diff options
| author |  Vladislav Nepogodin <nepogodin.vlad@gmail.com> | 2021-04-20 00:04:10 +0400 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2021-04-19 20:04:10 +0000 |
| commit | 98ed4717bd8b9e28e69904d7ca9caf4deb4e94c3 (patch) | |
| tree | be38412fbe58b411e83f36c8648c85240242fc4b /etc/profile-a-l/sway.profile | |
| parent | unblock tor support in brave (#4200) (diff) | |
| download | firejail-98ed4717bd8b9e28e69904d7ca9caf4deb4e94c3.tar.gz firejail-98ed4717bd8b9e28e69904d7ca9caf4deb4e94c3.tar.zst firejail-98ed4717bd8b9e28e69904d7ca9caf4deb4e94c3.zip | |
Update Librewolf profile and Add Sway profile (#4164)
* Add Sway profile
* Fix issue
Not working then including firefox-common-addons.profile
* Allow sway's fallback config
* So I agree with @glitsj16 and @BL4CKH47H4CK3R
so..
`No its not needed as it reveals lots of important /usr/share folders like /usr/share/fonts which can used for font fingerprinting and OS detection. Like the site or attacker will know that which font you are using. Linux and windows common font are not same so its a problem. Besides there are so many other important folders as I see. Librewolf can launch and work perfectly without this options`
* well..
Revert `include whitelist-usr-share-common.inc`
Sync with Firefox profile
* 😄 What just hapened
* 🔄 Sync with upstream
* Merge tested from PR
* 🔄 Sync with upstream
* Merge tested from PR
* Revert changes
* Add Sway profile
* Fix issue
Not working then including firefox-common-addons.profile
* Allow sway's fallback config
* So I agree with @glitsj16 and @BL4CKH47H4CK3R
so..
`No its not needed as it reveals lots of important /usr/share folders like /usr/share/fonts which can used for font fingerprinting and OS detection. Like the site or attacker will know that which font you are using. Linux and windows common font are not same so its a problem. Besides there are so many other important folders as I see. Librewolf can launch and work perfectly without this options`
* 🔄 Rebase
* 😄 What just hapened
* Merge tested from PR
* 🔄 Sync with upstream
* Merge tested from PR
* Revert changes
* Update
* Update librewolf.profile
Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
Diffstat (limited to 'etc/profile-a-l/sway.profile')
| -rw-r--r-- | etc/profile-a-l/sway.profile | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/etc/profile-a-l/sway.profile b/etc/profile-a-l/sway.profile new file mode 100644 index 000000000..4637419bf --- /dev/null +++ b/etc/profile-a-l/sway.profile | |||
| @@ -0,0 +1,19 @@ | |||
| 1 | # Firejail profile for Sway | ||
| 2 | # Description: i3-compatible Wayland compositor | ||
| 3 | # This file is overwritten after every install/update | ||
| 4 | # Persistent local customizations | ||
| 5 | include sway.local | ||
| 6 | # Persistent global definitions | ||
| 7 | include globals.local | ||
| 8 | |||
| 9 | # all applications started in sway will run in this profile | ||
| 10 | noblacklist ${HOME}/.config/sway | ||
| 11 | # sway uses ~/.config/i3 as fallback if there is no ~/.config/sway | ||
| 12 | noblacklist ${HOME}/.config/i3 | ||
| 13 | include disable-common.inc | ||
| 14 | |||
| 15 | caps.drop all | ||
| 16 | netfilter | ||
| 17 | noroot | ||
| 18 | protocol unix,inet,inet6 | ||
| 19 | seccomp | ||