aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
Commit message (Collapse)AuthorAge
...
* | steam.profile: Allow Project Zomboid (#6117)Libravatar archaon6162023-12-11
|/
* Merge pull request #6070 from kmk3/sort-py-csortLibravatar netblue302023-11-24
|\ | | | | build: sort.py: use case-sensitive sorting
| * build: sort.py: use case-sensitive sortingLibravatar Kelvin M. Klann2023-10-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To match how things are sorted elsewhere, such as with `noblacklist` / `whitelist` lines (vertically) in profiles and in ci/check/profiles/sort-disable-programs.sh and src/etc-cleanup/main.c. This makes the order in `private-etc` always be groups (`@group`), then uppercase paths, then lowercase paths. Example from etc/profile-m-z/softmaker-common.profile: private-etc @tls-ca,SoftMaker,fstab Note that this does not affect a significant amount of profiles; most changes are in `private-bin` / `private-lib` lines and in `private-etc` lines for newer profiles that do not use groups. This is partly due to commit 5d0822c52 ("private-etc: big profile changes", 2023-02-05) replacing `X11` with `@x11` in `private-etc` lines and then commit 0f996ea4d ("private-etc: groups modified", 2023-02-05) removing `Trolltech.conf` from `private-etc` lines and using case-sensitive sorting in them. Relates to #5610.
* | Merge pull request #6066 from nutta-git/patch-1Libravatar netblue302023-11-24
|\ \ | | | | | | steam.profile: allow process_vm_readv syscall
| * | steam.profile: allow process_vm_readv syscallLibravatar duevo2023-10-31
| | | | | | | | | | | | | | | | | | EA Origin (game launcher) won't launch without this. See https://github.com/netblue30/firejail/issues/5185#issuecomment-1776516159
* | | profiles: whitelist alternative data directory for tesseractLibravatar Reiner Herrmann2023-11-18
| | | | | | | | | | | | on Debian the data is in /usr/share/tesseract-ocr/
* | | New profile: tiny-rdm (#6083)Libravatar glitsj162023-11-11
| |/ |/| | | | | | | | | | | * disable-programs.inc: add support for tiny-rdm * Create tiny-rdm.profile * firecfg.config: add support for tiny-rdm
* | profiles: Extend node stack support for pnpm (#6063)Libravatar glitsj162023-10-24
|/ | | | | | | | | * nodejs-common: add pnpm support * disable-programs.inc: add pnpm support * Create pnpm.profile * Create pnpx.profile
* profiles: support more msmtp configuration paths (#6060)Libravatar glitsj162023-10-22
| | | | | | | | | | | | | | | | | Since version 1.8.6 msmtp supports per-user configuration at either ~/.msmtprc (already supported by firejail) or `$XDG_CONFIG_HOME/msmtp/config`. System-wide support can be placed at /etc/msmtprc. This adds the missing paths to the relevant .inc and .profile files. Note that `blacklist ${HOME}/.msmtprc` is present on both disable-common.inc and disable-programs.inc, so the new paths are added to both files. References: https://wiki.archlinux.org/title/Msmtp#Basic_setup https://marlam.de/msmtp/msmtp.html#Configuration-files
* profiles: exchange private-opt with a whitelist (#6021)Libravatar glitsj162023-10-18
| | | | | | | | | | | | | * profiles: drop private-opt (existing whitelist) * profiles: replace private-opt with whitelist In most profiles. Kept private-opt for enpass (~85MB), mate-dictionary (<20MB), minecraft-launcher (~1.6MB) and ppsspp (~44MB). The only app I couldn't check: xmr-stak. * docs: note potential issues with private-opt
* steam.profile: Allow Baba Is You (#6054)Libravatar Frostbyte46642023-10-16
|
* ssmtp: allow (SUID) binary (#6052)Libravatar glitsj162023-10-15
|
* pavucontrol-qt: fix broken whitelisting in ${HOME} (#6045)Libravatar glitsj162023-10-09
|
* tshark: CLI hardening (#6040)Libravatar glitsj162023-10-07
|
* New profile: termshark (#6039)Libravatar glitsj162023-10-07
| | | | | | | * Create termshark.profile * firecfg.config: add termshark support * termshark: CLI hardening
* wireshark: fix access to dumpcap (#6038)Libravatar glitsj162023-10-07
|
* nicotine: allow sound notifications (#6037)Libravatar glitsj162023-10-07
|
* nicotine: support Fcitx and dconf via dbus-user filter (#6036)Libravatar glu87162023-10-07
| | | | | * Update nicotine.profile * dbus.user set to filter
* Merge pull request #6009 from jtrv/tidal-hifiLibravatar netblue302023-10-05
|\ | | | | New profile: tidal-hifi
| * New profile: tidal-hifi (#6008)Libravatar jtrv2023-09-25
| | | | | | | | | | | | | | | | | | | | | | modified src/firecfg/firecfg.config to add tidal-hifi created etc/profile-m-z/tidal-hifi.profile closes: #6008 Apply suggestions from code review Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | youtubemusic-nativefier: fix include .local name (#6020)Libravatar glitsj162023-09-26
|/
* profiles: fix path of system-log-common.profileLibravatar Kelvin M. Klann2023-09-23
| | | | | | | | | | | | | This amends commit dd5539012 ("profiles: refactor log viewers (#5996)", 2023-09-23). Commands used: git mv \ etc/profile-m-z/profile-m-z/profile-m-z/system-log-common.profile \ etc/profile-m-z/system-log-common.profile rmdir etc/profile-m-z/profile-m-z/profile-m-z/ rmdir etc/profile-m-z/profile-m-z/
* mocp: hardening (#6017)Libravatar glitsj162023-09-23
|
* mocp: fix networking (#6016)Libravatar glitsj162023-09-23
|
* profiles: refactor log viewers (#5996)Libravatar glitsj162023-09-23
| | | | | | | | * profiles: refactor log viewers Introduces system-log-common.profile as a common profile for existing GUI log viewer applications. * system-log-common: enable no3d
* steam.profile: Allow Factorio (#6012)Libravatar archaon6162023-09-19
| | | | Add directories to config so Factorio runs correctly.
* telegram.profile: allow ~/.local/share/telegram-desktop (#5994)Libravatar Denis Subbotin2023-09-18
| | | New TelegramWebApps uses another directory for saving local storage.
* Merge pull request #5987 from kmk3/profiles-fix-eol-commentsLibravatar Kelvin M. Klann2023-09-08
|\ | | | | profiles: fix commented code and eol comments
| * profiles: fix commented code and eol commentsLibravatar Kelvin M. Klann2023-09-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Main changes: * Remove the space after `#` for commented code lines to distinguish them from normal comments * Use `#` instead of `-` for comments at the end of the line so that commented code lines work after being uncommented Commands used to search and replace: arg0="$(cat contrib/syntax/lists/profile_commands_arg0.list | LC_ALL=C sort -u | tr '\n' '|' | sed -e 's/|$//' -e 's/\./\\./g')" arg1="$(cat contrib/syntax/lists/profile_commands_arg1.list | LC_ALL=C sort -u | tr '\n' '|' | sed -e 's/|$//' -e 's/\./\\./g')" git ls-files -z -- etc/inc etc/profile* | xargs -0 -I '{}' \ sh -c "printf '%s\n' \"\$(sed -E \ -e 's/^# ($arg0)( [#-]-? .*)?\$/#\\1\\2/' \ -e 's/^# ($arg1)( [^ ]*)?( [#-]-? .*)?\$/#\\1\\2\\3/' \ -e 's/^# (whitelist \\$)/#\\1/' \ -e 's/^(#[^ ].+) --? /\\1 # /' \ '{}')\" >'{}'" Commands used to check for leftover entries: arg0="$(cat contrib/syntax/lists/profile_commands_arg0.list | LC_ALL=C sort -u | tr '\n' '|' | sed -e 's/|$//' -e 's/\./\\./g')" arg1="$(cat contrib/syntax/lists/profile_commands_arg1.list | LC_ALL=C sort -u | tr '\n' '|' | sed -e 's/|$//' -e 's/\./\\./g')" git grep -E "^# ($arg0|$arg1)( +|$)" -- etc/inc etc/profile* See also commit 30f9ad908 ("build: improve comments in firecfg.config", 2023-08-05) / PR #5942.
| * profiles: fix some commentsLibravatar Kelvin M. Klann2023-09-06
| | | | | | | | | | | | | | | | | | Changes: * Turn very long end-of-line comments into normal comments * Turn multi-line end-of-line comments into normal comments * Fix a comment being below instead of above the relevant entry * Turn some comments that look like code into end-of-line comments
* | transgui: hardening (#5989)Libravatar glitsj162023-09-07
|/
* neochat: Allow netlink (#5986)Libravatar DefaultUser2023-09-06
| | | | The latest Neochat package on Arch (23.08.0-2, with libquotient 0.8.1.1-1) crashes otherwise.
* profiles: patch fixes (#5970)Libravatar glitsj162023-08-25
| | | | | | Commit 3077b2d1f blacklists `${PATH}/patch` in disable-devel.inc[1]. We need to noblacklist it in the profiles that need it. [1] https://github.com/netblue30/firejail/commit/3077b2d1ff6c6e26a83487ae460985157b5c61fd
* Merge pull request #5955 from kmk3/build-codespell-improvementsLibravatar Kelvin M. Klann2023-08-14
|\ | | | | build: codespell improvements
| * build: fix codespell errors in more filesLibravatar Kelvin M. Klann2023-08-13
| | | | | | | | | | | | Found by simply running `codespell .`. Environment: codespell 2.2.5-2 on Artix Linux.
* | mpd: allow MPRIS2 (#5951)Libravatar glitsj162023-08-13
|/ | | | | mpDris2 brings MPRIS2 support to MPD: https://github.com/eonpatapon/mpDris2
* profiles: improvements to profiles using private (#5946)Libravatar glitsj162023-08-11
| | | | | | | | | Changes: * comment `include whitelist-common.inc` when using `private` * drop `private` on profiles that access files in `${HOME}` * use `#` in comments Relates to #903.
* profiles: add cache/state paths for mpvLibravatar Kelvin M. Klann2023-08-03
| | | | | | On the profiles that allow ~/.config/mpv. Relates to #5936.
* mpsyt.profile: stop creating config paths for mpv/youtube-dlLibravatar Kelvin M. Klann2023-08-03
| | | | | The programs in question do not create these files; they have to be created manually.
* mpv.profile: add new XDG_CACHE_HOME pathLibravatar Kelvin M. Klann2023-08-03
| | | | | | | | | mpv v0.36.0 uses ~/.cache/mpv[1] [2]: Relates to #2838 #5936. [1] https://github.com/mpv-player/mpv/releases/tag/v0.36.0 [2] https://github.com/mpv-player/mpv/pull/10838
* mpv.profile: add new XDG_STATE_HOME pathLibravatar CodeWithMa2023-08-03
| | | | | | | The new version of mpv changed the path of the watch_later folder to ~/.local/state/mpv/watch_later. See https://github.com/mpv-player/mpv/pull/10838
* New profile: reader (#5934)Libravatar glitsj162023-08-02
| | | | | | | | | | | | * Create reader.profile * firecfg.config: add reader support * reader: integrate review suggestions - blacklist whole ${RUNUSER} - drop x11 none * reader: fix 'x11 none'
* thunderbird: D-Bus hardening (#5913)Libravatar glitsj162023-07-31
|
* spotify: D-Bus hardening (#5923)Libravatar glitsj162023-07-25
|
* New profile: sniffnet (#5920)Libravatar glitsj162023-07-25
| | | | | | | * disable-programs.inc: add sniffnet support * Create sniffnet.profile * firecfg.config: add sniffnet support
* profiles: fixes and cleanups for opening links with firefox (#5919)Libravatar glitsj162023-07-25
|
* profiles: Miscellaneous cleanups (#5918)Libravatar glitsj162023-07-25
|
* firefox(-based) profiles: refactor wusc (#5914)Libravatar glitsj162023-07-25
|
* update mov-cli (#5924)Libravatar pirate4867431862023-07-25
| | | Co-authored-by: pirate486743186 <>
* Create mullvad-browser.profile (#5887)Libravatar glitsj162023-07-22
| | | | | | | | | Homepage: https://mullvad.net/en/download/browser/linux mullvad-browser: don't use restrict-namespaces mullvad-browser: cover both installation paths Suggested in review by @kmk3.
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-08 10:55:41 +0000