| Commit message (Collapse) | Author | Age |
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
an alternative to PDFSam
|
|
|
|
|
|
| |
such as AOSP, LineageOS/CyanogenMod, etc.
Use like: firejail --profile=/etc/firejail/aosp.profile /bin/bash
|
|
|
|
|
|
|
| |
* okular needs kdeinit4 for open file dialog since recently
* memory-deny-write-execute should be a safe addition for
desktop use of dnscrypt and unbound
* cleanup works
|
| |
|
| |
|
|
|
|
| |
Thanks to @Fred-Barclay, @smitsohu and @reinerh for a bunch of these
|
| |
|
| |
|
| |
|
| |
|
| |
|
|\
| |
| | |
Tweak itch.io profile
|
| | |
|
|/
|
|
| |
Thanks to @larkvirtual for the paths and testing
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add musescore profile
* blacklist musescore
* add musescore
* add musescore
* add tuxguitar, musescore
* add tuxguitar, musescore
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add tuxguitar profile
tested for versions < 1.3
* blacklist tuxguitar
* add tuxguitar
* add tuxguitar
* add support for tuxguitar > 1.2
higher versions fail to launch without protocol=inet,inet6 and with noexec=~. Yet, net=none seems to be still tolerated, which comes handy to block talk with internet and dbus.
* unbreak tuxguitar Internet access
versions >= 1.3 actually run fine with net=none enabled, if the built-in internet dependent feature is not used
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add novideo
* add novideo
* add novideo
* put noexec last
* blacklist Clementine configuration and database
* blacklist Clementine configuration and database
* add novideo
* add novideo, permit access to ~/.java
* add novideo
* spoof machine-id
* mimeapps.list is already in whitelist-common.inc
* ~/.local/share/applications is already read-only
see disable-common.inc
* mimeapps.list is already in whitelist-common.inc
* ~/.local/share/applications is already read-only
see disable-common.inc
* drop machine-id option
private-etc hides it anyway
|
|
|
|
|
|
|
|
| |
* Update qbittorrent.profile
* Update gwenview.profile
* Update disable-programs.inc
|
| |
|
| |
|
| |
|
|
|
|
|
| |
This introduces blacklist ~/.java to disable-programs.inc, so it
may break some existing profiles that depend on it.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
~/Downloads to save your files
|
| |
|
|
|
|
| |
Many steam directories can begin with either lower- or upper-case 's'.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* blacklist python scripts in caja
~/.local/share/caja is not used by Caja, so it can be removed
* blacklist python scripts in nautilus
* blacklist python scripts in nemo
* permit access to Trash
* blacklist file-manager python bindings
|
| |
|