| Commit message (Collapse) | Author | Age |
|
|
|
|
| |
This is the counterpart of the blacklist of rxvt in commit ed5c259f,
as suggested in the discussion of pull request #4831.
|
|\
| |
| | |
RPCS3 profile
|
| | |
|
|\ \
| | |
| | | |
noprinters: add missing items & add to profile.template
|
| |/
| |
| |
| |
| |
| |
| | |
See commit bd15e763e ("--noprinter option", 2021-10-20) and commit
d9403dcdc ("small fix", 2021-10-20).
Relates to #4607.
|
|\ \
| | |
| | | |
Blacklist rxvt after the blacklist of Perl.
|
| | |
| | |
| | |
| | |
| | |
| | | |
rxvt needs Perl modules, thus does not work. And its blacklist is
needed so that Firefox can run applications with Terminal=true in
their .desktop file (depending on what is installed).
|
| | | |
|
|/ /
| |
| |
| |
| | |
* Add firefoxdeveloperedition DBus path to profile.
* Re-order rules.
|
| | |
|
| | |
|
|/
|
|
| |
Bug-Debian: https://bugs.debian.org/1003234
|
| |
|
| |
|
|
|
|
| |
It's used when saving files send in conversations.
|
|\
| |
| | |
yt-dlp: add missing paths & mpv.profile: whitelist paths for yt-dlp
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
See etc/profile-m-z/yt-dlp.profile.
Relates to commit d6ca41c19 ("update mpv.profile", 2021-10-24) /
PR #4634.
Fixes #4754.
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
If it does not already exist, mpv is unlikely to need or to create it,
so just whitelist it if it exists.
This amends commit 5d741795c ("Use whitelisting for video players
(#3472)", 2020-08-15).
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This amends commit d6ca41c19 ("update mpv.profile", 2021-10-24) /
PR #4634.
These paths were taken from yt-dlp(1). They are used since yt-dlp
commit e2e43aea2 ("Portable Configuration file (closes #19)",
2021-01-16)[1].
Environment: yt-dlp 2021.12.01-1 on Artix Linux.
Relates to: https://github.com/yt-dlp/yt-dlp/issues/19
[1] https://github.com/yt-dlp/yt-dlp/commit/e2e43aea2159a235e151f56bd14383129a6b4355
|
| | |
|
| | |
|
|\ \
| | |
| | | |
Allow /opt/tor-browser for Tor Browser profile
|
| |/ |
|
| | |
|
|\ \
| | |
| | | |
Whitelist /usr/share/nextcloud to allow access to translation files.
|
| | | |
|
|\ \ \
| | | |
| | | | |
Fix teams ignoring input sources e.g. microphones
|
| | | | |
|
| |/ / |
|
|\ \ \
| | | |
| | | | |
Whitelist ${HOME}/.local/opt/tor-browser to make tor-browser work
|
| |/ /
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
tor-browser 11.0.2-1 doesn't work without whitelisting this directory. The
following was the message I got before whitelisting this directory.
Reading profile /etc/firejail/tor-browser.profile
Reading profile /etc/firejail/torbrowser-launcher.profile
Reading profile /etc/firejail/allow-python2.inc
Reading profile /etc/firejail/allow-python3.inc
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-xdg.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Warning: Warning: NVIDIA card detected, nogroups command disabled
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Parent pid 12653, child pid 12654
104 programs installed in 153.32 ms
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: skipping asound.conf for private /etc
Warning: skipping crypto-policies for private /etc
Warning fcopy: skipping /etc/fonts/conf.d/11-lcdfilter-default.conf, cannot find inode
Warning: skipping pki for private /etc
Private /etc installed in 64.84 ms
Private /usr/etc installed in 0.00 ms
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Warning: cleaning all supplementary groups
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Warning: cleaning all supplementary groups
Child process initialized in 325.75 ms
/usr/bin/tor-browser: [Error] The tor-browser archive could not be extracted to your home directory.
Check the permissions of ~/.local/opt/tor-browser/app.
The error log can be found in ~/.local/opt/tor-browser/LOG.
/usr/bin/tor-browser: line 218: ~/.local/opt/tor-browser/app/Browser/start-tor-browser: No such file or directory
|
|/ / |
|
|/ |
|
|\
| |
| | |
elinks.profile: Fix missing access to liblua
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
By including allow-lua.inc.
Error log:
$ firejail elinks
elinks: error while loading shared libraries: liblua.so.5.4: cannot open shared object file: Permission denied
Environment: firejail-git (a82c8e021) and elinks 0.14.3-2 on Artix
Linux.
Fixes #4707.
Reported-by: @jose1711
|
|\ \
| | |
| | | |
Skype profile tweaks
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Tested these settings and they work fine, including a test call. I can't
explain why, but if the `org.kde.StatusNotifierWatcher` entry is
removed, Skype will immediately log out the previous session when
started.
|
| |/
| |
| |
| | |
Without this, Skype's session isn't retained.
|
|\ \
| |/
|/| |
Add CachyBrowser profile
|
| | |
|
| | |
|
|/ |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Various .so's are needed to allow execution, /etc/ImageMagick-7/ is
needed for various policy XML files, and /usr/$(libdir)/ImageMagick-x.y.z/
is needed in order to have access to decoders.
Tested on Gentoo; I don't know if other distros put the relevant bits
in different paths.
Signed-off-by: Hank Leininger <hlein@korelogic.com>
|
| |
|
| |
|
|
|
| |
As suggested in https://github.com/netblue30/firejail/pull/4727#discussion_r759402234.
|
| |
|
| |
|