From 856890e7182d54e0fcd31db686911a649d29e728 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Fri, 15 Mar 2024 00:04:49 +0000 Subject: New profile: deadlink.profile (#6233) Description: Checks and fixes URLs in code and documentation. https://github.com/nschloe/deadlink https://aur.archlinux.org/packages/deadlink --- etc/inc/disable-programs.inc | 1 + etc/profile-a-l/deadlink.profile | 64 ++++++++++++++++++++++++++++++++++++++++ src/firecfg/firecfg.config | 1 + 3 files changed, 66 insertions(+) create mode 100644 etc/profile-a-l/deadlink.profile diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index 047c8441d..4bbdf93d0 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -418,6 +418,7 @@ blacklist ${HOME}/.config/curlrc blacklist ${HOME}/.config/d-feet blacklist ${HOME}/.config/darktable blacklist ${HOME}/.config/deadbeef +blacklist ${HOME}/.config/deadlink blacklist ${HOME}/.config/deluge blacklist ${HOME}/.config/devilspie2 blacklist ${HOME}/.config/digikam diff --git a/etc/profile-a-l/deadlink.profile b/etc/profile-a-l/deadlink.profile new file mode 100644 index 000000000..2e3fe9e0c --- /dev/null +++ b/etc/profile-a-l/deadlink.profile @@ -0,0 +1,64 @@ +# Firejail profile for deadlink +# Description: Checks and fixes URLs in code and documentation +# This file is overwritten after every install/update +# Persistent local customizations +include deadlink.local +# Persistent global definitions +include globals.local + +blacklist /tmp/.X11-unix +blacklist /usr/libexec +blacklist ${RUNUSER} + +noblacklist ${HOME}/.config/deadlink + +# Allow python (blacklisted by disable-interpreters.inc) +#include allow-python2.inc +include allow-python3.inc + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-proc.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +include whitelist-run-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +ipc-namespace +machine-id +netfilter +nodvd +nogroups +noinput +nonewprivs +noprinters +noroot +nosound +notv +nou2f +novideo +protocol unix,inet +seccomp +seccomp.block-secondary +tracelog +x11 none + +disable-mnt +private-bin deadlink,python* +private-cache +private-dev +private-etc @network,@tls-ca +private-tmp + +dbus-user none +dbus-system none + +memory-deny-write-execute +restrict-namespaces diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index e56e55479..1a65d3b5d 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -195,6 +195,7 @@ dconf-editor ddgr ddgtk deadbeef +deadlink deluge desktopeditors devhelp -- cgit v1.2.3-54-g00ecf