diff options
-rw-r--r-- | etc/inc/disable-common.inc | 1 | ||||
-rw-r--r-- | etc/profile-a-l/librewolf-nightly.profile | 3 | ||||
-rw-r--r-- | etc/profile-a-l/librewolf.profile | 34 | ||||
-rw-r--r-- | etc/profile-a-l/sway.profile | 19 |
4 files changed, 54 insertions, 3 deletions
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc index 52534a9e9..35f89e11b 100644 --- a/etc/inc/disable-common.inc +++ b/etc/inc/disable-common.inc | |||
@@ -34,6 +34,7 @@ blacklist ${HOME}/.config/autostart | |||
34 | blacklist ${HOME}/.config/autostart-scripts | 34 | blacklist ${HOME}/.config/autostart-scripts |
35 | blacklist ${HOME}/.config/awesome | 35 | blacklist ${HOME}/.config/awesome |
36 | blacklist ${HOME}/.config/i3 | 36 | blacklist ${HOME}/.config/i3 |
37 | blacklist ${HOME}/.config/sway | ||
37 | blacklist ${HOME}/.config/lxsession/LXDE/autostart | 38 | blacklist ${HOME}/.config/lxsession/LXDE/autostart |
38 | blacklist ${HOME}/.config/openbox | 39 | blacklist ${HOME}/.config/openbox |
39 | blacklist ${HOME}/.config/plasma-workspace | 40 | blacklist ${HOME}/.config/plasma-workspace |
diff --git a/etc/profile-a-l/librewolf-nightly.profile b/etc/profile-a-l/librewolf-nightly.profile index e6c3da608..72df5a52a 100644 --- a/etc/profile-a-l/librewolf-nightly.profile +++ b/etc/profile-a-l/librewolf-nightly.profile | |||
@@ -6,5 +6,8 @@ include librewolf-nightly.local | |||
6 | # added by included profile | 6 | # added by included profile |
7 | #include globals.local | 7 | #include globals.local |
8 | 8 | ||
9 | # Add the next line to your librewolf-nightly.local to enable private-bin. | ||
10 | #private-bin librewolf-nightly | ||
11 | |||
9 | # Redirect | 12 | # Redirect |
10 | include librewolf.profile | 13 | include librewolf.profile |
diff --git a/etc/profile-a-l/librewolf.profile b/etc/profile-a-l/librewolf.profile index 8e891a930..0934e1271 100644 --- a/etc/profile-a-l/librewolf.profile +++ b/etc/profile-a-l/librewolf.profile | |||
@@ -18,12 +18,40 @@ whitelist ${HOME}/.librewolf | |||
18 | #noblacklist ${HOME}/.mozilla | 18 | #noblacklist ${HOME}/.mozilla |
19 | #whitelist ${HOME}/.mozilla | 19 | #whitelist ${HOME}/.mozilla |
20 | 20 | ||
21 | # librewolf requires a shell to launch on Arch. We can possibly remove sh though. | 21 | # Uncomment or put in your librewolf.local one of the following whitelist to enable KeePassXC Plugin |
22 | # Add the next line to your librewolf.local to enable private-bin. | 22 | # NOTE: start KeePassXC before Librewolf and keep it open to allow communication between them |
23 | #private-bin bash,dbus-launch,dbus-send,env,librewolf,python*,sh,which | 23 | #whitelist ${RUNUSER}/kpxc_server |
24 | #whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer | ||
25 | |||
26 | whitelist /usr/share/doc | ||
27 | whitelist /usr/share/gtk-doc/html | ||
28 | whitelist /usr/share/mozilla | ||
29 | whitelist /usr/share/webext | ||
30 | include whitelist-usr-share-common.inc | ||
31 | |||
32 | # Add the next line to your librewolf.local to enable private-bin (Arch Linux). | ||
33 | #private-bin dbus-launch,dbus-send,librewolf,sh | ||
24 | # Add the next line to your librewolf.local to enable private-etc. Note | 34 | # Add the next line to your librewolf.local to enable private-etc. Note |
25 | # that private-etc must first be enabled in firefox-common.local. | 35 | # that private-etc must first be enabled in firefox-common.local. |
26 | #private-etc librewolf | 36 | #private-etc librewolf |
27 | 37 | ||
38 | dbus-user filter | ||
39 | # Uncomment or put in your librewolf.local to enable native notifications. | ||
40 | #dbus-user.talk org.freedesktop.Notifications | ||
41 | # Uncomment or put in your librewolf.local to allow to inhibit screensavers | ||
42 | #dbus-user.talk org.freedesktop.ScreenSaver | ||
43 | # Uncomment or put in your librewolf.local for plasma browser integration | ||
44 | #dbus-user.own org.mpris.MediaPlayer2.plasma-browser-integration | ||
45 | #dbus-user.talk org.kde.JobViewServer | ||
46 | #dbus-user.talk org.kde.kuiserver | ||
47 | # Uncomment or put in your librewolf.local to allow screen sharing under wayland. | ||
48 | #whitelist ${RUNUSER}/pipewire-0 | ||
49 | #dbus-user.talk org.freedesktop.portal.* | ||
50 | # Also uncomment or put in your librewolf.local if screen sharing sharing still | ||
51 | # does not work with the above lines (might depend on the portal | ||
52 | # implementation) | ||
53 | #ignore noroot | ||
54 | ignore dbus-user none | ||
55 | |||
28 | # Redirect | 56 | # Redirect |
29 | include firefox-common.profile | 57 | include firefox-common.profile |
diff --git a/etc/profile-a-l/sway.profile b/etc/profile-a-l/sway.profile new file mode 100644 index 000000000..4637419bf --- /dev/null +++ b/etc/profile-a-l/sway.profile | |||
@@ -0,0 +1,19 @@ | |||
1 | # Firejail profile for Sway | ||
2 | # Description: i3-compatible Wayland compositor | ||
3 | # This file is overwritten after every install/update | ||
4 | # Persistent local customizations | ||
5 | include sway.local | ||
6 | # Persistent global definitions | ||
7 | include globals.local | ||
8 | |||
9 | # all applications started in sway will run in this profile | ||
10 | noblacklist ${HOME}/.config/sway | ||
11 | # sway uses ~/.config/i3 as fallback if there is no ~/.config/sway | ||
12 | noblacklist ${HOME}/.config/i3 | ||
13 | include disable-common.inc | ||
14 | |||
15 | caps.drop all | ||
16 | netfilter | ||
17 | noroot | ||
18 | protocol unix,inet,inet6 | ||
19 | seccomp | ||