From 5c7f993216fbe2b0f31845fec86a636f93cc03ec Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Fri, 20 Sep 2019 18:43:53 +0200 Subject: Create gnome-latex.profile --- README.md | 2 +- RELNOTES | 2 +- etc/disable-programs.inc | 2 ++ etc/gnome-latex.profile | 46 ++++++++++++++++++++++++++++++++++++++++++++++ src/firecfg/firecfg.config | 1 + 5 files changed, 51 insertions(+), 2 deletions(-) create mode 100644 etc/gnome-latex.profile diff --git a/README.md b/README.md index b97d73e67..711a970fb 100644 --- a/README.md +++ b/README.md @@ -118,4 +118,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe ## New profiles: -gnome-sound-recorder, godot, jerry, keepassxc-cli, keepassxc-proxy, klatexformula, klatexformula_cmdl, links, newsbeuter, OpenArena, pandoc, qgis, rhythmbox-client, tcpdump, teams-for-linux, tshark, xlinks, zeal, mpg123, conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss, mpg123-portaudio, mpg123-pulse, mpg123-strip, out123, pavucontrol-qt, gnome-characters, gnome-character-map, rsync, Whalebird, tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat, kiwix-desktop +gnome-sound-recorder, godot, jerry, keepassxc-cli, keepassxc-proxy, klatexformula, klatexformula_cmdl, links, newsbeuter, OpenArena, pandoc, qgis, rhythmbox-client, tcpdump, teams-for-linux, tshark, xlinks, zeal, mpg123, conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss, mpg123-portaudio, mpg123-pulse, mpg123-strip, out123, pavucontrol-qt, gnome-characters, gnome-character-map, rsync, Whalebird, tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat, kiwix-desktop, ar, gnome-latex diff --git a/RELNOTES b/RELNOTES index 5c50195e0..14b454b87 100644 --- a/RELNOTES +++ b/RELNOTES @@ -16,7 +16,7 @@ firejail (0.9.61) baseline; urgency=low * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird, * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat, * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless - * new profiles: zstdmt, unzstd, i2p + * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex -- netblue30 Sat, 1 Jun 2019 08:00:00 -0500 firejail (0.9.60) baseline; urgency=low diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index e54b651a6..7dbe535fe 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -183,6 +183,7 @@ blacklist ${HOME}/.config/ghostwriter blacklist ${HOME}/.config/git blacklist ${HOME}/.config/globaltime blacklist ${HOME}/.config/gnome-builder +blacklist ${HOME}/.config/gnome-latex blacklist ${HOME}/.config/gnome-mplayer blacklist ${HOME}/.config/gnome-mpv blacklist ${HOME}/.config/gnome-pie @@ -502,6 +503,7 @@ blacklist ${HOME}/.local/share/gitg blacklist ${HOME}/.local/share/gnome-2048 blacklist ${HOME}/.local/share/gnome-chess blacklist ${HOME}/.local/share/gnome-builder +blacklist ${HOME}/.local/share/gnome-latex blacklist ${HOME}/.local/share/gnome-music blacklist ${HOME}/.local/share/gnome-photos blacklist ${HOME}/.local/share/gnome-recipes diff --git a/etc/gnome-latex.profile b/etc/gnome-latex.profile new file mode 100644 index 000000000..9cef9072c --- /dev/null +++ b/etc/gnome-latex.profile @@ -0,0 +1,46 @@ +# Firejail profile for gnome-latex +# Description: LaTeX editor for the GNOME desktop +# This file is overwritten after every install/update +# Persistent local customizations +include gnome-latex.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.config/gnome-latex +noblacklist ${HOME}/.local/share/gnome-latex + +# Allow perl (blacklisted by disable-interpreters.inc) +include allow-perl.inc + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc + +# May cause issues. +#include whitelist-var-common.inc + +apparmor +caps.drop all +machine-id +net none +no3d +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix +seccomp +shell none +tracelog + +private-cache +private-dev +# passwd,login.defs,firejail are a temporary workaround for #2877 and can be removed once it is fixed +private-etc alternatives,dconf,fonts,gtk-3.0,latexmk.conf,login.defs,passwd,texlive diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 502449839..9c7fd1e4e 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -242,6 +242,7 @@ gnome-clocks gnome-contacts gnome-documents gnome-font-viewer +gnome-latex gnome-logs gnome-maps gnome-mplayer -- cgit v1.2.3-70-g09d2