From c93cca65a60987d4f7c6591685f57262c83c7580 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Sat, 12 Mar 2016 08:17:40 -0500 Subject: profile update --- etc/audacious.profile | 2 +- etc/bitlbee.profile | 3 ++- etc/cherrytree.profile | 11 +++++++---- etc/clementine.profile | 2 +- etc/conkeror.profile | 2 +- etc/deadbeef.profile | 2 +- etc/deluge.profile | 3 ++- etc/empathy.profile | 4 +++- etc/evince.profile | 4 +++- etc/fbreader.profile | 3 ++- etc/filezilla.profile | 4 +++- etc/hedgewars.profile | 1 + etc/hexchat.profile | 2 +- etc/polari.profile | 2 ++ etc/qbittorrent.profile | 4 +++- etc/quassel.profile | 2 ++ etc/rhythmbox.profile | 4 +++- etc/rtorrent.profile | 3 ++- etc/spotify.profile | 2 +- etc/telegram.profile | 3 ++- etc/totem.profile | 3 ++- etc/transmission-gtk.profile | 2 ++ etc/transmission-qt.profile | 2 ++ etc/vlc.profile | 3 ++- etc/weechat-curses.profile | 2 +- etc/weechat.profile | 3 ++- etc/xchat.profile | 2 +- 27 files changed, 55 insertions(+), 25 deletions(-) diff --git a/etc/audacious.profile b/etc/audacious.profile index f9a48f33c..b9ce11c0e 100644 --- a/etc/audacious.profile +++ b/etc/audacious.profile @@ -1,4 +1,4 @@ -# Audacious profile +# Audacious media player profile include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc include /etc/firejail/disable-common.inc diff --git a/etc/bitlbee.profile b/etc/bitlbee.profile index 5eeddb815..ca9e87818 100644 --- a/etc/bitlbee.profile +++ b/etc/bitlbee.profile @@ -1,4 +1,4 @@ -# BitlBee profile +# BitlBee instant messaging profile noblacklist /sbin noblacklist /usr/sbin include /etc/firejail/disable-mgmt.inc @@ -8,3 +8,4 @@ protocol unix,inet,inet6 private private-dev seccomp +netfilter diff --git a/etc/cherrytree.profile b/etc/cherrytree.profile index 7502e9d15..d1e1c71d9 100644 --- a/etc/cherrytree.profile +++ b/etc/cherrytree.profile @@ -1,3 +1,9 @@ +# cherrytree note taking application +include /etc/firejail/disable-mgmt.inc +include /etc/firejail/disable-secret.inc +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-devel.inc + whitelist ${HOME}/cherrytree mkdir ~/.config mkdir ~/.config/cherrytree @@ -5,10 +11,6 @@ whitelist ${HOME}/.config/cherrytree/ mkdir ~/.local mkdir ~/.local/share whitelist ${HOME}/.local/share/ -include /etc/firejail/disable-mgmt.inc -include /etc/firejail/disable-secret.inc -include /etc/firejail/disable-common.inc -include /etc/firejail/disable-devel.inc caps.drop all seccomp protocol unix,inet,inet6,netlink @@ -16,3 +18,4 @@ netfilter tracelog noroot include /etc/firejail/whitelist-common.inc +nosound diff --git a/etc/clementine.profile b/etc/clementine.profile index c9c0ca724..21b5a58ab 100644 --- a/etc/clementine.profile +++ b/etc/clementine.profile @@ -1,4 +1,4 @@ -# Clementine profile +# Clementine media player profile include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc include /etc/firejail/disable-common.inc diff --git a/etc/conkeror.profile b/etc/conkeror.profile index 09f491c61..2d6323d3b 100644 --- a/etc/conkeror.profile +++ b/etc/conkeror.profile @@ -1,4 +1,4 @@ -# Firejail profile for Mozilla Firefox (Iceweasel in Debian) +# Firejail profile for Conkeror web browser profile noblacklist ${HOME}/.conkeror.mozdev.org include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc diff --git a/etc/deadbeef.profile b/etc/deadbeef.profile index 35760bf13..ec9fcd0f0 100644 --- a/etc/deadbeef.profile +++ b/etc/deadbeef.profile @@ -1,4 +1,4 @@ -# DeaDBeeF profile +# DeaDBeeF media player profile include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc include /etc/firejail/disable-common.inc diff --git a/etc/deluge.profile b/etc/deluge.profile index 30e9f91ad..bcd754952 100644 --- a/etc/deluge.profile +++ b/etc/deluge.profile @@ -1,4 +1,4 @@ -# deluge profile +# deluge bittorernt client profile include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc include /etc/firejail/disable-common.inc @@ -14,5 +14,6 @@ seccomp protocol unix,inet,inet6 netfilter noroot +nosound diff --git a/etc/empathy.profile b/etc/empathy.profile index 7c96dc6fa..adaf03e23 100644 --- a/etc/empathy.profile +++ b/etc/empathy.profile @@ -1,4 +1,4 @@ -# Empathy profile +# Empathy instant messaging profile include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc include /etc/firejail/disable-common.inc @@ -8,3 +8,5 @@ blacklist ${HOME}/.wine caps.drop all seccomp protocol unix,inet,inet6 +netfilter + diff --git a/etc/evince.profile b/etc/evince.profile index 070dc7be7..81878462b 100644 --- a/etc/evince.profile +++ b/etc/evince.profile @@ -1,4 +1,4 @@ -# evince profile +# evince pdf reader profile include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc include /etc/firejail/disable-common.inc @@ -13,3 +13,5 @@ caps.drop all seccomp protocol unix,inet,inet6 noroot +nosound + diff --git a/etc/fbreader.profile b/etc/fbreader.profile index a79f36398..4ed942138 100644 --- a/etc/fbreader.profile +++ b/etc/fbreader.profile @@ -1,4 +1,4 @@ -# fbreader profile +# fbreader ebook reader profile noblacklist ${HOME}/.FBReader include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc @@ -15,4 +15,5 @@ seccomp protocol unix,inet,inet6 netfilter noroot +nosound diff --git a/etc/filezilla.profile b/etc/filezilla.profile index 1462d134e..0eabf9a88 100644 --- a/etc/filezilla.profile +++ b/etc/filezilla.profile @@ -1,4 +1,4 @@ -# FileZilla profile +# FileZilla ftp profile noblacklist ${HOME}/.filezilla noblacklist ${HOME}/.config/filezilla include /etc/firejail/disable-mgmt.inc @@ -12,5 +12,7 @@ seccomp protocol unix,inet,inet6 noroot netfilter +nosound + diff --git a/etc/hedgewars.profile b/etc/hedgewars.profile index 03a376e2f..ab0e067c7 100644 --- a/etc/hedgewars.profile +++ b/etc/hedgewars.profile @@ -12,6 +12,7 @@ private-dev whitelist /tmp/.X11-unix seccomp tracelog +netfilter mkdir ~/.hedgewars whitelist ~/.hedgewars diff --git a/etc/hexchat.profile b/etc/hexchat.profile index 35b98fde6..8f9e71b44 100644 --- a/etc/hexchat.profile +++ b/etc/hexchat.profile @@ -1,4 +1,4 @@ -# HexChat profile +# HexChat instant messaging profile noblacklist ${HOME}/.config/hexchat include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc diff --git a/etc/polari.profile b/etc/polari.profile index 389ce3d12..26d5ff27b 100644 --- a/etc/polari.profile +++ b/etc/polari.profile @@ -25,3 +25,5 @@ caps.drop all seccomp protocol unix,inet,inet6 noroot +netfilter + diff --git a/etc/qbittorrent.profile b/etc/qbittorrent.profile index c68eb716b..f067aaa99 100644 --- a/etc/qbittorrent.profile +++ b/etc/qbittorrent.profile @@ -1,4 +1,4 @@ -# qbittorrent profile +# qbittorrent bittorrent profile include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc include /etc/firejail/disable-common.inc @@ -14,4 +14,6 @@ seccomp protocol unix,inet,inet6 netfilter noroot +nosound + diff --git a/etc/quassel.profile b/etc/quassel.profile index e8db77973..bc8c76915 100644 --- a/etc/quassel.profile +++ b/etc/quassel.profile @@ -9,3 +9,5 @@ caps.drop all seccomp protocol unix,inet,inet6 noroot +netfilter + diff --git a/etc/rhythmbox.profile b/etc/rhythmbox.profile index 3326a34ed..a1a20a863 100644 --- a/etc/rhythmbox.profile +++ b/etc/rhythmbox.profile @@ -1,4 +1,4 @@ -# Rhythmbox profile +# Rhythmbox media player profile include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc include /etc/firejail/disable-common.inc @@ -13,3 +13,5 @@ caps.drop all seccomp protocol unix,inet,inet6 noroot +netfilter + diff --git a/etc/rtorrent.profile b/etc/rtorrent.profile index 7ba5677e9..6041052af 100644 --- a/etc/rtorrent.profile +++ b/etc/rtorrent.profile @@ -1,4 +1,4 @@ -# rtorrent profile +# rtorrent bittorrent profile include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc include /etc/firejail/disable-common.inc @@ -9,3 +9,4 @@ seccomp protocol unix,inet,inet6 netfilter noroot +nosound diff --git a/etc/spotify.profile b/etc/spotify.profile index f5ec36431..1986a513c 100644 --- a/etc/spotify.profile +++ b/etc/spotify.profile @@ -1,4 +1,4 @@ -# Spotify profile +# Spotify media player profile include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc include /etc/firejail/disable-common.inc diff --git a/etc/telegram.profile b/etc/telegram.profile index 4920b94d8..94167675c 100644 --- a/etc/telegram.profile +++ b/etc/telegram.profile @@ -1,4 +1,4 @@ -# Telegram profile +# Telegram IRC profile noblacklist ${HOME}/.TelegramDesktop include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc @@ -10,6 +10,7 @@ caps.drop all seccomp protocol unix,inet,inet6 noroot +netfilter whitelist ~/Downloads/Telegram Desktop mkdir ${HOME}/.TelegramDesktop diff --git a/etc/totem.profile b/etc/totem.profile index 65c62695e..f2485a2d0 100644 --- a/etc/totem.profile +++ b/etc/totem.profile @@ -1,4 +1,4 @@ -# Totem profile +# Totem media player profile include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc include /etc/firejail/disable-common.inc @@ -13,3 +13,4 @@ caps.drop all seccomp protocol unix,inet,inet6 noroot +netfilter diff --git a/etc/transmission-gtk.profile b/etc/transmission-gtk.profile index 290de9445..18356a91e 100644 --- a/etc/transmission-gtk.profile +++ b/etc/transmission-gtk.profile @@ -15,6 +15,8 @@ protocol unix,inet,inet6 netfilter noroot tracelog +nosound + diff --git a/etc/transmission-qt.profile b/etc/transmission-qt.profile index 6ff49e476..cd07f35c7 100644 --- a/etc/transmission-qt.profile +++ b/etc/transmission-qt.profile @@ -15,4 +15,6 @@ protocol unix,inet,inet6 netfilter noroot tracelog +nosound + diff --git a/etc/vlc.profile b/etc/vlc.profile index dd0a70353..adcfbb119 100644 --- a/etc/vlc.profile +++ b/etc/vlc.profile @@ -1,4 +1,4 @@ -# VLC profile +# VLC media player profile noblacklist ${HOME}/.config/vlc include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc @@ -14,3 +14,4 @@ caps.drop all seccomp protocol unix,inet,inet6 noroot +netfilter diff --git a/etc/weechat-curses.profile b/etc/weechat-curses.profile index f7c1b6590..4a92f0b34 100644 --- a/etc/weechat-curses.profile +++ b/etc/weechat-curses.profile @@ -1,2 +1,2 @@ -# Weechat profile (Debian) +# Weechat IRC profile (Debian) include /etc/firejail/weechat.profile diff --git a/etc/weechat.profile b/etc/weechat.profile index 218df3b33..3fbce62ca 100644 --- a/etc/weechat.profile +++ b/etc/weechat.profile @@ -1,4 +1,4 @@ -# Weechat profile +# Weechat IRC profile noblacklist ${HOME}/.weechat include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-common.inc @@ -9,3 +9,4 @@ seccomp protocol unix,inet,inet6 netfilter noroot +netfilter diff --git a/etc/xchat.profile b/etc/xchat.profile index be68e0add..e2dcadc0e 100644 --- a/etc/xchat.profile +++ b/etc/xchat.profile @@ -1,4 +1,4 @@ -# XChat profile +# XChat IRC profile noblacklist ${HOME}/.config/xchat include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc -- cgit v1.2.3-54-g00ecf