aboutsummaryrefslogtreecommitdiffstats
path: root/etc/inc
diff options
context:
space:
mode:
authorLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2024-04-05 12:09:04 +0000
committerLibravatar GitHub <noreply@github.com>2024-04-05 12:09:04 +0000
commit1cfa06b4c5517a89d1a5dafd80ee593f8ebf86ea (patch)
treebc08210c54287ccd7a895049f829b609b7279b29 /etc/inc
parentprofiles: add allow-php.inc to profile.template (#6299) (diff)
downloadfirejail-1cfa06b4c5517a89d1a5dafd80ee593f8ebf86ea.tar.gz
firejail-1cfa06b4c5517a89d1a5dafd80ee593f8ebf86ea.tar.zst
firejail-1cfa06b4c5517a89d1a5dafd80ee593f8ebf86ea.zip
profiles: clarify and add opengl-game to profile.template (#6300)
To make it consistent with the other include profiles. See etc/templates/profile.template. With this, all `etc/inc/allow-*` files are listed in profile.template. The explanation is based on a comment by @rusty-snake[1]. Relates to #4071. This is a follow-up to #6299. [1] https://github.com/netblue30/firejail/pull/4071#issuecomment-822003473
Diffstat (limited to 'etc/inc')
-rw-r--r--etc/inc/allow-opengl-game.inc6
1 files changed, 6 insertions, 0 deletions
diff --git a/etc/inc/allow-opengl-game.inc b/etc/inc/allow-opengl-game.inc
index 5d2d6c5c1..5ec227348 100644
--- a/etc/inc/allow-opengl-game.inc
+++ b/etc/inc/allow-opengl-game.inc
@@ -2,6 +2,12 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-opengl-game.local 3include allow-opengl-game.local
4 4
5# Explanation: Fedora (and maybe others) install a .desktop file that uses
6# `Exec=foo-wrapper` instead of `Exec=foo`. Each /usr/bin/foo-wrapper is a
7# symlink to /usr/bin/opengl-game-wrapper.sh, which checks hardware
8# acceleration and then starts the game or notifies the user that there is a
9# problem.
10
5noblacklist ${PATH}/bash 11noblacklist ${PATH}/bash
6whitelist /usr/share/opengl-games-utils/opengl-game-functions.sh 12whitelist /usr/share/opengl-games-utils/opengl-game-functions.sh
7private-bin basename,bash,cut,glxinfo,grep,head,sed,zenity 13private-bin basename,bash,cut,glxinfo,grep,head,sed,zenity