aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2019-08-22 15:16:43 +0000
committerLibravatar GitHub <noreply@github.com>2019-08-22 15:16:43 +0000
commit7582aaffce1e2266e3ff163495c39d001ab0ef21 (patch)
treea0ae36f8aee4e482af9e356efdf245bf59ac59f3 /etc
parentupdate syscalls.txt (diff)
parentadd allow-common-devel to more profiles (diff)
downloadfirejail-7582aaffce1e2266e3ff163495c39d001ab0ef21.tar.gz
firejail-7582aaffce1e2266e3ff163495c39d001ab0ef21.tar.zst
firejail-7582aaffce1e2266e3ff163495c39d001ab0ef21.zip
Merge pull request #2921 from rusty-snake/allow-common-devel.inc
Introduce allow-common-devel.inc
Diffstat (limited to 'etc')
-rw-r--r--etc/allow-common-devel.inc17
-rw-r--r--etc/android-studio.profile8
-rw-r--r--etc/aosp.profile8
-rw-r--r--etc/atom.profile14
-rw-r--r--etc/brackets.profile10
-rw-r--r--etc/code.profile11
-rw-r--r--etc/emacs.profile6
-rw-r--r--etc/geany.profile9
-rw-r--r--etc/gedit.profile9
-rw-r--r--etc/gnome-builder.profile10
-rw-r--r--etc/idea.sh.profile8
-rw-r--r--etc/pluma.profile6
-rw-r--r--etc/pycharm-community.profile6
-rw-r--r--etc/templates/profile.template3
-rw-r--r--etc/vim.profile6
-rw-r--r--etc/webstorm.profile7
16 files changed, 61 insertions, 77 deletions
diff --git a/etc/allow-common-devel.inc b/etc/allow-common-devel.inc
new file mode 100644
index 000000000..1d794462c
--- /dev/null
+++ b/etc/allow-common-devel.inc
@@ -0,0 +1,17 @@
1# Rust
2noblacklist ${HOME}/.cargo/config
3noblacklist ${HOME}/.cargo/registry
4
5# Git
6noblacklist ${HOME}/.config/git
7noblacklist ${HOME}/.gitconfig
8noblacklist ${HOME}/.git-credentials
9
10# Python
11noblacklist ${HOME}/.python-history
12noblacklist ${HOME}/.python_history
13noblacklist ${HOME}/.pythonhist
14
15# Java
16noblacklist ${HOME}/.gradle
17noblacklist ${HOME}/.java
diff --git a/etc/android-studio.profile b/etc/android-studio.profile
index ff7fb6711..2e4e564dd 100644
--- a/etc/android-studio.profile
+++ b/etc/android-studio.profile
@@ -7,17 +7,15 @@ include globals.local
7 7
8noblacklist ${HOME}/.AndroidStudio* 8noblacklist ${HOME}/.AndroidStudio*
9noblacklist ${HOME}/.android 9noblacklist ${HOME}/.android
10noblacklist ${HOME}/.config/git
11noblacklist ${HOME}/.gitconfig
12noblacklist ${HOME}/.git-credentials
13noblacklist ${HOME}/.gradle
14noblacklist ${HOME}/.jack-server 10noblacklist ${HOME}/.jack-server
15noblacklist ${HOME}/.jack-settings 11noblacklist ${HOME}/.jack-settings
16noblacklist ${HOME}/.java
17noblacklist ${HOME}/.local/share/JetBrains 12noblacklist ${HOME}/.local/share/JetBrains
18noblacklist ${HOME}/.ssh 13noblacklist ${HOME}/.ssh
19noblacklist ${HOME}/.tooling 14noblacklist ${HOME}/.tooling
20 15
16# Allows files commonly used by IDEs
17include allow-common-devel.inc
18
21include disable-common.inc 19include disable-common.inc
22include disable-passwdmgr.inc 20include disable-passwdmgr.inc
23include disable-programs.inc 21include disable-programs.inc
diff --git a/etc/aosp.profile b/etc/aosp.profile
index 701bf4733..a5b1ba9f1 100644
--- a/etc/aosp.profile
+++ b/etc/aosp.profile
@@ -7,18 +7,16 @@ include globals.local
7 7
8noblacklist ${HOME}/.android 8noblacklist ${HOME}/.android
9noblacklist ${HOME}/.bash_history 9noblacklist ${HOME}/.bash_history
10noblacklist ${HOME}/.config/git
11noblacklist ${HOME}/.gitconfig
12noblacklist ${HOME}/.git-credentials
13noblacklist ${HOME}/.gradle
14noblacklist ${HOME}/.jack-server 10noblacklist ${HOME}/.jack-server
15noblacklist ${HOME}/.jack-settings 11noblacklist ${HOME}/.jack-settings
16noblacklist ${HOME}/.java
17noblacklist ${HOME}/.repo_.gitconfig.json 12noblacklist ${HOME}/.repo_.gitconfig.json
18noblacklist ${HOME}/.repoconfig 13noblacklist ${HOME}/.repoconfig
19noblacklist ${HOME}/.ssh 14noblacklist ${HOME}/.ssh
20noblacklist ${HOME}/.tooling 15noblacklist ${HOME}/.tooling
21 16
17# Allows files commonly used by IDEs
18include allow-common-devel.inc
19
22include disable-common.inc 20include disable-common.inc
23include disable-passwdmgr.inc 21include disable-passwdmgr.inc
24include disable-programs.inc 22include disable-programs.inc
diff --git a/etc/atom.profile b/etc/atom.profile
index 4bb37552b..b9cb49d08 100644
--- a/etc/atom.profile
+++ b/etc/atom.profile
@@ -8,17 +8,9 @@ include globals.local
8 8
9noblacklist ${HOME}/.atom 9noblacklist ${HOME}/.atom
10noblacklist ${HOME}/.config/Atom 10noblacklist ${HOME}/.config/Atom
11# allow rust 11
12noblacklist ${HOME}/.cargo/config 12# Allows files commonly used by IDEs
13noblacklist ${HOME}/.cargo/registry 13include allow-common-devel.inc
14# allow git config files
15noblacklist ${HOME}/.config/git
16noblacklist ${HOME}/.gitconfig
17noblacklist ${HOME}/.git-credentials
18# allow python dev files
19noblacklist ${HOME}/.python-history
20noblacklist ${HOME}/.python_history
21noblacklist ${HOME}/.pythonhist
22 14
23include disable-common.inc 15include disable-common.inc
24include disable-exec.inc 16include disable-exec.inc
diff --git a/etc/brackets.profile b/etc/brackets.profile
index 3e157d841..b7d560bbc 100644
--- a/etc/brackets.profile
+++ b/etc/brackets.profile
@@ -8,13 +8,9 @@ include globals.local
8noblacklist ${HOME}/.config/Brackets 8noblacklist ${HOME}/.config/Brackets
9#noblacklist /opt/brackets/ 9#noblacklist /opt/brackets/
10#noblacklist /opt/google/ 10#noblacklist /opt/google/
11# Uncomment the next two lines if you are developing rust. 11
12# or put it in your brackets.local 12# Allows files commonly used by IDEs
13#noblacklist ${HOME}/.cargo/config 13include allow-common-devel.inc
14#noblacklist ${HOME}/.cargo/registry
15noblacklist ${HOME}/.config/git
16noblacklist ${HOME}/.gitconfig
17noblacklist ${HOME}/.git-credentials
18 14
19include disable-common.inc 15include disable-common.inc
20include disable-passwdmgr.inc 16include disable-passwdmgr.inc
diff --git a/etc/code.profile b/etc/code.profile
index 76320d56b..7ac4e1619 100644
--- a/etc/code.profile
+++ b/etc/code.profile
@@ -5,19 +5,14 @@ include code.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.cargo/config
9noblacklist ${HOME}/.cargo/registry
10noblacklist ${HOME}/.config/Code 8noblacklist ${HOME}/.config/Code
11noblacklist ${HOME}/.config/Code - OSS 9noblacklist ${HOME}/.config/Code - OSS
12noblacklist ${HOME}/.config/git
13noblacklist ${HOME}/.gitconfig
14noblacklist ${HOME}/.git-credentials
15noblacklist ${HOME}/.python-history
16noblacklist ${HOME}/.python_history
17noblacklist ${HOME}/.pythonhist
18noblacklist ${HOME}/.vscode 10noblacklist ${HOME}/.vscode
19noblacklist ${HOME}/.vscode-oss 11noblacklist ${HOME}/.vscode-oss
20 12
13# Allows files commonly used by IDEs
14include allow-common-devel.inc
15
21include disable-common.inc 16include disable-common.inc
22include disable-passwdmgr.inc 17include disable-passwdmgr.inc
23include disable-programs.inc 18include disable-programs.inc
diff --git a/etc/emacs.profile b/etc/emacs.profile
index 95a4dd6b2..071a9f5d2 100644
--- a/etc/emacs.profile
+++ b/etc/emacs.profile
@@ -11,9 +11,9 @@ noblacklist ${HOME}/.emacs.d
11# if you need gpg uncomment the following line 11# if you need gpg uncomment the following line
12# or put it into your emacs.local 12# or put it into your emacs.local
13#noblacklist ${HOME}/.gnupg 13#noblacklist ${HOME}/.gnupg
14noblacklist ${HOME}/.python-history 14
15noblacklist ${HOME}/.python_history 15# Allows files commonly used by IDEs
16noblacklist ${HOME}/.pythonhist 16include allow-common-devel.inc
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-passwdmgr.inc 19include disable-passwdmgr.inc
diff --git a/etc/geany.profile b/etc/geany.profile
index 53a718d63..31599e32a 100644
--- a/etc/geany.profile
+++ b/etc/geany.profile
@@ -7,12 +7,9 @@ include geany.local
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/geany 9noblacklist ${HOME}/.config/geany
10noblacklist ${HOME}/.config/git 10
11noblacklist ${HOME}/.gitconfig 11# Allows files commonly used by IDEs
12noblacklist ${HOME}/.git-credentials 12include allow-common-devel.inc
13noblacklist ${HOME}/.python-history
14noblacklist ${HOME}/.python_history
15noblacklist ${HOME}/.pythonhist
16 13
17include disable-common.inc 14include disable-common.inc
18include disable-passwdmgr.inc 15include disable-passwdmgr.inc
diff --git a/etc/gedit.profile b/etc/gedit.profile
index 763d33eb1..837396654 100644
--- a/etc/gedit.profile
+++ b/etc/gedit.profile
@@ -8,12 +8,9 @@ include globals.local
8 8
9noblacklist ${HOME}/.config/enchant 9noblacklist ${HOME}/.config/enchant
10noblacklist ${HOME}/.config/gedit 10noblacklist ${HOME}/.config/gedit
11noblacklist ${HOME}/.config/git 11
12noblacklist ${HOME}/.gitconfig 12# Allows files commonly used by IDEs
13noblacklist ${HOME}/.git-credentials 13include allow-common-devel.inc
14noblacklist ${HOME}/.python-history
15noblacklist ${HOME}/.python_history
16noblacklist ${HOME}/.pythonhist
17 14
18include disable-common.inc 15include disable-common.inc
19# include disable-devel.inc 16# include disable-devel.inc
diff --git a/etc/gnome-builder.profile b/etc/gnome-builder.profile
index 46281af6e..ab2ca183b 100644
--- a/etc/gnome-builder.profile
+++ b/etc/gnome-builder.profile
@@ -6,14 +6,8 @@ include gnome-builder.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cargo/config 9# Allows files commonly used by IDEs
10noblacklist ${HOME}/.cargo/registry 10include allow-common-devel.inc
11noblacklist ${HOME}/.config/git
12noblacklist ${HOME}/.gitconfig
13noblacklist ${HOME}/.git-credentials
14noblacklist ${HOME}/.python-history
15noblacklist ${HOME}/.python_history
16noblacklist ${HOME}/.pythonhist
17 11
18include disable-common.inc 12include disable-common.inc
19include disable-passwdmgr.inc 13include disable-passwdmgr.inc
diff --git a/etc/idea.sh.profile b/etc/idea.sh.profile
index 4f3047e08..a7d0d531f 100644
--- a/etc/idea.sh.profile
+++ b/etc/idea.sh.profile
@@ -7,17 +7,15 @@ include globals.local
7 7
8noblacklist ${HOME}/.IdeaIC* 8noblacklist ${HOME}/.IdeaIC*
9noblacklist ${HOME}/.android 9noblacklist ${HOME}/.android
10noblacklist ${HOME}/.config/git
11noblacklist ${HOME}/.gitconfig
12noblacklist ${HOME}/.git-credentials
13noblacklist ${HOME}/.gradle
14noblacklist ${HOME}/.jack-server 10noblacklist ${HOME}/.jack-server
15noblacklist ${HOME}/.jack-settings 11noblacklist ${HOME}/.jack-settings
16noblacklist ${HOME}/.java
17noblacklist ${HOME}/.local/share/JetBrains 12noblacklist ${HOME}/.local/share/JetBrains
18noblacklist ${HOME}/.ssh 13noblacklist ${HOME}/.ssh
19noblacklist ${HOME}/.tooling 14noblacklist ${HOME}/.tooling
20 15
16# Allows files commonly used by IDEs
17include allow-common-devel.inc
18
21include disable-common.inc 19include disable-common.inc
22include disable-passwdmgr.inc 20include disable-passwdmgr.inc
23include disable-programs.inc 21include disable-programs.inc
diff --git a/etc/pluma.profile b/etc/pluma.profile
index 4c32c2979..dadfcc44e 100644
--- a/etc/pluma.profile
+++ b/etc/pluma.profile
@@ -8,9 +8,9 @@ include globals.local
8 8
9noblacklist ${HOME}/.config/enchant 9noblacklist ${HOME}/.config/enchant
10noblacklist ${HOME}/.config/pluma 10noblacklist ${HOME}/.config/pluma
11noblacklist ${HOME}/.python-history 11
12noblacklist ${HOME}/.python_history 12# Allows files commonly used by IDEs
13noblacklist ${HOME}/.pythonhist 13include allow-common-devel.inc
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/pycharm-community.profile b/etc/pycharm-community.profile
index e1d55c89e..9ee426a95 100644
--- a/etc/pycharm-community.profile
+++ b/etc/pycharm-community.profile
@@ -6,13 +6,13 @@ include pycharm-community.local
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.PyCharmCE* 8noblacklist ${HOME}/.PyCharmCE*
9noblacklist ${HOME}/.python-history
10noblacklist ${HOME}/.python_history
11noblacklist ${HOME}/.pythonhist
12 9
13# Allow java (blacklisted by disable-devel.inc) 10# Allow java (blacklisted by disable-devel.inc)
14include allow-java.inc 11include allow-java.inc
15 12
13# Allows files commonly used by IDEs
14include allow-common-devel.inc
15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
18include disable-passwdmgr.inc 18include disable-passwdmgr.inc
diff --git a/etc/templates/profile.template b/etc/templates/profile.template
index 2fc5c3ef1..0d67e222f 100644
--- a/etc/templates/profile.template
+++ b/etc/templates/profile.template
@@ -87,6 +87,9 @@ include globals.local
87# Allow lua (blacklisted by disable-interpreters.inc) 87# Allow lua (blacklisted by disable-interpreters.inc)
88#include allow-lua.inc 88#include allow-lua.inc
89 89
90# Allows files commonly used by IDEs
91#include allow-common-devel.inc
92
90#include disable-common.inc 93#include disable-common.inc
91#include disable-devel.inc 94#include disable-devel.inc
92#include disable-exec.inc 95#include disable-exec.inc
diff --git a/etc/vim.profile b/etc/vim.profile
index 957dc91aa..d27a9a633 100644
--- a/etc/vim.profile
+++ b/etc/vim.profile
@@ -6,13 +6,13 @@ include vim.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.python-history
10noblacklist ${HOME}/.python_history
11noblacklist ${HOME}/.pythonhist
12noblacklist ${HOME}/.vim 9noblacklist ${HOME}/.vim
13noblacklist ${HOME}/.viminfo 10noblacklist ${HOME}/.viminfo
14noblacklist ${HOME}/.vimrc 11noblacklist ${HOME}/.vimrc
15 12
13# Allows files commonly used by IDEs
14include allow-common-devel.inc
15
16include disable-common.inc 16include disable-common.inc
17include disable-passwdmgr.inc 17include disable-passwdmgr.inc
18include disable-programs.inc 18include disable-programs.inc
diff --git a/etc/webstorm.profile b/etc/webstorm.profile
index e820bae00..fc4e8e571 100644
--- a/etc/webstorm.profile
+++ b/etc/webstorm.profile
@@ -7,14 +7,13 @@ include globals.local
7 7
8noblacklist ${HOME}/.WebStorm* 8noblacklist ${HOME}/.WebStorm*
9noblacklist ${HOME}/.android 9noblacklist ${HOME}/.android
10noblacklist ${HOME}/.config/git
11noblacklist ${HOME}/.gitconfig
12noblacklist ${HOME}/.git-credentials
13noblacklist ${HOME}/.gradle
14noblacklist ${HOME}/.local/share/JetBrains 10noblacklist ${HOME}/.local/share/JetBrains
15noblacklist ${HOME}/.ssh 11noblacklist ${HOME}/.ssh
16noblacklist ${HOME}/.tooling 12noblacklist ${HOME}/.tooling
17 13
14# Allows files commonly used by IDEs
15include allow-common-devel.inc
16
18noblacklist ${PATH}/node 17noblacklist ${PATH}/node
19noblacklist ${HOME}/.nvm 18noblacklist ${HOME}/.nvm
20 19
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-05 12:31:50 +0000