aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
...
* | | pluma broken with memory-deny-write-executeLibravatar pirate4867431862021-05-07
|/ /
* | some wireshark hardening (#4245)Libravatar glitsj162021-05-05
| | | | | | | | | | * restrict D-Bus access in wireshark * add private-cache to wireshark
* | Merge pull request #4242 from aminvakil/wireshark_seccomp_disableLibravatar Reiner Herrmann2021-05-05
|\ \ | | | | | | Disable seccomp in wireshark profile
| * | Disable seccomp in wireshark profileLibravatar Amin Vakil2021-05-05
| | |
* | | Stying fixes (mrrescue.profile, pingus.profile, profile.template)Libravatar rusty-snake2021-05-05
| | |
* | | steam.profile: Allow input devicesLibravatar rusty-snake2021-05-05
| | |
* | | Add noinput to all profiles with private-devLibravatar rusty-snake2021-05-05
|/ /
* | profiles: whitelist mozilla (webext) extensions in chromium profileLibravatar Reiner Herrmann2021-05-04
| |
* | Merge pull request #4230 from Kishore96in/neochat_profileLibravatar netblue302021-05-04
|\ \ | | | | | | New profile for neochat
| * | Correct name for local file.Libravatar Kishore Gopalakrishnan2021-05-04
| | |
| * | Update etc/inc/whitelist-1793-workaround.incLibravatar Kishore96in2021-05-04
| | | | | | | | | Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
| * | Add back the kwallet dbus stuff.Libravatar Kishore Gopalakrishnan2021-05-04
| | | | | | | | | | | | | | | The dev did say it may be required on some platforms. He didn't sound completely sure.
| * | Move the 1793 workaround stuff to a separate file.Libravatar Kishore Gopalakrishnan2021-05-04
| | |
| * | Remove unnecessary command.Libravatar Kishore Gopalakrishnan2021-05-03
| | | | | | | | | | | | Seems to detect currently running instance even without that.
| * | Remove kwallet dbus permissionLibravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | | | | | Confirmed on neochat Matrix group that it is not required.
| * | Add machine-idLibravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | | | | | Does not break dbus, despite the warning in the template.
| * | Add command suggested by rusty-snakeLibravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Leave the kwallet dbus stuff commented for now.Libravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Remove unnecessary permission.Libravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | | | | | | | | Signing in and so on works without this, so I'm not sure why it was enabled in the flatpak.
| * | Remove apparently unnecessary dbus permission.Libravatar Kishore Gopalakrishnan2021-05-02
| | | | | | | | | | | | | | | I had copied this from the flatpak listing, but the application works without this.
| * | Remove unnecessary include.Libravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Add cache directory to disable-programs.incLibravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Remove unnecessary noblacklist.Libravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Remove newlines and comments.Libravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Sort options using sort.pyLibravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Remove comments.Libravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Add neochat files to disable-programs.incLibravatar Kishore Gopalakrishnan2021-05-02
| | |
| * | Initial profile for neochatLibravatar Kishore Gopalakrishnan2021-05-02
| | |
* | | discord-common.profile: allow webcamLibravatar rusty-snake2021-05-04
| | | | | | | | | | | | | | | | | | closes #4236 [skip ci]
* | | Merge pull request #4225 from kmk3/fix-steam-rm-roguelegacyLibravatar Kelvin M. Klann2021-05-03
|\ \ \ | | | | | | | | steam.profile: fix rogue legacy paths and syntax
| * | | steam.profile: fix rogue legacy paths and syntaxLibravatar Kelvin M. Klann2021-05-01
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Due to using globbing on mkdir, the current version causes this: @davidebeatrici commented on 2021-04-23[1]: > ``` > Error: "${HOME}/.local/share/RogueLegacy*" is an invalid filename: rejected character: "*" > ``` Added on commit a603d4d39 ("steam: some more games added") / PR #4170. The wildcard was used because Rogue Legacy apparently looks up multiple different paths for the config and also for the data[1][2][3]: 1. ~/.config/RogueLegacy 2. ~/.config/RogueLegacyStorageContainer 3. ~/.local/share/RogueLegacy 4. ~/.local/share/RogueLegacyStorageContainer The ones containing "RogueLegacyStorageContainer" appear to be legacy paths (i.e.: paths which are only created by older versions of Rogue Legacy)[2]. So replace all globs with the full paths because: * The paths are known a priori (unlike, say, `/var/lib/libpcre*`) * There aren't too many of them And use only the non-legacy paths on mkdir. Besides mirroring what the current version of Rogue Legacy does (and avoiding the creation of unnecessary dirs), this is also done because _if_ the following applies (i.e.: this was not tested): * legacy paths take precedence over non-legacy paths * the first path clobbers the other ones (i.e.: rather than "merge") * save data exists in a non-legacy path (i.e.: path 3 in this case) * firejail creates all 4 paths Then it would make the newly-created and empty path 4 clobber the non-legacy path 3 and thus make it seem like no save files exist. This would persist even if steam is run without firejail afterwards, as the empty directory would still be there. Losing (or appearing to lose) game saves can be very unfortunate, so create just the non-legacy paths to avoid confusion. [1] https://github.com/netblue30/firejail/pull/4170#issuecomment-825405930 [2] https://steamcommunity.com/app/241600/discussions/1/846957366713233279/ [3] https://www.pcgamingwiki.com/wiki/Rogue_Legacy#Game_data
* | | support older gstreamer setups in xfce4-mixer (#4234)Libravatar glitsj162021-05-02
| | |
* | | harden audio-recorder (#4233)Libravatar glitsj162021-05-02
| | |
* | | add comment to firefox.profile (#4232)Libravatar glitsj162021-05-02
| | |
* | | fix regextester (#4231)Libravatar glitsj162021-05-02
|/ /
* | fixup! Harden some game profilesLibravatar rusty-snake2021-04-30
| |
* | Harden some game profilesLibravatar rusty-snake2021-04-30
| |
* | Merge pull request #4219 from Neo00001/masterLibravatar Neo000012021-04-28
|\ \ | | | | | | Some minor changes
| * | Some minor changesLibravatar Neo000012021-04-26
| | |
* | | Merge pull request #4217 from kmk3/delete-profiesLibravatar Kelvin M. Klann2021-04-28
|\ \ \ | |/ / |/| | Delete *.profie
| * | Delete *.profieLibravatar Kelvin M. Klann2021-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added on commit 41f69f7a7 ("Commons of opengl-game-wrapper.sh") / PR #4071. Each one is a duplicate of a .profile file that was added on the same commit. Commands used to search and replace (which is what causes their deletion): $ git ls-files -z -- '*.profie' | xargs -0 -I '{}' sh -c "git mv -f '{}' \"\`printf '%s\n' '{}' | sed 's/.[^.]*$//'\`.profile\""
* | | Fix #4218 -- Digikam - unable to customize toolbarsLibravatar rusty-snake2021-04-26
|/ /
* | Merge pull request #4071 from rusty-snake/open-game-wrapperLibravatar rusty-snake2021-04-24
|\ \ | | | | | | Commons of opengl-game-wrapper.sh
| * | Commons of opengl-game-wrapper.shLibravatar rusty-snake2021-04-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [skip ci] - Add allow-opengl-game.inc - Add profiles for alienarena-wrapper, ballbuster-wrapper, colorful-wrapper, etr-wrapper, gl-117-wrapper, glaxium-wrapper, neverball-wrapper, neverputt-wrapper, pinball-wrapper, supertuxkart-wrapper - Use allow-opengl-game.inc in xonotic.profile and the profiles above - xonotic.profile: simplify private-bin by using xonotic*
| * | Add profiles for alienarena, ballbuster, colorful…Libravatar rusty-snake2021-04-24
| | | | | | | | | | | | | | | | | | | | | …, gl-117, glaxium, pinball alienarena is missing in firecfg.config by intention, I didn't tested any online multiplayer.
* | | Merge pull request #4179 from jose1711/gnomeconnectorLibravatar rusty-snake2021-04-24
|\ \ \ | | | | | | | | Add examples how to allow browser access to Gnome extensions connector
| * | | Improve hints for allowing browser access to Gnome extensions connectorLibravatar Jose Riha2021-04-16
| | | | | | | | | | | | | | | | Fixes #4177.
* | | | Add FireDragon profile (#4203)Libravatar Nico2021-04-24
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add firedragon profile * Point private-etc to firefox-common.local Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com> * Add to firecfg.config * Add firedragon to disable-programs.inc * Correct dir * Remove private-etc Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
* | | file-roller:private-bin: add atool,bsdtar,xzdec,unzstdLibravatar rusty-snake2021-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | as pointed out by @glitsj16 in 51e67fd4. > FYI, a quick check shows atool,bsdtar,xzdec,unzstd are still missing > from private-bin. Not sure if we actually need to bring those in too. They add virtually no new permissions fr has already a long private-bin with dozens of archivers. Before we break anything I add them.
* | | profile fixesLibravatar rusty-snake2021-04-20
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | README.md/RELNOTES: - Add new profiles etr.profile: - adding passwd to private-etc makes it work for me file-roller.profile - add netfilter - add zstd to private-bin - add cp,mv,rm to private-bin which seems to be necessary in some cases. #4113 is likely fixed with this but wait for OP.
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-06-26 15:12:56 +0000