diff options
author | glitsj16 <glitsj16@users.noreply.github.com> | 2021-04-06 09:26:30 +0000 |
---|---|---|
committer | GitHub <noreply@github.com> | 2021-04-06 09:26:30 +0000 |
commit | 91185bbc4a8e9e8791f297bb731b23a8e80aaf9b (patch) | |
tree | 4875fd73f59fcabcb145bef7f4d55273f4fc0d46 /etc/profile-a-l/firefox-common.profile | |
parent | Merge pull request #4161 from glitsj16/signal-desktop (diff) | |
download | firejail-91185bbc4a8e9e8791f297bb731b23a8e80aaf9b.tar.gz firejail-91185bbc4a8e9e8791f297bb731b23a8e80aaf9b.tar.zst firejail-91185bbc4a8e9e8791f297bb731b23a8e80aaf9b.zip |
Encourage making overrides in *.local files (#4165)
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
* refactor local override comments
Diffstat (limited to 'etc/profile-a-l/firefox-common.profile')
-rw-r--r-- | etc/profile-a-l/firefox-common.profile | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/etc/profile-a-l/firefox-common.profile b/etc/profile-a-l/firefox-common.profile index a955722c8..b0ead7590 100644 --- a/etc/profile-a-l/firefox-common.profile +++ b/etc/profile-a-l/firefox-common.profile | |||
@@ -9,7 +9,7 @@ include firefox-common.local | |||
9 | # noexec ${HOME} breaks DRM binaries. | 9 | # noexec ${HOME} breaks DRM binaries. |
10 | ?BROWSER_ALLOW_DRM: ignore noexec ${HOME} | 10 | ?BROWSER_ALLOW_DRM: ignore noexec ${HOME} |
11 | 11 | ||
12 | # Uncomment the following line (or put it in your firefox-common.local) to allow access to common programs/addons/plugins. | 12 | # Add the next line to your firefox-common.local to allow access to common programs/addons/plugins. |
13 | #include firefox-common-addons.profile | 13 | #include firefox-common-addons.profile |
14 | 14 | ||
15 | noblacklist ${HOME}/.pki | 15 | noblacklist ${HOME}/.pki |
@@ -32,7 +32,7 @@ include whitelist-var-common.inc | |||
32 | 32 | ||
33 | apparmor | 33 | apparmor |
34 | caps.drop all | 34 | caps.drop all |
35 | # machine-id breaks pulse audio; it should work fine in setups where sound is not required. | 35 | # machine-id breaks pulse audio; add it to your firefox-common.local if sound is not required. |
36 | #machine-id | 36 | #machine-id |
37 | netfilter | 37 | netfilter |
38 | nodvd | 38 | nodvd |
@@ -52,10 +52,11 @@ shell none | |||
52 | disable-mnt | 52 | disable-mnt |
53 | ?BROWSER_DISABLE_U2F: private-dev | 53 | ?BROWSER_DISABLE_U2F: private-dev |
54 | # private-etc below works fine on most distributions. There are some problems on CentOS. | 54 | # private-etc below works fine on most distributions. There are some problems on CentOS. |
55 | # Add it to your firefox-common.local if you want to enable it. | ||
55 | #private-etc alternatives,asound.conf,ca-certificates,crypto-policies,dconf,fonts,group,gtk-2.0,gtk-3.0,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,machine-id,mailcap,mime.types,nsswitch.conf,pango,passwd,pki,pulse,resolv.conf,selinux,ssl,X11,xdg | 56 | #private-etc alternatives,asound.conf,ca-certificates,crypto-policies,dconf,fonts,group,gtk-2.0,gtk-3.0,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,machine-id,mailcap,mime.types,nsswitch.conf,pango,passwd,pki,pulse,resolv.conf,selinux,ssl,X11,xdg |
56 | private-tmp | 57 | private-tmp |
57 | 58 | ||
58 | # breaks various desktop integration features | 59 | # 'dbus-user none' breaks various desktop integration features like global menus, native notifications, |
59 | # among other things global menus, native notifications, Gnome connector, KDE connect and power management on KDE Plasma | 60 | # Gnome connector, KDE connect and power management on KDE Plasma. |
60 | dbus-user none | 61 | dbus-user none |
61 | dbus-system none | 62 | dbus-system none |