aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar pirate486743186 <okgomdjgbmoij@gmail.com>2021-05-28 13:52:19 +0200
committerLibravatar GitHub <noreply@github.com>2021-05-28 11:52:19 +0000
commit0fd1534952bf9f98d69d5aeee2c0c58d4d59746f (patch)
tree12f417751453b4225f1f6a15802f5c30d0815342 /etc
parentMerge pull request #4307 from slowpeek/master (diff)
downloadfirejail-0fd1534952bf9f98d69d5aeee2c0c58d4d59746f.tar.gz
firejail-0fd1534952bf9f98d69d5aeee2c0c58d4d59746f.tar.zst
firejail-0fd1534952bf9f98d69d5aeee2c0c58d4d59746f.zip
reorganizing youtube-viewers (#4128)
* Create youtube-viewers-common.profile * reorganising youtube viewers * rm globals * reorganise youtube viewers * adding pipe-viewer * adding gtk-pipe-viewer * xterm and youtube-dl cache * sort * Update youtube-viewers-common.profile * quiet * quiet * quiet * Update firecfg.config * rm vlc * rm invalid binary * noinput * rm whitelist-runuser-common.inc * rm whitelist-runuser-common.inc * rm whitelist-runuser-common.inc * whitelist-runuser-common.inc
Diffstat (limited to 'etc')
-rw-r--r--etc/profile-a-l/gtk-pipe-viewer.profile12
-rw-r--r--etc/profile-a-l/gtk-straw-viewer.profile2
-rw-r--r--etc/profile-a-l/gtk-youtube-viewer.profile2
-rw-r--r--etc/profile-m-z/pipe-viewer.profile21
-rw-r--r--etc/profile-m-z/straw-viewer.profile51
-rw-r--r--etc/profile-m-z/youtube-viewer.profile45
-rw-r--r--etc/profile-m-z/youtube-viewers-common.profile61
7 files changed, 101 insertions, 93 deletions
diff --git a/etc/profile-a-l/gtk-pipe-viewer.profile b/etc/profile-a-l/gtk-pipe-viewer.profile
new file mode 100644
index 000000000..9c212ff6e
--- /dev/null
+++ b/etc/profile-a-l/gtk-pipe-viewer.profile
@@ -0,0 +1,12 @@
1# Firejail profile for gtk-pipe-viewer
2# Description: Gtk front-end to pipe-viewer
3# This file is overwritten after every install/update
4# Persistent local customizations
5include gtk-pipe-viewer.local
6# added by included profile
7#include globals.local
8
9ignore quiet
10
11# Redirect
12include pipe-viewer.profile
diff --git a/etc/profile-a-l/gtk-straw-viewer.profile b/etc/profile-a-l/gtk-straw-viewer.profile
index e2721360b..978b3d896 100644
--- a/etc/profile-a-l/gtk-straw-viewer.profile
+++ b/etc/profile-a-l/gtk-straw-viewer.profile
@@ -8,7 +8,5 @@ include gtk-straw-viewer.local
8 8
9ignore quiet 9ignore quiet
10 10
11include whitelist-runuser-common.inc
12
13# Redirect 11# Redirect
14include straw-viewer.profile 12include straw-viewer.profile
diff --git a/etc/profile-a-l/gtk-youtube-viewer.profile b/etc/profile-a-l/gtk-youtube-viewer.profile
index 848979b52..c814f0fef 100644
--- a/etc/profile-a-l/gtk-youtube-viewer.profile
+++ b/etc/profile-a-l/gtk-youtube-viewer.profile
@@ -8,7 +8,5 @@ include gtk-youtube-viewer.local
8 8
9ignore quiet 9ignore quiet
10 10
11include whitelist-runuser-common.inc
12
13# Redirect 11# Redirect
14include youtube-viewer.profile 12include youtube-viewer.profile
diff --git a/etc/profile-m-z/pipe-viewer.profile b/etc/profile-m-z/pipe-viewer.profile
new file mode 100644
index 000000000..3de064311
--- /dev/null
+++ b/etc/profile-m-z/pipe-viewer.profile
@@ -0,0 +1,21 @@
1# Firejail profile for pipe-viewer
2# Description: Fork of youtube-viewer, scrapes youtube directly and with invidious
3# This file is overwritten after every install/update
4quiet
5# Persistent local customizations
6include pipe-viewer.local
7# Persistent global definitions
8include globals.local
9
10noblacklist ${HOME}/.cache/pipe-viewer
11noblacklist ${HOME}/.config/pipe-viewer
12
13mkdir ${HOME}/.config/pipe-viewer
14mkdir ${HOME}/.cache/pipe-viewer
15whitelist ${HOME}/.cache/pipe-viewer
16whitelist ${HOME}/.config/pipe-viewer
17
18private-bin gtk-pipe-viewer,pipe-viewer
19
20# Redirect
21include youtube-viewers-common.profile
diff --git a/etc/profile-m-z/straw-viewer.profile b/etc/profile-m-z/straw-viewer.profile
index f8108c9d6..d73927f2a 100644
--- a/etc/profile-m-z/straw-viewer.profile
+++ b/etc/profile-m-z/straw-viewer.profile
@@ -1,7 +1,7 @@
1# Firejail profile for straw-viewer 1# Firejail profile for straw-viewer
2# Description: Fork of youtube-viewer acts like an invidious frontend 2# Description: Fork of youtube-viewer acts like an invidious frontend
3quiet
4# This file is overwritten after every install/update 3# This file is overwritten after every install/update
4quiet
5# Persistent local customizations 5# Persistent local customizations
6include straw-viewer.local 6include straw-viewer.local
7# Persistent global definitions 7# Persistent global definitions
@@ -10,55 +10,12 @@ include globals.local
10noblacklist ${HOME}/.cache/straw-viewer 10noblacklist ${HOME}/.cache/straw-viewer
11noblacklist ${HOME}/.config/straw-viewer 11noblacklist ${HOME}/.config/straw-viewer
12 12
13# Allow lua (blacklisted by disable-interpreters.inc)
14include allow-lua.inc
15
16# Allow perl (blacklisted by disable-interpreters.inc)
17include allow-perl.inc
18
19# Allow python (blacklisted by disable-interpreters.inc)
20include allow-python2.inc
21include allow-python3.inc
22
23include disable-common.inc
24include disable-devel.inc
25include disable-exec.inc
26include disable-interpreters.inc
27include disable-passwdmgr.inc
28include disable-programs.inc
29include disable-xdg.inc
30
31mkdir ${HOME}/.config/straw-viewer 13mkdir ${HOME}/.config/straw-viewer
32mkdir ${HOME}/.cache/straw-viewer 14mkdir ${HOME}/.cache/straw-viewer
33whitelist ${HOME}/.cache/straw-viewer 15whitelist ${HOME}/.cache/straw-viewer
34whitelist ${HOME}/.config/straw-viewer 16whitelist ${HOME}/.config/straw-viewer
35whitelist ${DOWNLOADS}
36include whitelist-common.inc
37include whitelist-usr-share-common.inc
38include whitelist-var-common.inc
39
40apparmor
41caps.drop all
42netfilter
43nodvd
44nogroups
45noinput
46nonewprivs
47noroot
48notv
49nou2f
50novideo
51protocol unix,inet,inet6
52seccomp
53shell none
54tracelog
55 17
56disable-mnt 18private-bin gtk-straw-viewer,straw-viewer
57private-bin bash,ffmpeg,ffprobe,gtk-straw-viewer,mpv,perl,python*,sh,smplayer,straw-viewer,stty,vlc,wget,which,youtube-dl
58private-cache
59private-dev
60private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,machine-id,mime.types,nsswitch.conf,passwd,pki,pulse,resolv.conf,ssl,X11,xdg
61private-tmp
62 19
63dbus-user none 20# Redirect
64dbus-system none 21include youtube-viewers-common.profile \ No newline at end of file
diff --git a/etc/profile-m-z/youtube-viewer.profile b/etc/profile-m-z/youtube-viewer.profile
index 7d6e9b0eb..b54dd37ad 100644
--- a/etc/profile-m-z/youtube-viewer.profile
+++ b/etc/profile-m-z/youtube-viewer.profile
@@ -10,51 +10,12 @@ include globals.local
10noblacklist ${HOME}/.cache/youtube-viewer 10noblacklist ${HOME}/.cache/youtube-viewer
11noblacklist ${HOME}/.config/youtube-viewer 11noblacklist ${HOME}/.config/youtube-viewer
12 12
13# Allow perl (blacklisted by disable-interpreters.inc)
14include allow-perl.inc
15
16# Allow python (blacklisted by disable-interpreters.inc)
17include allow-python2.inc
18include allow-python3.inc
19
20include disable-common.inc
21include disable-devel.inc
22include disable-exec.inc
23include disable-interpreters.inc
24include disable-passwdmgr.inc
25include disable-programs.inc
26include disable-xdg.inc
27
28mkdir ${HOME}/.cache/youtube-viewer 13mkdir ${HOME}/.cache/youtube-viewer
29mkdir ${HOME}/.config/youtube-viewer 14mkdir ${HOME}/.config/youtube-viewer
30whitelist ${HOME}/.cache/youtube-viewer 15whitelist ${HOME}/.cache/youtube-viewer
31whitelist ${HOME}/.config/youtube-viewer 16whitelist ${HOME}/.config/youtube-viewer
32include whitelist-common.inc
33include whitelist-usr-share-common.inc
34include whitelist-var-common.inc
35
36apparmor
37caps.drop all
38netfilter
39nodvd
40nogroups
41noinput
42nonewprivs
43noroot
44notv
45nou2f
46novideo
47protocol unix,inet,inet6
48seccomp
49shell none
50tracelog
51 17
52disable-mnt 18private-bin gtk-youtube-viewer,gtk2-youtube-viewer,gtk3-youtube-viewer,youtube-viewer
53private-bin ffmpeg,ffprobe,firefox,gtk-youtube-viewer,gtk2-youtube-viewer,gtk3-youtube-viewer,mpv,python*,sh,smplayer,stty,vlc,which,youtube-dl,youtube-viewer
54private-cache
55private-dev
56private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,machine-id,mime.types,nsswitch.conf,passwd,pki,pulse,resolv.conf,ssl,X11,xdg
57private-tmp
58 19
59dbus-user none 20# Redirect
60dbus-system none 21include youtube-viewers-common.profile \ No newline at end of file
diff --git a/etc/profile-m-z/youtube-viewers-common.profile b/etc/profile-m-z/youtube-viewers-common.profile
new file mode 100644
index 000000000..25a073d4a
--- /dev/null
+++ b/etc/profile-m-z/youtube-viewers-common.profile
@@ -0,0 +1,61 @@
1# Firejail profile for youtube-viewer clones
2# Description: common profile for Trizen's Youtube viewers
3# This file is overwritten after every install/update
4# Persistent local customizations
5include youtube-viewers-common.local
6# Persistent global definitions
7# added by caller profile
8#include globals.local
9
10noblacklist ${HOME}/.cache/youtube-dl
11
12# Allow lua (blacklisted by disable-interpreters.inc)
13include allow-lua.inc
14
15# Allow perl (blacklisted by disable-interpreters.inc)
16include allow-perl.inc
17
18# Allow python (blacklisted by disable-interpreters.inc)
19include allow-python2.inc
20include allow-python3.inc
21
22include disable-common.inc
23include disable-devel.inc
24include disable-exec.inc
25include disable-interpreters.inc
26include disable-passwdmgr.inc
27include disable-programs.inc
28include disable-xdg.inc
29
30whitelist ${DOWNLOADS}
31whitelist ${HOME}/.cache/youtube-dl/youtube-sigfuncs
32include whitelist-common.inc
33include whitelist-runuser-common.inc
34include whitelist-usr-share-common.inc
35include whitelist-var-common.inc
36
37apparmor
38caps.drop all
39netfilter
40nodvd
41nogroups
42noinput
43nonewprivs
44noroot
45notv
46nou2f
47novideo
48protocol unix,inet,inet6
49seccomp
50shell none
51tracelog
52
53disable-mnt
54private-bin bash,ffmpeg,ffprobe,firefox,mpv,perl,python*,sh,smplayer,stty,wget,which,xterm,youtube-dl
55private-cache
56private-dev
57private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,machine-id,mime.types,nsswitch.conf,passwd,pki,pulse,resolv.conf,ssl,X11,xdg
58private-tmp
59
60dbus-user none
61dbus-system none