aboutsummaryrefslogtreecommitdiffstats
path: root/etc/inc/disable-programs.inc
Commit message (Collapse)AuthorAge
...
* okLibravatar Łukasz Mariański2022-04-23
|
* Fix glob pattern and update other profiles/includesLibravatar Łukasz Mariański2022-04-23
|
* steam: add HotLine Miami (#5097)Libravatar Kelvin M. Klann2022-04-08
| | | https://store.steampowered.com/app/219150/Hotline_Miami/
* disable-programs.inc: blacklist ~/Applications dirLibravatar Kelvin M. Klann2022-03-24
| | | | | | | | | | | | | It is used for storing AppImages. Note that even when blacklisting a directory, it is possible to execute an AppImage from it. For example, the following works: firejail --noprofile --blacklist='${HOME}/Applications' --appimage \ ~/Applications/foo.AppImage While the resulting process does not appear to have access to the blacklisted directory.
* ocenaudio hardening (#5056)Libravatar glitsj162022-03-18
| | | | | | | * ocenaudio: blacklist cache dir * ocenaudio: hardenings * ocenaudio: fix protocol comment
* disable-programs.inc: add ~/.preyLibravatar Kelvin M. Klann2022-03-11
| | | | | This amends commit af8f681c0 ("steam.profile: allow "${HOME}/.prey"", 2022-03-11) / PR #5029.
* Merge branch 'master' of https://github.com/netblue30/firejailLibravatar smitsohu2022-03-11
|\
| * Blacklist scala devel stuffLibravatar rusty-snake2022-03-05
| |
* | harden songrecLibravatar smitsohu2022-03-11
|/ | | | | | as suggested by @rusty-snake in addition blacklist/noblacklist/whitelist songrec application files
* add opera-developer.profile (#5001)Libravatar glitsj162022-03-03
| | | | | | | | | | | | | | | * add opera-developer to firecfg * add opera-developer * fix typo * add configs for opera-developer * Create opera-developer.profile * fixes for opera-developer * fix for opera-developer
* disable-programs.inc: blacklist new qbittorrent data directoryLibravatar Andrew Kotsyuba2022-02-20
|
* Merge pull request #4864 from antonv6/antonv6-steam-mangohudLibravatar netblue302022-02-03
|\ | | | | steam.profile: allow ~/.config/MangoHud
| * disable-programs.inc: sort correctlyLibravatar Anton Shestakov2022-01-17
| |
| * disable-programs.inc: add ~/.config/MangoHudLibravatar Anton Shestakov2022-01-17
| |
* | Merge pull request #4841 from Tus1688/masterLibravatar netblue302022-01-24
|\ \ | | | | | | Add neovim profile
| * | fix: neovim profileLibravatar user2022-01-11
| | |
| * | fix: neovim profileLibravatar user2022-01-10
| | |
* | | mergesLibravatar netblue302022-01-24
| | |
* | | Merge pull request #4829 from CaseOf/seafileLibravatar netblue302022-01-24
|\ \ \ | | | | | | | | Seafile
| * | | Create seafile-applet.profileLibravatar CaseOf2022-01-06
| | | |
* | | | Merge pull request #4863 from antonv6/antonv6-wine-cacheLibravatar netblue302022-01-24
|\ \ \ \ | | | | | | | | | | {lutris,wine}.profile: allow ~/.cache/wine
| * | | | disable-programs.inc: add ~/.cache/wineLibravatar Anton Shestakov2022-01-17
| | |_|/ | |/| |
* | | | Merge pull request #4868 from reedriley/disable-programsLibravatar netblue302022-01-24
|\ \ \ \ | | | | | | | | | | Blacklist rclone, 1Password, Ledger Live and cointop
| * | | | Blacklist rclone, 1Password, Ledger Live and cointopLibravatar Reed Riley2022-01-19
| |/ / /
* | | | Merge pull request #4873 from reedriley/cointopLibravatar netblue302022-01-24
|\ \ \ \ | | | | | | | | | | add a profile for cointop
| * | | | add a profile for cointopLibravatar Reed Riley2022-01-21
| |/ / /
* | | | akonadi: chasing the socketsLibravatar smitsohu2022-01-23
| | | |
* | | | more on pass utilityLibravatar netblue302022-01-21
|/ / /
* | | profiles: sort pathsLibravatar Reiner Herrmann2022-01-14
| | |
* | | fix warzone2100 (Debian 11)Libravatar netblue302022-01-13
| | |
* | | add wget2rc to disable-programs.incLibravatar glitsj162022-01-13
| |/ |/|
* | Add rpcs3 profileLibravatar Adrian L. Shaw2022-01-06
|/
* add notable blacklistsLibravatar glitsj162022-01-05
|
* Merge pull request #4755 from kmk3/mpv-add-yt-dlpLibravatar netblue302021-12-28
|\ | | | | yt-dlp: add missing paths & mpv.profile: whitelist paths for yt-dlp
| * disable-programs.inc: blacklist missing yt-dlp pathsLibravatar Kelvin M. Klann2021-12-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This amends commit d6ca41c19 ("update mpv.profile", 2021-10-24) / PR #4634. These paths were taken from yt-dlp(1). They are used since yt-dlp commit e2e43aea2 ("Portable Configuration file (closes #19)", 2021-01-16)[1]. Environment: yt-dlp 2021.12.01-1 on Artix Linux. Relates to: https://github.com/yt-dlp/yt-dlp/issues/19 [1] https://github.com/yt-dlp/yt-dlp/commit/e2e43aea2159a235e151f56bd14383129a6b4355
* | Fix clipgrab profile (yt-dlp requires python)Libravatar Jose Riha2021-12-28
|/
* Add new cachy-browser profileLibravatar Vladislav Nepogodin2021-12-06
|
* additional electron blacklistsLibravatar glitsj162021-11-30
|
* Blacklist ~/.config/monero-projectLibravatar Ted Robertson2021-11-30
|
* Add OpenStego profileLibravatar Jan Sonntag2021-11-12
|
* Sort disaple-programs.incLibravatar rusty-snake2021-10-27
|
* Merge pull request #4587 from kmk3/fix-vscodiumLibravatar netblue302021-10-09
|\ | | | | Fix vscodium
| * vscodium.profile: add missing pathsLibravatar Kelvin M. Klann2021-10-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It creates the following directories on startup: * ~/.config/VSCodium * ~/.vscode-oss Environment: $ grep '^NAME' /etc/os-release NAME="Artix Linux" $ pacman -Q vscodium-bin vscodium-bin 1.60.2-2 Note: The following entry is already on disable-programs.inc: noblacklist ${HOME}/.vscode-oss It was added on commit de90834a8 ("Update disable-programs.inc", 2019-03-02). Relates to #3871.
* | Merge pull request #4519 from rusty-snake/build-systemsLibravatar netblue302021-10-09
|\ \ | |/ |/| Add profiles for build-systems (/package-managers)
| * Add profiles for build-systems (/package-managers)Libravatar rusty-snake2021-09-08
| | | | | | | | | | | | | | | | | | | | Profiles: bunler, cargo (refactor), cmake (untested), make, meson, pip All redirect to build-systems-common.profile Other fixes: - blacklist ${HOME}/.bundle - blacklist ${HOME}/.cargo/* -> blacklist ${HOME}/.cargo - blacklist /usr/lib64/ruby
* | Profile fixes and hardeningLibravatar rusty-snake2021-09-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * cheese - fix: dbus-user.own org.gnome.Cheese - fix: whitelist /usr/share/gstreamer-1.0 - fix: include allow-python3.inc - hardening: include disable-shell.inc - hardening: include whitelist-run-common.inc and whitelist /run/udev/data - hardening: whitelist /usr/libexec/gstreamer-1.0/gst-plugin-scanner - hardening: noinput - hardening: nosound - hardening: seccomp.block-secondary - hardening: private-dev * geekbench (closes #4576) - fix: noblacklist /sbin and noblacklist /usr/sbin - fix: noblacklist, blacklist, mkdir, whitelist, read-write ${HOME}/.geekbench5 - fix: comment/remove private-bin, private-lib, private-opt * inkscape - add quiet for cli usage * musixmatch (#4518) - allow chroot * pandoc - fix: include allow-bin-sh.inc - fix: drop private-bin - hardening: include whitelist-runuser-common.inc - hardening: seccomp.block-secondary
* | Create goldendict.profileLibravatar lecso72021-09-20
| |
* | Merge pull request #4501 from tredondo/patch-9Libravatar rusty-snake2021-09-19
|\ \ | |/ |/| Blacklist Exodus wallet
| * Blacklist Exodus walletLibravatar Ted Robertson2021-09-02
| |
* | Profile fixesLibravatar rusty-snake2021-09-04
|/ | | | | | | | | | - disable-programs.inc: blacklist ${HOME}/.local/state/pipewire If you did not yet noticed, on 08th May 2021 the XDG Base Directory Specification 0.8 was resleased (the first update since 2010). New are $XDG_STATE_HOME and $HOME/.local/bin. - keepassxc: mkdirs are necessary - gnote: harden - pngquant: harden