diff options
Diffstat (limited to 'etc')
-rw-r--r-- | etc/disable-programs.inc | 1 | ||||
-rw-r--r-- | etc/minetest.profile | 3 | ||||
-rw-r--r-- | etc/playonlinux.profile | 28 | ||||
-rw-r--r-- | etc/sylpheed.profile | 29 |
4 files changed, 60 insertions, 1 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index feb01e142..74e7e45a7 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -214,6 +214,7 @@ blacklist ${HOME}/.config/zathura | |||
214 | blacklist ${HOME}/.config/zoomus.conf | 214 | blacklist ${HOME}/.config/zoomus.conf |
215 | blacklist ${HOME}/.conkeror.mozdev.org | 215 | blacklist ${HOME}/.conkeror.mozdev.org |
216 | blacklist ${HOME}/.curlrc | 216 | blacklist ${HOME}/.curlrc |
217 | blacklist ${HOME}/.dashcore | ||
217 | blacklist ${HOME}/.dia | 218 | blacklist ${HOME}/.dia |
218 | blacklist ${HOME}/.dillo | 219 | blacklist ${HOME}/.dillo |
219 | blacklist ${HOME}/.dooble | 220 | blacklist ${HOME}/.dooble |
diff --git a/etc/minetest.profile b/etc/minetest.profile index 147328616..aa4c2218d 100644 --- a/etc/minetest.profile +++ b/etc/minetest.profile | |||
@@ -32,7 +32,8 @@ shell none | |||
32 | disable-mnt | 32 | disable-mnt |
33 | private-bin minetest | 33 | private-bin minetest |
34 | private-dev | 34 | private-dev |
35 | private-etc asound.conf,ca-certificates,drirc,fonts,group,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,localtime,nsswitch.conf,passwd,pulse,resolv.conf,ssl | 35 | # private-etc needs to be updated, see #1702 |
36 | #private-etc asound.conf,ca-certificates,drirc,fonts,group,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,localtime,nsswitch.conf,passwd,pulse,resolv.conf,ssl | ||
36 | private-tmp | 37 | private-tmp |
37 | 38 | ||
38 | noexec ${HOME} | 39 | noexec ${HOME} |
diff --git a/etc/playonlinux.profile b/etc/playonlinux.profile new file mode 100644 index 000000000..676b6a5c6 --- /dev/null +++ b/etc/playonlinux.profile | |||
@@ -0,0 +1,28 @@ | |||
1 | # Firejail profile for playonlinux | ||
2 | # This file is overwritten after every install/update | ||
3 | # Persistent local customizations | ||
4 | include /etc/firejail/playonlinux.local | ||
5 | # Persistent global definitions | ||
6 | include /etc/firejail/globals.local | ||
7 | |||
8 | noblacklist ${HOME}/.Steam | ||
9 | noblacklist ${HOME}/.local/share/Steam | ||
10 | noblacklist ${HOME}/.local/share/steam | ||
11 | noblacklist ${HOME}/.steam | ||
12 | noblacklist ${HOME}/.PlayOnLinux | ||
13 | |||
14 | # nc is needed to run playonlinux | ||
15 | noblacklist ${PATH}/nc | ||
16 | |||
17 | include /etc/firejail/disable-common.inc | ||
18 | include /etc/firejail/disable-devel.inc | ||
19 | include /etc/firejail/disable-programs.inc | ||
20 | |||
21 | caps.drop all | ||
22 | netfilter | ||
23 | nodvd | ||
24 | nogroups | ||
25 | nonewprivs | ||
26 | noroot | ||
27 | notv | ||
28 | seccomp | ||
diff --git a/etc/sylpheed.profile b/etc/sylpheed.profile new file mode 100644 index 000000000..c4d93a0e3 --- /dev/null +++ b/etc/sylpheed.profile | |||
@@ -0,0 +1,29 @@ | |||
1 | # Firejail profile for sylpheed | ||
2 | # This file is overwritten after every install/update | ||
3 | # Persistent local customizations | ||
4 | include /etc/firejail/sylpheed.local | ||
5 | # Persistent global definitions | ||
6 | include /etc/firejail/globals.local | ||
7 | |||
8 | noblacklist ${HOME}/.sylpheed-2.0 | ||
9 | |||
10 | include /etc/firejail/disable-common.inc | ||
11 | include /etc/firejail/disable-devel.inc | ||
12 | include /etc/firejail/disable-passwdmgr.inc | ||
13 | include /etc/firejail/disable-programs.inc | ||
14 | |||
15 | caps.drop all | ||
16 | netfilter | ||
17 | nodvd | ||
18 | nogroups | ||
19 | nonewprivs | ||
20 | noroot | ||
21 | nosound | ||
22 | notv | ||
23 | novideo | ||
24 | protocol unix,inet,inet6 | ||
25 | seccomp | ||
26 | shell none | ||
27 | |||
28 | private-dev | ||
29 | private-tmp | ||