diff options
-rw-r--r-- | etc/snap.profile | 2 | ||||
-rw-r--r-- | smtube.profile | 37 | ||||
-rw-r--r-- | src/fseccomp/syscall.c | 1 |
3 files changed, 37 insertions, 3 deletions
diff --git a/etc/snap.profile b/etc/snap.profile index 238dffeab..38aef7c23 100644 --- a/etc/snap.profile +++ b/etc/snap.profile | |||
@@ -14,5 +14,3 @@ include /etc/firejail/disable-programs.inc | |||
14 | whitelist ${DOWNLOADS} | 14 | whitelist ${DOWNLOADS} |
15 | whitelist ~/snap | 15 | whitelist ~/snap |
16 | include /etc/firejail/whitelist-common.inc | 16 | include /etc/firejail/whitelist-common.inc |
17 | nodvd | ||
18 | notv | ||
diff --git a/smtube.profile b/smtube.profile new file mode 100644 index 000000000..2694dd5b0 --- /dev/null +++ b/smtube.profile | |||
@@ -0,0 +1,37 @@ | |||
1 | # Firejail profile for smtube | ||
2 | # This file is overwritten after every install/update | ||
3 | # Persistent local customizations | ||
4 | include /etc/firejail/smtube.local | ||
5 | # Persistent global definitions | ||
6 | include /etc/firejail/globals.local | ||
7 | |||
8 | noblacklist ${HOME}/.config/smplayer | ||
9 | noblacklist ${HOME}/.config/smtube | ||
10 | noblacklist ${HOME}/.config/mpv | ||
11 | noblacklist ${HOME}/.mplayer | ||
12 | noblacklist ${HOME}/.config/vlc | ||
13 | noblacklist ${HOME}/.local/share/vlc | ||
14 | |||
15 | include /etc/firejail/disable-common.inc | ||
16 | include /etc/firejail/disable-devel.inc | ||
17 | include /etc/firejail/disable-passwdmgr.inc | ||
18 | include /etc/firejail/disable-programs.inc | ||
19 | |||
20 | caps.drop all | ||
21 | netfilter | ||
22 | nodvd | ||
23 | notv | ||
24 | novideo | ||
25 | nogroups | ||
26 | nonewprivs | ||
27 | noroot | ||
28 | protocol unix,inet,inet6,netlink | ||
29 | seccomp | ||
30 | shell none | ||
31 | |||
32 | #no private-bin because users can add their own players to smtube and that would prevent that | ||
33 | private-dev | ||
34 | private-tmp | ||
35 | |||
36 | noexec ${HOME} | ||
37 | noexec /tmp | ||
diff --git a/src/fseccomp/syscall.c b/src/fseccomp/syscall.c index abdedb957..d0692b2ef 100644 --- a/src/fseccomp/syscall.c +++ b/src/fseccomp/syscall.c | |||
@@ -110,7 +110,6 @@ static const SyscallGroupList sysgroups[] = { | |||
110 | { .name = "@default", .list = | 110 | { .name = "@default", .list = |
111 | "@cpu-emulation," | 111 | "@cpu-emulation," |
112 | "@debug," | 112 | "@debug," |
113 | "@module," | ||
114 | "@obsolete," | 113 | "@obsolete," |
115 | "@privileged," | 114 | "@privileged," |
116 | "@resources," | 115 | "@resources," |