklist ${HOME}/.config/gnome-mpv 10noblacklist ${HOME}/.config/gnome-mpv
11noblacklist ${HOME}/.config/youtube-dl 11noblacklist ${HOME}/.config/youtube-dl
12 12
13# Allow lua (blacklisted by disable-interpreters.inc)
14include allow-lua.inc
15
13# Allow python (blacklisted by disable-interpreters.inc) 16# Allow python (blacklisted by disable-interpreters.inc)
14include allow-python2.inc 17include allow-python2.inc
15include allow-python3.inc 18include allow-python3.inc
16 19
17# Allow lua (blacklisted by disable-interpreters.inc)
18include allow-lua.inc
19
20include disable-common.inc 20include disable-common.inc
21include disable-devel.inc 21include disable-devel.inc
22include disable-exec.inc 22include disable-exec.inc
diff --git a/etc/profile-a-l/dia.profile b/etc/profile-a-l/dia.profile
index e409eb044..31031edeb 100644
--- a/etc/profile-a-l/dia.profile
+++ b/etc/profile-a-l/dia.profile
@@ -9,6 +9,7 @@ include globals.local
9noblacklist ${HOME}/.dia 9noblacklist ${HOME}/.dia
10noblacklist ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11 11
12# Allow python (blacklisted by disable-interpreters.inc)
12include allow-python2.inc 13include allow-python2.inc
13include allow-python3.inc 14include allow-python3.inc
14 15
diff --git a/etc/profile-a-l/file-manager-common.profile b/etc/profile-a-l/file-manager-common.profile
index 24339953b..face34c40 100644
--- a/etc/profile-a-l/file-manager-common.profile
+++ b/etc/profile-a-l/file-manager-common.profile
@@ -15,7 +15,7 @@ ignore noexec ${HOME}
15# Allow lua (blacklisted by disable-interpreters.inc) 15# Allow lua (blacklisted by disable-interpreters.inc)
16include allow-lua.inc 16include allow-lua.inc
17 17
18# Allow perl 18# Allow perl (blacklisted by disable-interpreters.inc)
19include allow-perl.inc 19include allow-perl.inc
20 20
21# Allow python (blacklisted by disable-interpreters.inc) 21# Allow python (blacklisted by disable-interpreters.inc)
diff --git a/etc/profile-a-l/fractal.profile b/etc/profile-a-l/fractal.profile
index dc8d6e3ad..dede61b71 100644
--- a/etc/profile-a-l/fractal.profile
+++ b/etc/profile-a-l/fractal.profile
@@ -8,6 +8,7 @@ include globals.local
8 8
9noblacklist ${HOME}/.cache/fractal 9noblacklist ${HOME}/.cache/fractal
10 10
11# Allow python (blacklisted by disable-interpreters.inc)
11include allow-python2.inc 12include allow-python2.inc
12include allow-python3.inc 13include allow-python3.inc
13 14
diff --git a/etc/profile-a-l/gummi.profile b/etc/profile-a-l/gummi.profile
index 40c268c46..2223c37a1 100644
--- a/etc/profile-a-l/gummi.profile
+++ b/etc/profile-a-l/gummi.profile
@@ -8,8 +8,13 @@ include globals.local
8noblacklist ${HOME}/.cache/gummi 8noblacklist ${HOME}/.cache/gummi
9noblacklist ${HOME}/.config/gummi 9noblacklist ${HOME}/.config/gummi
10 10
11# Allow lua (blacklisted by disable-interpreters.inc)
11include allow-lua.inc 12include allow-lua.inc
13
14# Allow perl (blacklisted by disable-interpreters.inc)
12include allow-perl.inc 15include allow-perl.inc
16
17# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python3.inc 18include allow-python3.inc
14 19
15private-bin dvipdf,dvips,env,gummi,latex,latexmk,lua*,pdflatex,pdftex,perl,ps2pdf,python3*,rubber,synctex,tex,xelatex,xetex 20private-bin dvipdf,dvips,env,gummi,latex,latexmk,lua*,pdflatex,pdftex,perl,ps2pdf,python3*,rubber,synctex,tex,xelatex,xetex
diff --git a/etc/profile-a-l/hexchat.profile b/etc/profile-a-l/hexchat.profile
index 86527aa1f..c60510260 100644
--- a/etc/profile-a-l/hexchat.profile
+++ b/etc/profile-a-l/hexchat.profile
@@ -8,13 +8,13 @@ include globals.local
8 8
9noblacklist ${HOME}/.config/hexchat 9noblacklist ${HOME}/.config/hexchat
10 10
11# Allow perl (blacklisted by disable-interpreters.inc)
12include allow-perl.inc
13
11# Allow python (blacklisted by disable-interpreters.inc) 14# Allow python (blacklisted by disable-interpreters.inc)
12include allow-python2.inc 15include allow-python2.inc
13include allow-python3.inc 16include allow-python3.inc
14 17
15# Allow perl (blacklisted by disable-interpreters.inc)
16include allow-perl.inc
17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
20include disable-exec.inc 20include disable-exec.inc
diff --git a/etc/profile-a-l/jumpnbump-menu.profile b/etc/profile-a-l/jumpnbump-menu.profile
index b1852b015..8d391b90f 100644
--- a/etc/profile-a-l/jumpnbump-menu.profile
+++ b/etc/profile-a-l/jumpnbump-menu.profile
@@ -7,6 +7,7 @@ include jumpnbump-menu.local
7# added by included profile 7# added by included profile
8#include globals.local 8#include globals.local
9 9
10# Allow python (blacklisted by disable-interpreters.inc)
10include allow-python3.inc 11include allow-python3.inc
11 12
12private-bin jumpnbump-menu,python3* 13private-bin jumpnbump-menu,python3*
diff --git a/etc/profile-a-l/kazam.profile b/etc/profile-a-l/kazam.profile
index 9c095e106..7d9f4c22f 100644
--- a/etc/profile-a-l/kazam.profile
+++ b/etc/profile-a-l/kazam.profile
@@ -12,6 +12,7 @@ noblacklist ${PICTURES}
12noblacklist ${VIDEOS} 12noblacklist ${VIDEOS}
13noblacklist ${HOME}/.config/kazam 13noblacklist ${HOME}/.config/kazam
14 14
15# Allow python (blacklisted by disable-interpreters.inc)
15include allow-python2.inc 16include allow-python2.inc
16include allow-python3.inc 17include allow-python3.inc
17 18
diff --git a/etc/profile-a-l/lyx.profile b/etc/profile-a-l/lyx.profile
index ffde057d5..fa69463d1 100644
--- a/etc/profile-a-l/lyx.profile
+++ b/etc/profile-a-l/lyx.profile
@@ -11,8 +11,13 @@ ignore private-tmp
11noblacklist ${HOME}/.config/LyX 11noblacklist ${HOME}/.config/LyX
12noblacklist ${HOME}/.lyx 12noblacklist ${HOME}/.lyx
13 13
14# Allow lua (blacklisted by disable-interpreters.inc)
14include allow-lua.inc 15include allow-lua.inc
16
17# Allow perl (blacklisted by disable-interpreters.inc)
15include allow-perl.inc 18include allow-perl.inc
19
20# Allow python (blacklisted by disable-interpreters.inc)
16include allow-python2.inc 21include allow-python2.inc
17include allow-python3.inc 22include allow-python3.inc
18 23
diff --git a/etc/profile-m-z/meld.profile b/etc/profile-m-z/meld.profile
index 6ceeb867f..1a68cd37d 100644
--- a/etc/profile-m-z/meld.profile
+++ b/etc/profile-m-z/meld.profile
@@ -6,11 +6,11 @@ include meld.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9# If you want to use meld as git-mergetool (and maybe some other VCS integrations) you need 9# If you want to use meld as git mergetool (and maybe some other VCS integrations) you need
10# to bypass firejail, you can do this by removing the symlink or calling it by its absolute path 10# to bypass firejail, you can do this by removing the symlink or calling it by its absolute path
11# Removing the symlink: 11# Removing the symlink:
12# sudo rm /usr/local/bin/meld 12# sudo rm /usr/local/bin/meld
13# Calling by its absolute path (example for git-mergetool): 13# Calling it by its absolute path (example for git mergetool):
14# git config --global mergetool.meld.cmd /usr/bin/meld 14# git config --global mergetool.meld.cmd /usr/bin/meld
15 15
16noblacklist ${HOME}/.config/meld 16noblacklist ${HOME}/.config/meld
@@ -22,10 +22,9 @@ noblacklist ${HOME}/.ssh
22noblacklist ${HOME}/.subversion 22noblacklist ${HOME}/.subversion
23 23
24# Allow python (blacklisted by disable-interpreters.inc) 24# Allow python (blacklisted by disable-interpreters.inc)
25include allow-python3.inc
26
27# Python 2 is EOL (see #3164). Uncomment the next line (or put it into your meld.local) if you understand the risks but want python 2 support for older meld versions. 25# Python 2 is EOL (see #3164). Uncomment the next line (or put it into your meld.local) if you understand the risks but want python 2 support for older meld versions.
28#include allow-python2.inc 26#include allow-python2.inc
27include allow-python3.inc
29 28
30# Uncomment the next line (or put it into your meld.local) if you don't need to compare files in disable-common.inc. 29# Uncomment the next line (or put it into your meld.local) if you don't need to compare files in disable-common.inc.
31#include disable-common.inc 30#include disable-common.inc
diff --git a/etc/profile-m-z/menulibre.profile b/etc/profile-m-z/menulibre.profile
index 8a98209a2..e29e4bc70 100644
--- a/etc/profile-m-z/menulibre.profile
+++ b/etc/profile-m-z/menulibre.profile
@@ -6,6 +6,7 @@ include menulibre.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9# Allow python (blacklisted by disable-interpreters.inc)
9include allow-python2.inc 10include allow-python2.inc
10include allow-python3.inc 11include allow-python3.inc
11 12
diff --git a/etc/profile-m-z/mirage.profile b/etc/profile-m-z/mirage.profile
index 7130267e8..e0ebb4895 100644
--- a/etc/profile-m-z/mirage.profile
+++ b/etc/profile-m-z/mirage.profile
@@ -11,6 +11,7 @@ noblacklist ${HOME}/.config/mirage
11noblacklist ${HOME}/.local/share/mirage 11noblacklist ${HOME}/.local/share/mirage
12noblacklist /sbin 12noblacklist /sbin
13 13
14# Allow python (blacklisted by disable-interpreters.inc)
14include allow-python2.inc 15include allow-python2.inc
15include allow-python3.inc 16include allow-python3.inc
16 17
diff --git a/etc/profile-m-z/mpv.profile b/etc/profile-m-z/mpv.profile
index 7111febc2..1804389c3 100644
--- a/etc/profile-m-z/mpv.profile
+++ b/etc/profile-m-z/mpv.profile
@@ -30,6 +30,7 @@ noblacklist ${HOME}/.netrc
30 30
31# Allow lua (blacklisted by disable-interpreters.inc) 31# Allow lua (blacklisted by disable-interpreters.inc)
32include allow-lua.inc 32include allow-lua.inc
33
33# Allow python (blacklisted by disable-interpreters.inc) 34# Allow python (blacklisted by disable-interpreters.inc)
34include allow-python2.inc 35include allow-python2.inc
35include allow-python3.inc 36include allow-python3.inc
diff --git a/etc/profile-m-z/nicotine.profile b/etc/profile-m-z/nicotine.profile
index 6c363345e..3bf32a3db 100644
--- a/etc/profile-m-z/nicotine.profile
+++ b/etc/profile-m-z/nicotine.profile
@@ -8,6 +8,7 @@ include globals.local
8 8
9noblacklist ${HOME}/.nicotine 9noblacklist ${HOME}/.nicotine
10 10
11# Allow python (blacklisted by disable-interpreters.inc)
11include allow-python2.inc 12include allow-python2.inc
12 13
13include disable-common.inc 14include disable-common.inc
diff --git a/etc/profile-m-z/onboard.profile b/etc/profile-m-z/onboard.profile
index f7cb8790b..152bd7ac5 100644
--- a/etc/profile-m-z/onboard.profile
+++ b/etc/profile-m-z/onboard.profile
@@ -8,6 +8,7 @@ include globals.local
8 8
9noblacklist ${HOME}/.config/onboard 9noblacklist ${HOME}/.config/onboard
10 10
11# Allow python (blacklisted by disable-interpreters.inc)
11include allow-python2.inc 12include allow-python2.inc
12include allow-python3.inc 13include allow-python3.inc
13 14
diff --git a/etc/profile-m-z/pkglog.profile b/etc/profile-m-z/pkglog.profile
index 7d43dd08f..cc4f016c5 100644
--- a/etc/profile-m-z/pkglog.profile
+++ b/etc/profile-m-z/pkglog.profile
@@ -6,7 +6,7 @@ include pkglog.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9# Allow python3 (blacklisted by disable-interpreters.inc) 9# Allow python (blacklisted by disable-interpreters.inc)
10include allow-python3.inc 10include allow-python3.inc
11 11
12include disable-common.inc 12include disable-common.inc
diff --git a/etc/profile-m-z/playonlinux.profile b/etc/profile-m-z/playonlinux.profile
index 0ebef226a..8e98905b5 100644
--- a/etc/profile-m-z/playonlinux.profile
+++ b/etc/profile-m-z/playonlinux.profile
@@ -12,9 +12,12 @@ noblacklist ${HOME}/.PlayOnLinux
12# nc is needed to run playonlinux 12# nc is needed to run playonlinux
13noblacklist ${PATH}/nc 13noblacklist ${PATH}/nc
14 14
15# Allow perl (blacklisted by disable-interpreters.inc)
16include allow-perl.inc
17
18# Allow python (blacklisted by disable-interpreters.inc)
15include allow-python2.inc 19include allow-python2.inc
16include allow-python3.inc 20include allow-python3.inc
17include allow-perl.inc
18 21
19# Redirect 22# Redirect
20include wine.profile 23include wine.profile
diff --git a/etc/profile-m-z/smplayer.profile b/etc/profile-m-z/smplayer.profile
index 8ffc47ff6..9d6db4cdb 100644
--- a/etc/profile-m-z/smplayer.profile
+++ b/etc/profile-m-z/smplayer.profile
@@ -10,7 +10,10 @@ noblacklist ${HOME}/.config/smplayer
10noblacklist ${HOME}/.config/youtube-dl 10noblacklist ${HOME}/.config/youtube-dl
11noblacklist ${HOME}/.mplayer 11noblacklist ${HOME}/.mplayer
12 12
13# Allow lua (blacklisted by disable-interpreters.inc)
13include allow-lua.inc 14include allow-lua.inc
15
16# Allow python (blacklisted by disable-interpreters.inc)
14include allow-python2.inc 17include allow-python2.inc
15include allow-python3.inc 18include allow-python3.inc
16 19
diff --git a/etc/profile-m-z/straw-viewer.profile b/etc/profile-m-z/straw-viewer.profile
index 721ad38ee..2ae35d211 100644
--- a/etc/profile-m-z/straw-viewer.profile
+++ b/etc/profile-m-z/straw-viewer.profile
@@ -10,8 +10,13 @@ include globals.local
10noblacklist ${HOME}/.cache/straw-viewer 10noblacklist ${HOME}/.cache/straw-viewer
11noblacklist ${HOME}/.config/straw-viewer 11noblacklist ${HOME}/.config/straw-viewer
12 12
13# Allow lua (blacklisted by disable-interpreters.inc)
13include allow-lua.inc 14include allow-lua.inc
15
16# Allow perl (blacklisted by disable-interpreters.inc)
14include allow-perl.inc 17include allow-perl.inc
18
19# Allow python (blacklisted by disable-interpreters.inc)
15include allow-python2.inc 20include allow-python2.inc
16include allow-python3.inc 21include allow-python3.inc
17 22
diff --git a/etc/profile-m-z/totem.profile b/etc/profile-m-z/totem.profile
index 36495064e..90c45c7d0 100644
--- a/etc/profile-m-z/totem.profile
+++ b/etc/profile-m-z/totem.profile
@@ -6,7 +6,8 @@ include totem.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9# Allow lua (required for youtube video) 9# Allow lua (blacklisted by disable-interpreters.inc)
10# required for youtube video
10include allow-lua.inc 11include allow-lua.inc
11 12
12# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
diff --git a/etc/profile-m-z/youtube-viewer.profile b/etc/profile-m-z/youtube-viewer.profile
index a3a2afa29..e8fe4a360 100644
--- a/etc/profile-m-z/youtube-viewer.profile
+++ b/etc/profile-m-z/youtube-viewer.profile
@@ -9,7 +9,10 @@ include globals.local
9 9
10noblacklist ${HOME}/.config/youtube-viewer 10noblacklist ${HOME}/.config/youtube-viewer
11 11
12# Allow perl (blacklisted by disable-interpreters.inc)
12include allow-perl.inc 13include allow-perl.inc
14
15# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 16include allow-python2.inc
14include allow-python3.inc 17include allow-python3.inc
15 18