diff options
author | 2021-03-15 14:20:25 -0400 | |
---|---|---|
committer | 2021-03-15 14:20:25 -0400 | |
commit | 69f96012837d02a3e91c70c77484d935c7a4aabf (patch) | |
tree | 9b74016786b600d8a658735f3247b22011391751 /etc | |
parent | finding a place for appimage mount (diff) | |
download | firejail-69f96012837d02a3e91c70c77484d935c7a4aabf.tar.gz firejail-69f96012837d02a3e91c70c77484d935c7a4aabf.tar.zst firejail-69f96012837d02a3e91c70c77484d935c7a4aabf.zip |
Harden PPSSPP and add a PPSSPPSDL alias
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-a-l/dolphin-emu.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/PPSSPPSDL.profile | 9 | ||||
-rw-r--r-- | etc/profile-m-z/ppsspp.profile | 10 |
3 files changed, 19 insertions, 1 deletions
diff --git a/etc/profile-a-l/dolphin-emu.profile b/etc/profile-a-l/dolphin-emu.profile index 13d830b55..fc920a065 100644 --- a/etc/profile-a-l/dolphin-emu.profile +++ b/etc/profile-a-l/dolphin-emu.profile | |||
@@ -18,6 +18,7 @@ include disable-exec.inc | |||
18 | include disable-interpreters.inc | 18 | include disable-interpreters.inc |
19 | include disable-passwdmgr.inc | 19 | include disable-passwdmgr.inc |
20 | include disable-programs.inc | 20 | include disable-programs.inc |
21 | include disable-write-mnt.inc | ||
21 | include disable-xdg.inc | 22 | include disable-xdg.inc |
22 | 23 | ||
23 | mkdir ${HOME}/.cache/dolphin-emu | 24 | mkdir ${HOME}/.cache/dolphin-emu |
diff --git a/etc/profile-m-z/PPSSPPSDL.profile b/etc/profile-m-z/PPSSPPSDL.profile new file mode 100644 index 000000000..deb00a436 --- /dev/null +++ b/etc/profile-m-z/PPSSPPSDL.profile | |||
@@ -0,0 +1,9 @@ | |||
1 | # Firejail profile for PPSSPPSDL | ||
2 | # This file is overwritten after every install/update | ||
3 | # Persistent local customizations | ||
4 | include PPSSPPSDL.local | ||
5 | # added by included profile | ||
6 | #include globals.local | ||
7 | |||
8 | # Redirect | ||
9 | include ppsspp.profile | ||
diff --git a/etc/profile-m-z/ppsspp.profile b/etc/profile-m-z/ppsspp.profile index c71553bcd..af6b0ac2a 100644 --- a/etc/profile-m-z/ppsspp.profile +++ b/etc/profile-m-z/ppsspp.profile | |||
@@ -7,7 +7,6 @@ include ppsspp.local | |||
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | noblacklist ${HOME}/.config/ppsspp | 9 | noblacklist ${HOME}/.config/ppsspp |
10 | noblacklist ${DOCUMENTS} | ||
11 | 10 | ||
12 | include disable-common.inc | 11 | include disable-common.inc |
13 | include disable-devel.inc | 12 | include disable-devel.inc |
@@ -15,8 +14,15 @@ include disable-exec.inc | |||
15 | include disable-interpreters.inc | 14 | include disable-interpreters.inc |
16 | include disable-passwdmgr.inc | 15 | include disable-passwdmgr.inc |
17 | include disable-programs.inc | 16 | include disable-programs.inc |
17 | include disable-write-mnt.inc | ||
18 | include disable-xdg.inc | 18 | include disable-xdg.inc |
19 | 19 | ||
20 | #mkdir ${HOME}/.config/ppsspp | ||
21 | #whitelist ${HOME}/.config/ppsspp | ||
22 | whitelist /usr/share/ppsspp | ||
23 | #include whitelist-common.inc | ||
24 | include whitelist-runuser-common.inc | ||
25 | include whitelist-usr-share-common.inc | ||
20 | include whitelist-var-common.inc | 26 | include whitelist-var-common.inc |
21 | 27 | ||
22 | caps.drop all | 28 | caps.drop all |
@@ -27,11 +33,13 @@ nogroups | |||
27 | nonewprivs | 33 | nonewprivs |
28 | noroot | 34 | noroot |
29 | notv | 35 | notv |
36 | nou2f | ||
30 | novideo | 37 | novideo |
31 | protocol unix,netlink | 38 | protocol unix,netlink |
32 | seccomp | 39 | seccomp |
33 | shell none | 40 | shell none |
34 | 41 | ||
42 | private-bin ppsspp,PPSSPP,PPSSPPQt,PPSSPPSDL | ||
35 | # uncomment the following line if you do not need controller support | 43 | # uncomment the following line if you do not need controller support |
36 | #private-dev | 44 | #private-dev |
37 | private-etc alternatives,asound.conf,ca-certificates,crypto-policies,drirc,fonts,group,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,localtime,machine-id,nsswitch.conf,passwd,pki,pulse,resolv.conf,ssl | 45 | private-etc alternatives,asound.conf,ca-certificates,crypto-policies,drirc,fonts,group,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,localtime,machine-id,nsswitch.conf,passwd,pki,pulse,resolv.conf,ssl |