diff options
author | 2023-08-11 17:37:00 -0400 | |
---|---|---|
committer | 2023-08-11 17:37:00 -0400 | |
commit | 0e11f39bcb41e8df65b0ba38b276b4e5198ba32a (patch) | |
tree | 7f7d1d05fffc1a6a47035df244164dbd905626b9 /src | |
parent | nettrace stats (diff) | |
parent | profiles: improvements to profiles using private (#5946) (diff) | |
download | firejail-0e11f39bcb41e8df65b0ba38b276b4e5198ba32a.tar.gz firejail-0e11f39bcb41e8df65b0ba38b276b4e5198ba32a.tar.zst firejail-0e11f39bcb41e8df65b0ba38b276b4e5198ba32a.zip |
Merge branch 'master' of ssh://github.com/netblue30/firejail
Diffstat (limited to 'src')
-rw-r--r-- | src/firecfg/firecfg.config | 104 |
1 files changed, 55 insertions, 49 deletions
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index ce69738eb..7db4480b6 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config | |||
@@ -1,6 +1,8 @@ | |||
1 | # /etc/firejail/firecfg.config - firecfg utility configuration file | 1 | # /etc/firejail/firecfg.config - firecfg utility configuration file |
2 | # This is the list of programs in alphabetical order handled by firecfg utility | 2 | # This is the list of programs in alphabetical order handled by firecfg utility |
3 | # | 3 | # |
4 | # Note: Normal comment lines should start with `# ` and commented code lines | ||
5 | # should start with just `#` (no spaces). | ||
4 | 0ad | 6 | 0ad |
5 | 1password | 7 | 1password |
6 | 2048-qt | 8 | 2048-qt |
@@ -51,7 +53,7 @@ ani-cli | |||
51 | anydesk | 53 | anydesk |
52 | apktool | 54 | apktool |
53 | apostrophe | 55 | apostrophe |
54 | # ar - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 56 | #ar # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
55 | arch-audit | 57 | arch-audit |
56 | archaudit-report | 58 | archaudit-report |
57 | ardour4 | 59 | ardour4 |
@@ -63,9 +65,9 @@ arm | |||
63 | artha | 65 | artha |
64 | assogiate | 66 | assogiate |
65 | asunder | 67 | asunder |
66 | # atom | 68 | #atom |
67 | # atom-beta | 69 | #atom-beta |
68 | # atool - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 70 | #atool # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
69 | atril | 71 | atril |
70 | atril-previewer | 72 | atril-previewer |
71 | atril-thumbnailer | 73 | atril-thumbnailer |
@@ -112,10 +114,10 @@ brave-browser-beta | |||
112 | brave-browser-dev | 114 | brave-browser-dev |
113 | brave-browser-nightly | 115 | brave-browser-nightly |
114 | brave-browser-stable | 116 | brave-browser-stable |
115 | # bunzip2 - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 117 | #bunzip2 # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
116 | # bzcat - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 118 | #bzcat # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
117 | bzflag | 119 | bzflag |
118 | # bzip2 - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 120 | #bzip2 # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
119 | cachy-browser | 121 | cachy-browser |
120 | calibre | 122 | calibre |
121 | calligra | 123 | calligra |
@@ -145,12 +147,13 @@ chromium-freeworld | |||
145 | cin | 147 | cin |
146 | cinelerra | 148 | cinelerra |
147 | cinelerra-gg | 149 | cinelerra-gg |
150 | clac | ||
148 | clamdscan | 151 | clamdscan |
149 | clamdtop | 152 | clamdtop |
150 | clamscan | 153 | clamscan |
151 | clamtk | 154 | clamtk |
152 | clawsker | ||
153 | claws-mail | 155 | claws-mail |
156 | clawsker | ||
154 | clementine | 157 | clementine |
155 | clion | 158 | clion |
156 | clion-eap | 159 | clion-eap |
@@ -182,6 +185,8 @@ crow | |||
182 | cryptocat | 185 | cryptocat |
183 | cvlc | 186 | cvlc |
184 | cyberfox | 187 | cyberfox |
188 | d-feet | ||
189 | daisy | ||
185 | darktable | 190 | darktable |
186 | dconf-editor | 191 | dconf-editor |
187 | ddgr | 192 | ddgr |
@@ -191,7 +196,6 @@ deluge | |||
191 | desktopeditors | 196 | desktopeditors |
192 | devhelp | 197 | devhelp |
193 | dex2jar | 198 | dex2jar |
194 | d-feet | ||
195 | dia | 199 | dia |
196 | dig | 200 | dig |
197 | digikam | 201 | digikam |
@@ -235,14 +239,14 @@ enpass | |||
235 | eog | 239 | eog |
236 | eom | 240 | eom |
237 | ephemeral | 241 | ephemeral |
238 | #epiphany - see #2995 | 242 | #epiphany # see #2995 |
239 | equalx | 243 | equalx |
240 | et | 244 | et |
241 | etr | 245 | etr |
242 | evince | 246 | evince |
243 | evince-previewer | 247 | evince-previewer |
244 | evince-thumbnailer | 248 | evince-thumbnailer |
245 | #evolution - see #3647 | 249 | #evolution # see #3647 |
246 | exfalso | 250 | exfalso |
247 | exiftool | 251 | exiftool |
248 | falkon | 252 | falkon |
@@ -270,8 +274,8 @@ flacsplt | |||
270 | flameshot | 274 | flameshot |
271 | flashpeak-slimjet | 275 | flashpeak-slimjet |
272 | flowblade | 276 | flowblade |
273 | fontforge | ||
274 | font-manager | 277 | font-manager |
278 | fontforge | ||
275 | fossamail | 279 | fossamail |
276 | four-in-a-row | 280 | four-in-a-row |
277 | fractal | 281 | fractal |
@@ -318,7 +322,7 @@ git-cola | |||
318 | gitg | 322 | gitg |
319 | github-desktop | 323 | github-desktop |
320 | gitter | 324 | gitter |
321 | # gjs -- https://github.com/netblue30/firejail/issues/3333#issuecomment-612601102 | 325 | #gjs # https://github.com/netblue30/firejail/issues/3333#issuecomment-612601102 |
322 | gl-117 | 326 | gl-117 |
323 | glaxium | 327 | glaxium |
324 | globaltime | 328 | globaltime |
@@ -383,12 +387,12 @@ gradio | |||
383 | gramps | 387 | gramps |
384 | gravity-beams-and-evaporating-stars | 388 | gravity-beams-and-evaporating-stars |
385 | gthumb | 389 | gthumb |
386 | gtk2-youtube-viewer | ||
387 | gtk3-youtube-viewer | ||
388 | gtk-lbry-viewer | 390 | gtk-lbry-viewer |
389 | gtk-pipe-viewer | 391 | gtk-pipe-viewer |
390 | gtk-straw-viewer | 392 | gtk-straw-viewer |
391 | gtk-youtube-viewer | 393 | gtk-youtube-viewer |
394 | gtk2-youtube-viewer | ||
395 | gtk3-youtube-viewer | ||
392 | guayadeque | 396 | guayadeque |
393 | gucharmap | 397 | gucharmap |
394 | gummi | 398 | gummi |
@@ -409,8 +413,8 @@ icecat | |||
409 | icedove | 413 | icedove |
410 | iceweasel | 414 | iceweasel |
411 | idea | 415 | idea |
412 | ideaIC | ||
413 | idea.sh | 416 | idea.sh |
417 | ideaIC | ||
414 | imagej | 418 | imagej |
415 | img2txt | 419 | img2txt |
416 | impressive | 420 | impressive |
@@ -429,6 +433,7 @@ jdownloader | |||
429 | jerry | 433 | jerry |
430 | jitsi | 434 | jitsi |
431 | jitsi-meet-desktop | 435 | jitsi-meet-desktop |
436 | journal-viewer | ||
432 | jumpnbump | 437 | jumpnbump |
433 | jumpnbump-menu | 438 | jumpnbump-menu |
434 | k3b | 439 | k3b |
@@ -439,7 +444,7 @@ karbon | |||
439 | kate | 444 | kate |
440 | kazam | 445 | kazam |
441 | kcalc | 446 | kcalc |
442 | # kdeinit4 | 447 | #kdeinit4 |
443 | kdenlive | 448 | kdenlive |
444 | kdiff3 | 449 | kdiff3 |
445 | keepass | 450 | keepass |
@@ -449,7 +454,7 @@ keepassx2 | |||
449 | keepassxc | 454 | keepassxc |
450 | keepassxc-cli | 455 | keepassxc-cli |
451 | keepassxc-proxy | 456 | keepassxc-proxy |
452 | # kfind | 457 | #kfind |
453 | kget | 458 | kget |
454 | kid3 | 459 | kid3 |
455 | kid3-cli | 460 | kid3-cli |
@@ -466,15 +471,15 @@ kodi | |||
466 | konversation | 471 | konversation |
467 | kopete | 472 | kopete |
468 | krita | 473 | krita |
469 | # krunner | 474 | #krunner |
470 | ktorrent | 475 | ktorrent |
471 | ktouch | 476 | ktouch |
472 | kube | 477 | kube |
473 | # kwin_x11 | 478 | #kwin_x11 |
474 | kwrite | 479 | kwrite |
475 | lbry-viewer | 480 | lbry-viewer |
476 | leafpad | 481 | leafpad |
477 | # less - breaks man | 482 | #less # breaks man |
478 | librecad | 483 | librecad |
479 | libreoffice | 484 | libreoffice |
480 | librewolf | 485 | librewolf |
@@ -499,12 +504,12 @@ lollypop | |||
499 | lomath | 504 | lomath |
500 | loweb | 505 | loweb |
501 | lowriter | 506 | lowriter |
502 | # lrunzip - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 507 | #lrunzip # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
503 | # lrz - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 508 | #lrz # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
504 | # lrzcat - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 509 | #lrzcat # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
505 | # lrzip - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 510 | #lrzip # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
506 | # lrztar - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 511 | #lrztar # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
507 | # lrzuntar - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 512 | #lrzuntar # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
508 | luminance-hdr | 513 | luminance-hdr |
509 | lximage-qt | 514 | lximage-qt |
510 | lxmusic | 515 | lxmusic |
@@ -558,7 +563,6 @@ mp3wrap | |||
558 | mpDris2 | 563 | mpDris2 |
559 | mpg123 | 564 | mpg123 |
560 | mpg123-alsa | 565 | mpg123-alsa |
561 | mpg123.bin | ||
562 | mpg123-id3dump | 566 | mpg123-id3dump |
563 | mpg123-jack | 567 | mpg123-jack |
564 | mpg123-nas | 568 | mpg123-nas |
@@ -567,6 +571,7 @@ mpg123-oss | |||
567 | mpg123-portaudio | 571 | mpg123-portaudio |
568 | mpg123-pulse | 572 | mpg123-pulse |
569 | mpg123-strip | 573 | mpg123-strip |
574 | mpg123.bin | ||
570 | mplayer | 575 | mplayer |
571 | mpsyt | 576 | mpsyt |
572 | mpv | 577 | mpv |
@@ -635,11 +640,11 @@ onionshare-cli | |||
635 | onionshare-gui | 640 | onionshare-gui |
636 | ooffice | 641 | ooffice |
637 | ooviewdoc | 642 | ooviewdoc |
643 | open-invaders | ||
638 | openarena | 644 | openarena |
639 | openarena_ded | 645 | openarena_ded |
640 | opencity | 646 | opencity |
641 | openclonk | 647 | openclonk |
642 | open-invaders | ||
643 | openmw | 648 | openmw |
644 | openmw-launcher | 649 | openmw-launcher |
645 | openoffice.org | 650 | openoffice.org |
@@ -696,9 +701,9 @@ profanity | |||
696 | psi | 701 | psi |
697 | psi-plus | 702 | psi-plus |
698 | pybitmessage | 703 | pybitmessage |
699 | # pycharm-community - FB note: may enable later | 704 | #pycharm-community # FB note: may enable later |
700 | # pycharm-professional | 705 | #pycharm-professional |
701 | # pzstd - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 706 | #pzstd # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
702 | qbittorrent | 707 | qbittorrent |
703 | qcomicbook | 708 | qcomicbook |
704 | qemu-launcher | 709 | qemu-launcher |
@@ -720,6 +725,7 @@ qupzilla | |||
720 | qutebrowser | 725 | qutebrowser |
721 | raincat | 726 | raincat |
722 | rambox | 727 | rambox |
728 | reader | ||
723 | redeclipse | 729 | redeclipse |
724 | rednotebook | 730 | rednotebook |
725 | redshift | 731 | redshift |
@@ -778,22 +784,22 @@ sniffnet | |||
778 | snox | 784 | snox |
779 | soffice | 785 | soffice |
780 | sol | 786 | sol |
781 | soundconverter | ||
782 | sound-juicer | 787 | sound-juicer |
788 | soundconverter | ||
783 | spectacle | 789 | spectacle |
784 | spectral | 790 | spectral |
785 | spotify | 791 | spotify |
786 | sqlitebrowser | 792 | sqlitebrowser |
787 | ssh | 793 | ssh |
788 | # ssh-agent - problems on Arch with Fish shell (#1568) | 794 | #ssh-agent # problems on Arch with Fish shell (#1568) |
789 | standardnotes-desktop | 795 | standardnotes-desktop |
790 | start-tor-browser | 796 | start-tor-browser |
791 | steam | 797 | steam |
792 | steam-native | 798 | steam-native |
793 | steam-runtime | 799 | steam-runtime |
794 | stellarium | 800 | stellarium |
795 | strawberry | ||
796 | straw-viewer | 801 | straw-viewer |
802 | strawberry | ||
797 | strings | 803 | strings |
798 | studio.sh | 804 | studio.sh |
799 | subdownloader | 805 | subdownloader |
@@ -824,7 +830,6 @@ thunderbird-beta | |||
824 | thunderbird-wayland | 830 | thunderbird-wayland |
825 | tilp | 831 | tilp |
826 | tor-browser | 832 | tor-browser |
827 | torbrowser | ||
828 | tor-browser-ar | 833 | tor-browser-ar |
829 | tor-browser-ca | 834 | tor-browser-ca |
830 | tor-browser-cs | 835 | tor-browser-cs |
@@ -846,7 +851,6 @@ tor-browser-it | |||
846 | tor-browser-ja | 851 | tor-browser-ja |
847 | tor-browser-ka | 852 | tor-browser-ka |
848 | tor-browser-ko | 853 | tor-browser-ko |
849 | torbrowser-launcher | ||
850 | tor-browser-nb | 854 | tor-browser-nb |
851 | tor-browser-nl | 855 | tor-browser-nl |
852 | tor-browser-pl | 856 | tor-browser-pl |
@@ -857,6 +861,8 @@ tor-browser-tr | |||
857 | tor-browser-vi | 861 | tor-browser-vi |
858 | tor-browser-zh-cn | 862 | tor-browser-zh-cn |
859 | tor-browser-zh-tw | 863 | tor-browser-zh-tw |
864 | torbrowser | ||
865 | torbrowser-launcher | ||
860 | torcs | 866 | torcs |
861 | totem | 867 | totem |
862 | tracker | 868 | tracker |
@@ -886,7 +892,7 @@ uget-gtk | |||
886 | unbound | 892 | unbound |
887 | unf | 893 | unf |
888 | unknown-horizons | 894 | unknown-horizons |
889 | # unzstd - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 895 | #unzstd # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
890 | url-eater | 896 | url-eater |
891 | utox | 897 | utox |
892 | uudeview | 898 | uudeview |
@@ -899,10 +905,10 @@ vivaldi-beta | |||
899 | vivaldi-snapshot | 905 | vivaldi-snapshot |
900 | vivaldi-stable | 906 | vivaldi-stable |
901 | vlc | 907 | vlc |
902 | #vmplayer - unable to install kernel modules (see #5861) | 908 | #vmplayer # unable to install kernel modules (see #5861) |
903 | #vmware - unable to install kernel modules (see #5861) | 909 | #vmware # unable to install kernel modules (see #5861) |
904 | #vmware-player - unable to install kernel modules (see #5861) | 910 | #vmware-player # unable to install kernel modules (see #5861) |
905 | #vmware-workstation - unable to install kernel modules (see #5861) | 911 | #vmware-workstation # unable to install kernel modules (see #5861) |
906 | vscodium | 912 | vscodium |
907 | vulturesclaw | 913 | vulturesclaw |
908 | vultureseye | 914 | vultureseye |
@@ -966,8 +972,8 @@ yelp | |||
966 | youtube | 972 | youtube |
967 | youtube-dl | 973 | youtube-dl |
968 | youtube-dl-gui | 974 | youtube-dl-gui |
969 | youtubemusic-nativefier | ||
970 | youtube-viewer | 975 | youtube-viewer |
976 | youtubemusic-nativefier | ||
971 | yt-dlp | 977 | yt-dlp |
972 | ytmdesktop | 978 | ytmdesktop |
973 | zaproxy | 979 | zaproxy |
@@ -977,10 +983,10 @@ zeal | |||
977 | zim | 983 | zim |
978 | zlib-flate | 984 | zlib-flate |
979 | zoom | 985 | zoom |
980 | # zpaq - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 986 | #zpaq # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
981 | # zstd - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 987 | #zstd # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
982 | # zstdcat - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 988 | #zstdcat # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
983 | # zstdgrep - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 989 | #zstdgrep # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
984 | # zstdless - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 990 | #zstdless # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
985 | # zstdmt - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) | 991 | #zstdmt # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095) |
986 | zulip | 992 | zulip |