aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l
Commit message (Collapse)AuthorAge
* fixes for eb30ce5 (new profiles) (#4291)Libravatar glitsj162021-05-20
| | | | | | | | | | | * fix blobby * fix funnyboat * fix librecad * drop doubled netfilter entree in blobby * drop unneeded include in funnyboat
* new profilesLibravatar netblue302021-05-20
|
* Merge pull request #4283 from RandomVoid/fix_lutris_profileLibravatar netblue302021-05-18
|\ | | | | Fix Lutris profile
| * Fix running games with enabled Feral GameMode in LutrisLibravatar RandomVoid2021-05-16
| |
| * Fix Lutris won't start without access to ldconfigLibravatar RandomVoid2021-05-16
| |
* | Harden cargo.profileLibravatar rusty-snake2021-05-17
| |
* | Add cargo.profileLibravatar rusty-snake2021-05-16
|/
* fix: discord logout on opening twiceLibravatar sak962021-05-14
|
* Harden device access in default.profileLibravatar rusty-snake2021-05-14
|
* Follow-up for #4165 (#4271)Libravatar glitsj162021-05-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * Follow-up for #4165 * fix noroot comment As suggested [here](https://github.com/netblue30/firejail/pull/4271#discussion_r630981737). * fix dbus-user comment As suggested [here](https://github.com/netblue30/firejail/pull/4271#discussion_r630982527). * fix private-dev comment As suggested [here](https://github.com/netblue30/firejail/pull/4271#discussion_r630980029). * fix private-etc comment As suggested [here](https://github.com/netblue30/firejail/pull/4271#discussion_r630979698). * move writable-var comment cfr. profile.template
* Add noinput to browsers as wellLibravatar rusty-snake2021-05-13
| | | | Profiles with private-dev behind BROWSER_DISABLE_U2F were missed by 0cee0ba5.
* Update dino.profileLibravatar Tad2021-05-11
| | | | It now features audio/video calling.
* drop noautopulse from agetpkgLibravatar glitsj162021-05-11
| | | It's a workaround option, not to be used in any profile by default. Thanks to @rusty-snake for pointing that out.
* Fix bijibenLibravatar rusty-snake2021-05-08
| | | | | | | | bijiben crashes without access to /usr/share/tracker3 in Fedora 34 with: ** (bijiben:14): WARNING **: 21:48:08.394: Unable to connect to Tracker: 'file:///usr/share/tracker3/ontologies/nepomuk' is not a ontology location ** (bijiben:14): WARNING **: 21:48:08.394: Cannot initialize BijiManager: 'file:///usr/share/tracker3/ontologies/nepomuk' is not a ontology location
* revert comment changes from #4257 (#4258)Libravatar glitsj162021-05-07
| | | | | | | | | * revert comment changes from #4257 * revert comment changes from #4257 * revert comment changes from #4257 * revert comment changes from #4257
* read-write fixes (#4257)Libravatar glitsj162021-05-07
| | | | | | | | | * [comment] use 'read-write' instead of 'ignore read-only' * [comment] use 'read-write' instead of 'ignore read-only' * [comment] use 'read-write' instead of 'ignore read-only' * [comment] use 'read-write' instead of 'ignore read-only'
* Add noinput to all profiles with private-devLibravatar rusty-snake2021-05-05
|
* profiles: whitelist mozilla (webext) extensions in chromium profileLibravatar Reiner Herrmann2021-05-04
|
* discord-common.profile: allow webcamLibravatar rusty-snake2021-05-04
| | | | | | closes #4236 [skip ci]
* harden audio-recorder (#4233)Libravatar glitsj162021-05-02
|
* add comment to firefox.profile (#4232)Libravatar glitsj162021-05-02
|
* Harden some game profilesLibravatar rusty-snake2021-04-30
|
* Merge pull request #4219 from Neo00001/masterLibravatar Neo000012021-04-28
|\ | | | | Some minor changes
| * Some minor changesLibravatar Neo000012021-04-26
| |
* | Merge pull request #4217 from kmk3/delete-profiesLibravatar Kelvin M. Klann2021-04-28
|\ \ | |/ |/| Delete *.profie
| * Delete *.profieLibravatar Kelvin M. Klann2021-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Added on commit 41f69f7a7 ("Commons of opengl-game-wrapper.sh") / PR #4071. Each one is a duplicate of a .profile file that was added on the same commit. Commands used to search and replace (which is what causes their deletion): $ git ls-files -z -- '*.profie' | xargs -0 -I '{}' sh -c "git mv -f '{}' \"\`printf '%s\n' '{}' | sed 's/.[^.]*$//'\`.profile\""
* | Fix #4218 -- Digikam - unable to customize toolbarsLibravatar rusty-snake2021-04-26
|/
* Merge pull request #4071 from rusty-snake/open-game-wrapperLibravatar rusty-snake2021-04-24
|\ | | | | Commons of opengl-game-wrapper.sh
| * Commons of opengl-game-wrapper.shLibravatar rusty-snake2021-04-24
| | | | | | | | | | | | | | | | | | | | | | [skip ci] - Add allow-opengl-game.inc - Add profiles for alienarena-wrapper, ballbuster-wrapper, colorful-wrapper, etr-wrapper, gl-117-wrapper, glaxium-wrapper, neverball-wrapper, neverputt-wrapper, pinball-wrapper, supertuxkart-wrapper - Use allow-opengl-game.inc in xonotic.profile and the profiles above - xonotic.profile: simplify private-bin by using xonotic*
| * Add profiles for alienarena, ballbuster, colorful…Libravatar rusty-snake2021-04-24
| | | | | | | | | | | | | | …, gl-117, glaxium, pinball alienarena is missing in firecfg.config by intention, I didn't tested any online multiplayer.
* | Merge pull request #4179 from jose1711/gnomeconnectorLibravatar rusty-snake2021-04-24
|\ \ | | | | | | Add examples how to allow browser access to Gnome extensions connector
| * | Improve hints for allowing browser access to Gnome extensions connectorLibravatar Jose Riha2021-04-16
| | | | | | | | | | | | Fixes #4177.
* | | Add FireDragon profile (#4203)Libravatar Nico2021-04-24
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add firedragon profile * Point private-etc to firefox-common.local Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * Add to firecfg.config * Add firedragon to disable-programs.inc * Correct dir * Remove private-etc Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | file-roller:private-bin: add atool,bsdtar,xzdec,unzstdLibravatar rusty-snake2021-04-21
| | | | | | | | | | | | | | | | | | | | as pointed out by @glitsj16 in 51e67fd4. > FYI, a quick check shows atool,bsdtar,xzdec,unzstd are still missing > from private-bin. Not sure if we actually need to bring those in too. They add virtually no new permissions fr has already a long private-bin with dozens of archivers. Before we break anything I add them.
* | profile fixesLibravatar rusty-snake2021-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | README.md/RELNOTES: - Add new profiles etr.profile: - adding passwd to private-etc makes it work for me file-roller.profile - add netfilter - add zstd to private-bin - add cp,mv,rm to private-bin which seems to be necessary in some cases. #4113 is likely fixed with this but wait for OP.
* | Update Librewolf profile and Add Sway profile (#4164)Libravatar Vladislav Nepogodin2021-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add Sway profile * Fix issue Not working then including firefox-common-addons.profile * Allow sway's fallback config * So I agree with @glitsj16 and @BL4CKH47H4CK3R so.. `No its not needed as it reveals lots of important /usr/share folders like /usr/share/fonts which can used for font fingerprinting and OS detection. Like the site or attacker will know that which font you are using. Linux and windows common font are not same so its a problem. Besides there are so many other important folders as I see. Librewolf can launch and work perfectly without this options` * well.. Revert `include whitelist-usr-share-common.inc` Sync with Firefox profile * πŸ˜„ What just hapened * πŸ”„ Sync with upstream * Merge tested from PR * πŸ”„ Sync with upstream * Merge tested from PR * Revert changes * Add Sway profile * Fix issue Not working then including firefox-common-addons.profile * Allow sway's fallback config * So I agree with @glitsj16 and @BL4CKH47H4CK3R so.. `No its not needed as it reveals lots of important /usr/share folders like /usr/share/fonts which can used for font fingerprinting and OS detection. Like the site or attacker will know that which font you are using. Linux and windows common font are not same so its a problem. Besides there are so many other important folders as I see. Librewolf can launch and work perfectly without this options` * πŸ”„ Rebase * πŸ˜„ What just hapened * Merge tested from PR * πŸ”„ Sync with upstream * Merge tested from PR * Revert changes * Update * Update librewolf.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | unblock tor support in brave (#4200)Libravatar glitsj162021-04-18
| | | | | | | | | | | | | | | | | | | | | | * opt-in for brave's native tor support * fix brave's native tor support * warn about potential tor breakage when using apparmor * update comment for opting in to tor * move brave's tor apparmor fix in brave.profile
* | broaden support for pcre in private-libLibravatar glitsj162021-04-17
| | | | | | Fixes #4202 until we have tooling to generate system-specific lists at install time, as suggested by @loveshack.
* | New profile: Quodlibet (#3983)Libravatar Bundy012021-04-14
| | | | | | | | | | * New profile: Quodlibet * New profile: Quodlibet
* | Fix export in apostropheLibravatar rusty-snake2021-04-12
| |
* | profile fixesLibravatar rusty-snake2021-04-12
|/ | | | | | | | | | | | | | | | | | discord-canary.profile: fix #4175 flameshot.profile: - private-tmp break flameshot (wayland only?) - Screengrabbing (under wayland) is done via dbus, the following names must be allowed: - GNOME: org.gnome.Shell - KDE: org.kde.KWin - Sway: org.freedesktop.portal.Desktop - Allow notifications and tray too, because org.gnome.Shell (for example) is already totaly unsafe. mumble.profile: fix #4181
* Minor FixesLibravatar Neo000012021-04-09
|
* fix comment typoLibravatar glitsj162021-04-07
|
* Fix #3783 -- Google Chrome (wayland ozone) is brokenLibravatar rusty-snake2021-04-06
|
* Encourage making overrides in *.local files (#4165)Libravatar glitsj162021-04-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments
* Add Librewolf Nightly profileLibravatar Vladislav Nepogodin2021-04-04
|
* dropbox: allow python3, fix for issue #4150Libravatar Matthew Cline2021-04-01
| | | | | | /usr/bin/dropbox needs access to python3, at least for dropbox command-line interface version 2020.03.04 as packaged by the RPM Fusion project. Fixes issue #4150
* Fixes (man: allow rustup; Books -> gnome-books)Libravatar rusty-snake2021-03-28
|
* fix hardening commentLibravatar rusty-snake2021-03-24
| | | | [skip ci]
* fix hardening commentLibravatar glitsj162021-03-24
|
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-07 03:33:38 +0000