| Commit message (Collapse) | Author | Age |
| |
|
| |
|
|\
| |
| | |
Add pass to common blacklist
|
| |
| |
| |
| |
| | |
pass is a password manager that keeps files under ~/.password-store by default.
See http://www.passwordstore.org/ for more info
|
|/
|
|
| |
Bug-Debian: https://bugs.debian.org/872720
|
|\
| |
| | |
fix simple-scan
|
| |
| |
| | |
fix for broken device discovery.
|
|/ |
|
|
|
|
| |
Waterfox 55 has new profile location
|
|\
| |
| | |
some fixes and enhancements
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
|/
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add musescore profile
* blacklist musescore
* add musescore
* add musescore
* add tuxguitar, musescore
* add tuxguitar, musescore
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
youtube-dl uses python3 as shebang, which symlinks to python3.5.
-> both need to be added to private-bin.
Reported by Martin Dosch on https://bugs.debian.org/872287
|
| |
|
| |
|
|\
| |
| | |
firejail profile for torbrowser-launcher
|
| | |
|
|/ |
|
|\
| |
| | |
Fix nodvd placement
|
| | |
|
| | |
|
|/ |
|
|\
| |
| | |
fix smplayer for mpv
|
| |
| |
| | |
this fixes smplayer if you use the mpv backend
|
|/ |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add tuxguitar profile
tested for versions < 1.3
* blacklist tuxguitar
* add tuxguitar
* add tuxguitar
* add support for tuxguitar > 1.2
higher versions fail to launch without protocol=inet,inet6 and with noexec=~. Yet, net=none seems to be still tolerated, which comes handy to block talk with internet and dbus.
* unbreak tuxguitar Internet access
versions >= 1.3 actually run fine with net=none enabled, if the built-in internet dependent feature is not used
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add disable-mnt
* support alternative media players
* add novideo
* fix comment, add novideo
* drop disable-mnt
saving to mounted locations is legitimate use
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add novideo
* add novideo
* add novideo
* put noexec last
* blacklist Clementine configuration and database
* blacklist Clementine configuration and database
* add novideo
* add novideo, permit access to ~/.java
* add novideo
* spoof machine-id
* mimeapps.list is already in whitelist-common.inc
* ~/.local/share/applications is already read-only
see disable-common.inc
* mimeapps.list is already in whitelist-common.inc
* ~/.local/share/applications is already read-only
see disable-common.inc
* drop machine-id option
private-etc hides it anyway
|
| |
|
|
|
|
| |
There may actually be some other comments that were removed, but the bulk have been restored
|
| |
|