From e02fc7a0c1c4a4000b2b96382d40151446bae3eb Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Tue, 27 Nov 2018 10:52:54 +0000 Subject: Add ocenaudio to disable-programs.inc --- etc/disable-programs.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 796af28f0..7e9d7be80 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -447,6 +447,7 @@ blacklist ${HOME}/.local/share/nautilus-python blacklist ${HOME}/.local/share/nemo blacklist ${HOME}/.local/share/nemo-python blacklist ${HOME}/.local/share/notes +blacklist ${HOME}/.local/share/ocenaudio blacklist ${HOME}/.local/share/okular blacklist ${HOME}/.local/share/orage blacklist ${HOME}/.local/share/org.kde.gwenview -- cgit v1.2.3-54-g00ecf From 9a855d75a71b5122b145d34afc707ecb1cc398c2 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Tue, 27 Nov 2018 10:55:19 +0000 Subject: Create ocenaudio.profile --- etc/ocenaudio.profile | 50 ++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 50 insertions(+) create mode 100644 etc/ocenaudio.profile diff --git a/etc/ocenaudio.profile b/etc/ocenaudio.profile new file mode 100644 index 000000000..9b11e90f6 --- /dev/null +++ b/etc/ocenaudio.profile @@ -0,0 +1,50 @@ +# Firejail profile for ocenaudio +# Description: Cross-platform, easy to use, fast and functional audio editor +# This file is overwritten after every install/update +# Persistent local customizations +include ocenaudio.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.local/share/ocenaudio +noblacklist ${DOCUMENTS} +noblacklist ${MUSIC} + +include disable-common.inc +include disable-devel.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +apparmor +caps.drop all +ipc-namespace +net none +no3d +# nodbus - breaks preferences, comment when needed +nodbus +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +novideo +protocol unix +seccomp +shell none +tracelog + +# disable-mnt +# private +private-bin ocenaudio +private-cache +private-dev +private-etc asound.conf,fonts,pulse +# private-lib +private-tmp + +# memory-deny-write-execute - breaks on Arch +noexec ${HOME} +noexec /tmp -- cgit v1.2.3-54-g00ecf From fd1b4c22f0061782e503a23f340cb5db43843b7a Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Tue, 27 Nov 2018 10:57:26 +0000 Subject: Add ocenaudio to firecfg.config --- src/firecfg/firecfg.config | 1 + 1 file changed, 1 insertion(+) diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index fcc1d04d4..c26ac278f 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -314,6 +314,7 @@ nheko nitroshare nylas obs +ocenaudio odt2txt okular onionshare-gui -- cgit v1.2.3-54-g00ecf