aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
Commit message (Collapse)AuthorAge
* Merge pull request #5476 from k4leg/fix_pycharmLibravatar netblue302022-11-25
|\ | | | | fix: PyCharm profiles
| * fix: PyCharm profilesLibravatar Bogdan Ruslanovich Drozd2022-11-23
| | | | | | | | | | | | | | Do not use `private-cache`, because PyCharm places in cache directories stuff like spelling dictionary (i. e. if you download spelling dictionary with `private-cache`, on restart PyCharm you need to download spelling dictionary again).
* | Merge pull request #5442 from rusty-snake/fixesLibravatar Kelvin M. Klann2022-11-23
|\ \ | | | | | | Profile fixes
| * | Fix #5311 -- Whalebird-4.6.2 does not work with the default whalebird.profileLibravatar rusty-snake2022-10-30
| |/
* | fix opening links in firefox youtube-viewers-common.profile (#5352)Libravatar pirate4867431862022-11-23
| | | | | | Co-authored-by: pirate486743186 <>
* | Add python3 support/fixes to nicotine (#5459)Libravatar glitsj162022-11-22
|/ | | | | | | * Add python3 support to nicotine * Revert private-bin changes Adding shell and python3 support to private-bin kept breaking nicotine for the user who reported it on IRC. Let's revert it as suggested by @rusty-snake.
* Merge pull request #5389 from glitsj16/qutebrowser-fixesLibravatar netblue302022-10-11
|\ | | | | Harden qutebrowser profile
| * Harden qutebrowserLibravatar glitsj162022-10-03
| |
| * Fix D-Bus mpris supportLibravatar glitsj162022-10-02
| |
| * unbreak D-Bus mpris supportLibravatar glitsj162022-10-02
| |
| * Harden qutebrowser profileLibravatar glitsj162022-10-01
| |
* | Revert "mpv: whitelist mpv-mpris (#5386)"Libravatar Kelvin M. Klann2022-10-04
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 393c5beff2686d7732221dadb6730917f24835a0. Which broke mpv: $ mpv --version Cannot start application: No such file or directory Probably because mpv itself uses many libraries and it has plugins that may depend on files in /usr/lib as well: $ pacman -Qlq mpv | grep /lib/ | grep -v '/$' /usr/lib/libmpv.so /usr/lib/libmpv.so.1 /usr/lib/libmpv.so.1.109.0 /usr/lib/pkgconfig/mpv.pc $ strings /usr/bin/mpv | grep '^lib.*\.so' | sort -u | wc -l 53 $ pacman -Qlq yt-dlp | grep /lib/ | grep -v '/$' | cut -f -4 -d / | sort -u /usr/lib/python3.10 $ pacman -Q mpv yt-dlp mpv 1:0.34.1-5 yt-dlp 2022.09.01-1 Environment: Artix Linux. Also, private-lib is disabled by default in firejail.config (see #5190) and mpv.profile does not use private-lib, so there should be no need to whitelist anything in /usr/lib in the default profile.
* mpv: whitelist mpv-mpris (#5386)Libravatar Hugo2022-10-01
| | | | | This is an mpv plugin for MPRIS integration. See: https://github.com/hoyon/mpv-mpris
* De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
* De-complicate D-Bus naming schemesLibravatar glitsj162022-09-05
| | | Inspired by https://github.com/netblue30/firejail/pull/5352/files/c04ceb49c7001bb931a35667c831545cd64aeece#r963032151.
* tuir.profile creation (#5330)Libravatar pirate4867431862022-08-28
| | | Co-authored-by: pirate486743186 <>
* steam.profile: fix Proton-GE version in commentLibravatar Kelvin M. Klann2022-08-26
| | | | | This amends commit e2631b40d ("steam.profile: fix breakage with newer Proton-GE (process_vm_readv)", 2022-08-20).
* steam.profile: fix breakage with newer Proton-GE (process_vm_readv)Libravatar Kelvin M. Klann2022-08-26
| | | | | | | | | | | | | As reported by @rsramkis on #5185, upgrading from Proton-7.2-GE-2[1] (released on 2022-02-14) to GE-Proton7-18[2] (released on 2022-05-19) breaks logging in on World of Tanks Blitz unless the `process_vm_ready` 32-bit syscall is allowed[3], so allow it. Fixes #5185. [1] https://github.com/GloriousEggroll/proton-ge-custom/releases/tag/7.2-GE-2 [2] https://github.com/GloriousEggroll/proton-ge-custom/releases/tag/GE-Proton7-18 [3] https://github.com/netblue30/firejail/issues/5185#issuecomment-1152350336
* man.profile needs additional private-etc items on arch (#5322)Libravatar glitsj162022-08-18
|
* Merge pull request #5302 from pirate486743186/makedeb-profile-creationLibravatar netblue302022-08-14
|\ | | | | makedeb profile creation
| * makedeb profile creationLibravatar pirate4867431862022-08-10
| |
* | Merge pull request #5309 from qretornaz-adapei42/masterLibravatar netblue302022-08-14
|\ \ | | | | | | microsoft-edge.profile rewritten for stable channel and moved microsoft-edge{,-beta,-dev} from private-opt to whitelist
| * | microsoft-edge-{dev,beta}: replaced private-opt by whitelist #5307Libravatar Quentin RETORNAZ2022-08-11
| | |
| * | microsoft-edge.profile: rewrite profile for stable channelLibravatar Quentin RETORNAZ2022-08-11
| | | | | | | | | | | | | | | | | | * replaced private-opt by whitelist #5307 * added stable channel config dirs to disable-programs.inc
* | | Merge pull request #5285 from ra1nb0w/vmware-snapshotLibravatar netblue302022-08-14
|\ \ \ | | | | | | | | vmware.profile: snapshot requires /etc/mtab
| * | | vmware.profile: snapshot requires /etc/mtabLibravatar Davide Gerhard2022-08-02
| | |/ | |/| | | | | | | | | | | | | | | | This patch avoid the following error: Error: One of the parameters supplied is invalid Tested with VMware Workstation 16.2.4
* | | neomutt: Avoid creating empty files/directoriesLibravatar Hugo Osvaldo Barrera2022-08-11
| |/ |/| | | | | | | | | | | | | | | | | | | | | neomutt won't write to these locations. Processes it spawns might read to some of them, but creating an empty file doesn't help. This just pollutes user's $HOME with empty files and directories. I've kept a few paths that MAY be written to by neomutt; it's not ideal, but I want to minimise the risk of potential data loss, even if it is corener cases. See: https://github.com/netblue30/firejail/discussions/5276
* | makepkg.profile: add descriptionLibravatar pirate4867431862022-08-10
|/
* Merge pull request #5259 from smitsohu/nsLibravatar smitsohu2022-07-31
|\ | | | | introduce new option restrict-namespaces
| * introduce new option restrict-namespacesLibravatar smitsohu2022-07-23
| |
* | Deny Tor related profiles access to /sys/class/netLibravatar Tad2022-07-23
| | | | | | | | | | | | | | | | This directory contains the MAC address for connections available Tested working with torbrowser-launcher and onionshare Signed-off-by: Tad <tad@spotco.us>
* | viewnior.profile: allow accessing its /usr/share directory (#5270)Libravatar NetSysFire2022-07-23
|/
* remmina.profile: allow python3 (#5253)Libravatar NetSysFire2022-07-17
| | | | | | | | | * remmina.profile: allow python * Update etc/profile-m-z/remmina.profile Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* add Colossal Order to steam.profileLibravatar 0x9fff002022-07-05
|
* add Paradox Launcher to Steam profileLibravatar Serphentas2022-06-26
|
* Transmission fixes: drop private-lib (#5213)Libravatar glitsj162022-06-22
| | | | | | | * drop private-lib * drop private-lib * drop private-lib
* Revert "xonotic.profile: fix audit denial spam"Libravatar Tad2022-06-20
| | | | | | | Logging is now default disabled in c7e4c8ed592fee7f1644152a23c3e1343b01b922 See https://github.com/netblue30/firejail/issues/5207 This reverts commit c0d314f945b405f1e90a1a43719059cd22f55de7.
* reverting previous seccomp log fix (#5207)Libravatar netblue302022-06-20
|
* Remove shell none from profilesLibravatar rusty-snake2022-06-19
| | | | | | | | | | | | | | | | | | | | | | | Command: sed -i "/^shell none/d" etc/*/* TODO: ``` etc/profile-a-l/beaker.profile:ignore shell none etc/profile-a-l/default.profile:# shell none etc/profile-a-l/fdns.profile:#shell none etc/profile-a-l/gnome-nettool.profile:#shell none etc/profile-a-l/jitsi-meet-desktop.profile:ignore shell none etc/profile-m-z/pidgin.profile:# shell none etc/profile-m-z/rocketchat.profile:ignore shell none etc/profile-m-z/server.profile:# shell none etc/templates/profile.template:# OPTIONS (caps*, net*, no*, protocol, seccomp*, shell none, tracelog) etc/templates/profile.template:#shell none ``` - manpage - RELNOTES - fbuilder
* fixing seccomp log (#5207)Libravatar netblue302022-06-17
|
* Add comment for enabling D-Bus desktop notifications to ↵Libravatar glitsj162022-06-05
| | | | | | | transmission-{gtk,qt} (#5175) * add comment for enabling desktop notifications * add comment for enabling desktop notifications
* seamonkey.profile: support enigmail/gpgLibravatar Hartmut Knaack2022-05-28
| | | | Changes inspired by Thunderbird profile.
* unbound: seccomp cleanupLibravatar smitsohu2022-05-21
|
* Merge pull request #5141 from kmk3/nvim-add-xdg-state-homeLibravatar netblue302022-05-20
|\ | | | | nvim: add XDG_STATE_HOME path
| * nvim: add XDG_STATE_HOME pathLibravatar Kelvin M. Klann2022-05-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Default paths as of neovim 0.7.0: * backupdir: $XDG_DATA_HOME/nvim/backup// * directory: $XDG_DATA_HOME/nvim/swap// * undodir: $XDG_DATA_HOME/nvim/undo// * viewdir: $XDG_DATA_HOME/nvim/view// * shada file: $XDG_DATA_HOME/nvim/shada/main.shada * log dir: $XDG_CACHE_HOME/nvim/log Default paths as of [1]: * backupdir: $XDG_STATE_HOME/nvim/backup// * directory: $XDG_STATE_HOME/nvim/swap// * undodir: $XDG_STATE_HOME/nvim/undo// * viewdir: $XDG_STATE_HOME/nvim/view// * shada file: $XDG_STATE_HOME/nvim/shada/main.shada * log dir: $XDG_STATE_HOME/nvim/log [1] https://github.com/neovim/neovim/pull/15583
* | updates for wget2 (#5152)Libravatar glitsj162022-05-20
| | | | | | | | | | * update for wget2 * allow ${HOME}/.local/share/wget
* | onionshare-gui.profile: fix breakageLibravatar Tad2022-05-20
|/ | | | | | | Fails to start without this, eg: FileNotFoundError: [Errno 2] No such file or directory: '/usr/share/onionshare/images/favicon.ico' Signed-off-by: Tad <tad@spotco.us>
* xonotic.profile: fix audit denial spamLibravatar Tad2022-05-12
| | | | | | After a3f00edb32aca7516d690db046dd1ed3eb186bdd Signed-off-by: Tad <tad@spotco.us>
* okLibravatar Łukasz Mariański2022-04-23
|
* Fix glob pattern and update other profiles/includesLibravatar Łukasz Mariański2022-04-23
|
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-08 13:51:38 +0000