From 78fbedbe1199ce7914c021c376bb5752439f8c62 Mon Sep 17 00:00:00 2001 From: Fred-Barclay Date: Sat, 7 May 2016 14:20:03 +1000 Subject: added xapps && cleanup --- etc/disable-programs.inc | 17 ++++++++++++----- etc/xplayer.profile | 15 +++++++++++++++ etc/xreader.profile | 16 ++++++++++++++++ etc/xviewer.profile | 13 +++++++++++++ 4 files changed, 56 insertions(+), 5 deletions(-) create mode 100644 etc/xplayer.profile create mode 100644 etc/xreader.profile create mode 100644 etc/xviewer.profile (limited to 'etc') diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 297d25bf2..1f3768693 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -12,17 +12,22 @@ blacklist ${HOME}/.config/uGet blacklist ${HOME}/.config/Gpredict blacklist ${HOME}/.config/aweather blacklist ${HOME}/.config/stellarium -blacklist ~/.kde/share/apps/okular -blacklist ~/.kde/share/config/okularrc -blacklist ~/.kde/share/config/okularpartrc -blacklist ~/.kde/share/apps/gwenview -blacklist ~/.kde/share/config/gwenviewrc +blacklist ${HOME}/.config/atril +blacklist ${HOME}/.config/xreader +blacklist ${HOME}/.config/xviewer +blacklist ${HOME}/.kde/share/apps/okular +blacklist ${HOME}/.kde/share/config/okularrc +blacklist ${HOME}/.kde/share/config/okularpartrc +blacklist ${HOME}/.kde/share/apps/gwenview +blacklist ${HOME}/.kde/share/config/gwenviewrc # Media players blacklist ${HOME}/.config/cmus blacklist ${HOME}/.config/deadbeef blacklist ${HOME}/.config/spotify blacklist ${HOME}/.config/vlc +blacklist ${HOME}/.config/totem +blacklist ${HOME}/.config/xplayer # HTTP / FTP / Mail blacklist ${HOME}/.icedove @@ -95,6 +100,7 @@ blacklist ${HOME}/.cache/transmission blacklist ${HOME}/.cache/wesnoth blacklist ${HOME}/.cache/0ad blacklist ${HOME}/.cache/8pecxstudios +blacklist ${HOME}/.cache/xreader # share blacklist ${HOME}/.local/share/epiphany @@ -103,3 +109,4 @@ blacklist ${HOME}/.local/share/spotify blacklist ${HOME}/.local/share/steam blacklist ${HOME}/.local/share/wesnoth blacklist ${HOME}/.local/share/0ad +blacklist ${HOME}/.local/share/xplayer diff --git a/etc/xplayer.profile b/etc/xplayer.profile new file mode 100644 index 000000000..67a46a7da --- /dev/null +++ b/etc/xplayer.profile @@ -0,0 +1,15 @@ +# Xplayer profile +noblacklist ~/.config/xplayer +noblacklist ~/.local/share/xplayer + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc + +caps.drop all +seccomp +protocol unix,inet,inet6 +noroot +tracelog +netfilter diff --git a/etc/xreader.profile b/etc/xreader.profile new file mode 100644 index 000000000..7b72d41a6 --- /dev/null +++ b/etc/xreader.profile @@ -0,0 +1,16 @@ +# Xreader profile +noblacklist ~/.config/xreader +noblacklist ~/.cache/xreader +noblacklist ~/.local/share + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc + +caps.drop all +seccomp +protocol unix,inet,inet6 +noroot +tracelog +netfilter diff --git a/etc/xviewer.profile b/etc/xviewer.profile new file mode 100644 index 000000000..33e1e3c68 --- /dev/null +++ b/etc/xviewer.profile @@ -0,0 +1,13 @@ +noblacklist ~/.config/xviewer + +include /etc/firejail/disable-common.inc +include /etc/firejail/disable-programs.inc +include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-passwdmgr.inc + +caps.drop all +seccomp +protocol unix,inet,inet6 +noroot +tracelog +netfilter -- cgit v1.2.3-70-g09d2