aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l
Commit message (Collapse)AuthorAge
* Harden some game profilesLibravatar rusty-snake2021-04-30
|
* Merge pull request #4219 from Neo00001/masterLibravatar Neo000012021-04-28
|\ | | | | Some minor changes
| * Some minor changesLibravatar Neo000012021-04-26
| |
* | Merge pull request #4217 from kmk3/delete-profiesLibravatar Kelvin M. Klann2021-04-28
|\ \ | |/ |/| Delete *.profie
| * Delete *.profieLibravatar Kelvin M. Klann2021-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Added on commit 41f69f7a7 ("Commons of opengl-game-wrapper.sh") / PR #4071. Each one is a duplicate of a .profile file that was added on the same commit. Commands used to search and replace (which is what causes their deletion): $ git ls-files -z -- '*.profie' | xargs -0 -I '{}' sh -c "git mv -f '{}' \"\`printf '%s\n' '{}' | sed 's/.[^.]*$//'\`.profile\""
* | Fix #4218 -- Digikam - unable to customize toolbarsLibravatar rusty-snake2021-04-26
|/
* Merge pull request #4071 from rusty-snake/open-game-wrapperLibravatar rusty-snake2021-04-24
|\ | | | | Commons of opengl-game-wrapper.sh
| * Commons of opengl-game-wrapper.shLibravatar rusty-snake2021-04-24
| | | | | | | | | | | | | | | | | | | | | | [skip ci] - Add allow-opengl-game.inc - Add profiles for alienarena-wrapper, ballbuster-wrapper, colorful-wrapper, etr-wrapper, gl-117-wrapper, glaxium-wrapper, neverball-wrapper, neverputt-wrapper, pinball-wrapper, supertuxkart-wrapper - Use allow-opengl-game.inc in xonotic.profile and the profiles above - xonotic.profile: simplify private-bin by using xonotic*
| * Add profiles for alienarena, ballbuster, colorful…Libravatar rusty-snake2021-04-24
| | | | | | | | | | | | | | …, gl-117, glaxium, pinball alienarena is missing in firecfg.config by intention, I didn't tested any online multiplayer.
* | Merge pull request #4179 from jose1711/gnomeconnectorLibravatar rusty-snake2021-04-24
|\ \ | | | | | | Add examples how to allow browser access to Gnome extensions connector
| * | Improve hints for allowing browser access to Gnome extensions connectorLibravatar Jose Riha2021-04-16
| | | | | | | | | | | | Fixes #4177.
* | | Add FireDragon profile (#4203)Libravatar Nico2021-04-24
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add firedragon profile * Point private-etc to firefox-common.local Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * Add to firecfg.config * Add firedragon to disable-programs.inc * Correct dir * Remove private-etc Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | file-roller:private-bin: add atool,bsdtar,xzdec,unzstdLibravatar rusty-snake2021-04-21
| | | | | | | | | | | | | | | | | | | | as pointed out by @glitsj16 in 51e67fd4. > FYI, a quick check shows atool,bsdtar,xzdec,unzstd are still missing > from private-bin. Not sure if we actually need to bring those in too. They add virtually no new permissions fr has already a long private-bin with dozens of archivers. Before we break anything I add them.
* | profile fixesLibravatar rusty-snake2021-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | README.md/RELNOTES: - Add new profiles etr.profile: - adding passwd to private-etc makes it work for me file-roller.profile - add netfilter - add zstd to private-bin - add cp,mv,rm to private-bin which seems to be necessary in some cases. #4113 is likely fixed with this but wait for OP.
* | Update Librewolf profile and Add Sway profile (#4164)Libravatar Vladislav Nepogodin2021-04-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add Sway profile * Fix issue Not working then including firefox-common-addons.profile * Allow sway's fallback config * So I agree with @glitsj16 and @BL4CKH47H4CK3R so.. `No its not needed as it reveals lots of important /usr/share folders like /usr/share/fonts which can used for font fingerprinting and OS detection. Like the site or attacker will know that which font you are using. Linux and windows common font are not same so its a problem. Besides there are so many other important folders as I see. Librewolf can launch and work perfectly without this options` * well.. Revert `include whitelist-usr-share-common.inc` Sync with Firefox profile * 😄 What just hapened * 🔄 Sync with upstream * Merge tested from PR * 🔄 Sync with upstream * Merge tested from PR * Revert changes * Add Sway profile * Fix issue Not working then including firefox-common-addons.profile * Allow sway's fallback config * So I agree with @glitsj16 and @BL4CKH47H4CK3R so.. `No its not needed as it reveals lots of important /usr/share folders like /usr/share/fonts which can used for font fingerprinting and OS detection. Like the site or attacker will know that which font you are using. Linux and windows common font are not same so its a problem. Besides there are so many other important folders as I see. Librewolf can launch and work perfectly without this options` * 🔄 Rebase * 😄 What just hapened * Merge tested from PR * 🔄 Sync with upstream * Merge tested from PR * Revert changes * Update * Update librewolf.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | unblock tor support in brave (#4200)Libravatar glitsj162021-04-18
| | | | | | | | | | | | | | | | | | | | | | * opt-in for brave's native tor support * fix brave's native tor support * warn about potential tor breakage when using apparmor * update comment for opting in to tor * move brave's tor apparmor fix in brave.profile
* | broaden support for pcre in private-libLibravatar glitsj162021-04-17
| | | | | | Fixes #4202 until we have tooling to generate system-specific lists at install time, as suggested by @loveshack.
* | New profile: Quodlibet (#3983)Libravatar Bundy012021-04-14
| | | | | | | | | | * New profile: Quodlibet * New profile: Quodlibet
* | Fix export in apostropheLibravatar rusty-snake2021-04-12
| |
* | profile fixesLibravatar rusty-snake2021-04-12
|/ | | | | | | | | | | | | | | | | | discord-canary.profile: fix #4175 flameshot.profile: - private-tmp break flameshot (wayland only?) - Screengrabbing (under wayland) is done via dbus, the following names must be allowed: - GNOME: org.gnome.Shell - KDE: org.kde.KWin - Sway: org.freedesktop.portal.Desktop - Allow notifications and tray too, because org.gnome.Shell (for example) is already totaly unsafe. mumble.profile: fix #4181
* Minor FixesLibravatar Neo000012021-04-09
|
* fix comment typoLibravatar glitsj162021-04-07
|
* Fix #3783 -- Google Chrome (wayland ozone) is brokenLibravatar rusty-snake2021-04-06
|
* Encourage making overrides in *.local files (#4165)Libravatar glitsj162021-04-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments
* Add Librewolf Nightly profileLibravatar Vladislav Nepogodin2021-04-04
|
* dropbox: allow python3, fix for issue #4150Libravatar Matthew Cline2021-04-01
| | | | | | /usr/bin/dropbox needs access to python3, at least for dropbox command-line interface version 2020.03.04 as packaged by the RPM Fusion project. Fixes issue #4150
* Fixes (man: allow rustup; Books -> gnome-books)Libravatar rusty-snake2021-03-28
|
* fix hardening commentLibravatar rusty-snake2021-03-24
| | | | [skip ci]
* fix hardening commentLibravatar glitsj162021-03-24
|
* fix network access commentLibravatar glitsj162021-03-24
|
* Merge pull request #4126 from rusty-snake/better-renamesLibravatar netblue302021-03-24
|\ | | | | Rename chromium-common-hardened and feh-network …
| * Rename chromium-common-hardened and feh-network …Libravatar rusty-snake2021-03-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | …again I am still not really happy about the rename from #4028, #4029, #4030 and #4031. I've no problem with moving away .inc but I don't like the result. So here's a proposal to make this better: | NAME | DESCRIPTION | | ------------------------- | ------------------------------------------------------------ | | `*-addons.profile` | (include) Allow external addons | | `*-common.profile` | (include) Common parts across multiple profiles | | `*-hardened.inc.profile` | Further hardening which can not be made default | | `*-network.inc.profile` | Allow optional network access | | `*-whitelist.inc.profile` | Enabled whitelisting (which can not be made default) ¹ | | `*.inc.profile` | Other profile specific includes | | `*.profile` | A profile for a program | | `allow-*.inc` | Multiple `noblacklist`s that should always be used together | | `disable-*.inc` | `blacklist`ing | | `whitelist-*-common.inc` | common `whitelist`s | | `*.inc` | Other generic includes | | `globals.local` | User overrides for all profiles | | `*.local` | Per profile user overrides | ¹ can be used for programs like KeePassXC or editors.
* | Merge pull request #4116 from Neo00001/masterLibravatar netblue302021-03-24
|\ \ | | | | | | Update vmware.profile & dbus-policy for amarok
| * | Update amarok.profileLibravatar Neo000012021-03-21
| | |
| * | Update amarok.profileLibravatar Neo000012021-03-19
| | |
* | | Update k3b.profileLibravatar Neo000012021-03-23
| |/ |/| | | #2989
* | fixes for gnome-logsLibravatar glitsj162021-03-21
| |
* | fix private-libLibravatar glitsj162021-03-20
| |
* | Merge pull request #4069 from rusty-snake/hasher-profilesLibravatar netblue302021-03-19
|\ \ | | | | | | Add profile for checksum tools
| * | Add profile for checksum toolsLibravatar rusty-snake2021-03-14
| | | | | | | | | | | | | | | | | | * Oops! Thanks for catching. * Add quiet
* | | Merge pull request #3984 from nidamanx/patch-1Libravatar netblue302021-03-19
|\ \ \ | | | | | | | | Fix for KeePassXC plugin
| * | | SortingLibravatar Nicola Davide Mannarelli2021-02-14
| | | | | | | | | | | | | | | | Moved in the right place as in template https://github.com/netblue30/firejail/blob/master/etc/templates/profile.template
| * | | Update etc/profile-a-l/firefox.profileLibravatar Nicola Davide Mannarelli2021-02-13
| | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | | Fix for KeePassXC pluginLibravatar Nicola Davide Mannarelli2021-02-13
| | | | | | | | | | | | | | | | | | | | KeePassXC changed the socket name. https://github.com/keepassxreboot/keepassxc/commit/a145bf91191f0a4630a7e31654aff8a8dfd09bf0 Keep also old socket name in whitelist for back compatibility
* | | | Merge pull request #4102 from pirate486743186/patch-13Libravatar netblue302021-03-19
|\ \ \ \ | | | | | | | | | | fixing dbus filtering for engrampa
| * | | | fixing dbus filtering for engrampaLibravatar pirate4867431862021-03-15
| | |_|/ | |/| |
* | | | Merge pull request #4098 from tredondo/masterLibravatar netblue302021-03-19
|\ \ \ \ | |/ / / |/| | | Create bcompare.profile
| * | | Uncomment nodvd, reuse "uncomment next" msgLibravatar Ted Robertson2021-03-14
| | | |
| * | | Allow external applications to paly sound filesLibravatar Ted Robertson2021-03-13
| | | |
| * | | No # ipc-namespaceLibravatar Ted Robertson2021-03-13
| | | | | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-08 22:39:21 +0000