aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* Update linphone profile (#3734)Libravatar Dara Adib2020-11-08
| | | | linphone 4.0 changed the location of config and database files to respect freedesktop standards.
* second #3728 [skip ci]Libravatar rusty-snake2020-11-06
|
* profile fixesLibravatar rusty-snake2020-11-06
| | | | | | | | - update README.md and RELNOTES - add 'blacklist ${RUNUSER}/.flatpak-cache' to disable-common.inc - fix #3728, fonts in openSUSE KDE with wc / wusc - fix gnome-todo - fix xournalpp MathTeX whitelist
* Allow lua in minetest.profileLibravatar glitsj162020-11-03
| | | | | Closes #3723 Introduced in 388826683c3b90926e73c83ddb91d5c84a7fa1fa
* fix ${HOME}/.ssh access in filezilla.profileLibravatar glitsj162020-11-03
| | | This fixes #3722.
* Add spectacle's profile (#3717)Libravatar Neo000012020-11-02
| | | | | | | * Update firecfg.config * Update disable-programs.inc * Create spectacle.profile
* Remove nou2f in ssh profileLibravatar David Hyrule2020-11-01
|
* Allow webcam access in zoom.profileLibravatar glitsj162020-10-31
| | | This fixes #3711.
* keepassxc dbus, closes #3713 [skip ci]Libravatar rusty-snake2020-10-31
|
* firefox d-bus (#2953) & fix xournalppLibravatar rusty-snake2020-10-29
|
* added bluetooth to the list of protocols allowed by seccompLibravatar netblue302020-10-28
|
* profile fixesLibravatar netblue302020-10-28
|
* Update okular.profile to support cbr files (#3704)Libravatar blockbandit2020-10-27
| | | | | | | * Update okular.profile okular has support for reading cbr (rar-compressed comic book). without unrar or unar in private-bin, okular fails to decompress the files for viewing. * Sorted private-bin
* Remove redundant read-only item (#3703)Libravatar glitsj162020-10-27
| | | | | | | | | | | | | * remove read-only item redundancy 'read-only ${HOME}/.config/mimeapps.list' is already part of disable-common.inc * remove read-only item redundancy 'read-only ${HOME}/.config/mimeapps.list' is already part of disable-common.inc, which is included in the redirect profile * remove read-only item redundancy 'read-only ${HOME}/.config/mimeapps.list' is already part of disable-common.inc, which is included in the redirect profile
* fix assogiate.profileLibravatar glitsj162020-10-27
| | | The user mime database needs to be writable.
* add missing paths to disable-interpreters.incLibravatar rusty-snake2020-10-26
| | | | | | | and update allow-xxx.inc Fedora uses /usr/lib64 for arch specifiy files and /usr/lib for arch independent files. php, py2, ruby may have also paths there.
* Merge pull request #3700 from rusty-snake/fix-3699Libravatar rusty-snake2020-10-26
|\ | | | | fix #3699 -- Firefox can't inhibit screensavers/screen blanking
| * fix #3699Libravatar rusty-snake2020-10-26
| |
* | Update celluloid.profileLibravatar Neo000012020-10-26
| |
* | Update celluloid.profileLibravatar Neo000012020-10-25
|/ | | liblua is needed for celluloid & otherwise at least on arch it's showing this error - "celluloid: error while loading shared libraries: liblua5.2.so.5.2: cannot open shared object file: Permission denied"
* mergesLibravatar netblue302020-10-25
|
* Merge pull request #3607 from kortewegdevries/wemailLibravatar netblue302020-10-25
|\ | | | | Switch mails to whitelisting
| * Add note about private-binLibravatar kortewegdevries2020-09-03
| |
| * Add firefox supportLibravatar kortewegdevries2020-08-29
| |
| * Switch kmail to whitelistingLibravatar kortewegdevries2020-08-29
| |
| * GPG default, fixes...Libravatar kortewegdevries2020-08-28
| |
| * Switch Evolution to whitelistingLibravatar kortewegdevries2020-08-28
| |
* | harden peek; update README.md; add gnome-sound-…Libravatar rusty-snake2020-10-23
| | | | | | | | …recorder to firecfg.config
* | Fix vlc blu-ray playback with libaacsLibravatar Jan Sonntag2020-10-20
| |
* | Update virtualbox.profileLibravatar Bundy012020-10-19
| |
* | update firefox fedora private-bin [skip ci]Libravatar rusty-snake2020-10-16
| |
* | flameshot has changed it's APP-IDLibravatar rusty-snake2020-10-16
| | | | | | | | closes #3643
* | Merge pull request #3667 from Neo00001/patch-2Libravatar rusty-snake2020-10-13
|\ \ | | | | | | Update wire-desktop.profile (again)
| * | Update wire-desktop.profileLibravatar Neo000012020-10-13
| | |
| * | Update wire-desktop.profile (again)Libravatar Neo000012020-10-13
| | | | | | | | | On arch,wire-desktop is now depending on electron9. Using wildcard for this sorta packages would be better.
* | | merges, fix for #3662 etc.Libravatar netblue302020-10-13
|/ /
* | Fix AppArmor 3.0 support (closes #3659)Libravatar Kristóf Marussy2020-10-10
| | | | | | | | | | | | | | | | | | | | | | | | AppArmor introduces the @{run} variable, which is used in <abstractions/dbus-strict> and <abstractions/dbus-session-strict> among other places. Thus, we follow suit of the built-in profiles and #include <tunables/global>, which includes <tunables/run> in AppArmor 3.0, defining the variable. As <tunables/global> exists in previous versions of AppArmor, too, this patch does not introduce a backward-compatibility issue with Apparmor 2.x.
* | Update vmware.profileLibravatar Neo000012020-10-06
| | | | | | With private-etc enabled vmware-tools doesn't get installed. Existing VM with an installed vmware-tools works as usual. For the time being keep it commented.
* | New profile: equalxLibravatar rusty-snake2020-10-03
| |
* | chromium-freeworld profile (#3633)Libravatar rusty-snake2020-10-03
| |
* | splitting up media players whitelists in whitelist-players.incLibravatar netblue302020-10-02
| |
* | new profile: xournalppLibravatar rusty-snake2020-09-25
| |
* | fix eog profileLibravatar netblue302020-09-14
| |
* | New profiles + fixes + hardeningLibravatar rusty-snake2020-09-14
| | | | | | | | | | | | | | | | - blacklist ~/.rustup in disable-devel.inc - add note to mpv (See #3628) - harden warsow - update relnotes - new profile qrencode, dbus-send, notify-send
* | profstats: track dbus-system noneLibravatar netblue302020-09-08
| |
* | fix #3625 -- hedgewars crashes without access to libluaLibravatar rusty-snake2020-09-07
| |
* | New disable include: disable-write-mnt.inc (#3622)Libravatar rusty-snake2020-09-07
| | | | | | | | | | | | | | | | | | | | | | | | | | * New disable include: disable-write-mnt.inc It is for profiles which have a reasonable mnt access (we can not add disable-mnt), but no edit function (e.g. any kind of viewer). Added to - profile.template - default.profile - eo-common.profile * Update default.profile
* | fix rhythmbox (2)Libravatar rusty-snake2020-09-05
| |
* | fix rhythmboxLibravatar rusty-snake2020-09-05
| |
* | variousLibravatar rusty-snake2020-09-03
| | | | | | | | | | | | | | | | | | | | | | | | * README.md & RELNOTES * Allow gnome-build do read and write .bash_history, it has a build-in terminal * D-Bus filter for gnome-passwordsafe * wruc for supertuxkart * wruc+wusc for totem * dbus-system none for totem * remove src/man/preproc.c it is replaced by preproc.awk * remove dead-code form preproc.awk