From ec966d4c00b157f62e6f96b560f788bc09b3d0d6 Mon Sep 17 00:00:00 2001 From: user <76937231+Tus1688@users.noreply.github.com> Date: Mon, 10 Jan 2022 15:58:28 +0700 Subject: fix: neovim profile --- etc/inc/disable-programs.inc | 2 ++ etc/profile-m-z/nvim.profile | 9 +++++---- 2 files changed, 7 insertions(+), 4 deletions(-) (limited to 'etc') diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index ca8820ab6..112207228 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -173,6 +173,7 @@ blacklist ${HOME}/.cache/mutt blacklist ${HOME}/.cache/mypaint blacklist ${HOME}/.cache/netsurf blacklist ${HOME}/.cache/nheko +blacklist ${HOME}/.cache/nvim blacklist ${HOME}/.cache/okular blacklist ${HOME}/.cache/opera blacklist ${HOME}/.cache/opera-beta @@ -939,6 +940,7 @@ blacklist ${HOME}/.local/share/newsboat blacklist ${HOME}/.local/share/nheko blacklist ${HOME}/.local/share/nomacs blacklist ${HOME}/.local/share/notes +blacklist ${HOME}/.local/share/nvim blacklist ${HOME}/.local/share/ocenaudio blacklist ${HOME}/.local/share/okular blacklist ${HOME}/.local/share/onlyoffice diff --git a/etc/profile-m-z/nvim.profile b/etc/profile-m-z/nvim.profile index ef08c4397..2f69bc377 100644 --- a/etc/profile-m-z/nvim.profile +++ b/etc/profile-m-z/nvim.profile @@ -1,5 +1,6 @@ # Firejail profile for neovim # Description: Nvim is open source and freely distributable +# This file is overwritten after every install/update # Persistent local customizations include nvim.local # Persistent global definitions @@ -14,7 +15,6 @@ include disable-devel.inc include disable-programs.inc include disable-xdg.inc -blacklist ${RUNUSER}/wayland-* blacklist ${RUNUSER} include whitelist-runuser-common.inc @@ -22,10 +22,7 @@ include whitelist-runuser-common.inc ipc-namespace machine-id net none -netfilter no3d -dbus-user none -dbus-system none nodvd nogroups noinput @@ -35,6 +32,7 @@ notv nou2f novideo protocol unix,inet,inet6 +seccomp seccomp.block-secondary shell none tracelog @@ -42,5 +40,8 @@ x11 none private-dev +dbus-user none +dbus-system none + read-write ${HOME}/.vim read-only ${HOME}/.config -- cgit v1.2.3-70-g09d2