| Commit message (Collapse) | Author | Age |
|---|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
patch for xdg-dbus-proxy
```
--- a/etc/gnome-screenshot.profile
+++ b/etc/gnome-screenshot.profile
@@ -45,3 +45,8 @@ private-bin gnome-screenshot
private-dev
private-etc dconf,fonts,gtk-3.0,localtime,machine-id
private-tmp
+
+dbus-user filter
+dbus-user.own org.gnome.Screenshot
+dbus-user.talk org.gnome.Shell.Screenshot
+dbus-system block
```
patch for whitelist-runuser-common.inc
```
--- a/etc/gnome-screenshot.profile
+++ b/etc/gnome-screenshot.profile
@@ -17,11 +17,8 @@ include disable-passwdmgr.inc
include disable-programs.inc
include disable-xdg.inc
-whitelist ${RUNUSER}/bus
-whitelist ${RUNUSER}/pulse
-whitelist ${RUNUSER}/gdm/Xauthority
-whitelist ${RUNUSER}/wayland-0
include whitelist-usr-share-common.inc
+include whitelist-runuser-common.inc
include whitelist-var-common.inc
apparmor
```
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Add profile for offical Linux Teams application
* fix: add mkdir suggestions in Teams profile
* Merge suggestions for Teams profile
* Add suggestion to Teams profile
* Add Teams to firecfg.config
* Add paths from Teams profile to disable-programs
* Remove the duplicated whitelist for downloads in Teams profile
Co-Authored-By: rusty-snake <print_hello_world+GitHub@protonmail.com>
* Cleanup teams profile after testing
* Add comment to Teams profile
Co-authored-by: rusty-snake <print_hello_world+GitHub@protonmail.com>
|
| | |
|
| | |
|
| |
|
|
|
| |
- mdwe broken
- ${HOME}/.ssr
|
| | |
|
| | |
|
| | |
|
| |
|
|
| |
Thanks @DurtyDev for testing (netblue30/firetools#47)
|
| | |
|
| |
|
|
| |
Thanks @Micha-Btz for all the testing.
|
| | |
|
| |
|
|
|
|
| |
* Support XDG_CONFIG_HOME for aria2c
* Fix aria2c.profile
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Add barrier.profile
* Add newline before special options
* Modify description
* Add disable mount to barrier.profile
* Address feedback from rusty-snake
* Remove stray carriage return
* Add noexec for /home/user and /tmp
* Don't blacklist openssl
* Remove redundant rules
|
| | |
|
| |
|
|
|
|
|
|
| |
* Create ephemeral.profile
* Add ephemeral.profile
* Add ephemeral.profile
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
* Create gist.profile
* Add gist config to disable-programs.inc
* Add gist to firecfg.config
* Update RELNOTES
* Update README.md
|
| |
|
|
|
|
|
|
| |
* Create gmpc.profile
* Add gmpc config to disable-programs.inc
* Add gmpc to firecfg.config
|
| |
|
|
|
|
|
|
| |
* Create drawio.profile
* Add drawio config to disable-programs.inc
* Add drawio to firecfg.config
|
| | |
|
| |
|
|
|
|
|
|
| |
* Create electron-mail.profile
* Add electron-mail to disable-programs.inc
* Add electron-mail to firecfg.config
|
| |
|
|
|
|
|
|
| |
* Add babl/gegl caches for gimp
* Add gir-1.0 to wusc
* Add babl/gegl support to gimp.profile
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
| |
* Profiles: add signal-cli profile
Clarification regarding Java
* Added suggestions from code review
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- add novideo to a lot of profiles
(there are still more profiles where novideo can be added)
- remove commente mdwe from some gnome applications
- add descriptions to some profiles
- blacklist ${HOME}/.cargo/credentials
- move ${HOME}/.git-credentials and ${HOME}/.git-credential-cache to
'top secret' in disable-common.inc
- some ordering in disable-programs.inc
- merge tor browser blacklists to ${HOME}/.tor-browser*
- qupzilla.profile redirect to falkon.profile
- blacklist gnome-builder paths
- fix transmission profiles inlude
- much more
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- install contrib/syscalls.sh
- add GitLab-CI status to README.md
- read-only ${HOME}/.cargo/env
- move blacklist ${HOME}/.cargo/registry, ${HOME}/.cargo/config to
disable-programs
- typo in man firejail firejail-profiles firecfg
- better descriptions in man firejail-profiles
- fixes in man firejail
- template descriptions in firejail-profiles
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* beginn fixup
* continue
* continue
* continue
* continue
* continue
* continue
|
| | |
|
| |\
| |
| | |
Add Whalebird profile
|
| | | |
|
| |\ \
| | |
| | | |
Add new Tor Browser alias
|
| | |/
| |
| |
| |
| |
| |
| |
| |
| | |
- tor-browser in the AUR is an international package; all other
individual language variants have been removed, so, add new alias
- Add 'tor-browser' and 'mv' to private-bin in launcher profile ('mv' is
required when upgrading tor-browser versions)
- Add 'tor-browser' to firecfg.config
- Add config dir to disable-programs.inc
|
| |/
|
|
| |
itch now also uses ~/.itch for application updates
|
| |
|
|
|
|
| |
- Add Zulip config dir to disable-programs.inc
- Add disable-xdg.inc to Zulip profile
- Add Zulip to firecfg.config
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Add youtube-dl config to disable-programs.inc
* Add config handling to youtube-dl
* Add youtube-dl config handling to celluloid.profile
* Add youtube-dl config handling to mpv.profile
* Add youtube-dl config handling to smplayer.profile
* Add youtube-dl config handling to mpsyt.profile
|
| |
|
|
|
|
|
|
|
|
| |
* Prep for Qt alias in pavucontrol
* Add Qt alias for pavucontrol
* Add Qt alias for pavucontrol
* Add Qt alias for pavucontrol
|
| | |
|
| | |
|
| | |
|
| | |
|
rusty-snake
Andreas Hunkeler
smitsohu
glitsj16
Florian Begusch
Adrian L. Shaw
Tad
Denys Havrysh
Timo Hardebusch
core_contingency
SkewedZeppelin
Jean Lucas
Fred Barclay