From 807336ca7508d1e227bb542a709374e8ab2f5e00 Mon Sep 17 00:00:00 2001 From: Tad Date: Wed, 20 Mar 2019 20:27:01 -0400 Subject: Four more game profiles --- etc/disable-programs.inc | 5 +++++ etc/teeworlds.profile | 44 +++++++++++++++++++++++++++++++++++++++++++ etc/torcs.profile | 43 ++++++++++++++++++++++++++++++++++++++++++ etc/tremulous.profile | 44 +++++++++++++++++++++++++++++++++++++++++++ etc/warsow.profile | 49 ++++++++++++++++++++++++++++++++++++++++++++++++ 5 files changed, 185 insertions(+) create mode 100644 etc/teeworlds.profile create mode 100644 etc/torcs.profile create mode 100644 etc/tremulous.profile create mode 100644 etc/warsow.profile (limited to 'etc') diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 0237ad2ba..69ffb5d45 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -514,6 +514,7 @@ blacklist ${HOME}/.local/share/uzbl blacklist ${HOME}/.local/share/vlc blacklist ${HOME}/.local/share/vpltd blacklist ${HOME}/.local/share/vulkan +blacklist ${HOME}/.local/share/warsow-2.1 blacklist ${HOME}/.local/share/wesnoth blacklist ${HOME}/.local/share/xplayer blacklist ${HOME}/.local/share/xreader @@ -569,11 +570,14 @@ blacklist ${HOME}/.sword blacklist ${HOME}/.sylpheed-2.0 blacklist ${HOME}/.synfig blacklist ${HOME}/.tconn +blacklist ${HOME}/.teeworlds blacklist ${HOME}/.thunderbird blacklist ${HOME}/.tilp blacklist ${HOME}/.tooling blacklist ${HOME}/.tor-browser-* blacklist ${HOME}/.tor-browser_* +blacklist ${HOME}/.torcs +blacklist ${HOME}/.tremulous blacklist ${HOME}/.ts3client blacklist ${HOME}/.tuxguitar* blacklist ${HOME}/.unknown-horizons @@ -694,6 +698,7 @@ blacklist ${HOME}/.cache/transmission blacklist ${HOME}/.cache/vivaldi blacklist ${HOME}/.cache/vivaldi-snapshot blacklist ${HOME}/.cache/vlc +blacklist ${HOME}/.cache/warsow-2.1 blacklist ${HOME}/.cache/waterfox blacklist ${HOME}/.cache/wesnoth blacklist ${HOME}/.cache/xmms2 diff --git a/etc/teeworlds.profile b/etc/teeworlds.profile new file mode 100644 index 000000000..782f337d3 --- /dev/null +++ b/etc/teeworlds.profile @@ -0,0 +1,44 @@ +# Firejail profile for teeworlds +# Description: Online multi-player platform 2D shooter +# This file is overwritten after every install/update +# Persistent local customizations +include teeworlds.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.teeworlds + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +mkdir ${HOME}/.teeworlds +whitelist ${HOME}/.teeworlds +include whitelist-common.inc +include whitelist-var-common.inc + +caps.drop all +ipc-namespace +netfilter +nodbus +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +novideo +protocol unix,inet,inet6 +seccomp +shell none +tracelog + +disable-mnt +private-bin teeworlds +private-cache +private-dev +private-tmp diff --git a/etc/torcs.profile b/etc/torcs.profile new file mode 100644 index 000000000..d9c59b276 --- /dev/null +++ b/etc/torcs.profile @@ -0,0 +1,43 @@ +# Firejail profile for torcs +# Description: The Open Racing Car Simulator +# This file is overwritten after every install/update +# Persistent local customizations +include torcs.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.torcs + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +mkdir ${HOME}/.torcs +whitelist ${HOME}/.torcs +include whitelist-common.inc +include whitelist-var-common.inc + +caps.drop all +ipc-namespace +net none +nodbus +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +novideo +protocol unix +seccomp +shell none +tracelog + +disable-mnt +private-cache +private-dev +private-tmp diff --git a/etc/tremulous.profile b/etc/tremulous.profile new file mode 100644 index 000000000..a56ac2c07 --- /dev/null +++ b/etc/tremulous.profile @@ -0,0 +1,44 @@ +# Firejail profile for tremulous +# Description: First Person Shooter game based on the Quake 3 engine +# This file is overwritten after every install/update +# Persistent local customizations +include tremulous.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.tremulous + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +mkdir ${HOME}/.tremulous +whitelist ${HOME}/.tremulous +include whitelist-common.inc +include whitelist-var-common.inc + +caps.drop all +ipc-namespace +netfilter +nodbus +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +novideo +protocol unix,inet,inet6 +seccomp +shell none +tracelog + +disable-mnt +private-bin tremulous,tremulous-wrapper,tremded +private-cache +private-dev +private-tmp diff --git a/etc/warsow.profile b/etc/warsow.profile new file mode 100644 index 000000000..e884ab07a --- /dev/null +++ b/etc/warsow.profile @@ -0,0 +1,49 @@ +# Firejail profile for warsow +# Description: Fast paced 3D first person shooter +# This file is overwritten after every install/update +# Persistent local customizations +include warsow.local +# Persistent global definitions +include globals.local + +ignore noexec ${HOME} + +noblacklist ${HOME}/.cache/warsow-2.1 +noblacklist ${HOME}/.local/share/warsow-2.1 + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +mkdir ${HOME}/.cache/warsow-2.1 +mkdir ${HOME}/.local/share/warsow-2.1 +whitelist ${HOME}/.cache/warsow-2.1 +whitelist ${HOME}/.local/share/warsow-2.1 +include whitelist-common.inc +include whitelist-var-common.inc + +caps.drop all +ipc-namespace +netfilter +nodbus +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +novideo +protocol unix,inet,inet6 +seccomp +shell none +tracelog + +disable-mnt +private-bin warsow +private-cache +private-dev +private-tmp -- cgit v1.2.3-54-g00ecf