diff options
author | 2023-09-06 08:09:24 +0200 | |
---|---|---|
committer | 2023-09-06 06:09:24 +0000 | |
commit | 95998519dd750bb0b79a9388192da54015489d0c (patch) | |
tree | 48ca84390915f959c7bc406416cae8b4107138fc /etc | |
parent | RELNOTES: add bugfix and ci items (diff) | |
download | firejail-95998519dd750bb0b79a9388192da54015489d0c.tar.gz firejail-95998519dd750bb0b79a9388192da54015489d0c.tar.zst firejail-95998519dd750bb0b79a9388192da54015489d0c.zip |
discord-common.profile: harden & allow notifications (#5978)
What works:
- Basic functionality
- Receiving notifications
- Voice communication
- Watching streams
What wasn't tested:
- Casting streams
- Opening links
- Tracking/displaying "current activity" as status message
- Apparmor
Notes:
- Discord tries to access system dbus (`[ERROR:bus.cc(399)] Failed to
connect to the bus: Failed to connect to socket
/run/firejail/mnt/dbus/system: Permission denied`). I don't know what
business it has with the system dbus, and didn't notice any problems
due to that.
- I had one crash after 2h of watching a stream. Probably unrelated.
Fixes #5971.
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-a-l/discord-common.profile | 13 |
1 files changed, 5 insertions, 8 deletions
diff --git a/etc/profile-a-l/discord-common.profile b/etc/profile-a-l/discord-common.profile index 83fca8772..b7744a83c 100644 --- a/etc/profile-a-l/discord-common.profile +++ b/etc/profile-a-l/discord-common.profile | |||
@@ -7,15 +7,7 @@ include discord-common.local | |||
7 | #include globals.local | 7 | #include globals.local |
8 | 8 | ||
9 | # Disabled until someone reported positive feedback | 9 | # Disabled until someone reported positive feedback |
10 | ignore include disable-interpreters.inc | ||
11 | ignore include disable-xdg.inc | ||
12 | ignore include whitelist-runuser-common.inc | ||
13 | ignore include whitelist-usr-share-common.inc | ||
14 | ignore apparmor | 10 | ignore apparmor |
15 | ignore disable-mnt | ||
16 | ignore private-cache | ||
17 | ignore dbus-user none | ||
18 | ignore dbus-system none | ||
19 | 11 | ||
20 | ignore noexec ${HOME} | 12 | ignore noexec ${HOME} |
21 | ignore novideo | 13 | ignore novideo |
@@ -26,6 +18,11 @@ whitelist ${HOME}/.local/share/betterdiscordctl | |||
26 | private-bin awk,bash,cut,echo,egrep,electron,electron[0-9],electron[0-9][0-9],fish,grep,head,sed,sh,tclsh,tr,which,xdg-mime,xdg-open,zsh | 18 | private-bin awk,bash,cut,echo,egrep,electron,electron[0-9],electron[0-9][0-9],fish,grep,head,sed,sh,tclsh,tr,which,xdg-mime,xdg-open,zsh |
27 | private-etc @tls-ca | 19 | private-etc @tls-ca |
28 | 20 | ||
21 | # allow D-Bus notifications | ||
22 | dbus-user filter | ||
23 | dbus-user.talk org.freedesktop.Notifications | ||
24 | ignore dbus-user none | ||
25 | |||
29 | join-or-start discord | 26 | join-or-start discord |
30 | 27 | ||
31 | # Redirect | 28 | # Redirect |