From 898273ac8ec3e4366e81dbdf4826b644aff28f09 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Mon, 18 Mar 2024 15:08:22 +0000 Subject: New profile: tvnamer.profile (#6256) Description: Automatic TV episode file renamer. https://github.com/dbr/tvnamer --- etc/inc/disable-programs.inc | 1 + etc/profile-m-z/tvnamer.profile | 74 +++++++++++++++++++++++++++++++++++++++++ src/firecfg/firecfg.config | 1 + 3 files changed, 76 insertions(+) create mode 100644 etc/profile-m-z/tvnamer.profile diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index 60f9f8288..126bd54f3 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -665,6 +665,7 @@ blacklist ${HOME}/.config/tuir blacklist ${HOME}/.config/tuta_integration blacklist ${HOME}/.config/tutanota-desktop blacklist ${HOME}/.config/tvbrowser +blacklist ${HOME}/.config/tvnamer blacklist ${HOME}/.config/uGet blacklist ${HOME}/.config/ueberzugpp blacklist ${HOME}/.config/ungoogled-chromium diff --git a/etc/profile-m-z/tvnamer.profile b/etc/profile-m-z/tvnamer.profile new file mode 100644 index 000000000..ccfd07e40 --- /dev/null +++ b/etc/profile-m-z/tvnamer.profile @@ -0,0 +1,74 @@ +# Firejail profile for tvnamer +# Description: Automatic TV episode file renamer +quiet +# Persistent local customizations +include tvnamer.local +# Persistent global definitions +include globals.local + +blacklist /tmp/.X11-unix +blacklist /usr/libexec +blacklist ${RUNUSER} + +noblacklist ${HOME}/.config/tvnamer +noblacklist ${VIDEOS} + +# Allow python (blacklisted by disable-interpreters.inc) +include allow-python2.inc +include allow-python3.inc + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-programs.inc +include disable-proc.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.config/tvnamer +whitelist ${HOME}/.config/tvnamer +whitelist ${DOWNLOADS} +whitelist ${VIDEOS} +include whitelist-common.inc +include whitelist-run-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +ipc-namespace +machine-id +netfilter +no3d +nodvd +nogroups +noinput +nonewprivs +noprinters +noroot +nosound +notv +nou2f +novideo +protocol unix,inet,inet6 +seccomp +seccomp.block-secondary +tracelog +x11 none + +#disable-mnt +private-bin python*,tvnamer +private-cache +private-dev +private-etc @network,@tls-ca +private-tmp + +dbus-user none +dbus-system none + +read-only ${HOME} +read-write ${HOME}/.config/tvnamer +read-write ${DOWNLOADS} +read-write ${VIDEOS} +restrict-namespaces diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index ba2d108ce..0783de9e1 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -915,6 +915,7 @@ tuir tutanota-desktop tuxguitar tvbrowser +tvnamer twitch udiskie uefitool -- cgit v1.2.3-54-g00ecf