diff options
author | 2018-03-30 12:25:48 +0200 | |
---|---|---|
committer | 2018-03-30 12:25:48 +0200 | |
commit | 093f3ccf3fdd48dc5d356730532128a6f4de0905 (patch) | |
tree | 80b8c3da7eb6a531a348c6327b57e4cdb7076e33 /etc/steam.profile | |
parent | comment apparmor, net where they interfere with dconf - #1843 (diff) | |
parent | Further improve private-bin in steam (diff) | |
download | firejail-093f3ccf3fdd48dc5d356730532128a6f4de0905.tar.gz firejail-093f3ccf3fdd48dc5d356730532128a6f4de0905.tar.zst firejail-093f3ccf3fdd48dc5d356730532128a6f4de0905.zip |
Merge branch 'master' into nodbus
Diffstat (limited to 'etc/steam.profile')
-rw-r--r-- | etc/steam.profile | 16 |
1 files changed, 13 insertions, 3 deletions
diff --git a/etc/steam.profile b/etc/steam.profile index 4965d3a54..bcdea9bc7 100644 --- a/etc/steam.profile +++ b/etc/steam.profile | |||
@@ -32,7 +32,10 @@ include /etc/firejail/disable-programs.inc | |||
32 | include /etc/firejail/whitelist-var-common.inc | 32 | include /etc/firejail/whitelist-var-common.inc |
33 | 33 | ||
34 | caps.drop all | 34 | caps.drop all |
35 | #ipc-namespace | ||
35 | netfilter | 36 | netfilter |
37 | # nodbus disabled as it breaks appindicator support | ||
38 | #nodbus | ||
36 | nodvd | 39 | nodvd |
37 | nogroups | 40 | nogroups |
38 | nonewprivs | 41 | nonewprivs |
@@ -44,10 +47,17 @@ protocol unix,inet,inet6,netlink | |||
44 | seccomp | 47 | seccomp |
45 | shell none | 48 | shell none |
46 | # tracelog disabled as it breaks integrated browser | 49 | # tracelog disabled as it breaks integrated browser |
47 | # tracelog | 50 | #tracelog |
51 | |||
52 | # private-bin is disabled while in testing, but has been tested working with multiple games | ||
53 | #private-bin awk,basename,bash,bsdtar,bzip2,cat,chmod,cksum,cmp,comm,compress,cp,curl,cut,date,dbus-launch,dbus-send,desktop-file-edit,desktop-file-install,desktop-file-validate,dirname,echo,env,expr,file,find,getopt,grep,gtar,gzip,head,hostname,id,lbzip2,ldconfig,ldd,ln,ls,lsb_release,lspci,lsof,lz4,lzip,lzma,lzop,md5sum,mkdir,mktemp,mv,netstat,ps,pulseaudio,readlink,realpath,rm,sed,sh,sha1sum,sha256sum,sha512sum,sleep,sort,steam,steamdeps,steam-native,steam-runtime,sum,tail,tar,test,touch,tr,umask,uname,update-desktop-database,wc,wget,which,whoami,xterm,xz,zenity | ||
54 | # extra programs are available which might be needed for select games | ||
55 | #private-bin java,java-config,mono,python* | ||
56 | # picture viewers are are needed for viewing screenshots | ||
57 | #private-bin eog,eom,gthumb,pix,viewnior,xviewer | ||
48 | 58 | ||
49 | # private-dev should be commented for controllers | 59 | # private-dev should be commented for controllers |
50 | private-dev | 60 | private-dev |
51 | # private-etc breaks some games | 61 | # private-etc breaks a small selection of games on some systems, comment to support those |
52 | #private-etc asound.conf,ca-certificates,dbus-1,drirc,fonts,group,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,ld.so.conf,ld.so.conf.d,localtime,lsb-release,machine-id,mime.types,passwd,pulse,resolv.conf,ssl,pki,services,crypto-policies | 62 | private-etc asound.conf,ca-certificates,dbus-1,drirc,fonts,group,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,ld.so.conf,ld.so.conf.d,localtime,lsb-release,machine-id,mime.types,passwd,pulse,resolv.conf,ssl,pki,services,crypto-policies,alternatives |
53 | private-tmp | 63 | private-tmp |