diff options
author | Kelvin M. Klann <kmk3.code@protonmail.com> | 2023-06-23 13:31:10 +0000 |
---|---|---|
committer | GitHub <noreply@github.com> | 2023-06-23 13:31:10 +0000 |
commit | 10f4f151a423a6e959fadfb68f888f9d64486a1b (patch) | |
tree | c24d625f9bb7aa1d035cedb3a8d85e864042f116 /etc | |
parent | Merge pull request #5865 from kmk3/profiles-add-vmplayer (diff) | |
parent | update lobster profile (diff) | |
download | firejail-10f4f151a423a6e959fadfb68f888f9d64486a1b.tar.gz firejail-10f4f151a423a6e959fadfb68f888f9d64486a1b.tar.zst firejail-10f4f151a423a6e959fadfb68f888f9d64486a1b.zip |
Merge pull request #5847 from pirate486743186/update-lobster-profile
update lobster profile
Diffstat (limited to 'etc')
-rw-r--r-- | etc/inc/disable-programs.inc | 3 | ||||
-rw-r--r-- | etc/profile-a-l/lobster.profile | 12 |
2 files changed, 14 insertions, 1 deletions
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index 211111aaa..b4a01638f 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc | |||
@@ -220,6 +220,7 @@ blacklist ${HOME}/.cache/telepathy | |||
220 | blacklist ${HOME}/.cache/thunderbird | 220 | blacklist ${HOME}/.cache/thunderbird |
221 | blacklist ${HOME}/.cache/torbrowser | 221 | blacklist ${HOME}/.cache/torbrowser |
222 | blacklist ${HOME}/.cache/transmission | 222 | blacklist ${HOME}/.cache/transmission |
223 | blacklist ${HOME}/.cache/ueberzugpp | ||
223 | blacklist ${HOME}/.cache/ungoogled-chromium | 224 | blacklist ${HOME}/.cache/ungoogled-chromium |
224 | blacklist ${HOME}/.cache/vivaldi | 225 | blacklist ${HOME}/.cache/vivaldi |
225 | blacklist ${HOME}/.cache/vivaldi-snapshot | 226 | blacklist ${HOME}/.cache/vivaldi-snapshot |
@@ -644,6 +645,7 @@ blacklist ${HOME}/.config/tuta_integration | |||
644 | blacklist ${HOME}/.config/tutanota-desktop | 645 | blacklist ${HOME}/.config/tutanota-desktop |
645 | blacklist ${HOME}/.config/tvbrowser | 646 | blacklist ${HOME}/.config/tvbrowser |
646 | blacklist ${HOME}/.config/uGet | 647 | blacklist ${HOME}/.config/uGet |
648 | blacklist ${HOME}/.config/ueberzugpp | ||
647 | blacklist ${HOME}/.config/ungoogled-chromium | 649 | blacklist ${HOME}/.config/ungoogled-chromium |
648 | blacklist ${HOME}/.config/uzbl | 650 | blacklist ${HOME}/.config/uzbl |
649 | blacklist ${HOME}/.config/viewnior | 651 | blacklist ${HOME}/.config/viewnior |
@@ -872,6 +874,7 @@ blacklist ${HOME}/.local/share/Zeal | |||
872 | blacklist ${HOME}/.local/share/agenda | 874 | blacklist ${HOME}/.local/share/agenda |
873 | blacklist ${HOME}/.local/share/akonadi* | 875 | blacklist ${HOME}/.local/share/akonadi* |
874 | blacklist ${HOME}/.local/share/akregator | 876 | blacklist ${HOME}/.local/share/akregator |
877 | blacklist ${HOME}/.local/share/applications/lobster | ||
875 | blacklist ${HOME}/.local/share/apps/korganizer | 878 | blacklist ${HOME}/.local/share/apps/korganizer |
876 | blacklist ${HOME}/.local/share/aspyr-media | 879 | blacklist ${HOME}/.local/share/aspyr-media |
877 | blacklist ${HOME}/.local/share/audacity | 880 | blacklist ${HOME}/.local/share/audacity |
diff --git a/etc/profile-a-l/lobster.profile b/etc/profile-a-l/lobster.profile index 2b0fc5275..0567f5057 100644 --- a/etc/profile-a-l/lobster.profile +++ b/etc/profile-a-l/lobster.profile | |||
@@ -8,8 +8,14 @@ include lobster.local | |||
8 | # added by included profile | 8 | # added by included profile |
9 | #include globals.local | 9 | #include globals.local |
10 | 10 | ||
11 | ignore private-dev | ||
12 | |||
13 | noblacklist ${HOME}/.cache/ueberzugpp | ||
11 | noblacklist ${HOME}/.config/lobster | 14 | noblacklist ${HOME}/.config/lobster |
15 | noblacklist ${HOME}/.config/ueberzugpp | ||
16 | noblacklist ${HOME}/.local/share/applications/lobster | ||
12 | noblacklist ${HOME}/.local/share/lobster | 17 | noblacklist ${HOME}/.local/share/lobster |
18 | noblacklist ${PATH}/openssl | ||
13 | 19 | ||
14 | # Allow /bin/sh (blacklisted by disable-shell.inc) | 20 | # Allow /bin/sh (blacklisted by disable-shell.inc) |
15 | include allow-bin-sh.inc | 21 | include allow-bin-sh.inc |
@@ -19,7 +25,11 @@ include disable-xdg.inc | |||
19 | 25 | ||
20 | mkdir ${HOME}/.config/lobster | 26 | mkdir ${HOME}/.config/lobster |
21 | mkdir ${HOME}/.local/share/lobster | 27 | mkdir ${HOME}/.local/share/lobster |
28 | whitelist ${DOWNLOADS} | ||
29 | whitelist ${HOME}/.cache/ueberzugpp | ||
22 | whitelist ${HOME}/.config/lobster | 30 | whitelist ${HOME}/.config/lobster |
31 | whitelist ${HOME}/.config/ueberzugpp | ||
32 | whitelist ${HOME}/.local/share/applications/lobster | ||
23 | whitelist ${HOME}/.local/share/lobster | 33 | whitelist ${HOME}/.local/share/lobster |
24 | include whitelist-run-common.inc | 34 | include whitelist-run-common.inc |
25 | include whitelist-runuser-common.inc | 35 | include whitelist-runuser-common.inc |
@@ -30,7 +40,7 @@ noprinters | |||
30 | notv | 40 | notv |
31 | 41 | ||
32 | disable-mnt | 42 | disable-mnt |
33 | private-bin curl,cut,fzf,grep,head,lobster,mv,patch,rm,sed,sh,tail,tput,tr,uname | 43 | private-bin base64,bash,cat,command,curl,cut,date,dirname,echo,ffmpeg,ffprobe,find,fzf,grep,head,hxunent,ln,lobster,ls,mkdir,mkfifo,nano,nohup,openssl,patch,pgrep,ps,rm,rofi,sed,sh,sleep,socat,tail,tee,tput,tr,ueberzugpp,uname,uuidgen,vim,wc |
34 | #private-cache | 44 | #private-cache |
35 | private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,machine-id,mime.types,nsswitch.conf,pango,pki,protocols,pulse,resolv.conf,rpc,services,ssl,X11,xdg | 45 | private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,machine-id,mime.types,nsswitch.conf,pango,pki,protocols,pulse,resolv.conf,rpc,services,ssl,X11,xdg |
36 | private-tmp | 46 | private-tmp |