aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l
Commit message (Collapse)AuthorAge
* Runuser fixes (#3826)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting * drop non-sensical ${RUNUSER}/wayland-* blacklisting
* rename softmaker-common.inc to softmaker-common.profile (#3825)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | | | | | | | * Rename etc/inc/softmaker-common.inc to etc/profile-m-z/softmaker-common.profile As per suggestion by @rusty-snake in https://github.com/netblue30/firejail/pull/3819#issuecomment-745244982 * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change * softmaker-common.profile name change
* rename whitelist-players.inc to whitelist-player-common.inc (#3819)Libravatar glitsj162020-12-15
| | | | | | | | | | | | | | | | | * Update and rename whitelist-players.inc to whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc * renamed whitelist-player-common.inc
* drill profileLibravatar netblue302020-12-12
|
* curl HSTS cache support (#3813)Libravatar glitsj162020-12-12
| | | | | * add curl HSTS support * add HSTS support
* Add profile for authenticator-rs, improve falkon (#3747)Libravatar kortewegdevries2020-12-07
| | | | | | | | | * Add profile for authenticator-rs, improve falkon, balsa * Fix * Add private-tmp to falkon * Revert balsa
* Add a profile for dolphin-emuLibravatar Tad2020-11-29
| | | | | Games folder must be whitelisted in a dolphin-emu.local Its private-etc can likely be shortened
* Small fixesLibravatar Tad2020-11-29
| | | | | | | | | - gimp: allow mbind syscall. no start on Fedora 33 without - minetest: disable private-cache. without persistent cache connecting to servers can take many minutes - supertuxkart: allow bluetooth protocol. stk can directly connect/pair to WiiMote controllers - supertuxkart: comment private-dev to allow controller use - profiles: unify controller support comments - firecfg: comment evolution with a note, and add a note to epiphany #3647 + #2995
* Fix building C# projects in Godot (#3778)Libravatar RandomVoid2020-11-28
| | | | | | | | | Since version 3.0 Godot is supporting C# as a language for writing scripts. The C# solution can be built directly in Godot editor using MSBuild, which requires access to directory /etc/mono. This directory contains configuration of Mono enviroment. If MSBuild don't have access to this directory, it's not able to determine location of DLL files and it's throwing System.DllNotFoundException at beginning of the build process.
* fix #3777 -- lyx profile seems to be brokenLibravatar rusty-snake2020-11-27
|
* fixes; close #3775Libravatar rusty-snake2020-11-26
|
* add gnome-shell search-provider file to firefox.profile (#3768)Libravatar glitsj162020-11-24
| | | | | | | | | * allow access to gnome-shell search-provider in firefox.profile Firefox has gnome-shell search-provider support since version 78: - https://bugzilla.mozilla.org/show_bug.cgi?id=1239694 - https://mastransky.wordpress.com/2020/09/25/firefox-gnome-shell-search-provider/ * add dbus filter for gnome-shell search-provider
* Add a profile for LutrisLibravatar Tad2020-11-23
| | | | | | | | - Lutris isn't added to firecfg just yet, needs more testing - aria2c profile has a comment regarding Lutris/Winetricks, but it shouldn't matter since it can't be nested - Add commented wusc to wine.profile - Add vulkan and zenity to wusc.inc
* drop newline after mdwe in gnome-system-log.profileLibravatar glitsj162020-11-23
|
* drop newline after mdwe in geekbench.profileLibravatar glitsj162020-11-23
|
* drop newline after mdwe in devilspie.profileLibravatar glitsj162020-11-23
|
* drop newline after mdwe in devhelp.profileLibravatar glitsj162020-11-23
|
* ordering wruc correctly in default.profileLibravatar glitsj162020-11-23
|
* Update default.profileLibravatar glitsj162020-11-23
| | | Nitpick wording + added a commented disable-shell.inc
* drop newline in cower.profileLibravatar glitsj162020-11-23
|
* drop deprecated pathLibravatar glitsj162020-11-22
| | | Cfr. https://github.com/netblue30/firejail/pull/3517#issuecomment-664715880: element-desktop no longer uses ${HOME}/.config/Element (Riot).
* Add profile for straw-viewer (#3742)Libravatar kortewegdevries2020-11-18
| | | | | * Add profile for straw-viewer * Remove blacklist, fixes
* Merge pull request #3757 from rusty-snake/overrides2upstreamLibravatar rusty-snake2020-11-17
|\ | | | | from my overrides
| * from my overridesLibravatar rusty-snake2020-11-16
| | | | | | | | | | | | | | | | - add seccomp.block-secondary to a lot profiles - add wruc to firefox-common and ignore it in TB and firefox-common-addons - harden dia, gnome-keyring, libreoffice, megaglest, pngquant, ghostwriter, rhythmbox, sqlitebrowser
* | Dbus fixes (#3750)Libravatar glitsj162020-11-13
|/ | | | | * add dbus comment * disable dbus
* fixes, closes, enhances, improvements, and so onLibravatar rusty-snake2020-11-09
| | | | | | | | | | | | | | | | | | | - .github/ISSUE_TEMPLATE/bug_report.md: get ride off spanish, french, ... error messages - etc/inc/firefox-common-addons.inc: support ff2mpv - etc/profile-a-l/gimp.profile: note about xsane - etc/profile-m-z/min.profile: prettify - etc/profile-m-z/mpsyt.profile: fix, add lua - etc/profile-m-z/qbittorrent.profile: add note for tray-icons; this will get a better note once I investigated and audited all the D-Bus tray stuff. - etc/profile-m-z/transmission-daemon.profile: fix, add protocol packet close #3686 - mps-youtube needs lua close #3701 - Firefox native messaging regression in 0.9.62.4 -> 0.9.64rc1 close #3636 - transmission-daemon fills log with error close #3640 - Gimp - add note how to enable scanning (xsane) close #3707 - qBittorrent tray icon missing from notification panel when running it with firejail
* rework chromium (#3688)Libravatar rusty-snake2020-11-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * rework chromium + 516d0811 has removed fundamental security features. (remove caps.drop=all, nonewprivs, noroot, seccomp, protocol; add caps.keep) Though this is only necessary if running under a kernel which disallow unprivileged userns clones. Arch's linux-hardened and debian kernel are patched accordingly. Arch's linux and linux-lts kernels support this restriction via sysctk (kernel.unprivileged_userns_clone=0) as users opt-in. Other kernels such as mainline or fedora/redhat always support unprivileged userns clone and have no sysctl parameter to disable it. Debian and Arch users can enable it with 'sysctl kernel.unprivileged_userns_clone=1'. This commit adds a chromium-common-hardened.inc which can be included in chromium-common to enhance security of chromium-based programs. + chromium-common.profile: add private-cache + chromium-common.profile: add wruc and wusc, but disable it for the following profiles until tested. tests welcome. - [ ] bnox, dnox, enox, inox, snox - [ ] brave - [ ] flashpeak-slimjet - [ ] google-chrome, google-chrome-beta, google-chrome-unstable - [ ] iridium - [ ] min - [ ] opera, opera-beta + move vivaldi-snapshot paths from vivaldi-snapshot.profile to vivaldi. /usr/bin/vivaldi is a symlink to /etc/alternatives/vivaldi which can be vivaldi-stable, vivaldi-beta or vivaldi-snapshot. vivaldi-snapshot.profile missed also some features from vivaldi.profile, solve this by making it redirect to vivaldi.profile. TODO: exist new paths such as .local/lib/vivaldi also for vivaldi-snapshot? + create chromium-browser-privacy.profile (closes #3633) * update 1 + add missing 'ignore whitelist /usr/share/chromium' + revert 'Move drm-relaktions in vivaldi.profile behind BROWSER_ALLOW_DRM.'. This breaks not just DRM, it break things such as AAC too. In addition vivaldi shows a something is broken pop-up, we would have a lot of 'does not work with firejail' issues. * update 2 * update 3 fixes #3709
* Update linphone profile (#3734)Libravatar Dara Adib2020-11-08
| | | | linphone 4.0 changed the location of config and database files to respect freedesktop standards.
* profile fixesLibravatar rusty-snake2020-11-06
| | | | | | | | - update README.md and RELNOTES - add 'blacklist ${RUNUSER}/.flatpak-cache' to disable-common.inc - fix #3728, fonts in openSUSE KDE with wc / wusc - fix gnome-todo - fix xournalpp MathTeX whitelist
* fix ${HOME}/.ssh access in filezilla.profileLibravatar glitsj162020-11-03
| | | This fixes #3722.
* keepassxc dbus, closes #3713 [skip ci]Libravatar rusty-snake2020-10-31
|
* firefox d-bus (#2953) & fix xournalppLibravatar rusty-snake2020-10-29
|
* profile fixesLibravatar netblue302020-10-28
|
* Remove redundant read-only item (#3703)Libravatar glitsj162020-10-27
| | | | | | | | | | | | | * remove read-only item redundancy 'read-only ${HOME}/.config/mimeapps.list' is already part of disable-common.inc * remove read-only item redundancy 'read-only ${HOME}/.config/mimeapps.list' is already part of disable-common.inc, which is included in the redirect profile * remove read-only item redundancy 'read-only ${HOME}/.config/mimeapps.list' is already part of disable-common.inc, which is included in the redirect profile
* fix assogiate.profileLibravatar glitsj162020-10-27
| | | The user mime database needs to be writable.
* Merge pull request #3700 from rusty-snake/fix-3699Libravatar rusty-snake2020-10-26
|\ | | | | fix #3699 -- Firefox can't inhibit screensavers/screen blanking
| * fix #3699Libravatar rusty-snake2020-10-26
| |
* | Update celluloid.profileLibravatar Neo000012020-10-26
| |
* | Update celluloid.profileLibravatar Neo000012020-10-25
|/ | | liblua is needed for celluloid & otherwise at least on arch it's showing this error - "celluloid: error while loading shared libraries: liblua5.2.so.5.2: cannot open shared object file: Permission denied"
* mergesLibravatar netblue302020-10-25
|
* Merge pull request #3607 from kortewegdevries/wemailLibravatar netblue302020-10-25
|\ | | | | Switch mails to whitelisting
| * Add note about private-binLibravatar kortewegdevries2020-09-03
| |
| * Add firefox supportLibravatar kortewegdevries2020-08-29
| |
| * Switch kmail to whitelistingLibravatar kortewegdevries2020-08-29
| |
| * GPG default, fixes...Libravatar kortewegdevries2020-08-28
| |
| * Switch Evolution to whitelistingLibravatar kortewegdevries2020-08-28
| |
* | update firefox fedora private-bin [skip ci]Libravatar rusty-snake2020-10-16
| |
* | flameshot has changed it's APP-IDLibravatar rusty-snake2020-10-16
| | | | | | | | closes #3643
* | merges, fix for #3662 etc.Libravatar netblue302020-10-13
| |
* | New profile: equalxLibravatar rusty-snake2020-10-03
| |
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-02 12:33:31 +0000