aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
Commit message (Collapse)AuthorAge
* nicotine: allow sound notifications (#6037)Libravatar glitsj162023-10-07
|
* nicotine: support Fcitx and dconf via dbus-user filter (#6036)Libravatar glu87162023-10-07
| | | | | * Update nicotine.profile * dbus.user set to filter
* Merge pull request #6009 from jtrv/tidal-hifiLibravatar netblue302023-10-05
|\ | | | | New profile: tidal-hifi
| * New profile: tidal-hifi (#6008)Libravatar jtrv2023-09-25
| | | | | | | | | | | | | | | | | | | | | | modified src/firecfg/firecfg.config to add tidal-hifi created etc/profile-m-z/tidal-hifi.profile closes: #6008 Apply suggestions from code review Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | youtubemusic-nativefier: fix include .local name (#6020)Libravatar glitsj162023-09-26
|/
* profiles: fix path of system-log-common.profileLibravatar Kelvin M. Klann2023-09-23
| | | | | | | | | | | | | This amends commit dd5539012 ("profiles: refactor log viewers (#5996)", 2023-09-23). Commands used: git mv \ etc/profile-m-z/profile-m-z/profile-m-z/system-log-common.profile \ etc/profile-m-z/system-log-common.profile rmdir etc/profile-m-z/profile-m-z/profile-m-z/ rmdir etc/profile-m-z/profile-m-z/
* mocp: hardening (#6017)Libravatar glitsj162023-09-23
|
* mocp: fix networking (#6016)Libravatar glitsj162023-09-23
|
* profiles: refactor log viewers (#5996)Libravatar glitsj162023-09-23
| | | | | | | | * profiles: refactor log viewers Introduces system-log-common.profile as a common profile for existing GUI log viewer applications. * system-log-common: enable no3d
* steam.profile: Allow Factorio (#6012)Libravatar archaon6162023-09-19
| | | | Add directories to config so Factorio runs correctly.
* telegram.profile: allow ~/.local/share/telegram-desktop (#5994)Libravatar Denis Subbotin2023-09-18
| | | New TelegramWebApps uses another directory for saving local storage.
* Merge pull request #5987 from kmk3/profiles-fix-eol-commentsLibravatar Kelvin M. Klann2023-09-08
|\ | | | | profiles: fix commented code and eol comments
| * profiles: fix commented code and eol commentsLibravatar Kelvin M. Klann2023-09-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Main changes: * Remove the space after `#` for commented code lines to distinguish them from normal comments * Use `#` instead of `-` for comments at the end of the line so that commented code lines work after being uncommented Commands used to search and replace: arg0="$(cat contrib/syntax/lists/profile_commands_arg0.list | LC_ALL=C sort -u | tr '\n' '|' | sed -e 's/|$//' -e 's/\./\\./g')" arg1="$(cat contrib/syntax/lists/profile_commands_arg1.list | LC_ALL=C sort -u | tr '\n' '|' | sed -e 's/|$//' -e 's/\./\\./g')" git ls-files -z -- etc/inc etc/profile* | xargs -0 -I '{}' \ sh -c "printf '%s\n' \"\$(sed -E \ -e 's/^# ($arg0)( [#-]-? .*)?\$/#\\1\\2/' \ -e 's/^# ($arg1)( [^ ]*)?( [#-]-? .*)?\$/#\\1\\2\\3/' \ -e 's/^# (whitelist \\$)/#\\1/' \ -e 's/^(#[^ ].+) --? /\\1 # /' \ '{}')\" >'{}'" Commands used to check for leftover entries: arg0="$(cat contrib/syntax/lists/profile_commands_arg0.list | LC_ALL=C sort -u | tr '\n' '|' | sed -e 's/|$//' -e 's/\./\\./g')" arg1="$(cat contrib/syntax/lists/profile_commands_arg1.list | LC_ALL=C sort -u | tr '\n' '|' | sed -e 's/|$//' -e 's/\./\\./g')" git grep -E "^# ($arg0|$arg1)( +|$)" -- etc/inc etc/profile* See also commit 30f9ad908 ("build: improve comments in firecfg.config", 2023-08-05) / PR #5942.
| * profiles: fix some commentsLibravatar Kelvin M. Klann2023-09-06
| | | | | | | | | | | | | | | | | | Changes: * Turn very long end-of-line comments into normal comments * Turn multi-line end-of-line comments into normal comments * Fix a comment being below instead of above the relevant entry * Turn some comments that look like code into end-of-line comments
* | transgui: hardening (#5989)Libravatar glitsj162023-09-07
|/
* neochat: Allow netlink (#5986)Libravatar DefaultUser2023-09-06
| | | | The latest Neochat package on Arch (23.08.0-2, with libquotient 0.8.1.1-1) crashes otherwise.
* profiles: patch fixes (#5970)Libravatar glitsj162023-08-25
| | | | | | Commit 3077b2d1f blacklists `${PATH}/patch` in disable-devel.inc[1]. We need to noblacklist it in the profiles that need it. [1] https://github.com/netblue30/firejail/commit/3077b2d1ff6c6e26a83487ae460985157b5c61fd
* Merge pull request #5955 from kmk3/build-codespell-improvementsLibravatar Kelvin M. Klann2023-08-14
|\ | | | | build: codespell improvements
| * build: fix codespell errors in more filesLibravatar Kelvin M. Klann2023-08-13
| | | | | | | | | | | | Found by simply running `codespell .`. Environment: codespell 2.2.5-2 on Artix Linux.
* | mpd: allow MPRIS2 (#5951)Libravatar glitsj162023-08-13
|/ | | | | mpDris2 brings MPRIS2 support to MPD: https://github.com/eonpatapon/mpDris2
* profiles: improvements to profiles using private (#5946)Libravatar glitsj162023-08-11
| | | | | | | | | Changes: * comment `include whitelist-common.inc` when using `private` * drop `private` on profiles that access files in `${HOME}` * use `#` in comments Relates to #903.
* profiles: add cache/state paths for mpvLibravatar Kelvin M. Klann2023-08-03
| | | | | | On the profiles that allow ~/.config/mpv. Relates to #5936.
* mpsyt.profile: stop creating config paths for mpv/youtube-dlLibravatar Kelvin M. Klann2023-08-03
| | | | | The programs in question do not create these files; they have to be created manually.
* mpv.profile: add new XDG_CACHE_HOME pathLibravatar Kelvin M. Klann2023-08-03
| | | | | | | | | mpv v0.36.0 uses ~/.cache/mpv[1] [2]: Relates to #2838 #5936. [1] https://github.com/mpv-player/mpv/releases/tag/v0.36.0 [2] https://github.com/mpv-player/mpv/pull/10838
* mpv.profile: add new XDG_STATE_HOME pathLibravatar CodeWithMa2023-08-03
| | | | | | | The new version of mpv changed the path of the watch_later folder to ~/.local/state/mpv/watch_later. See https://github.com/mpv-player/mpv/pull/10838
* New profile: reader (#5934)Libravatar glitsj162023-08-02
| | | | | | | | | | | | * Create reader.profile * firecfg.config: add reader support * reader: integrate review suggestions - blacklist whole ${RUNUSER} - drop x11 none * reader: fix 'x11 none'
* thunderbird: D-Bus hardening (#5913)Libravatar glitsj162023-07-31
|
* spotify: D-Bus hardening (#5923)Libravatar glitsj162023-07-25
|
* New profile: sniffnet (#5920)Libravatar glitsj162023-07-25
| | | | | | | * disable-programs.inc: add sniffnet support * Create sniffnet.profile * firecfg.config: add sniffnet support
* profiles: fixes and cleanups for opening links with firefox (#5919)Libravatar glitsj162023-07-25
|
* profiles: Miscellaneous cleanups (#5918)Libravatar glitsj162023-07-25
|
* firefox(-based) profiles: refactor wusc (#5914)Libravatar glitsj162023-07-25
|
* update mov-cli (#5924)Libravatar pirate4867431862023-07-25
| | | Co-authored-by: pirate486743186 <>
* Create mullvad-browser.profile (#5887)Libravatar glitsj162023-07-22
| | | | | | | | | Homepage: https://mullvad.net/en/download/browser/linux mullvad-browser: don't use restrict-namespaces mullvad-browser: cover both installation paths Suggested in review by @kmk3.
* torbrowser-launcher: hardening (#5886)Libravatar glitsj162023-07-22
| | | | | | | torbrowser-launcher: more hardening as per review torbrowser-launcher: revert enabling restrict-namespaces Suggested in review by @rusty-snake.
* profiles: remove /usr/share/vulkan already whitelisted by wusc (#5910)Libravatar glitsj162023-07-20
|
* sqlitebrowser remote support (#5909)Libravatar glitsj162023-07-20
| | | | | * disable-programs.inc: add remote sqlitebrowser support * sqlitebrowser: add support for remote functionality
* modif: drop deprecated 'shell' option references (#5894)Libravatar glitsj162023-07-19
| | | | | | | | | | | | The `shell` option has been removed. Remove stale references. This does NOT remove `shell none`-related code comments in: - src/firejail/fs_lib.c (L433-L441) - src/firejail/join.c (L415-L417) Relates to #5196. Suggested by #5891.
* Merge pull request #5881 from glitsj16/rssguardLibravatar netblue302023-07-13
|\ | | | | New profile: rssguard
| * Merge branch 'netblue30:master' into rssguardLibravatar glitsj162023-07-06
| |\
| * | rssguard.profile: add netlink to protocolLibravatar glitsj162023-07-05
| | |
| * | rssguard.profile: add seccomp.block-secondaryLibravatar glitsj162023-07-04
| | |
| * | Create rssguard.profileLibravatar glitsj162023-07-03
| | |
* | | fix server.profileLibravatar netblue302023-07-10
| |/ |/|
* | fix mov-cli.profileLibravatar pirate4867431862023-07-05
| |
* | virtualbox: gentoo fix (#5880)Libravatar glitsj162023-07-04
|/
* profiles: vmware: allow develLibravatar Kelvin M. Klann2023-06-21
| | | | | | | | | | | It apparently fails on Linux Mint 20.3 (based on Ubuntu 20.04) due to the "VMWare Kernel Module Updater" being unable to find gcc[1]. Relates to #3526. [1] https://github.com/netblue30/firejail/issues/5861#issuecomment-1598407890 Reported-by: @MikeNavy
* profiles: add vmplayer.profileLibravatar Kelvin M. Klann2023-06-21
| | | | | | | | | | | | | As a redirect to vmware.profile. This is apparently the filename for the "VMWare Workstation Player" on Linux Mint 20.3 (based on Ubuntu 20.04)[1]. Relates to #3526. [1] https://github.com/netblue30/firejail/issues/5861#issuecomment-1598132860 Reported-by: @MikeNavy
* profiles: fix descriptions of vmware programsLibravatar Kelvin M. Klann2023-06-21
| | | | Relates to #3526.
* Merge pull request #5808 from Dieterbe/qutebrowser-qt6-mpris-changeLibravatar netblue302023-05-19
|\ | | | | qutebrowser: update MPRIS name for qutebrowser-qt6
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-06 04:57:44 +0000