aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
Commit message (Collapse)AuthorAge
* Node.js stack refactoring (#4255)Libravatar glitsj162021-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create node.profile * Create node-gyp.profile * refactor npm as redirect * Create npx.profile * Create nvm.profile * Create semver.profile * refactor yarn as redirect * collect node.js stack configuration in common profile * add ~/.nvm to node section * account for node-gyp python dependency * read-only ~/.nvm for node.js stack * blacklist ~/.nvm for node.js stack * move env var comment cfr. profile.template * Delete node-gyp.profile node-gyp is a shell script with a node shebang. We've got that covered via node.profile. * Delete npx.profile npx is a shell script with a node shebang. We've got that covered via node.profile. * Delete semver.profile semver is a shell script that calls node. We've got that covered via node.profile. * add node and nvm to new profiles section
* revert comment changes from #4257 (#4258)Libravatar glitsj162021-05-07
| | | | | | | | | * revert comment changes from #4257 * revert comment changes from #4257 * revert comment changes from #4257 * revert comment changes from #4257
* read-write fixes (#4257)Libravatar glitsj162021-05-07
| | | | | | | | | * [comment] use 'read-write' instead of 'ignore read-only' * [comment] use 'read-write' instead of 'ignore read-only' * [comment] use 'read-write' instead of 'ignore read-only' * [comment] use 'read-write' instead of 'ignore read-only'
* pluma broken with memory-deny-write-executeLibravatar pirate4867431862021-05-07
|
* some wireshark hardening (#4245)Libravatar glitsj162021-05-05
| | | | | * restrict D-Bus access in wireshark * add private-cache to wireshark
* Merge pull request #4242 from aminvakil/wireshark_seccomp_disableLibravatar Reiner Herrmann2021-05-05
|\ | | | | Disable seccomp in wireshark profile
| * Disable seccomp in wireshark profileLibravatar Amin Vakil2021-05-05
| |
* | Stying fixes (mrrescue.profile, pingus.profile, profile.template)Libravatar rusty-snake2021-05-05
| |
* | steam.profile: Allow input devicesLibravatar rusty-snake2021-05-05
| |
* | Add noinput to all profiles with private-devLibravatar rusty-snake2021-05-05
|/
* Merge pull request #4230 from Kishore96in/neochat_profileLibravatar netblue302021-05-04
|\ | | | | New profile for neochat
| * Add back the kwallet dbus stuff.Libravatar Kishore Gopalakrishnan2021-05-04
| | | | | | | | | | The dev did say it may be required on some platforms. He didn't sound completely sure.
| * Move the 1793 workaround stuff to a separate file.Libravatar Kishore Gopalakrishnan2021-05-04
| |
| * Remove unnecessary command.Libravatar Kishore Gopalakrishnan2021-05-03
| | | | | | | | Seems to detect currently running instance even without that.
| * Remove kwallet dbus permissionLibravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | Confirmed on neochat Matrix group that it is not required.
| * Add machine-idLibravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | Does not break dbus, despite the warning in the template.
| * Add command suggested by rusty-snakeLibravatar Kishore Gopalakrishnan2021-05-02
| |
| * Leave the kwallet dbus stuff commented for now.Libravatar Kishore Gopalakrishnan2021-05-02
| |
| * Remove unnecessary permission.Libravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | | | Signing in and so on works without this, so I'm not sure why it was enabled in the flatpak.
| * Remove apparently unnecessary dbus permission.Libravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | | | I had copied this from the flatpak listing, but the application works without this.
| * Remove unnecessary include.Libravatar Kishore Gopalakrishnan2021-05-02
| |
| * Remove unnecessary noblacklist.Libravatar Kishore Gopalakrishnan2021-05-02
| |
| * Remove newlines and comments.Libravatar Kishore Gopalakrishnan2021-05-02
| |
| * Sort options using sort.pyLibravatar Kishore Gopalakrishnan2021-05-02
| |
| * Remove comments.Libravatar Kishore Gopalakrishnan2021-05-02
| |
| * Add neochat files to disable-programs.incLibravatar Kishore Gopalakrishnan2021-05-02
| |
| * Initial profile for neochatLibravatar Kishore Gopalakrishnan2021-05-02
| |
* | Merge pull request #4225 from kmk3/fix-steam-rm-roguelegacyLibravatar Kelvin M. Klann2021-05-03
|\ \ | | | | | | steam.profile: fix rogue legacy paths and syntax
| * | steam.profile: fix rogue legacy paths and syntaxLibravatar Kelvin M. Klann2021-05-01
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Due to using globbing on mkdir, the current version causes this: @davidebeatrici commented on 2021-04-23[1]: > ``` > Error: "${HOME}/.local/share/RogueLegacy*" is an invalid filename: rejected character: "*" > ``` Added on commit a603d4d39 ("steam: some more games added") / PR #4170. The wildcard was used because Rogue Legacy apparently looks up multiple different paths for the config and also for the data[1][2][3]: 1. ~/.config/RogueLegacy 2. ~/.config/RogueLegacyStorageContainer 3. ~/.local/share/RogueLegacy 4. ~/.local/share/RogueLegacyStorageContainer The ones containing "RogueLegacyStorageContainer" appear to be legacy paths (i.e.: paths which are only created by older versions of Rogue Legacy)[2]. So replace all globs with the full paths because: * The paths are known a priori (unlike, say, `/var/lib/libpcre*`) * There aren't too many of them And use only the non-legacy paths on mkdir. Besides mirroring what the current version of Rogue Legacy does (and avoiding the creation of unnecessary dirs), this is also done because _if_ the following applies (i.e.: this was not tested): * legacy paths take precedence over non-legacy paths * the first path clobbers the other ones (i.e.: rather than "merge") * save data exists in a non-legacy path (i.e.: path 3 in this case) * firejail creates all 4 paths Then it would make the newly-created and empty path 4 clobber the non-legacy path 3 and thus make it seem like no save files exist. This would persist even if steam is run without firejail afterwards, as the empty directory would still be there. Losing (or appearing to lose) game saves can be very unfortunate, so create just the non-legacy paths to avoid confusion. [1] https://github.com/netblue30/firejail/pull/4170#issuecomment-825405930 [2] https://steamcommunity.com/app/241600/discussions/1/846957366713233279/ [3] https://www.pcgamingwiki.com/wiki/Rogue_Legacy#Game_data
* | support older gstreamer setups in xfce4-mixer (#4234)Libravatar glitsj162021-05-02
| |
* | fix regextester (#4231)Libravatar glitsj162021-05-02
|/
* fixup! Harden some game profilesLibravatar rusty-snake2021-04-30
|
* Harden some game profilesLibravatar rusty-snake2021-04-30
|
* Merge pull request #4219 from Neo00001/masterLibravatar Neo000012021-04-28
|\ | | | | Some minor changes
| * Some minor changesLibravatar Neo000012021-04-26
| |
* | Delete *.profieLibravatar Kelvin M. Klann2021-04-26
|/ | | | | | | | | | | | | | Added on commit 41f69f7a7 ("Commons of opengl-game-wrapper.sh") / PR #4071. Each one is a duplicate of a .profile file that was added on the same commit. Commands used to search and replace (which is what causes their deletion): $ git ls-files -z -- '*.profie' | xargs -0 -I '{}' sh -c "git mv -f '{}' \"\`printf '%s\n' '{}' | sed 's/.[^.]*$//'\`.profile\""
* Commons of opengl-game-wrapper.shLibravatar rusty-snake2021-04-24
| | | | | | | | | | | [skip ci] - Add allow-opengl-game.inc - Add profiles for alienarena-wrapper, ballbuster-wrapper, colorful-wrapper, etr-wrapper, gl-117-wrapper, glaxium-wrapper, neverball-wrapper, neverputt-wrapper, pinball-wrapper, supertuxkart-wrapper - Use allow-opengl-game.inc in xonotic.profile and the profiles above - xonotic.profile: simplify private-bin by using xonotic*
* Add profiles for alienarena, ballbuster, colorful…Libravatar rusty-snake2021-04-24
| | | | | | | …, gl-117, glaxium, pinball alienarena is missing in firecfg.config by intention, I didn't tested any online multiplayer.
* broaden support for pcre in private-libLibravatar glitsj162021-04-18
| | | Follow-up for https://github.com/netblue30/firejail/commit/692311bcc6fe0744d7831459ad7ec0bc5811b9a9. Thanks to @rusty-snake for tracking this down in #4202.
* add passwd to private-etc (#4193)Libravatar glitsj162021-04-14
|
* Create tmux.profile (#4188)Libravatar rusty-snake2021-04-14
| | | requested in #1139 by @vatonbero
* New profile: Quodlibet (#3983)Libravatar Bundy012021-04-14
| | | | | * New profile: Quodlibet * New profile: Quodlibet
* profile fixesLibravatar rusty-snake2021-04-12
| | | | | | | | | | | | | | | | | | discord-canary.profile: fix #4175 flameshot.profile: - private-tmp break flameshot (wayland only?) - Screengrabbing (under wayland) is done via dbus, the following names must be allowed: - GNOME: org.gnome.Shell - KDE: org.kde.KWin - Sway: org.freedesktop.portal.Desktop - Allow notifications and tray too, because org.gnome.Shell (for example) is already totaly unsafe. mumble.profile: fix #4181
* Minor FixesLibravatar Neo000012021-04-09
|
* Merge pull request #4170 from matthew-cline/steamLibravatar Reiner Herrmann2021-04-07
|\ | | | | steam: some more games added
| * steam: some more games addedLibravatar Matthew Cline2021-04-05
| | | | | | | | | | | | | | | | | | | | | | | | Games added: * Don't Starve * Dungeons of Dredmor * Epic * Loop Hero * Pillars of Eternity I * Rogue Legacy I * Slay the Spire modding * Steam World Dig I & II
* | Merge pull request #4167 from tredondo/patch-7Libravatar rusty-snake2021-04-06
|\ \ | | | | | | WebStorm: allow Dolphin to access its config file
| * | WebStorm: allow Dolphin to access its config fileLibravatar Ted Robertson2021-04-05
| |/
* / Encourage making overrides in *.local files (#4165)Libravatar glitsj162021-04-06
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments * refactor local override comments
* drop some stuff based on discussion with @rusty-snakeLibravatar glitsj162021-04-04
|