aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l
Commit message (Collapse)AuthorAge
* profiles: fix commented code and eol commentsLibravatar Kelvin M. Klann2023-09-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Main changes: * Remove the space after `#` for commented code lines to distinguish them from normal comments * Use `#` instead of `-` for comments at the end of the line so that commented code lines work after being uncommented Commands used to search and replace: arg0="$(cat contrib/syntax/lists/profile_commands_arg0.list | LC_ALL=C sort -u | tr '\n' '|' | sed -e 's/|$//' -e 's/\./\\./g')" arg1="$(cat contrib/syntax/lists/profile_commands_arg1.list | LC_ALL=C sort -u | tr '\n' '|' | sed -e 's/|$//' -e 's/\./\\./g')" git ls-files -z -- etc/inc etc/profile* | xargs -0 -I '{}' \ sh -c "printf '%s\n' \"\$(sed -E \ -e 's/^# ($arg0)( [#-]-? .*)?\$/#\\1\\2/' \ -e 's/^# ($arg1)( [^ ]*)?( [#-]-? .*)?\$/#\\1\\2\\3/' \ -e 's/^# (whitelist \\$)/#\\1/' \ -e 's/^(#[^ ].+) --? /\\1 # /' \ '{}')\" >'{}'" Commands used to check for leftover entries: arg0="$(cat contrib/syntax/lists/profile_commands_arg0.list | LC_ALL=C sort -u | tr '\n' '|' | sed -e 's/|$//' -e 's/\./\\./g')" arg1="$(cat contrib/syntax/lists/profile_commands_arg1.list | LC_ALL=C sort -u | tr '\n' '|' | sed -e 's/|$//' -e 's/\./\\./g')" git grep -E "^# ($arg0|$arg1)( +|$)" -- etc/inc etc/profile* See also commit 30f9ad908 ("build: improve comments in firecfg.config", 2023-08-05) / PR #5942.
* profiles: fix some commentsLibravatar Kelvin M. Klann2023-09-06
| | | | | | | | | Changes: * Turn very long end-of-line comments into normal comments * Turn multi-line end-of-line comments into normal comments * Fix a comment being below instead of above the relevant entry * Turn some comments that look like code into end-of-line comments
* discord-common.profile: harden & allow notifications (#5978)Libravatar haarp2023-09-06
| | | | | | | | | | | | | | | | | | | | | | | What works: - Basic functionality - Receiving notifications - Voice communication - Watching streams What wasn't tested: - Casting streams - Opening links - Tracking/displaying "current activity" as status message - Apparmor Notes: - Discord tries to access system dbus (`[ERROR:bus.cc(399)] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied`). I don't know what business it has with the system dbus, and didn't notice any problems due to that. - I had one crash after 2h of watching a stream. Probably unrelated. Fixes #5971.
* profiles: patch fixes (#5970)Libravatar glitsj162023-08-25
| | | | | | Commit 3077b2d1f blacklists `${PATH}/patch` in disable-devel.inc[1]. We need to noblacklist it in the profiles that need it. [1] https://github.com/netblue30/firejail/commit/3077b2d1ff6c6e26a83487ae460985157b5c61fd
* adding private-tmp and private-dev to default.profileLibravatar netblue302023-08-20
|
* Merge pull request #5955 from kmk3/build-codespell-improvementsLibravatar Kelvin M. Klann2023-08-14
|\ | | | | build: codespell improvements
| * build: fix codespell errors in more filesLibravatar Kelvin M. Klann2023-08-13
| | | | | | | | | | | | Found by simply running `codespell .`. Environment: codespell 2.2.5-2 on Artix Linux.
* | mpd: allow MPRIS2 (#5951)Libravatar glitsj162023-08-13
|/ | | | | mpDris2 brings MPRIS2 support to MPD: https://github.com/eonpatapon/mpDris2
* ani-cli.profile: allow mktemp (#5954)Libravatar pirate4867431862023-08-12
|
* profiles: improvements to profiles using private (#5946)Libravatar glitsj162023-08-11
| | | | | | | | | Changes: * comment `include whitelist-common.inc` when using `private` * drop `private` on profiles that access files in `${HOME}` * use `#` in comments Relates to #903.
* 0ad.profile: fix libmozjs error on OpenSUSE Tumbleweed (#5944)Libravatar leukimi2023-08-11
| | | | | | | This fixes 0ad not opening on OpenSUSE Tumbleweed due to a "Permission denied" error when trying to open "libmozjs-78.so.0". See this issue that describes it all: https://github.com/netblue30/firejail/issues/5938#issue-1833607321
* New profile: clac (#5947)Libravatar glitsj162023-08-10
| | | | | * firecfg.config: add support for clac * Create clac.profile
* New profile: journal-viewer (#5943)Libravatar glitsj162023-08-10
|
* profiles: add cache/state paths for mpvLibravatar Kelvin M. Klann2023-08-03
| | | | | | On the profiles that allow ~/.config/mpv. Relates to #5936.
* New profile: daisy (#5935)Libravatar glitsj162023-08-02
| | | | | * firecfg.config: add daisy support * Create daisy.profile
* gramps: bring in new config directory (#5933)Libravatar glitsj162023-07-31
| | | | | * disable-programs.inc: add new gramps dir * gramps: add new config dir
* audacious: D-Bus hardening (#5922)Libravatar glitsj162023-07-25
| | | | | * audacious: D-Bus hardening * audacious: add noprinters
* profiles: fixes and cleanups for opening links with firefox (#5919)Libravatar glitsj162023-07-25
|
* profiles: Miscellaneous cleanups (#5918)Libravatar glitsj162023-07-25
|
* firefox(-based) profiles: refactor wusc (#5914)Libravatar glitsj162023-07-25
|
* firefox-common-addons.profile: restore vulkan whitelistLibravatar Kelvin M. Klann2023-07-20
| | | | | | | | | | | | Multiple profiles include firefox-common.profile, but not all of them include whitelist-usr-share-common.inc. Suggested by @glitsj16[1]. This amends commit 094892dfd ("profiles: remove /usr/share/vulkan already whitelisted by wusc (#5910)", 2023-07-20). [1] https://github.com/netblue30/firejail/pull/5910/files#r1269397348
* profiles: remove /usr/share/vulkan already whitelisted by wusc (#5910)Libravatar glitsj162023-07-20
|
* modif: drop deprecated 'shell' option references (#5894)Libravatar glitsj162023-07-19
| | | | | | | | | | | | The `shell` option has been removed. Remove stale references. This does NOT remove `shell none`-related code comments in: - src/firejail/fs_lib.c (L433-L441) - src/firejail/join.c (L415-L417) Relates to #5196. Suggested by #5891.
* bleachbit.profile: allow erasing Trash contentsLibravatar ydididodat2023-07-16
| | | | | | | Bleachbit is used to permanently delete files by overwriting the memory. So the most popular feature of Bleachbit is emptying the Trash. Relates to #5337.
* refresh feh.profileLibravatar pirate4867431862023-07-12
|
* fix ani-cli.profile (#5892)Libravatar pirate4867431862023-07-10
| | | Co-authored-by: pirate486743186 <>
* fix lobster.profileLibravatar pirate4867431862023-07-05
|
* fbreader/FBReader profile fixes; more on static ip mapLibravatar netblue302023-06-27
|
* Merge pull request #5847 from pirate486743186/update-lobster-profileLibravatar Kelvin M. Klann2023-06-23
|\ | | | | update lobster profile
| * update lobster profileLibravatar pirate4867431862023-06-14
| |
* | cleanupLibravatar netblue2023-06-18
|/
* firefox: fix private-etc firefoxLibravatar glitsj162023-06-05
|
* Merge branch 'master' into clawsmail-clamavLibravatar netblue302023-05-19
|\
| * email-common: fix bogofilter/bsfilter support (#5810)Libravatar glitsj162023-05-05
| |
| * element-desktop: allow notifications in profile (#5805)Libravatar Pedro Ribeiro2023-04-26
| | | | | | | | | | I assume most people want this on, since it is a messenger application, and you can control whether you turn it on or off in the app.
| * profiles: standardize on just "GTK" on commentsLibravatar Kelvin M. Klann2023-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For consistency and to reduce confusion. The toolkit has been renamed from "GTK+" to just "GTK" in 2019[1]. Note: This also fixes some adjacent typos. Commands used to search and replace: $ git grep -lz 'G[Tt][Kk]' -- etc | xargs -0 -I '{}' sh -c \ "printf '%s\n' \"\$(sed -E \ -e 's/G[Tt][Kk]\+?/GTK/g' \ -e 's/GTK-.\.0/GTK/g' \ -e 's/GTK base/GTK-base/g' \ -e 's/GTK-base /GTK-based /g' \ -e 's/Light weight/Lightweight/g' \ -e 's/client with GTK/client made with GTK/g' '{}')\" >'{}'" Misc: I noticed this on #5722. [1] https://mail.gnome.org/archives/gtk-devel-list/2019-February/msg00000.html
| * youtube-viewers: refactor and add gtk-youtube-viewers-commonLibravatar pirate4867431862023-04-16
| |
| * profiles: move read-only config entries to dcLibravatar Kelvin M. Klann2023-03-28
| | | | | | | | | | | | | | | | | | | | Command used to search for entries: $ git grep '^read-only ${HOME}/' -- 'etc/profile*' Note for gpg: ~/.gnupg/gpg.conf is apparently only managed by gpgconf(1) rather than through gpg(1) itself, in which case it does not need to be made read-write in gpg.profile.
| * firefox: move read-only entries to disable-common.incLibravatar Kelvin M. Klann2023-03-28
| | | | | | | | | | | | | | Instead of duplicating them on every profile that tries to allow opening links in Firefox. And make that path read-write on firefox.profile.
| * mpv: move read-only entries to disable-common.incLibravatar Kelvin M. Klann2023-03-27
| | | | | | | | | | | | | | Note: mpv itself does not modify anything in ~/.config/mpv as far as I know, in which case it does not need a read-write entry. Relates to #5706 #5707 #5710.
| * Merge pull request #5728 from pirate486743186/chromium-electron-commonLibravatar netblue302023-03-23
| |\ | | | | | | create blink-common.profile
| | * create blink-common.profileLibravatar pirate4867431862023-03-16
| | |
| * | keepassxc: Allow offering the Secret ServiceLibravatar Thijs Raymakers2023-03-21
| | | | | | | | | | | | | | | | | | | | | KeePassXC can offer a Secret Service to store secrets for other programs. See https://specifications.freedesktop.org/secret-service/latest/
| * | Add profiles for jami and postman (#5691)Libravatar Kobaxidze2562023-03-15
| | |
| * | fix ani-cli.profile (#5733)Libravatar pirate4867431862023-03-14
| | | | | | | | | Co-authored-by: pirate486743186 <>
| * | refresh engrampa.profile (#5734)Libravatar pirate4867431862023-03-14
| | | | | | | | | Co-authored-by: pirate486743186 <>
| * | file-roller: slight hardening (#5736)Libravatar glitsj162023-03-14
| | |
| * | profiles: drop hostname option (#5702)Libravatar glitsj162023-03-14
| | | | | | | | | | | | | | | | | | | | | | | | Now that we have randomized UTS namespaces support[1] by default for every sandbox, there's no longer a need to set hostname to a fixed value. This commit removes such fixed hostname entries from all profiles that have it. [1] https://github.com/netblue30/firejail/discussions/5597#discussioncomment-4996357
| * | profiles: streamline seccomp socket comment (#5735)Libravatar glitsj162023-03-14
| | | | | | | | | | | | | | | No functional changes. Relates to #639.
| * | Merge pull request #5715 from pirate486743186/yt-dlpLibravatar netblue302023-03-13
| |\ \ | | | | | | | | refactor yt-dlp
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-17 23:56:17 +0000