diff options
-rw-r--r-- | etc/disable-programs.inc | 1 | ||||
-rw-r--r-- | etc/pavucontrol-qt.profile | 19 | ||||
-rw-r--r-- | etc/pavucontrol.profile | 11 | ||||
-rw-r--r-- | src/firecfg/firecfg.config | 1 |
4 files changed, 26 insertions, 6 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 88113941c..3e6706101 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -254,6 +254,7 @@ blacklist ${HOME}/.config/opera-beta | |||
254 | blacklist ${HOME}/.config/orage | 254 | blacklist ${HOME}/.config/orage |
255 | blacklist ${HOME}/.config/org.kde.gwenviewrc | 255 | blacklist ${HOME}/.config/org.kde.gwenviewrc |
256 | blacklist ${HOME}/.config/pavucontrol.ini | 256 | blacklist ${HOME}/.config/pavucontrol.ini |
257 | blacklist ${HOME}/.config/pavucontrol-qt | ||
257 | blacklist ${HOME}/.config/pcmanfm | 258 | blacklist ${HOME}/.config/pcmanfm |
258 | blacklist ${HOME}/.config/pdfmod | 259 | blacklist ${HOME}/.config/pdfmod |
259 | blacklist ${HOME}/.config/Pinta | 260 | blacklist ${HOME}/.config/Pinta |
diff --git a/etc/pavucontrol-qt.profile b/etc/pavucontrol-qt.profile new file mode 100644 index 000000000..f96ba14d2 --- /dev/null +++ b/etc/pavucontrol-qt.profile | |||
@@ -0,0 +1,19 @@ | |||
1 | # Firejail profile for pavucontrol-qt | ||
2 | # Description: PulseAudio Volume Control [Qt] | ||
3 | # This file is overwritten after every install/update | ||
4 | # Persistent local customizations | ||
5 | include pavucontrol-qt.local | ||
6 | # Persistent global definitions | ||
7 | # added by included profile | ||
8 | #include globals.local | ||
9 | |||
10 | noblacklist ${HOME}/.config/pavucontrol-qt | ||
11 | |||
12 | mkdir ${HOME}/.config/pavucontrol-qt | ||
13 | whitelist ${HOME}/.config/pavucontrol-qt | ||
14 | |||
15 | private-bin pavucontrol-qt | ||
16 | ignore private-lib | ||
17 | |||
18 | # Redirect | ||
19 | include pavucontrol.profile | ||
diff --git a/etc/pavucontrol.profile b/etc/pavucontrol.profile index 3fd4f3668..621fef49f 100644 --- a/etc/pavucontrol.profile +++ b/etc/pavucontrol.profile | |||
@@ -1,5 +1,5 @@ | |||
1 | # Firejail profile for pavucontrol | 1 | # Firejail profile for pavucontrol |
2 | # Description: PulseAudio Volume Control | 2 | # Description: PulseAudio Volume Control [GTK] |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | # Persistent local customizations | 4 | # Persistent local customizations |
5 | include pavucontrol.local | 5 | include pavucontrol.local |
@@ -16,15 +16,14 @@ include disable-passwdmgr.inc | |||
16 | include disable-programs.inc | 16 | include disable-programs.inc |
17 | include disable-xdg.inc | 17 | include disable-xdg.inc |
18 | 18 | ||
19 | mkdir ${HOME}/.config/pavucontrol.ini | 19 | mkfile ${HOME}/.config/pavucontrol.ini |
20 | whitelist ${HOME}/.config/pavucontrol.ini | 20 | whitelist ${HOME}/.config/pavucontrol.ini |
21 | include whitelist-common.inc | 21 | include whitelist-common.inc |
22 | include whitelist-var-common.inc | 22 | include whitelist-var-common.inc |
23 | 23 | ||
24 | apparmor | 24 | apparmor |
25 | caps.drop all | 25 | caps.drop all |
26 | #ipc-namespace | 26 | netfilter |
27 | net none | ||
28 | no3d | 27 | no3d |
29 | nodbus | 28 | nodbus |
30 | nodvd | 29 | nodvd |
@@ -34,7 +33,7 @@ noroot | |||
34 | notv | 33 | notv |
35 | nou2f | 34 | nou2f |
36 | novideo | 35 | novideo |
37 | protocol unix | 36 | protocol unix,inet,inet6 |
38 | seccomp | 37 | seccomp |
39 | shell none | 38 | shell none |
40 | 39 | ||
@@ -42,7 +41,7 @@ disable-mnt | |||
42 | private-bin pavucontrol | 41 | private-bin pavucontrol |
43 | private-cache | 42 | private-cache |
44 | private-dev | 43 | private-dev |
45 | private-etc alternatives,asound.conf,fonts,machine-id,pulse | 44 | private-etc alternatives,asound.conf,avahi,fonts,machine-id,pulse |
46 | private-lib | 45 | private-lib |
47 | private-tmp | 46 | private-tmp |
48 | 47 | ||
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 10a3340bd..04bf123ad 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config | |||
@@ -437,6 +437,7 @@ pandoc | |||
437 | parole | 437 | parole |
438 | patch | 438 | patch |
439 | pavucontrol | 439 | pavucontrol |
440 | pavucontrol-qt | ||
440 | pdfchain | 441 | pdfchain |
441 | pdfmod | 442 | pdfmod |
442 | pdfsam | 443 | pdfsam |