diff options
Diffstat (limited to 'etc')
-rw-r--r-- | etc/inc/disable-programs.inc | 4 | ||||
-rw-r--r-- | etc/profile-a-l/ani-cli.profile | 41 | ||||
-rw-r--r-- | etc/profile-a-l/lobster.profile | 41 | ||||
-rw-r--r-- | etc/profile-m-z/porn-cli.profile | 14 |
4 files changed, 100 insertions, 0 deletions
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index a2e788f9b..40c123968 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc | |||
@@ -84,6 +84,7 @@ blacklist ${HOME}/.cache/Tox | |||
84 | blacklist ${HOME}/.cache/Zeal | 84 | blacklist ${HOME}/.cache/Zeal |
85 | blacklist ${HOME}/.cache/agenda | 85 | blacklist ${HOME}/.cache/agenda |
86 | blacklist ${HOME}/.cache/akonadi* | 86 | blacklist ${HOME}/.cache/akonadi* |
87 | blacklist ${HOME}/.cache/ani-cli | ||
87 | blacklist ${HOME}/.cache/atril | 88 | blacklist ${HOME}/.cache/atril |
88 | blacklist ${HOME}/.cache/attic | 89 | blacklist ${HOME}/.cache/attic |
89 | blacklist ${HOME}/.cache/audacity | 90 | blacklist ${HOME}/.cache/audacity |
@@ -518,6 +519,7 @@ blacklist ${HOME}/.config/leafpad | |||
518 | blacklist ${HOME}/.config/libreoffice | 519 | blacklist ${HOME}/.config/libreoffice |
519 | blacklist ${HOME}/.config/liferea | 520 | blacklist ${HOME}/.config/liferea |
520 | blacklist ${HOME}/.config/linphone | 521 | blacklist ${HOME}/.config/linphone |
522 | blacklist ${HOME}/.config/lobster | ||
521 | blacklist ${HOME}/.config/lugaru | 523 | blacklist ${HOME}/.config/lugaru |
522 | blacklist ${HOME}/.config/lutris | 524 | blacklist ${HOME}/.config/lutris |
523 | blacklist ${HOME}/.config/lximage-qt | 525 | blacklist ${HOME}/.config/lximage-qt |
@@ -953,6 +955,7 @@ blacklist ${HOME}/.local/share/kwrite | |||
953 | blacklist ${HOME}/.local/share/kxmlgui5/* | 955 | blacklist ${HOME}/.local/share/kxmlgui5/* |
954 | blacklist ${HOME}/.local/share/liferea | 956 | blacklist ${HOME}/.local/share/liferea |
955 | blacklist ${HOME}/.local/share/linphone | 957 | blacklist ${HOME}/.local/share/linphone |
958 | blacklist ${HOME}/.local/share/lobster | ||
956 | blacklist ${HOME}/.local/share/local-mail | 959 | blacklist ${HOME}/.local/share/local-mail |
957 | blacklist ${HOME}/.local/share/lollypop | 960 | blacklist ${HOME}/.local/share/lollypop |
958 | blacklist ${HOME}/.local/share/love | 961 | blacklist ${HOME}/.local/share/love |
@@ -1028,6 +1031,7 @@ blacklist ${HOME}/.local/share/wormux | |||
1028 | blacklist ${HOME}/.local/share/xplayer | 1031 | blacklist ${HOME}/.local/share/xplayer |
1029 | blacklist ${HOME}/.local/share/xreader | 1032 | blacklist ${HOME}/.local/share/xreader |
1030 | blacklist ${HOME}/.local/share/zathura | 1033 | blacklist ${HOME}/.local/share/zathura |
1034 | blacklist ${HOME}/.local/state/ani-cli | ||
1031 | blacklist ${HOME}/.local/state/audacity | 1035 | blacklist ${HOME}/.local/state/audacity |
1032 | blacklist ${HOME}/.local/state/pipewire | 1036 | blacklist ${HOME}/.local/state/pipewire |
1033 | blacklist ${HOME}/.lv2 | 1037 | blacklist ${HOME}/.lv2 |
diff --git a/etc/profile-a-l/ani-cli.profile b/etc/profile-a-l/ani-cli.profile new file mode 100644 index 000000000..270dffaed --- /dev/null +++ b/etc/profile-a-l/ani-cli.profile | |||
@@ -0,0 +1,41 @@ | |||
1 | # Firejail profile for ani-cli | ||
2 | # Description: Shell script to watch Anime from the terminal | ||
3 | # This file is overwritten after every install/update | ||
4 | quiet | ||
5 | # Persistent local customizations | ||
6 | include ani-cli.local | ||
7 | # Persistent global definitions | ||
8 | # added by included profile | ||
9 | #include globals.local | ||
10 | |||
11 | noblacklist ${HOME}/.cache/ani-cli | ||
12 | noblacklist ${HOME}/.local/state/ani-cli | ||
13 | |||
14 | # Allow /bin/sh (blacklisted by disable-shell.inc) | ||
15 | include allow-bin-sh.inc | ||
16 | |||
17 | include disable-proc.inc | ||
18 | include disable-xdg.inc | ||
19 | |||
20 | mkdir ${HOME}/.cache/ani-cli | ||
21 | mkdir ${HOME}/.local/state/ani-cli | ||
22 | whitelist ${HOME}/.cache/ani-cli | ||
23 | whitelist ${HOME}/.local/state/ani-cli | ||
24 | include whitelist-run-common.inc | ||
25 | include whitelist-runuser-common.inc | ||
26 | |||
27 | #machine-id | ||
28 | nodvd | ||
29 | noprinters | ||
30 | notv | ||
31 | |||
32 | disable-mnt | ||
33 | private-bin ani-cli,aria2c,cat,cp,curl,cut,ffmpeg,fzf,grep,head,mkdir,mv,nl,sed,sh,sort,tput,tr,uname,wc | ||
34 | #private-cache | ||
35 | private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,machine-id,mime.types,nsswitch.conf,pango,pki,protocols,pulse,resolv.conf,rpc,services,ssl,X11,xdg | ||
36 | private-tmp | ||
37 | |||
38 | read-only ${HOME}/.config/mpv | ||
39 | |||
40 | # Redirect | ||
41 | include mpv.profile | ||
diff --git a/etc/profile-a-l/lobster.profile b/etc/profile-a-l/lobster.profile new file mode 100644 index 000000000..01928c775 --- /dev/null +++ b/etc/profile-a-l/lobster.profile | |||
@@ -0,0 +1,41 @@ | |||
1 | # Firejail profile for lobster | ||
2 | # Description: Shell script to watch Movies/Webseries/Shows from the terminal | ||
3 | # This file is overwritten after every install/update | ||
4 | quiet | ||
5 | # Persistent local customizations | ||
6 | include lobster.local | ||
7 | # Persistent global definitions | ||
8 | # added by included profile | ||
9 | #include globals.local | ||
10 | |||
11 | noblacklist ${HOME}/.config/lobster | ||
12 | noblacklist ${HOME}/.local/share/lobster | ||
13 | |||
14 | # Allow /bin/sh (blacklisted by disable-shell.inc) | ||
15 | include allow-bin-sh.inc | ||
16 | |||
17 | include disable-proc.inc | ||
18 | include disable-xdg.inc | ||
19 | |||
20 | mkdir ${HOME}/.config/lobster | ||
21 | mkdir ${HOME}/.local/share/lobster | ||
22 | whitelist ${HOME}/.config/lobster | ||
23 | whitelist ${HOME}/.local/share/lobster | ||
24 | include whitelist-run-common.inc | ||
25 | include whitelist-runuser-common.inc | ||
26 | |||
27 | #machine-id | ||
28 | nodvd | ||
29 | noprinters | ||
30 | notv | ||
31 | |||
32 | disable-mnt | ||
33 | private-bin curl,cut,fzf,grep,head,lobster,mv,patch,rm,sed,sh,tail,tput,tr,uname | ||
34 | #private-cache | ||
35 | private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,machine-id,mime.types,nsswitch.conf,pango,pki,protocols,pulse,resolv.conf,rpc,services,ssl,X11,xdg | ||
36 | private-tmp | ||
37 | |||
38 | read-only ${HOME}/.config/mpv | ||
39 | |||
40 | # Redirect | ||
41 | include mpv.profile | ||
diff --git a/etc/profile-m-z/porn-cli.profile b/etc/profile-m-z/porn-cli.profile new file mode 100644 index 000000000..f33ff439c --- /dev/null +++ b/etc/profile-m-z/porn-cli.profile | |||
@@ -0,0 +1,14 @@ | |||
1 | # Firejail profile for porn-cli | ||
2 | # Description: Python script for watching porn via the terminal | ||
3 | # This file is overwritten after every install/update | ||
4 | quiet | ||
5 | # Persistent local customizations | ||
6 | include porn-cli.local | ||
7 | # Persistent global definitions | ||
8 | # added by included profile | ||
9 | #include globals.local | ||
10 | |||
11 | private-bin porn-cli | ||
12 | |||
13 | # Redirect | ||
14 | include mov-cli.profile | ||