From fdc265b5b362db9dba3a8a03cae9e34d3e84fafb Mon Sep 17 00:00:00 2001 From: kortewegdevries Date: Thu, 3 Sep 2020 08:11:05 +0000 Subject: Add profile for twitch,youtube,youtube-music; fix git-cola ,add cola (#3577) * Add profile for twitch,youtube wrappers * Fix git-cola, add Youtube music wrapper profiles * Fixes for git-cola again * Add profile for alternative name for git-cola * Fixes * Fix --- etc/profile-m-z/twitch.profile | 36 +++++++++++++++++++++++ etc/profile-m-z/youtube.profile | 37 +++++++++++++++++++++++ etc/profile-m-z/youtubemusic-nativefier.profile | 38 ++++++++++++++++++++++++ etc/profile-m-z/ytmdesktop.profile | 39 +++++++++++++++++++++++++ 4 files changed, 150 insertions(+) create mode 100644 etc/profile-m-z/twitch.profile create mode 100644 etc/profile-m-z/youtube.profile create mode 100644 etc/profile-m-z/youtubemusic-nativefier.profile create mode 100644 etc/profile-m-z/ytmdesktop.profile (limited to 'etc/profile-m-z') diff --git a/etc/profile-m-z/twitch.profile b/etc/profile-m-z/twitch.profile new file mode 100644 index 000000000..3c50344f1 --- /dev/null +++ b/etc/profile-m-z/twitch.profile @@ -0,0 +1,36 @@ +# Firejail profile for twitch +# Description: Unofficial electron based desktop warpper for Twitch +# This file is overwritten after every install/update +# Persistent local customizations +include twitch.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.config/Twitch + +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.config/Twitch +whitelist ${HOME}/.config/Twitch +include whitelist-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +seccomp !chroot +shell none + +disable-mnt +private-bin twitch +private-cache +private-dev +private-etc alsa,alternatives,asound.conf,ati,bumblebee,ca-certificates,crypto-policies,drirc,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,mime.types,nsswitch.conf,nvidia,pki,pulse,resolv.conf,selinux,ssl,X11,xdg +private-opt Twitch +private-tmp + +# Redirect +include electron.profile diff --git a/etc/profile-m-z/youtube.profile b/etc/profile-m-z/youtube.profile new file mode 100644 index 000000000..a6c7750a9 --- /dev/null +++ b/etc/profile-m-z/youtube.profile @@ -0,0 +1,37 @@ +# Firejail profile for youtube +# Description: Unofficial electron based desktop warpper for YouTube +# This file is overwritten after every install/update +# Persistent local customizations +include youtube.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.config/Youtube + +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.config/Youtube +whitelist ${HOME}/.config/Youtube +include whitelist-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +novideo +seccomp !chroot +shell none + +disable-mnt +private-bin youtube +private-cache +private-dev +private-etc alsa,alternatives,asound.conf,ati,bumblebee,ca-certificates,crypto-policies,drirc,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,mime.types,nsswitch.conf,nvidia,pki,pulse,resolv.conf,selinux,ssl,X11,xdg +private-opt Youtube +private-tmp + +# Redirect +include electron.profile diff --git a/etc/profile-m-z/youtubemusic-nativefier.profile b/etc/profile-m-z/youtubemusic-nativefier.profile new file mode 100644 index 000000000..3a94a5707 --- /dev/null +++ b/etc/profile-m-z/youtubemusic-nativefier.profile @@ -0,0 +1,38 @@ +# Firejail profile for youtubemusic-nativefier +# Description: Unofficial electron based desktop warpper for YouTube Music +# This file is overwritten after every install/update +# Persistent local customizations +include youtube.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.config/youtubemusic-nativefier-040164 + +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.config/youtubemusic-nativefier-040164 +whitelist ${HOME}/.config/youtubemusic-nativefier-040164 +include whitelist-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +nou2f +novideo +seccomp !chroot +shell none + +disable-mnt +private-bin youtubemusic-nativefier +private-cache +private-dev +private-etc alsa,alternatives,asound.conf,ati,bumblebee,ca-certificates,crypto-policies,drirc,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,mime.types,nsswitch.conf,nvidia,pki,pulse,resolv.conf,selinux,ssl,X11,xdg +private-opt youtubemusic-nativefier +private-tmp + +# Redirect +include electron.profile diff --git a/etc/profile-m-z/ytmdesktop.profile b/etc/profile-m-z/ytmdesktop.profile new file mode 100644 index 000000000..5c37b838b --- /dev/null +++ b/etc/profile-m-z/ytmdesktop.profile @@ -0,0 +1,39 @@ +# Firejail profile for ytmdesktop +# Description: Unofficial electron based desktop warpper for YouTube Music +# This file is overwritten after every install/update +# Persistent local customizations +include youtube.local +# Persistent global definitions +include globals.local + +ignore dbus-user none + +noblacklist ${HOME}/.config/youtube-music-desktop-app + +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-xdg.inc + +mkdir ${HOME}/.config/youtube-music-desktop-app +whitelist ${HOME}/.config/youtube-music-desktop-app +include whitelist-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +nou2f +novideo +seccomp !chroot +shell none + +disable-mnt +# private-bin env,ytmdesktop +private-cache +private-dev +private-etc alsa,alternatives,asound.conf,ati,bumblebee,ca-certificates,crypto-policies,drirc,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,mime.types,nsswitch.conf,nvidia,pki,pulse,resolv.conf,selinux,ssl,X11,xdg +# private-opt +private-tmp + +# Redirect +include electron.profile -- cgit v1.2.3-70-g09d2