| Commit message (Collapse) | Author | Age |
... | |
| | |
|
|/ |
|
|\
| |
| | |
Blacklist the monero wallets directory
|
| |
| |
| | |
~/Monero/wallets is the default path suggested by the official wallet application, but it can be changed by user.
|
|/ |
|
|
|
|
|
| |
Latest versions of TelegramDesktop supports both old (~/.TelegramDesktop) and
new (~/.local/share/TelegramDesktop) location of sensitive data files.
|
| |
|
| |
|
| |
|
|
|
|
|
| |
configuration files should be available to all Qt apps.
qt5ct is used e.g. by Manjaro for their theming.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
an alternative to PDFSam
|
|
|
|
|
|
| |
such as AOSP, LineageOS/CyanogenMod, etc.
Use like: firejail --profile=/etc/firejail/aosp.profile /bin/bash
|
|
|
|
|
|
|
| |
* okular needs kdeinit4 for open file dialog since recently
* memory-deny-write-execute should be a safe addition for
desktop use of dnscrypt and unbound
* cleanup works
|
| |
|
| |
|
|
|
|
| |
Thanks to @Fred-Barclay, @smitsohu and @reinerh for a bunch of these
|
| |
|
| |
|
| |
|
| |
|
| |
|
|\
| |
| | |
Tweak itch.io profile
|
| | |
|
|/
|
|
| |
Thanks to @larkvirtual for the paths and testing
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add musescore profile
* blacklist musescore
* add musescore
* add musescore
* add tuxguitar, musescore
* add tuxguitar, musescore
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add tuxguitar profile
tested for versions < 1.3
* blacklist tuxguitar
* add tuxguitar
* add tuxguitar
* add support for tuxguitar > 1.2
higher versions fail to launch without protocol=inet,inet6 and with noexec=~. Yet, net=none seems to be still tolerated, which comes handy to block talk with internet and dbus.
* unbreak tuxguitar Internet access
versions >= 1.3 actually run fine with net=none enabled, if the built-in internet dependent feature is not used
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add novideo
* add novideo
* add novideo
* put noexec last
* blacklist Clementine configuration and database
* blacklist Clementine configuration and database
* add novideo
* add novideo, permit access to ~/.java
* add novideo
* spoof machine-id
* mimeapps.list is already in whitelist-common.inc
* ~/.local/share/applications is already read-only
see disable-common.inc
* mimeapps.list is already in whitelist-common.inc
* ~/.local/share/applications is already read-only
see disable-common.inc
* drop machine-id option
private-etc hides it anyway
|
|
|
|
|
|
|
|
| |
* Update qbittorrent.profile
* Update gwenview.profile
* Update disable-programs.inc
|
| |
|
| |
|
| |
|
|
|
|
|
| |
This introduces blacklist ~/.java to disable-programs.inc, so it
may break some existing profiles that depend on it.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|