aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--RELNOTES1
-rw-r--r--etc/profile-a-l/android-studio.profile1
-rw-r--r--etc/profile-m-z/marker.profile1
-rw-r--r--etc/templates/profile.template5
-rw-r--r--src/man/firejail-profile.txt2
5 files changed, 7 insertions, 3 deletions
diff --git a/RELNOTES b/RELNOTES
index 3b330882a..15d53b640 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -2,6 +2,7 @@ firejail (0.9.65) baseline; urgency=low
2 * filtering environment variables 2 * filtering environment variables
3 * zsh completion 3 * zsh completion
4 * --mkdir, --mkfile 4 * --mkdir, --mkfile
5 * protocol now accumulates
5 * Jolla/SailfishOS patches 6 * Jolla/SailfishOS patches
6 * private-lib rework 7 * private-lib rework
7 * jailtest 8 * jailtest
diff --git a/etc/profile-a-l/android-studio.profile b/etc/profile-a-l/android-studio.profile
index 2cdd3a90c..5a21744cf 100644
--- a/etc/profile-a-l/android-studio.profile
+++ b/etc/profile-a-l/android-studio.profile
@@ -5,6 +5,7 @@ include android-studio.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/Google
8noblacklist ${HOME}/.AndroidStudio* 9noblacklist ${HOME}/.AndroidStudio*
9noblacklist ${HOME}/.android 10noblacklist ${HOME}/.android
10noblacklist ${HOME}/.jack-server 11noblacklist ${HOME}/.jack-server
diff --git a/etc/profile-m-z/marker.profile b/etc/profile-m-z/marker.profile
index 55865fe72..029d0183d 100644
--- a/etc/profile-m-z/marker.profile
+++ b/etc/profile-m-z/marker.profile
@@ -12,6 +12,7 @@ include globals.local
12#private-etc ca-certificates,ssl,pki,crypto-policies,nsswitch.conf,resolv.conf 12#private-etc ca-certificates,ssl,pki,crypto-policies,nsswitch.conf,resolv.conf
13 13
14noblacklist ${HOME}/.cache/marker 14noblacklist ${HOME}/.cache/marker
15noblacklist ${DOCUMENTS}
15 16
16include disable-common.inc 17include disable-common.inc
17include disable-devel.inc 18include disable-devel.inc
diff --git a/etc/templates/profile.template b/etc/templates/profile.template
index 72b7d3025..17d7f55b2 100644
--- a/etc/templates/profile.template
+++ b/etc/templates/profile.template
@@ -155,8 +155,8 @@ include globals.local
155# - unix is usually needed 155# - unix is usually needed
156# - inet,inet6 only if internet access is required (see 'net none'/'netfilter' above) 156# - inet,inet6 only if internet access is required (see 'net none'/'netfilter' above)
157# - netlink is rarely needed 157# - netlink is rarely needed
158# - packet almost never 158# - packet and bluetooth almost never
159#protocol unix,inet,inet6,netlink,packet 159#protocol unix,inet,inet6,netlink,packet,bluetooth
160#seccomp 160#seccomp
161##seccomp !chroot 161##seccomp !chroot
162##seccomp.drop SYSCALLS (see syscalls.txt) 162##seccomp.drop SYSCALLS (see syscalls.txt)
@@ -200,6 +200,7 @@ include globals.local
200# flatpak remote-info --show-metadata flathub <APP-ID> 200# flatpak remote-info --show-metadata flathub <APP-ID>
201# Notes: 201# Notes:
202# - flatpak implicitly allows an app to own <APP-ID> on the session bus 202# - flatpak implicitly allows an app to own <APP-ID> on the session bus
203# - Some features like native notifications are implemented as portal too.
203# - In order to make dconf work (when used by the app) you need to allow 204# - In order to make dconf work (when used by the app) you need to allow
204# 'ca.desrt.dconf' even when not allowed by flatpak. 205# 'ca.desrt.dconf' even when not allowed by flatpak.
205# Notes and Policiy about addresses can be found at 206# Notes and Policiy about addresses can be found at
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt
index c7dc4c434..b25fc9181 100644
--- a/src/man/firejail-profile.txt
+++ b/src/man/firejail-profile.txt
@@ -266,7 +266,7 @@ Mount new /root and /home/user directories in temporary
266filesystems. All modifications are discarded when the sandbox is 266filesystems. All modifications are discarded when the sandbox is
267closed. 267closed.
268.TP 268.TP
269\fBprivate=directory 269\fBprivate directory
270Use directory as user home. 270Use directory as user home.
271.TP 271.TP
272\fBprivate-bin file,file 272\fBprivate-bin file,file