aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--etc/profile-a-l/abrowser.profile1
-rw-r--r--etc/profile-a-l/basilisk.profile1
-rw-r--r--etc/profile-a-l/cachy-browser.profile7
-rw-r--r--etc/profile-a-l/cliqz.profile1
-rw-r--r--etc/profile-a-l/cyberfox.profile2
-rw-r--r--etc/profile-a-l/firedragon.profile1
-rw-r--r--etc/profile-a-l/firefox-common-addons.profile1
-rw-r--r--etc/profile-a-l/firefox-common.profile5
-rw-r--r--etc/profile-a-l/firefox.profile5
-rw-r--r--etc/profile-a-l/icecat.profile1
-rw-r--r--etc/profile-a-l/librewolf.profile5
-rw-r--r--etc/profile-m-z/palemoon.profile2
-rw-r--r--etc/profile-m-z/thunderbird.profile3
-rw-r--r--etc/profile-m-z/waterfox.profile1
14 files changed, 16 insertions, 20 deletions
diff --git a/etc/profile-a-l/abrowser.profile b/etc/profile-a-l/abrowser.profile
index 2e6e8f1af..8b70756ba 100644
--- a/etc/profile-a-l/abrowser.profile
+++ b/etc/profile-a-l/abrowser.profile
@@ -12,6 +12,7 @@ mkdir ${HOME}/.cache/mozilla/abrowser
12mkdir ${HOME}/.mozilla 12mkdir ${HOME}/.mozilla
13whitelist ${HOME}/.cache/mozilla/abrowser 13whitelist ${HOME}/.cache/mozilla/abrowser
14whitelist ${HOME}/.mozilla 14whitelist ${HOME}/.mozilla
15whitelist /usr/share/abrowser
15 16
16# private-etc must first be enabled in firefox-common.profile 17# private-etc must first be enabled in firefox-common.profile
17#private-etc abrowser 18#private-etc abrowser
diff --git a/etc/profile-a-l/basilisk.profile b/etc/profile-a-l/basilisk.profile
index a962bfe02..7d2fe143c 100644
--- a/etc/profile-a-l/basilisk.profile
+++ b/etc/profile-a-l/basilisk.profile
@@ -12,6 +12,7 @@ mkdir ${HOME}/.cache/moonchild productions/basilisk
12mkdir ${HOME}/.moonchild productions 12mkdir ${HOME}/.moonchild productions
13whitelist ${HOME}/.cache/moonchild productions/basilisk 13whitelist ${HOME}/.cache/moonchild productions/basilisk
14whitelist ${HOME}/.moonchild productions 14whitelist ${HOME}/.moonchild productions
15whitelist /usr/share/basilisk
15 16
16# Basilisk can use the full firejail seccomp filter (unlike firefox >= 60) 17# Basilisk can use the full firejail seccomp filter (unlike firefox >= 60)
17seccomp 18seccomp
diff --git a/etc/profile-a-l/cachy-browser.profile b/etc/profile-a-l/cachy-browser.profile
index 7a14d9464..4b486913e 100644
--- a/etc/profile-a-l/cachy-browser.profile
+++ b/etc/profile-a-l/cachy-browser.profile
@@ -13,6 +13,7 @@ mkdir ${HOME}/.cache/cachy
13mkdir ${HOME}/.cachy 13mkdir ${HOME}/.cachy
14whitelist ${HOME}/.cache/cachy 14whitelist ${HOME}/.cache/cachy
15whitelist ${HOME}/.cachy 15whitelist ${HOME}/.cachy
16whitelist /usr/share/cachy-browser
16 17
17# Add the next lines to your cachy-browser.local if you want to use the migration wizard. 18# Add the next lines to your cachy-browser.local if you want to use the migration wizard.
18#noblacklist ${HOME}/.mozilla 19#noblacklist ${HOME}/.mozilla
@@ -23,12 +24,6 @@ whitelist ${HOME}/.cachy
23#whitelist ${RUNUSER}/kpxc_server 24#whitelist ${RUNUSER}/kpxc_server
24#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer 25#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer
25 26
26whitelist /usr/share/doc
27whitelist /usr/share/gtk-doc/html
28whitelist /usr/share/mozilla
29whitelist /usr/share/webext
30include whitelist-usr-share-common.inc
31
32# Add the next line to your cachy-browser.local to enable private-bin (Arch Linux). 27# Add the next line to your cachy-browser.local to enable private-bin (Arch Linux).
33#private-bin dbus-launch,dbus-send,cachy-browser,sh 28#private-bin dbus-launch,dbus-send,cachy-browser,sh
34# Add the next line to your cachy-browser.local to enable private-etc. 29# Add the next line to your cachy-browser.local to enable private-etc.
diff --git a/etc/profile-a-l/cliqz.profile b/etc/profile-a-l/cliqz.profile
index d0b8cc0ef..d0bf9797e 100644
--- a/etc/profile-a-l/cliqz.profile
+++ b/etc/profile-a-l/cliqz.profile
@@ -15,6 +15,7 @@ mkdir ${HOME}/.config/cliqz
15whitelist ${HOME}/.cache/cliqz 15whitelist ${HOME}/.cache/cliqz
16whitelist ${HOME}/.cliqz 16whitelist ${HOME}/.cliqz
17whitelist ${HOME}/.config/cliqz 17whitelist ${HOME}/.config/cliqz
18whitelist /usr/share/cliqz
18 19
19# private-etc must first be enabled in firefox-common.profile 20# private-etc must first be enabled in firefox-common.profile
20#private-etc cliqz 21#private-etc cliqz
diff --git a/etc/profile-a-l/cyberfox.profile b/etc/profile-a-l/cyberfox.profile
index d1fff0004..a303c5979 100644
--- a/etc/profile-a-l/cyberfox.profile
+++ b/etc/profile-a-l/cyberfox.profile
@@ -12,6 +12,8 @@ mkdir ${HOME}/.8pecxstudios
12mkdir ${HOME}/.cache/8pecxstudios 12mkdir ${HOME}/.cache/8pecxstudios
13whitelist ${HOME}/.8pecxstudios 13whitelist ${HOME}/.8pecxstudios
14whitelist ${HOME}/.cache/8pecxstudios 14whitelist ${HOME}/.cache/8pecxstudios
15whitelist /usr/share/8pecxstudios
16whitelist /usr/share/cyberfox
15 17
16# private-bin cyberfox,dbus-launch,dbus-send,env,sh,which 18# private-bin cyberfox,dbus-launch,dbus-send,env,sh,which
17# private-etc must first be enabled in firefox-common.profile 19# private-etc must first be enabled in firefox-common.profile
diff --git a/etc/profile-a-l/firedragon.profile b/etc/profile-a-l/firedragon.profile
index 77487161e..3177fb989 100644
--- a/etc/profile-a-l/firedragon.profile
+++ b/etc/profile-a-l/firedragon.profile
@@ -13,6 +13,7 @@ mkdir ${HOME}/.cache/firedragon
13mkdir ${HOME}/.firedragon 13mkdir ${HOME}/.firedragon
14whitelist ${HOME}/.cache/firedragon 14whitelist ${HOME}/.cache/firedragon
15whitelist ${HOME}/.firedragon 15whitelist ${HOME}/.firedragon
16whitelist /usr/share/firedragon
16 17
17# Add the next lines to your firedragon.local if you want to use the migration wizard. 18# Add the next lines to your firedragon.local if you want to use the migration wizard.
18#noblacklist ${HOME}/.mozilla 19#noblacklist ${HOME}/.mozilla
diff --git a/etc/profile-a-l/firefox-common-addons.profile b/etc/profile-a-l/firefox-common-addons.profile
index 6dc1fca8a..f12750fda 100644
--- a/etc/profile-a-l/firefox-common-addons.profile
+++ b/etc/profile-a-l/firefox-common-addons.profile
@@ -74,7 +74,6 @@ whitelist ${HOME}/.zotero
74whitelist ${HOME}/dwhelper 74whitelist ${HOME}/dwhelper
75whitelist /usr/share/lua 75whitelist /usr/share/lua
76whitelist /usr/share/lua* 76whitelist /usr/share/lua*
77whitelist /usr/share/vulkan
78 77
79# GNOME Shell integration (chrome-gnome-shell) needs dbus and python 78# GNOME Shell integration (chrome-gnome-shell) needs dbus and python
80noblacklist ${HOME}/.local/share/gnome-shell 79noblacklist ${HOME}/.local/share/gnome-shell
diff --git a/etc/profile-a-l/firefox-common.profile b/etc/profile-a-l/firefox-common.profile
index 42d12c5d9..9c8601e7b 100644
--- a/etc/profile-a-l/firefox-common.profile
+++ b/etc/profile-a-l/firefox-common.profile
@@ -29,9 +29,14 @@ mkdir ${HOME}/.pki
29whitelist ${DOWNLOADS} 29whitelist ${DOWNLOADS}
30whitelist ${HOME}/.local/share/pki 30whitelist ${HOME}/.local/share/pki
31whitelist ${HOME}/.pki 31whitelist ${HOME}/.pki
32whitelist /usr/share/doc
33whitelist /usr/share/gtk-doc/html
34whitelist /usr/share/mozilla
35whitelist /usr/share/webext
32include whitelist-common.inc 36include whitelist-common.inc
33include whitelist-run-common.inc 37include whitelist-run-common.inc
34include whitelist-runuser-common.inc 38include whitelist-runuser-common.inc
39include whitelist-usr-share-common.inc
35include whitelist-var-common.inc 40include whitelist-var-common.inc
36 41
37apparmor 42apparmor
diff --git a/etc/profile-a-l/firefox.profile b/etc/profile-a-l/firefox.profile
index 1fcbf0562..c5fb15f74 100644
--- a/etc/profile-a-l/firefox.profile
+++ b/etc/profile-a-l/firefox.profile
@@ -34,15 +34,10 @@ whitelist ${HOME}/.mozilla
34#whitelist ${RUNUSER}/kpxc_server 34#whitelist ${RUNUSER}/kpxc_server
35#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer 35#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer
36 36
37whitelist /usr/share/doc
38whitelist /usr/share/firefox 37whitelist /usr/share/firefox
39whitelist /usr/share/gnome-shell/search-providers/firefox-search-provider.ini 38whitelist /usr/share/gnome-shell/search-providers/firefox-search-provider.ini
40whitelist /usr/share/gtk-doc/html
41whitelist /usr/share/mozilla
42whitelist /usr/share/webext
43whitelist ${RUNUSER}/*firefox* 39whitelist ${RUNUSER}/*firefox*
44whitelist ${RUNUSER}/psd/*firefox* 40whitelist ${RUNUSER}/psd/*firefox*
45include whitelist-usr-share-common.inc
46 41
47# firefox requires a shell to launch on Arch - add the next line to your firefox.local to enable private-bin. 42# firefox requires a shell to launch on Arch - add the next line to your firefox.local to enable private-bin.
48#private-bin bash,dbus-launch,dbus-send,env,firefox,sh,which 43#private-bin bash,dbus-launch,dbus-send,env,firefox,sh,which
diff --git a/etc/profile-a-l/icecat.profile b/etc/profile-a-l/icecat.profile
index 660343a29..b0a42fb77 100644
--- a/etc/profile-a-l/icecat.profile
+++ b/etc/profile-a-l/icecat.profile
@@ -12,6 +12,7 @@ mkdir ${HOME}/.cache/mozilla/icecat
12mkdir ${HOME}/.mozilla 12mkdir ${HOME}/.mozilla
13whitelist ${HOME}/.cache/mozilla/icecat 13whitelist ${HOME}/.cache/mozilla/icecat
14whitelist ${HOME}/.mozilla 14whitelist ${HOME}/.mozilla
15whitelist /usr/share/icecat
15 16
16# private-etc must first be enabled in firefox-common.profile 17# private-etc must first be enabled in firefox-common.profile
17#private-etc icecat 18#private-etc icecat
diff --git a/etc/profile-a-l/librewolf.profile b/etc/profile-a-l/librewolf.profile
index b84cbb119..7ddbda18c 100644
--- a/etc/profile-a-l/librewolf.profile
+++ b/etc/profile-a-l/librewolf.profile
@@ -23,12 +23,7 @@ whitelist ${HOME}/.librewolf
23#whitelist ${RUNUSER}/kpxc_server 23#whitelist ${RUNUSER}/kpxc_server
24#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer 24#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer
25 25
26whitelist /usr/share/doc
27whitelist /usr/share/gtk-doc/html
28whitelist /usr/share/librewolf 26whitelist /usr/share/librewolf
29whitelist /usr/share/mozilla
30whitelist /usr/share/webext
31include whitelist-usr-share-common.inc
32 27
33# Add the next line to your librewolf.local to enable private-bin (Arch Linux). 28# Add the next line to your librewolf.local to enable private-bin (Arch Linux).
34#private-bin dbus-launch,dbus-send,librewolf,sh 29#private-bin dbus-launch,dbus-send,librewolf,sh
diff --git a/etc/profile-m-z/palemoon.profile b/etc/profile-m-z/palemoon.profile
index 24701b657..ab4e24595 100644
--- a/etc/profile-m-z/palemoon.profile
+++ b/etc/profile-m-z/palemoon.profile
@@ -12,6 +12,8 @@ mkdir ${HOME}/.cache/moonchild productions/pale moon
12mkdir ${HOME}/.moonchild productions 12mkdir ${HOME}/.moonchild productions
13whitelist ${HOME}/.cache/moonchild productions/pale moon 13whitelist ${HOME}/.cache/moonchild productions/pale moon
14whitelist ${HOME}/.moonchild productions 14whitelist ${HOME}/.moonchild productions
15whitelist /usr/share/moonchild productions
16whitelist /usr/share/palemoon
15 17
16# Palemoon can use the full firejail seccomp filter (unlike firefox >= 60) 18# Palemoon can use the full firejail seccomp filter (unlike firefox >= 60)
17seccomp 19seccomp
diff --git a/etc/profile-m-z/thunderbird.profile b/etc/profile-m-z/thunderbird.profile
index 5df207e25..f2405a7d3 100644
--- a/etc/profile-m-z/thunderbird.profile
+++ b/etc/profile-m-z/thunderbird.profile
@@ -47,10 +47,7 @@ whitelist ${HOME}/.thunderbird
47 47
48whitelist /usr/share/gnupg 48whitelist /usr/share/gnupg
49whitelist /usr/share/gnupg2 49whitelist /usr/share/gnupg2
50whitelist /usr/share/mozilla
51whitelist /usr/share/thunderbird 50whitelist /usr/share/thunderbird
52whitelist /usr/share/webext
53include whitelist-usr-share-common.inc
54 51
55# machine-id breaks audio in browsers; enable or put it in your thunderbird.local when sound is not required 52# machine-id breaks audio in browsers; enable or put it in your thunderbird.local when sound is not required
56#machine-id 53#machine-id
diff --git a/etc/profile-m-z/waterfox.profile b/etc/profile-m-z/waterfox.profile
index 18f1ca79a..bf6f45e41 100644
--- a/etc/profile-m-z/waterfox.profile
+++ b/etc/profile-m-z/waterfox.profile
@@ -12,6 +12,7 @@ mkdir ${HOME}/.cache/waterfox
12mkdir ${HOME}/.waterfox 12mkdir ${HOME}/.waterfox
13whitelist ${HOME}/.cache/waterfox 13whitelist ${HOME}/.cache/waterfox
14whitelist ${HOME}/.waterfox 14whitelist ${HOME}/.waterfox
15whitelist /usr/share/waterfox
15 16
16# Add the next lines to your watefox.local if you want to use the migration wizard. 17# Add the next lines to your watefox.local if you want to use the migration wizard.
17#noblacklist ${HOME}/.mozilla 18#noblacklist ${HOME}/.mozilla