aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--README.md3
-rw-r--r--RELNOTES2
-rw-r--r--etc/disable-programs.inc4
-rw-r--r--etc/musescore.profile30
-rw-r--r--platform/debian/conffiles1
-rw-r--r--src/firecfg/firecfg.config1
6 files changed, 39 insertions, 2 deletions
diff --git a/README.md b/README.md
index d12b9ee4e..8372841a5 100644
--- a/README.md
+++ b/README.md
@@ -207,4 +207,5 @@ curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite, Geary, Liferea, peek, s
207IntelliJ IDEA, Android Studio, electron, riot-web, 207IntelliJ IDEA, Android Studio, electron, riot-web,
208Extreme Tux Racer, Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux, 208Extreme Tux Racer, Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux,
209telegram-desktop, arm, rambox, apktool, baobab, dex2jar, gitg, hashcat, obs, picard, 209telegram-desktop, arm, rambox, apktool, baobab, dex2jar, gitg, hashcat, obs, picard,
210remmina, sdat2img, soundconverter, sqlitebrowse, truecraft, gnome-twitch 210remmina, sdat2img, soundconverter, sqlitebrowse, truecraft, gnome-twitch, tuxguitar,
211musescore
diff --git a/RELNOTES b/RELNOTES
index 36dd39686..0e61019d9 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -19,7 +19,7 @@ firejail (0.9.49) baseline; urgency=low
19 * new profiles: Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux 19 * new profiles: Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux
20 * new profiles: telegram-desktop, arm, rambox, apktool, baobab, dex2jar, gitg, 20 * new profiles: telegram-desktop, arm, rambox, apktool, baobab, dex2jar, gitg,
21 * new profiles: hashcat, obs, picard, remmina, sdat2img, soundconverter, sqlitebrowse, 21 * new profiles: hashcat, obs, picard, remmina, sdat2img, soundconverter, sqlitebrowse,
22 * new profiles: truecraft, gnome-twitch 22 * new profiles: truecraft, gnome-twitch, tuxguitar, musescore
23 * bugfixes 23 * bugfixes
24 -- netblue30 <netblue30@yahoo.com> Mon, 12 Jun 2017 20:00:00 -0500 24 -- netblue30 <netblue30@yahoo.com> Mon, 12 Jun 2017 20:00:00 -0500
25 25
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index a54d2a739..7b0e6e9eb 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -44,6 +44,8 @@ blacklist ${HOME}/.config/Luminance
44blacklist ${HOME}/.config/Meltytech 44blacklist ${HOME}/.config/Meltytech
45blacklist ${HOME}/.config/Mousepad 45blacklist ${HOME}/.config/Mousepad
46blacklist ${HOME}/.config/Mumble 46blacklist ${HOME}/.config/Mumble
47blacklist ${HOME}/.config/MusE
48blacklist ${HOME}/.config/MuseScore
47blacklist ${HOME}/.config/Nylas Mail 49blacklist ${HOME}/.config/Nylas Mail
48blacklist ${HOME}/.config/Qlipper 50blacklist ${HOME}/.config/Qlipper
49blacklist ${HOME}/.config/QuiteRss 51blacklist ${HOME}/.config/QuiteRss
@@ -274,6 +276,8 @@ blacklist ${HOME}/.local/share/caja-python
274blacklist ${HOME}/.local/share/cdprojektred 276blacklist ${HOME}/.local/share/cdprojektred
275blacklist ${HOME}/.local/share/clipit 277blacklist ${HOME}/.local/share/clipit
276blacklist ${HOME}/.local/share/data/Mumble 278blacklist ${HOME}/.local/share/data/Mumble
279blacklist ${HOME}/.local/share/data/MusE
280blacklist ${HOME}/.local/share/data/MuseScore
277blacklist ${HOME}/.local/share/dino 281blacklist ${HOME}/.local/share/dino
278blacklist ${HOME}/.local/share/dolphin 282blacklist ${HOME}/.local/share/dolphin
279blacklist ${HOME}/.local/share/epiphany 283blacklist ${HOME}/.local/share/epiphany
diff --git a/etc/musescore.profile b/etc/musescore.profile
new file mode 100644
index 000000000..bd00bea69
--- /dev/null
+++ b/etc/musescore.profile
@@ -0,0 +1,30 @@
1# Firejail profile for musescore
2# This file is overwritten after every install/update
3# Persistent local customizations
4include /etc/firejail/musescore.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7
8noblacklist ~/.config/MusE
9noblacklist ~/.config/MuseScore
10noblacklist ~/.local/share/data/MusE
11noblacklist ~/.local/share/data/MuseScore
12
13caps.drop all
14netfilter
15no3d
16nodvd
17nonewprivs
18noroot
19notv
20novideo
21protocol unix,inet,inet6
22seccomp
23shell none
24tracelog
25
26# private-bin musescore,mscore
27private-tmp
28
29noexec ${HOME}
30noexec /tmp
diff --git a/platform/debian/conffiles b/platform/debian/conffiles
index d11f473ed..6473c6fef 100644
--- a/platform/debian/conffiles
+++ b/platform/debian/conffiles
@@ -216,6 +216,7 @@
216/etc/firejail/mumble.profile 216/etc/firejail/mumble.profile
217/etc/firejail/mupdf.profile 217/etc/firejail/mupdf.profile
218/etc/firejail/mupen64plus.profile 218/etc/firejail/mupen64plus.profile
219/etc/firejail/musescore.profile
219/etc/firejail/mutt.profile 220/etc/firejail/mutt.profile
220/etc/firejail/nautilus.profile 221/etc/firejail/nautilus.profile
221/etc/firejail/nemo.profile 222/etc/firejail/nemo.profile
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index d66b026b0..15e95b9a7 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -193,6 +193,7 @@ multimc5
193mumble 193mumble
194mupdf 194mupdf
195mupen64plus 195mupen64plus
196musescore
196mutt 197mutt
197nautilus 198nautilus
198netsurf 199netsurf