diff options
author | 2024-04-05 12:09:04 +0000 | |
---|---|---|
committer | 2024-04-05 12:09:04 +0000 | |
commit | 1cfa06b4c5517a89d1a5dafd80ee593f8ebf86ea (patch) | |
tree | bc08210c54287ccd7a895049f829b609b7279b29 /etc/inc/allow-opengl-game.inc | |
parent | profiles: add allow-php.inc to profile.template (#6299) (diff) | |
download | firejail-1cfa06b4c5517a89d1a5dafd80ee593f8ebf86ea.tar.gz firejail-1cfa06b4c5517a89d1a5dafd80ee593f8ebf86ea.tar.zst firejail-1cfa06b4c5517a89d1a5dafd80ee593f8ebf86ea.zip |
profiles: clarify and add opengl-game to profile.template (#6300)
To make it consistent with the other include profiles.
See etc/templates/profile.template.
With this, all `etc/inc/allow-*` files are listed in profile.template.
The explanation is based on a comment by @rusty-snake[1].
Relates to #4071.
This is a follow-up to #6299.
[1] https://github.com/netblue30/firejail/pull/4071#issuecomment-822003473
Diffstat (limited to 'etc/inc/allow-opengl-game.inc')
-rw-r--r-- | etc/inc/allow-opengl-game.inc | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/etc/inc/allow-opengl-game.inc b/etc/inc/allow-opengl-game.inc index 5d2d6c5c1..5ec227348 100644 --- a/etc/inc/allow-opengl-game.inc +++ b/etc/inc/allow-opengl-game.inc | |||
@@ -2,6 +2,12 @@ | |||
2 | # Persistent customizations should go in a .local file. | 2 | # Persistent customizations should go in a .local file. |
3 | include allow-opengl-game.local | 3 | include allow-opengl-game.local |
4 | 4 | ||
5 | # Explanation: Fedora (and maybe others) install a .desktop file that uses | ||
6 | # `Exec=foo-wrapper` instead of `Exec=foo`. Each /usr/bin/foo-wrapper is a | ||
7 | # symlink to /usr/bin/opengl-game-wrapper.sh, which checks hardware | ||
8 | # acceleration and then starts the game or notifies the user that there is a | ||
9 | # problem. | ||
10 | |||
5 | noblacklist ${PATH}/bash | 11 | noblacklist ${PATH}/bash |
6 | whitelist /usr/share/opengl-games-utils/opengl-game-functions.sh | 12 | whitelist /usr/share/opengl-games-utils/opengl-game-functions.sh |
7 | private-bin basename,bash,cut,glxinfo,grep,head,sed,zenity | 13 | private-bin basename,bash,cut,glxinfo,grep,head,sed,zenity |