From f404f6c0470e4519c943cdfd382bc6ab76f77820 Mon Sep 17 00:00:00 2001 From: kortewegdevries <62639087+kortewegdevries@users.noreply.github.com> Date: Fri, 31 Jul 2020 06:51:12 +0530 Subject: Added git-cola profile (#3560) * Added git-cola profile Initial * Edit private-etc Add alternatives,pki * Add disable-xdg --- etc/inc/disable-programs.inc | 1 + etc/profile-a-l/git-cola.profile | 66 ++++++++++++++++++++++++++++++++++++++++ src/firecfg/firecfg.config | 1 + 3 files changed, 68 insertions(+) create mode 100644 etc/profile-a-l/git-cola.profile diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index 474b59c40..1518464b4 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -219,6 +219,7 @@ blacklist ${HOME}/.config/geeqie blacklist ${HOME}/.config/ghb blacklist ${HOME}/.config/ghostwriter blacklist ${HOME}/.config/git +blacklist ${HOME}/.config/git-cola blacklist ${HOME}/.config/glade.conf blacklist ${HOME}/.config/globaltime blacklist ${HOME}/.config/gmpc diff --git a/etc/profile-a-l/git-cola.profile b/etc/profile-a-l/git-cola.profile new file mode 100644 index 000000000..30e80f519 --- /dev/null +++ b/etc/profile-a-l/git-cola.profile @@ -0,0 +1,66 @@ +# Firejail profile for git-cola +# Description: Linux native frontend for Git +# This file is overwritten after every install/update +# Persistent local customizations +include git-cola.local +# Persistent global definitions +include globals.local + +ignore noexec ${HOME} + +noblacklist ${HOME}/.gitconfig +noblacklist ${HOME}/.git-credentials +noblacklist ${HOME}/.gnupg +noblacklist ${HOME}/.ssh +noblacklist ${HOME}/.config/git +noblacklist ${HOME}/.config/git-cola +# Put your editor,diff viewer config path below and uncomment to load settings +# noblacklist ${HOME}/ + +include allow-python2.inc +include allow-python3.inc + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +include whitelist-runuser-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +machine-id +netfilter +no3d +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix,inet,inet6,netlink +seccomp +shell none +tracelog + +# private-bin atom,bash,colordiff,emacs,fldiff,geany,gedit,git,git gui,git-cola,git-dag,gitk,gpg,gvim,leafpad,meld,mousepad,nano,notepadqq,python*,sh,ssh,vim,vimdiff,which,xed +private-cache +private-dev +# Comment if you sign commits with GPG +private-etc alternatives,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,localtime,login.defs,machine-id,mime.types,nsswitch.conf,passwd,pki,resolv.conf,selinux,ssl,X11,xdg +private-tmp + +dbus-user filter +# Uncomment if you need keyring access +# dbus-user.talk org.freedesktop.secrets +dbus-system none + +read-only ${HOME}/.ssh +read-only ${HOME}/.gnupg +read-only ${HOME}/.git-credentials diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 092fe82ad..f0454d869 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -265,6 +265,7 @@ gimp-2.8 gist gist-paste gitg +git-cola github-desktop gitter # gjs -- https://github.com/netblue30/firejail/issues/3333#issuecomment-612601102 -- cgit v1.2.3-54-g00ecf