From 590f661715c991af40fb2de8b5bfe3b2bf2a606c Mon Sep 17 00:00:00 2001 From: Tad Date: Wed, 24 Apr 2019 12:25:36 -0400 Subject: Revert "Merge branch 'master' of github.com:netblue30/firejail" This reverts commit 0d42e12f11825f84d6bf6f9c667cd16272a3700c, reversing changes made to 63efb454a4af0ee5d4905f7cfae193138aef3e15. --- etc/github-desktop.profile | 50 +++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 49 insertions(+), 1 deletion(-) (limited to 'etc/github-desktop.profile') diff --git a/etc/github-desktop.profile b/etc/github-desktop.profile index 061b44c42..4a969f9ad 100644 --- a/etc/github-desktop.profile +++ b/etc/github-desktop.profile @@ -1 +1,49 @@ -]0;firejail /usr/bin/meld ./etc/github-desktop_LOCAL_29017.profile ./etc/github-desktop_BASE_29017.profile ./etc/github-desktop_REMOTE_29017.profile  \ No newline at end of file +# Firejail profile for github-desktop +# Description: Extend your GitHub workflow beyond your browser with GitHub Desktop +# This file is overwritten after every install/update +# Persistent local customizations +include github-desktop.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.config/GitHub Desktop +noblacklist ${HOME}/.config/git +noblacklist ${HOME}/.gitconfig +noblacklist ${HOME}/.git-credentials + +include disable-common.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc + +caps.drop all +netfilter +# no3d +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix,inet,inet6,netlink +seccomp + +# Note: On debian-based distributions the binary might be located in +# /opt/GitHub Desktop/github-desktop, and therefore not be in PATH. +# If that's the case you can start GitHub Desktop with firejail via +# `firejail "/opt/GitHub Desktop/github-desktop"`. + +disable-mnt +# private-bin github-desktop +private-cache +?HAS_APPIMAGE: ignore private-dev +private-dev +# private-etc alternatives +# private-lib +private-tmp + +# memory-deny-write-execute -- cgit v1.2.3-54-g00ecf