diff options
-rw-r--r-- | README.md | 2 | ||||
-rw-r--r-- | RELNOTES | 2 | ||||
-rw-r--r-- | etc/disable-programs.inc | 1 | ||||
-rw-r--r-- | etc/neverball.profile | 37 | ||||
-rw-r--r-- | platform/debian/conffiles | 1 | ||||
-rw-r--r-- | src/firecfg/firecfg.config | 1 |
6 files changed, 42 insertions, 2 deletions
@@ -214,4 +214,4 @@ IntelliJ IDEA, Android Studio, electron, riot-web, | |||
214 | Extreme Tux Racer, Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux, | 214 | Extreme Tux Racer, Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux, |
215 | telegram-desktop, arm, rambox, apktool, baobab, dex2jar, gitg, hashcat, obs, picard, | 215 | telegram-desktop, arm, rambox, apktool, baobab, dex2jar, gitg, hashcat, obs, picard, |
216 | remmina, sdat2img, soundconverter, sqlitebrowse, truecraft, gnome-twitch, tuxguitar, | 216 | remmina, sdat2img, soundconverter, sqlitebrowse, truecraft, gnome-twitch, tuxguitar, |
217 | musescore | 217 | musescore, neverball |
@@ -25,7 +25,7 @@ firejail (0.9.49) baseline; urgency=low | |||
25 | * new profiles: Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux | 25 | * new profiles: Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux |
26 | * new profiles: telegram-desktop, arm, rambox, apktool, baobab, dex2jar, gitg, | 26 | * new profiles: telegram-desktop, arm, rambox, apktool, baobab, dex2jar, gitg, |
27 | * new profiles: hashcat, obs, picard, remmina, sdat2img, soundconverter, sqlitebrowse, | 27 | * new profiles: hashcat, obs, picard, remmina, sdat2img, soundconverter, sqlitebrowse, |
28 | * new profiles: truecraft, gnome-twitch, tuxguitar, musescore | 28 | * new profiles: truecraft, gnome-twitch, tuxguitar, musescore, neverball |
29 | * bugfixes | 29 | * bugfixes |
30 | -- netblue30 <netblue30@yahoo.com> Mon, 12 Jun 2017 20:00:00 -0500 | 30 | -- netblue30 <netblue30@yahoo.com> Mon, 12 Jun 2017 20:00:00 -0500 |
31 | 31 | ||
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 7b0e6e9eb..d02377036 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -334,6 +334,7 @@ blacklist ${HOME}/.multimc5 | |||
334 | blacklist ${HOME}/.mutt | 334 | blacklist ${HOME}/.mutt |
335 | blacklist ${HOME}/.mutt/muttrc | 335 | blacklist ${HOME}/.mutt/muttrc |
336 | blacklist ${HOME}/.muttrc | 336 | blacklist ${HOME}/.muttrc |
337 | blacklist ${HOME}/.neverball | ||
337 | blacklist ${HOME}/.nv | 338 | blacklist ${HOME}/.nv |
338 | blacklist ${HOME}/.nylas-mail | 339 | blacklist ${HOME}/.nylas-mail |
339 | blacklist ${HOME}/.openinvaders | 340 | blacklist ${HOME}/.openinvaders |
diff --git a/etc/neverball.profile b/etc/neverball.profile new file mode 100644 index 000000000..6a9a3a577 --- /dev/null +++ b/etc/neverball.profile | |||
@@ -0,0 +1,37 @@ | |||
1 | # Firejail profile for neverball | ||
2 | # This file is overwritten after every install/update | ||
3 | # Persistent local customizations | ||
4 | include /etc/firejail/neverball.local | ||
5 | # Persistent global definitions | ||
6 | include /etc/firejail/globals.local | ||
7 | |||
8 | noblacklist ${HOME}/.neverball | ||
9 | |||
10 | include /etc/firejail/disable-common.inc | ||
11 | include /etc/firejail/disable-devel.inc | ||
12 | include /etc/firejail/disable-passwdmgr.inc | ||
13 | include /etc/firejail/disable-programs.inc | ||
14 | |||
15 | mkdir ${HOME}/.neverball | ||
16 | whitelist ${HOME}/.neverball | ||
17 | include /etc/firejail/whitelist-common.inc | ||
18 | |||
19 | caps.drop all | ||
20 | netfilter | ||
21 | nodvd | ||
22 | nogroups | ||
23 | nonewprivs | ||
24 | noroot | ||
25 | notv | ||
26 | novideo | ||
27 | protocol unix,netlink | ||
28 | seccomp | ||
29 | shell none | ||
30 | |||
31 | disable-mnt | ||
32 | private-bin neverball | ||
33 | private-dev | ||
34 | private-tmp | ||
35 | |||
36 | noexec ${HOME} | ||
37 | noexec /tmp | ||
diff --git a/platform/debian/conffiles b/platform/debian/conffiles index 6473c6fef..e7eab20a2 100644 --- a/platform/debian/conffiles +++ b/platform/debian/conffiles | |||
@@ -220,6 +220,7 @@ | |||
220 | /etc/firejail/mutt.profile | 220 | /etc/firejail/mutt.profile |
221 | /etc/firejail/nautilus.profile | 221 | /etc/firejail/nautilus.profile |
222 | /etc/firejail/nemo.profile | 222 | /etc/firejail/nemo.profile |
223 | /etc/firejail/neverball.profile | ||
223 | /etc/firejail/netsurf.profile | 224 | /etc/firejail/netsurf.profile |
224 | /etc/firejail/nolocal.net | 225 | /etc/firejail/nolocal.net |
225 | /etc/firejail/nylas.profile | 226 | /etc/firejail/nylas.profile |
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 15e95b9a7..6bdeaab77 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config | |||
@@ -197,6 +197,7 @@ musescore | |||
197 | mutt | 197 | mutt |
198 | nautilus | 198 | nautilus |
199 | netsurf | 199 | netsurf |
200 | neverball | ||
200 | nylas | 201 | nylas |
201 | obs | 202 | obs |
202 | odt2txt | 203 | odt2txt |