aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/github-desktop.profile
diff options
context:
space:
mode:
authorLibravatar rusty-snake <41237666+rusty-snake@users.noreply.github.com>2020-12-17 08:45:35 +0000
committerLibravatar GitHub <noreply@github.com>2020-12-17 08:45:35 +0000
commitf4f6767458208a127084e4c0103fab88761d9056 (patch)
treeff349c113ca4f3fc70cd9839a1775bb49092cab3 /etc/profile-a-l/github-desktop.profile
parentArchiver fixes - drop private-bin (#3832) (diff)
downloadfirejail-f4f6767458208a127084e4c0103fab88761d9056.tar.gz
firejail-f4f6767458208a127084e4c0103fab88761d9056.tar.zst
firejail-f4f6767458208a127084e4c0103fab88761d9056.zip
Refactor electron.profile and electron based programs (#3807)
* Refactor electron.profile and electron based programs (1) * Refactor electron.profile and electron based programs (2) * Refactor electron.profile and electron based programs (3) * Refactor electron.profile and electron based programs (4) * Refactor electron.profile and electron based programs (5) * Refactor electron.profile and electron based programs (6) * Refactor electron.profile and electron based programs (7) * Refactor electron.profile and electron based programs (8)
Diffstat (limited to 'etc/profile-a-l/github-desktop.profile')
-rw-r--r--etc/profile-a-l/github-desktop.profile46
1 files changed, 19 insertions, 27 deletions
diff --git a/etc/profile-a-l/github-desktop.profile b/etc/profile-a-l/github-desktop.profile
index 152396553..325c54ced 100644
--- a/etc/profile-a-l/github-desktop.profile
+++ b/etc/profile-a-l/github-desktop.profile
@@ -6,43 +6,35 @@ include github-desktop.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9# Note: On debian-based distributions the binary might be located in
10# /opt/GitHub Desktop/github-desktop, and therefore not be in PATH.
11# If that's the case you can start GitHub Desktop with firejail via
12# `firejail "/opt/GitHub Desktop/github-desktop"`.
13
14# Disabled until someone reported positive feedback
15ignore include disable-xdg.inc
16ignore whitelist ${DOWNLOADS}
17ignore include whitelist-common.inc
18ignore include whitelist-runuser-common.inc
19ignore include whitelist-usr-share-common.inc
20ignore include whitelist-var-common.inc
21ignore apparmor
22ignore dbus-user none
23ignore dbus-system none
24
9noblacklist ${HOME}/.config/GitHub Desktop 25noblacklist ${HOME}/.config/GitHub Desktop
10noblacklist ${HOME}/.config/git 26noblacklist ${HOME}/.config/git
11noblacklist ${HOME}/.gitconfig 27noblacklist ${HOME}/.gitconfig
12noblacklist ${HOME}/.git-credentials 28noblacklist ${HOME}/.git-credentials
13 29
14include disable-common.inc
15include disable-passwdmgr.inc
16include disable-programs.inc
17include disable-devel.inc
18include disable-exec.inc
19include disable-interpreters.inc
20
21caps.drop all
22netfilter
23# no3d 30# no3d
24nodvd
25nogroups
26nonewprivs
27noroot
28nosound 31nosound
29notv
30nou2f
31novideo
32protocol unix,inet,inet6,netlink
33seccomp !chroot
34 32
35# Note: On debian-based distributions the binary might be located in
36# /opt/GitHub Desktop/github-desktop, and therefore not be in PATH.
37# If that's the case you can start GitHub Desktop with firejail via
38# `firejail "/opt/GitHub Desktop/github-desktop"`.
39
40disable-mnt
41# private-bin github-desktop 33# private-bin github-desktop
42private-cache
43?HAS_APPIMAGE: ignore private-dev 34?HAS_APPIMAGE: ignore private-dev
44private-dev
45# private-lib 35# private-lib
46private-tmp
47 36
48# memory-deny-write-execute 37# memory-deny-write-execute
38
39# Redirect
40include electron.profile