aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
Diffstat (limited to 'etc')
-rw-r--r--etc/disable-programs.inc1
-rw-r--r--etc/minetest.profile3
-rw-r--r--etc/playonlinux.profile28
-rw-r--r--etc/sylpheed.profile29
4 files changed, 60 insertions, 1 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index feb01e142..74e7e45a7 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -214,6 +214,7 @@ blacklist ${HOME}/.config/zathura
214blacklist ${HOME}/.config/zoomus.conf 214blacklist ${HOME}/.config/zoomus.conf
215blacklist ${HOME}/.conkeror.mozdev.org 215blacklist ${HOME}/.conkeror.mozdev.org
216blacklist ${HOME}/.curlrc 216blacklist ${HOME}/.curlrc
217blacklist ${HOME}/.dashcore
217blacklist ${HOME}/.dia 218blacklist ${HOME}/.dia
218blacklist ${HOME}/.dillo 219blacklist ${HOME}/.dillo
219blacklist ${HOME}/.dooble 220blacklist ${HOME}/.dooble
diff --git a/etc/minetest.profile b/etc/minetest.profile
index 147328616..aa4c2218d 100644
--- a/etc/minetest.profile
+++ b/etc/minetest.profile
@@ -32,7 +32,8 @@ shell none
32disable-mnt 32disable-mnt
33private-bin minetest 33private-bin minetest
34private-dev 34private-dev
35private-etc asound.conf,ca-certificates,drirc,fonts,group,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,localtime,nsswitch.conf,passwd,pulse,resolv.conf,ssl 35# private-etc needs to be updated, see #1702
36#private-etc asound.conf,ca-certificates,drirc,fonts,group,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,localtime,nsswitch.conf,passwd,pulse,resolv.conf,ssl
36private-tmp 37private-tmp
37 38
38noexec ${HOME} 39noexec ${HOME}
diff --git a/etc/playonlinux.profile b/etc/playonlinux.profile
new file mode 100644
index 000000000..676b6a5c6
--- /dev/null
+++ b/etc/playonlinux.profile
@@ -0,0 +1,28 @@
1# Firejail profile for playonlinux
2# This file is overwritten after every install/update
3# Persistent local customizations
4include /etc/firejail/playonlinux.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7
8noblacklist ${HOME}/.Steam
9noblacklist ${HOME}/.local/share/Steam
10noblacklist ${HOME}/.local/share/steam
11noblacklist ${HOME}/.steam
12noblacklist ${HOME}/.PlayOnLinux
13
14# nc is needed to run playonlinux
15noblacklist ${PATH}/nc
16
17include /etc/firejail/disable-common.inc
18include /etc/firejail/disable-devel.inc
19include /etc/firejail/disable-programs.inc
20
21caps.drop all
22netfilter
23nodvd
24nogroups
25nonewprivs
26noroot
27notv
28seccomp
diff --git a/etc/sylpheed.profile b/etc/sylpheed.profile
new file mode 100644
index 000000000..c4d93a0e3
--- /dev/null
+++ b/etc/sylpheed.profile
@@ -0,0 +1,29 @@
1# Firejail profile for sylpheed
2# This file is overwritten after every install/update
3# Persistent local customizations
4include /etc/firejail/sylpheed.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7
8noblacklist ${HOME}/.sylpheed-2.0
9
10include /etc/firejail/disable-common.inc
11include /etc/firejail/disable-devel.inc
12include /etc/firejail/disable-passwdmgr.inc
13include /etc/firejail/disable-programs.inc
14
15caps.drop all
16netfilter
17nodvd
18nogroups
19nonewprivs
20noroot
21nosound
22notv
23novideo
24protocol unix,inet,inet6
25seccomp
26shell none
27
28private-dev
29private-tmp