github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-16 06:06:03 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

automatically fixed all private-{bin,etc} lines

Browse source
This commit is contained in:
rusty-snake 2019-06-13 19:49:13 +02:00
parent 5f08248006
commit 019fa047d6
No known key found for this signature in database
GPG key ID: CE890C49EE1373C1
111 changed files with 130 additions and 130 deletions
Download patch file Download diff file Expand all files Collapse all files

2
etc/QMediathekView.profile
View file

@ -45,7 +45,7 @@ shell none
tracelog
disable-mnt
private-bin QMediathekView,mplayer,mpv,smplayer,totem,vlc,xplayer
private-bin mplayer,mpv,QMediathekView,smplayer,totem,vlc,xplayer
private-cache
private-dev
# private-etc alternatives

4
etc/QOwnNotes.profile
View file

@ -47,8 +47,8 @@ shell none
tracelog
disable-mnt
private-bin QOwnNotes,gio
private-bin gio,QOwnNotes
private-dev
private-etc alternatives,fonts,ld.so.cache,pulse,resolv.conf,hosts,nsswitch.conf,host.conf,ca-certificates,ssl,pki,crypto-policies
private-etc alternatives,ca-certificates,crypto-policies,fonts,host.conf,hosts,ld.so.cache,nsswitch.conf,pki,pulse,resolv.conf,ssl
private-tmp

4
etc/Viber.profile
View file

@ -32,8 +32,8 @@ seccomp
shell none
disable-mnt
private-bin sh,bash,dig,awk,Viber
private-etc hosts,fonts,mailcap,resolv.conf,X11,pulse,alternatives,localtime,nsswitch.conf,ssl,proxychains.conf,pki,ca-certificates,crypto-policies,machine-id,asound.conf
private-bin awk,bash,dig,sh,Viber
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,fonts,hosts,localtime,machine-id,mailcap,nsswitch.conf,pki,proxychains.conf,pulse,resolv.conf,ssl,X11
private-tmp
env QTWEBENGINE_DISABLE_SANDBOX=1

2
etc/XMind.profile
View file

@ -32,7 +32,7 @@ seccomp
shell none
disable-mnt
private-bin XMind,sh,cp
private-bin cp,sh,XMind
private-tmp
private-dev

2
etc/Xvfb.profile
View file

@ -40,5 +40,5 @@ private
# private-bin Xvfb,sh,xkbcomp
# private-bin Xvfb,sh,xkbcomp,strace,bash,cat,ls
private-dev
private-etc alternatives,ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname
private-etc alternatives,gai.conf,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,nsswitch.conf,resolv.conf
private-tmp

2
etc/akregator.profile
View file

@ -40,7 +40,7 @@ seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@res
shell none
disable-mnt
private-bin akregator,akregatorstorageexporter,dbus-launch,kdeinit5,kshell5,kdeinit5_shutdown,kdeinit5_wrapper,kdeinit4,kshell4,kdeinit4_shutdown,kdeinit4_wrapper
private-bin akregator,akregatorstorageexporter,dbus-launch,kdeinit4,kdeinit4_shutdown,kdeinit4_wrapper,kdeinit5,kdeinit5_shutdown,kdeinit5_wrapper,kshell4,kshell5
private-dev
private-tmp

2
etc/anki.profile
View file

@ -50,5 +50,5 @@ disable-mnt
private-bin anki,python*
private-cache
private-dev
private-etc alternatives,ca-certificates,fonts,gtk-2.0,hostname,hosts,machine-id,pki,resolv.conf,Trolltech.conf,ssl
private-etc alternatives,ca-certificates,fonts,gtk-2.0,hostname,hosts,machine-id,pki,resolv.conf,ssl,Trolltech.conf
private-tmp

2
etc/apktool.profile
View file

@ -31,6 +31,6 @@ protocol unix
seccomp
shell none
private-bin apktool,bash,java,dirname,basename,expr,sh
private-bin apktool,basename,bash,dirname,expr,java,sh
private-cache
private-dev

2
etc/archaudit-report.profile
View file

@ -36,7 +36,7 @@ shell none
disable-mnt
private
private-bin archaudit-report,arch-audit,bash,cat,comm,cut,date,fold,grep,pacman,pactree,rm,sed,sort,whoneeds
private-bin arch-audit,archaudit-report,bash,cat,comm,cut,date,fold,grep,pacman,pactree,rm,sed,sort,whoneeds
#private-dev
private-tmp

2
etc/aria2c.profile
View file

@ -37,7 +37,7 @@ shell none
private-bin aria2c,gzip
private-cache
private-dev
private-etc alternatives,ca-certificates,ssl,resolv.conf
private-etc alternatives,ca-certificates,resolv.conf,ssl
private-lib libreadline.so.*
private-tmp

2
etc/ark.profile
View file

@ -34,7 +34,7 @@ protocol unix
seccomp
shell none
private-bin ark,unrar,rar,unzip,zip,zipinfo,7z,p7zip,unar,lsar,lrzip,lzop,lz4,bash,sh,tclsh
private-bin 7z,ark,bash,lrzip,lsar,lz4,lzop,p7zip,rar,sh,tclsh,unar,unrar,unzip,zip,zipinfo
#private-etc alternatives,smb.conf,samba,mtab,fonts,drirc,kde5rc,passwd,group,xdg
private-dev

4
etc/arm.profile
View file

@ -41,8 +41,8 @@ shell none
tracelog
disable-mnt
private-bin arm,tor,sh,bash,python*,ps,lsof,ldconfig
private-bin arm,bash,ldconfig,lsof,ps,python*,sh,tor
private-dev
private-etc alternatives,tor,passwd,ca-certificates,ssl,pki,crypto-policies
private-etc alternatives,ca-certificates,crypto-policies,passwd,pki,ssl,tor
private-tmp

2
etc/artha.profile
View file

@ -38,7 +38,7 @@ disable-mnt
private-bin artha,enchant,notify-send
private-cache
private-dev
private-etc alternatives,machine-id,fonts
private-etc alternatives,fonts,machine-id
private-lib libnotify.so.*
private-tmp

2
etc/atool.profile
View file

@ -45,7 +45,7 @@ tracelog
private-cache
private-dev
# without login.defs atool complains and uses UID/GID 1000 by default
private-etc alternatives,passwd,group,login.defs
private-etc alternatives,group,login.defs,passwd
private-tmp
memory-deny-write-execute

2
etc/bitwarden.profile
View file

@ -47,7 +47,7 @@ private-bin bitwarden
private-cache
?HAS_APPIMAGE: ignore private-dev
private-dev
private-etc alternatives,ca-certificates,crypto-policies,hosts,nsswitch.conf,fonts,pki,resolv.conf,ssl
private-etc alternatives,ca-certificates,crypto-policies,fonts,hosts,nsswitch.conf,pki,resolv.conf,ssl
private-opt Bitwarden
private-tmp

4
etc/bsdtar.profile
View file

@ -37,9 +37,9 @@ shell none
tracelog
# support compressed archives
private-bin sh,bash,bsdcat,bsdcpio,bsdtar,gtar,compress,gzip,lzma,xz,bzip2,lbzip2,lzip,lzop,lz4,libarchive
private-bin bash,bsdcat,bsdcpio,bsdtar,bzip2,compress,gtar,gzip,lbzip2,libarchive,lz4,lzip,lzma,lzop,sh,xz
private-cache
private-dev
private-etc alternatives,passwd,group,localtime
private-etc alternatives,group,localtime,passwd
memory-deny-write-execute

2
etc/bzflag.profile
View file

@ -38,7 +38,7 @@ shell none
tracelog
disable-mnt
private-bin bzflag,bzflag-wrapper,bzfs,bzadmin
private-bin bzadmin,bzflag,bzflag-wrapper,bzfs
private-cache
private-dev
private-tmp

4
etc/celluloid.profile
View file

@ -38,9 +38,9 @@ seccomp
shell none
tracelog
private-bin celluloid,gnome-mpv,youtube-dl,python*,env
private-bin celluloid,env,gnome-mpv,python*,youtube-dl
private-cache
private-etc alternatives,ca-certificates,ssl,pki,pkcs11,hosts,machine-id,localtime,libva.conf,drirc,fonts,gtk-3.0,dconf,crypto-policies,xdg,selinux,resolv.conf
private-etc alternatives,ca-certificates,crypto-policies,dconf,drirc,fonts,gtk-3.0,hosts,libva.conf,localtime,machine-id,pkcs11,pki,resolv.conf,selinux,ssl,xdg
private-dev
private-tmp

2
etc/cheese.profile
View file

@ -41,5 +41,5 @@ tracelog
disable-mnt
private-bin cheese
private-cache
private-etc alternatives,fonts,drirc,clutter-1.0,gtk-3.0,dconf
private-etc alternatives,clutter-1.0,dconf,drirc,fonts,gtk-3.0
private-tmp

2
etc/cmus.profile
View file

@ -27,4 +27,4 @@ seccomp
shell none
private-bin cmus
private-etc alternatives,group,machine-id,pulse,asound.conf,ca-certificates,ssl,pki,crypto-policies
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,group,machine-id,pki,pulse,ssl

2
etc/crow.profile
View file

@ -38,7 +38,7 @@ shell none
disable-mnt
private-bin crow
private-dev
private-etc alternatives,ca-certificates,ssl,machine-id,dconf,nsswitch.conf,resolv.conf,fonts,asound.conf,pulse,pki,crypto-policies
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,dconf,fonts,machine-id,nsswitch.conf,pki,pulse,resolv.conf,ssl
private-opt none
private-tmp
private-srv none

2
etc/deluge.profile
View file

@ -39,6 +39,6 @@ seccomp
shell none
# deluge is using python on Debian
private-bin deluge,deluge-console,deluged,deluge-gtk,deluge-web,sh,python*,uname
private-bin deluge,deluge-console,deluge-gtk,deluge-web,deluged,python*,sh,uname
private-dev
private-tmp

2
etc/dex2jar.profile
View file

@ -35,7 +35,7 @@ protocol unix
seccomp
shell none
private-bin dex2jar,java,sh,bash,expr,dirname,ls,uname,grep
private-bin bash,dex2jar,dirname,expr,grep,java,ls,sh,uname
private-cache
private-dev

2
etc/dig.profile
View file

@ -42,7 +42,7 @@ shell none
disable-mnt
private
private-bin sh,bash,dig
private-bin bash,dig,sh
private-cache
private-dev
# private-etc alternatives,resolv.conf

4
etc/discord-common.profile
View file

@ -27,9 +27,9 @@ novideo
protocol unix,inet,inet6,netlink
seccomp
private-bin sh,xdg-mime,tr,sed,echo,head,cut,xdg-open,grep,egrep,bash,zsh
private-bin bash,cut,echo,egrep,grep,head,sed,sh,tr,xdg-mime,xdg-open,zsh
private-dev
private-etc alternatives,ca-certificates,crypto-policies,fonts,group,machine-id,ld.so.cache,localtime,login.defs,password,pki,resolv.conf,ssl
private-etc alternatives,ca-certificates,crypto-policies,fonts,group,ld.so.cache,localtime,login.defs,machine-id,password,pki,resolv.conf,ssl
private-tmp
noexec /tmp

2
etc/electrum.profile
View file

@ -46,6 +46,6 @@ disable-mnt
private-bin electrum,python*
private-cache
private-dev
private-etc alternatives,fonts,dconf,ca-certificates,ssl,pki,crypto-policies,machine-id,resolv.conf
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,machine-id,pki,resolv.conf,ssl
private-tmp

2
etc/enpass.profile
View file

@ -53,7 +53,7 @@ seccomp
shell none
tracelog
private-bin dirname,Enpass,importer_enpass,sh,readlink
private-bin dirname,Enpass,importer_enpass,readlink,sh
?HAS_APPIMAGE: ignore private-dev
private-dev
private-opt Enpass

2
etc/ffmpeg.profile
View file

@ -43,7 +43,7 @@ tracelog
private-bin ffmpeg
private-cache
private-dev
private-etc alternatives,pki,pkcs11,hosts,ssl,ca-certificates,resolv.conf
private-etc alternatives,ca-certificates,hosts,pkcs11,pki,resolv.conf,ssl
private-tmp
# memory-deny-write-execute - it breaks old versions of ffmpeg

2
etc/file.profile
View file

@ -38,7 +38,7 @@ x11 none
#private-bin file
private-cache
private-dev
private-etc alternatives,magic.mgc,magic,localtime
private-etc alternatives,localtime,magic,magic.mgc
private-lib libarchive.so.*,libfakeroot,libmagic.so.*
memory-deny-write-execute

2
etc/filezilla.profile
View file

@ -33,6 +33,6 @@ seccomp
shell none
# private-bin breaks --join if the user has zsh set as $SHELL - adding zsh on private-bin
private-bin filezilla,uname,sh,bash,zsh,python*,lsb_release,fzputtygen,fzsftp
private-bin bash,filezilla,fzputtygen,fzsftp,lsb_release,python*,sh,uname,zsh
private-dev
private-tmp

2
etc/flameshot.profile
View file

@ -37,7 +37,7 @@ shell none
disable-mnt
private-bin flameshot
private-cache
private-etc alternatives,fonts,ld.so.conf,resolv.conf,ca-certificates,ssl,pki,crypto-policies
private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.conf,pki,resolv.conf,ssl
private-dev
private-tmp

2
etc/freeciv.profile
View file

@ -38,7 +38,7 @@ shell none
tracelog
disable-mnt
private-bin freeciv-gtk3,freeciv-mp-gtk3,freeciv-server,freeciv-manual
private-bin freeciv-gtk3,freeciv-manual,freeciv-mp-gtk3,freeciv-server
private-cache
private-dev
private-tmp

2
etc/freemind.profile
View file

@ -42,7 +42,7 @@ shell none
tracelog
disable-mnt
private-bin freemind,java,bash,sed,sh,grep,mkdir,echo,cp,uname,which,lsb_release,rpm,dpkg,dirname,readlink
private-bin bash,cp,dirname,dpkg,echo,freemind,grep,java,lsb_release,mkdir,readlink,rpm,sed,sh,uname,which
private-cache
private-dev
#private-etc alternatives,fonts,java

2
etc/gajim.profile
View file

@ -46,7 +46,7 @@ shell none
tracelog
disable-mnt
private-bin python,python3,sh,gpg,gpg2,gajim,bash,zsh,paplay,gajim-history-manager
private-bin bash,gajim,gajim-history-manager,gpg,gpg2,paplay,python,python3,sh,zsh
private-dev
private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,group,hostname,hosts,ld.so.cache,ld.so.conf,localtime,machine-id,passwd,pki,pulse,resolv.conf,ssl
private-tmp

2
etc/gcloud.profile
View file

@ -36,5 +36,5 @@ tracelog
disable-mnt
private-dev
private-etc alternatives,ca-certificates,ssl,hosts,localtime,nsswitch.conf,resolv.conf,pki,crypto-policies,ld.so.cache
private-etc alternatives,ca-certificates,crypto-policies,hosts,ld.so.cache,localtime,nsswitch.conf,pki,resolv.conf,ssl
private-tmp

2
etc/geekbench.profile
View file

@ -41,7 +41,7 @@ disable-mnt
private-bin bash,geekbenc*,sh
private-cache
private-dev
private-etc alternatives,group,passwd,lsb-release
private-etc alternatives,group,lsb-release,passwd
private-lib libstdc++.so.*
private-opt none
private-tmp

2
etc/ghostwriter.profile
View file

@ -49,7 +49,7 @@ tracelog
#private-bin ghostwriter,pandoc
private-cache
private-dev
private-etc alternatives,cups,crypto-policies,localtime,drirc,fonts,gtk-3.0,dconf,machine-id
private-etc alternatives,crypto-policies,cups,dconf,drirc,fonts,gtk-3.0,localtime,machine-id
# Breaks Translation
#private-lib
private-tmp

2
etc/gitg.profile
View file

@ -35,7 +35,7 @@ protocol unix,inet,inet6
seccomp
shell none
private-bin gitg,git,ssh
private-bin git,gitg,ssh
private-cache
private-dev
private-tmp

2
etc/gitter.profile
View file

@ -37,7 +37,7 @@ shell none
disable-mnt
private-bin bash,env,gitter
private-etc alternatives,fonts,pulse,resolv.conf,ca-certificates,ssl,pki,crypto-policies
private-etc alternatives,ca-certificates,crypto-policies,fonts,pki,pulse,resolv.conf,ssl
private-opt Gitter
private-dev
private-tmp

2
etc/gnome-chess.profile
View file

@ -37,7 +37,7 @@ shell none
tracelog
disable-mnt
private-bin fairymax,gnome-chess,hoichess,gnuchess
private-bin fairymax,gnome-chess,gnuchess,hoichess
private-cache
private-dev
private-etc alternatives,dconf,fonts,gnome-chess,gtk-3.0

2
etc/gnome-clocks.profile
View file

@ -37,6 +37,6 @@ disable-mnt
private-bin gnome-clocks,gsound-play
private-cache
private-dev
private-etc alternatives,fonts,ca-certificates,ssl,pki,crypto-policies,machine-id,hosts,pkcs11,localtime,gtk-3.0,dconf
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gtk-3.0,hosts,localtime,machine-id,pkcs11,pki,ssl
private-tmp

4
etc/gnome-music.profile
View file

@ -37,8 +37,8 @@ seccomp
shell none
tracelog
private-bin gnome-music,python*,env,gio-launch-desktop,yelp
private-bin env,gio-launch-desktop,gnome-music,python*,yelp
private-dev
private-etc alternatives,fonts,machine-id,pulse,asound.conf
private-etc alternatives,asound.conf,fonts,machine-id,pulse
private-tmp

2
etc/gnome-recipes.profile
View file

@ -43,7 +43,7 @@ shell none
disable-mnt
private-bin gnome-recipes,tar
private-dev
private-etc alternatives,ca-certificates,fonts,ssl,crypto-policies,pki
private-etc alternatives,ca-certificates,crypto-policies,fonts,pki,ssl
private-lib gdk-pixbuf-2.0,gio,gvfs/libgvfscommon.so,libgconf-2.so.*,libgnutls.so.*,libjpeg.so.*,libp11-kit.so.*,libproxy.so.*,librsvg-2.so.*
private-tmp

2
etc/godot.profile
View file

@ -39,5 +39,5 @@ disable-mnt
private-bin godot
private-cache
private-dev
private-etc ca-certificates,crypto-policies,nsswitch.conf,pki,resolv.conf,ssl,fonts,alsa,asound.conf,machine-id,openal,pulse,alternatives,drirc
private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,drirc,fonts,machine-id,nsswitch.conf,openal,pki,pulse,resolv.conf,ssl
private-tmp

2
etc/google-earth.profile
View file

@ -45,7 +45,7 @@ seccomp
shell none
disable-mnt
private-bin google-earth,sh,bash,grep,sed,ls,dirname
private-bin bash,dirname,google-earth,grep,ls,sed,sh
private-dev
private-opt google

2
etc/gpredict.profile
View file

@ -35,6 +35,6 @@ tracelog
private-bin gpredict
private-dev
private-etc alternatives,fonts,resolv.conf,ca-certificates,ssl,pki,crypto-policies
private-etc alternatives,ca-certificates,crypto-policies,fonts,pki,resolv.conf,ssl
private-tmp

2
etc/gradio.profile
View file

@ -35,6 +35,6 @@ protocol unix,inet,inet6
seccomp
shell none
private-etc alternatives,asound.conf,ca-certificates,fonts,host.conf,hostname,hosts,pulse,resolv.conf,ssl,pki,crypto-policies,gtk-3.0,xdg,machine-id
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-3.0,host.conf,hostname,hosts,machine-id,pki,pulse,resolv.conf,ssl,xdg
private-tmp

2
etc/gwenview.profile
View file

@ -43,7 +43,7 @@ seccomp
shell none
# tracelog
private-bin gwenview,gimp*,kbuildsycoca4,kdeinit4
private-bin gimp*,gwenview,kbuildsycoca4,kdeinit4
private-dev
private-etc alternatives,fonts,gimp,gtk-2.0,kde4rc,kde5rc,ld.so.cache,machine-id,pulse,xdg

2
etc/hugin.profile
View file

@ -33,7 +33,7 @@ protocol unix
seccomp
shell none
private-bin PTBatcherGUI,calibrate_lens_gui,hugin,hugin_stitch_project,align_image_stack,autooptimiser,celeste_standalone,checkpto,cpclean,cpfind,deghosting_mask,fulla,geocpset,hugin_executor,hugin_hdrmerge,hugin_lensdb,icpfind,linefind,nona,pano_modify,pano_trafo,pto_gen,pto_lensstack,pto_mask,pto_merge,pto_move,pto_template,pto_var,tca_correct,verdandi,vig_optimize,enblend
private-bin align_image_stack,autooptimiser,calibrate_lens_gui,celeste_standalone,checkpto,cpclean,cpfind,deghosting_mask,enblend,fulla,geocpset,hugin,hugin_executor,hugin_hdrmerge,hugin_lensdb,hugin_stitch_project,icpfind,linefind,nona,pano_modify,pano_trafo,PTBatcherGUI,pto_gen,pto_lensstack,pto_mask,pto_merge,pto_move,pto_template,pto_var,tca_correct,verdandi,vig_optimize
private-cache
private-dev
private-tmp

2
etc/imagej.profile
View file

@ -34,7 +34,7 @@ protocol unix
seccomp
shell none
private-bin imagej,bash,grep,sort,tail,tr,cut,whoami,hostname,uname,mkdir,ls,touch,free,awk,update-java-alternatives,basename,xprop,rm,ln
private-bin awk,basename,bash,cut,free,grep,hostname,imagej,ln,ls,mkdir,rm,sort,tail,touch,tr,uname,update-java-alternatives,whoami,xprop
private-dev
private-tmp

2
etc/jd-gui.profile
View file

@ -37,7 +37,7 @@ protocol unix
seccomp
shell none
private-bin jd-gui,sh,bash
private-bin bash,jd-gui,sh
private-cache
private-dev
private-tmp

2
etc/kdeinit4.profile
View file

@ -30,7 +30,7 @@ protocol unix,inet,inet6,netlink
seccomp
shell none
private-bin kdeinit4,kbuildsycoca4,kded4,knotify4
private-bin kbuildsycoca4,kded4,kdeinit4,knotify4
private-dev
private-tmp

2
etc/kdenlive.profile
View file

@ -33,6 +33,6 @@ protocol unix,netlink
seccomp
shell none
private-bin kdenlive,kdenlive_render,dbus-launch,melt,ffmpeg,ffplay,ffprobe,dvdauthor,genisoimage,vlc,xine,kdeinit5,kshell5,kdeinit5_shutdown,kdeinit5_wrapper,kdeinit4,kshell4,kdeinit4_shutdown,kdeinit4_wrapper,mlt-melt
private-bin dbus-launch,dvdauthor,ffmpeg,ffplay,ffprobe,genisoimage,kdeinit4,kdeinit4_shutdown,kdeinit4_wrapper,kdeinit5,kdeinit5_shutdown,kdeinit5_wrapper,kdenlive,kdenlive_render,kshell4,kshell5,melt,mlt-melt,vlc,xine
private-dev
# private-etc alternatives,fonts,kde4rc,kde5rc,ld.so.cache,machine-id,passwd,pulse,xdg,X11

2
etc/kid3.profile
View file

@ -37,7 +37,7 @@ tracelog
private-cache
private-dev
private-etc alternatives,drirc,fonts,kde5rc,gtk-3.0,dconf,machine-id,ca-certificates,ssl,pki,hostname,hosts,resolv.conf,pulse,,crypto-policies
private-etc ,alternatives,ca-certificates,crypto-policies,dconf,drirc,fonts,gtk-3.0,hostname,hosts,kde5rc,machine-id,pki,pulse,resolv.conf,ssl
private-tmp
private-opt none
private-srv none

2
etc/konversation.profile
View file

@ -34,7 +34,7 @@ seccomp
shell none
tracelog
private-bin konversation,kbuildsycoca4
private-bin kbuildsycoca4,konversation
private-cache
private-dev
private-tmp

2
etc/ktorrent.profile
View file

@ -52,7 +52,7 @@ protocol unix,inet,inet6,netlink
seccomp
shell none
private-bin ktorrent,kbuildsycoca4,kdeinit4
private-bin kbuildsycoca4,kdeinit4,ktorrent
private-dev
# private-lib - problems on Arch
private-tmp

2
etc/kwrite.profile
View file

@ -43,7 +43,7 @@ seccomp
shell none
tracelog
private-bin kwrite,kbuildsycoca4,kdeinit4
private-bin kbuildsycoca4,kdeinit4,kwrite
private-dev
private-etc alternatives,fonts,kde4rc,kde5rc,ld.so.cache,machine-id,pulse,xdg
private-tmp

2
etc/lollypop.profile
View file

@ -37,6 +37,6 @@ seccomp
shell none
private-dev
private-etc alternatives,asound.conf,ca-certificates,fonts,host.conf,hostname,hosts,pulse,resolv.conf,ssl,pki,crypto-policies,gtk-3.0,xdg,machine-id
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-3.0,host.conf,hostname,hosts,machine-id,pki,pulse,resolv.conf,ssl,xdg
private-tmp

2
etc/macrofusion.profile
View file

@ -36,7 +36,7 @@ protocol unix
seccomp
shell none
private-bin python*,macrofusion,env,enfuse,exiftool,align_image_stack
private-bin align_image_stack,enfuse,env,exiftool,macrofusion,python*
private-cache
private-dev
private-tmp

2
etc/mate-dictionary.profile
View file

@ -35,7 +35,7 @@ shell none
disable-mnt
private-bin mate-dictionary
private-etc alternatives,fonts,resolv.conf,ca-certificates,ssl,pki,crypto-policies
private-etc alternatives,ca-certificates,crypto-policies,fonts,pki,resolv.conf,ssl
private-opt mate-dictionary
private-dev
private-tmp

2
etc/mcabber.profile
View file

@ -30,4 +30,4 @@ shell none
private-bin mcabber
private-dev
private-etc alternatives,ca-certificates,ssl,pki,crypto-policies
private-etc alternatives,ca-certificates,crypto-policies,pki,ssl

2
etc/mendeleydesktop.profile
View file

@ -43,7 +43,7 @@ shell none
tracelog
disable-mnt
private-bin mendeleydesktop,python*,env,gconftool-2,which,sh,ln,cat,update-desktop-database
private-bin cat,env,gconftool-2,ln,mendeleydesktop,python*,sh,update-desktop-database,which
private-dev
private-tmp

2
etc/mp3splt-gtk.profile
View file

@ -37,5 +37,5 @@ tracelog
private-bin mp3splt-gtk
private-cache
private-dev
private-etc alsa,alternatives,asound.conf,fonts,gtk-3.0,dconf,machine-id,openal,pulse
private-etc alsa,alternatives,asound.conf,dconf,fonts,gtk-3.0,machine-id,openal,pulse
private-tmp

2
etc/mpsyt.profile
View file

@ -50,7 +50,7 @@ seccomp
shell none
tracelog
private-bin mpsyt,mplayer,mpv,youtube-dl,python*,env,ffmpeg
private-bin env,ffmpeg,mplayer,mpsyt,mpv,python*,youtube-dl
private-dev
private-tmp

2
etc/mpv.profile
View file

@ -40,6 +40,6 @@ seccomp
shell none
tracelog
private-bin mpv,youtube-dl,python*,env
private-bin env,mpv,python*,youtube-dl
private-cache
private-dev

4
etc/ms-office.profile
View file

@ -35,8 +35,8 @@ shell none
tracelog
disable-mnt
private-bin bash,fonts,env,jak,ms-office,python*,sh
private-etc alternatives,resolv.conf,ca-certificates,ssl,pki,crypto-policies
private-bin bash,env,fonts,jak,ms-office,python*,sh
private-etc alternatives,ca-certificates,crypto-policies,pki,resolv.conf,ssl
private-dev
private-tmp

2
etc/musixmatch.profile
View file

@ -32,5 +32,5 @@ seccomp
disable-mnt
private-dev
private-etc alternatives,machine-id,pulse,asound.conf,ca-certificates,ssl,pki,crypto-policies
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,machine-id,pki,pulse,ssl

2
etc/mypaint.profile
View file

@ -44,6 +44,6 @@ tracelog
private-cache
private-dev
private-etc alternatives,fonts,gtk-3.0,dconf
private-etc alternatives,dconf,fonts,gtk-3.0
private-tmp

2
etc/nomacs.profile
View file

@ -41,7 +41,7 @@ tracelog
#private-bin nomacs
private-cache
private-dev
private-etc alternatives,hosts,ca-certificates,ssl,pki,crypto-policies,resolv.conf,drirc,fonts,gtk-3.0,dconf,machine-id,login.defs
private-etc alternatives,ca-certificates,crypto-policies,dconf,drirc,fonts,gtk-3.0,hosts,login.defs,machine-id,pki,resolv.conf,ssl
private-tmp
memory-deny-write-execute

2
etc/nyx.profile
View file

@ -45,7 +45,7 @@ disable-mnt
private-bin nyx,python*
private-cache
private-dev
private-etc alternatives,passwd,tor,fonts
private-etc alternatives,fonts,passwd,tor
private-opt none
private-srv none
private-tmp

2
etc/okular.profile
View file

@ -47,7 +47,7 @@ seccomp
shell none
tracelog
private-bin okular,kbuildsycoca4,kdeinit4,lpr
private-bin kbuildsycoca4,kdeinit4,lpr,okular
private-dev
private-etc alternatives,cups,fonts,kde4rc,kde5rc,ld.so.cache,machine-id,xdg
# private-tmp - on KDE we need access to the real /tmp for data exchange with email clients

2
etc/openclonk.profile
View file

@ -38,7 +38,7 @@ shell none
tracelog
disable-mnt
private-bin openclonk,c4group
private-bin c4group,openclonk
private-cache
private-dev
private-tmp

4
etc/parole.profile
View file

@ -25,6 +25,6 @@ protocol unix,inet,inet6
seccomp
shell none
private-bin parole,dbus-launch
private-bin dbus-launch,parole
private-cache
private-etc alternatives,passwd,group,fonts,machine-id,pulse,asound.conf,ca-certificates,ssl,pki,crypto-policies
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,fonts,group,machine-id,passwd,pki,pulse,ssl

2
etc/pdfsam.profile
View file

@ -37,7 +37,7 @@ protocol unix
seccomp
shell none
private-bin pdfsam,sh,bash,java,archlinux-java,grep,awk,dirname,uname,which,sort,find,readlink,expr,ls,java-config
private-bin archlinux-java,awk,bash,dirname,expr,find,grep,java,java-config,ls,pdfsam,readlink,sh,sort,uname,which
private-cache
private-dev
private-tmp

2
etc/pioneer.profile
View file

@ -38,7 +38,7 @@ shell none
tracelog
disable-mnt
private-bin pioneer,modelcompiler,savegamedump
private-bin modelcompiler,pioneer,savegamedump
private-cache
private-dev
private-tmp

2
etc/pithos.profile
View file

@ -36,7 +36,7 @@ seccomp
shell none
disable-mnt
private-bin pithos,env,python*
private-bin env,pithos,python*
private-dev
private-tmp

2
etc/ppsspp.profile
View file

@ -38,7 +38,7 @@ shell none
# private-dev is disabled to allow controller support
#private-dev
private-etc alternatives,asound.conf,ca-certificates,drirc,fonts,group,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,localtime,nsswitch.conf,passwd,pulse,resolv.conf,ssl,pki,crypto-policies,machine-id
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,drirc,fonts,group,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,localtime,machine-id,nsswitch.conf,passwd,pki,pulse,resolv.conf,ssl
private-opt ppsspp
private-tmp

2
etc/pragha.profile
View file

@ -33,6 +33,6 @@ seccomp
shell none
private-dev
private-etc alternatives,asound.conf,ca-certificates,fonts,host.conf,hostname,hosts,pulse,resolv.conf,ssl,pki,crypto-policies,gtk-3.0,xdg,machine-id
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-3.0,host.conf,hostname,hosts,machine-id,pki,pulse,resolv.conf,ssl,xdg
private-tmp

4
etc/pybitmessage.profile
View file

@ -39,8 +39,8 @@ seccomp
shell none
disable-mnt
private-bin pybitmessage,python*,sh,ldconfig,env,bash,stat
private-bin bash,env,ldconfig,pybitmessage,python*,sh,stat
private-dev
private-etc alternatives,PyBitmessage,PyBitmessage.conf,Trolltech.conf,fonts,gtk-2.0,hosts,ld.so.cache,ld.so.preload,localtime,pki,resolv.conf,selinux,sni-qt.conf,system-fips,xdg,ca-certificates,ssl,pki,crypto-policies
private-etc alternatives,ca-certificates,crypto-policies,fonts,gtk-2.0,hosts,ld.so.cache,ld.so.preload,localtime,pki,pki,PyBitmessage,PyBitmessage.conf,resolv.conf,selinux,sni-qt.conf,ssl,system-fips,Trolltech.conf,xdg
private-tmp

2
etc/qbittorrent.profile
View file

@ -51,7 +51,7 @@ protocol unix,inet,inet6,netlink
seccomp
shell none
private-bin qbittorrent,python*
private-bin python*,qbittorrent
private-dev
# private-etc alternatives,X11,fonts,xdg,resolv.conf,ca-certificates,ssl,pki,crypto-policies
# private-lib - problems on Arch

2
etc/qgis.profile
View file

@ -53,5 +53,5 @@ tracelog
disable-mnt
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,fonts,machine-id,pki,resolv.conf,ssl,QGIS,QGIS.conf,Trolltech.conf
private-etc alternatives,ca-certificates,crypto-policies,fonts,machine-id,pki,QGIS,QGIS.conf,resolv.conf,ssl,Trolltech.conf
private-tmp

2
etc/qmmp.profile
View file

@ -31,7 +31,7 @@ seccomp
shell none
tracelog
private-bin qmmp,tar,unzip,bzip2,gzip
private-bin bzip2,gzip,qmmp,tar,unzip
private-dev
private-tmp

2
etc/qtox.profile
View file

@ -42,7 +42,7 @@ disable-mnt
private-bin qtox
private-cache
private-dev
private-etc alternatives,fonts,resolv.conf,ld.so.cache,localtime,ca-certificates,ssl,pki,crypto-policies,machine-id,pulse
private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.cache,localtime,machine-id,pki,pulse,resolv.conf,ssl
private-tmp
memory-deny-write-execute

2
etc/sdat2img.profile
View file

@ -36,7 +36,7 @@ protocol unix
seccomp
shell none
private-bin sdat2img,env,python*
private-bin env,python*,sdat2img
private-cache
private-dev

2
etc/silentarmy.profile
View file

@ -32,7 +32,7 @@ shell none
disable-mnt
private
private-bin silentarmy,sa-solver,python*
private-bin python*,sa-solver,silentarmy
private-dev
private-opt none
private-tmp

4
etc/slack.profile
View file

@ -33,7 +33,7 @@ seccomp
shell none
disable-mnt
private-bin slack,locale
private-bin locale,slack
private-dev
private-etc alternatives,asound.conf,ca-certificates,fonts,group,passwd,pulse,resolv.conf,ssl,ld.so.conf,ld.so.cache,localtime,pki,crypto-policies,machine-id
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,fonts,group,ld.so.cache,ld.so.conf,localtime,machine-id,passwd,pki,pulse,resolv.conf,ssl
private-tmp

2
etc/smplayer.profile
View file

@ -37,7 +37,7 @@ protocol unix,inet,inet6,netlink
seccomp
shell none
private-bin smplayer,smtube,mplayer,mpv,youtube-dl,python*,env
private-bin env,mplayer,mpv,python*,smplayer,smtube,youtube-dl
private-dev
private-tmp

4
etc/spotify.profile
View file

@ -42,9 +42,9 @@ shell none
tracelog
disable-mnt
private-bin spotify,bash,sh,zenity
private-bin bash,sh,spotify,zenity
private-dev
private-etc alternatives,fonts,group,ld.so.cache,machine-id,pulse,resolv.conf,hosts,nsswitch.conf,host.conf,ca-certificates,ssl,pki,crypto-policies
private-etc alternatives,ca-certificates,crypto-policies,fonts,group,host.conf,hosts,ld.so.cache,machine-id,nsswitch.conf,pki,pulse,resolv.conf,ssl
private-opt spotify
private-srv none
private-tmp

2
etc/standardnotes-desktop.profile
View file

@ -39,5 +39,5 @@ seccomp
disable-mnt
private-dev
private-tmp
private-etc alternatives,ca-certificates,fonts,host.conf,hostname,hosts,resolv.conf,ssl,pki,crypto-policies,xdg
private-etc alternatives,ca-certificates,crypto-policies,fonts,host.conf,hostname,hosts,pki,resolv.conf,ssl,xdg

4
etc/start-tor-browser.profile
View file

@ -34,7 +34,7 @@ shell none
#tracelog
disable-mnt
private-bin bash,sh,grep,tail,env,gpg,id,readlink,dirname,test,mkdir,ln,sed,cp,rm,getconf
private-bin bash,cp,dirname,env,getconf,gpg,grep,id,ln,mkdir,readlink,rm,sed,sh,tail,test
private-dev
private-etc alternatives,fonts,hostname,hosts,resolv.conf,pki,ssl,ca-certificates,crypto-policies,alsa,asound.conf,pulse,machine-id,ld.so.cache
private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,hostname,hosts,ld.so.cache,machine-id,pki,pulse,resolv.conf,ssl
private-tmp

2
etc/steam.profile
View file

@ -69,5 +69,5 @@ shell none
# private-dev should be commented for controllers
private-dev
# private-etc breaks a small selection of games on some systems, comment to support those
private-etc alternatives,asound.conf,ca-certificates,dbus-1,drirc,fonts,group,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,ld.so.conf,ld.so.conf.d,localtime,lsb-release,machine-id,mime.types,passwd,pulse,resolv.conf,ssl,pki,services,crypto-policies,alternatives,bumblebee,nvidia,os-release
private-etc alternatives,alternatives,asound.conf,bumblebee,ca-certificates,crypto-policies,dbus-1,drirc,fonts,group,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,lsb-release,machine-id,mime.types,nvidia,os-release,passwd,pki,pulse,resolv.conf,services,ssl
private-tmp

2
etc/supertuxkart.profile
View file

@ -47,7 +47,7 @@ disable-mnt
private-bin supertuxkart
private-cache
private-dev
private-etc alternatives,resolv.conf,ca-certificates,ssl,hosts,machine-id,xdg,openal,crypto-policies,pki,drirc,system-fips,selinux
private-etc alternatives,ca-certificates,crypto-policies,drirc,hosts,machine-id,openal,pki,resolv.conf,selinux,ssl,system-fips,xdg
private-tmp
private-opt none
private-srv none

4
etc/surf.profile
View file

@ -32,8 +32,8 @@ shell none
tracelog
disable-mnt
private-bin ls,surf,sh,bash,curl,dmenu,printf,sed,sleep,st,stterm,xargs,xprop
private-bin bash,curl,dmenu,ls,printf,sed,sh,sleep,st,stterm,surf,xargs,xprop
private-dev
private-etc alternatives,passwd,group,hosts,resolv.conf,fonts,ssl,pki,ca-certificates,crypto-policies
private-etc alternatives,ca-certificates,crypto-policies,fonts,group,hosts,passwd,pki,resolv.conf,ssl
private-tmp

4
etc/tar.profile
View file

@ -38,10 +38,10 @@ shell none
tracelog
# support compressed archives
private-bin sh,bash,tar,gtar,compress,gzip,lzma,xz,bzip2,lbzip2,lzip,lzop
private-bin bash,bzip2,compress,gtar,gzip,lbzip2,lzip,lzma,lzop,sh,tar,xz
private-cache
private-dev
private-etc alternatives,passwd,group,localtime
private-etc alternatives,group,localtime,passwd
private-lib libfakeroot
memory-deny-write-execute

4
etc/teams-for-linux.profile
View file

@ -35,8 +35,8 @@ seccomp
shell none
disable-mnt
private-bin sh,xdg-mime,tr,sed,echo,head,cut,xdg-open,grep,egrep,bash,zsh,teams-for-linux
private-bin bash,cut,echo,egrep,grep,head,sed,sh,teams-for-linux,tr,xdg-mime,xdg-open,zsh
private-cache
private-dev
private-etc fonts,machine-id,localtime,ld.so.cache,ca-certificates,ssl,pki,crypto-policies,resolv.conf
private-etc ca-certificates,crypto-policies,fonts,ld.so.cache,localtime,machine-id,pki,resolv.conf,ssl
private-tmp

2
etc/terasology.profile
View file

@ -44,5 +44,5 @@ shell none
disable-mnt
private-dev
private-etc alternatives,asound.conf,ca-certificates,dbus-1,drirc,fonts,group,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,localtime,lsb-release,machine-id,mime.types,passwd,pulse,resolv.conf,ssl,java-8-openjdk,java-7-openjdk,pki,crypto-policies
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,dbus-1,drirc,fonts,group,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,java-7-openjdk,java-8-openjdk,ld.so.cache,ld.so.preload,localtime,lsb-release,machine-id,mime.types,passwd,pki,pulse,resolv.conf,ssl
private-tmp

4
etc/tor.profile
View file

@ -44,9 +44,9 @@ writable-var
disable-mnt
private
private-bin tor,bash
private-bin bash,tor
private-cache
private-dev
private-etc alternatives,tor,passwd,ca-certificates,ssl,pki,crypto-policies
private-etc alternatives,ca-certificates,crypto-policies,passwd,pki,ssl,tor
private-tmp

2
etc/torbrowser-launcher.profile
View file

@ -50,5 +50,5 @@ shell none
disable-mnt
private-bin bash,cp,dirname,env,expr,file,getconf,gpg,grep,id,ln,mkdir,python*,readlink,rm,sed,sh,tail,tar,tclsh,test,tor-browser-en,torbrowser-launcher,xz
private-dev
private-etc alternatives,fonts,hostname,hosts,resolv.conf,pki,ssl,ca-certificates,crypto-policies,alsa,asound.conf,pulse,machine-id,ld.so.cache
private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,hostname,hosts,ld.so.cache,machine-id,pki,pulse,resolv.conf,ssl
private-tmp

2
etc/tremulous.profile
View file

@ -38,7 +38,7 @@ shell none
tracelog
disable-mnt
private-bin tremulous,tremulous-wrapper,tremded
private-bin tremded,tremulous,tremulous-wrapper
private-cache
private-dev
private-tmp

2
etc/unrar.profile
View file

@ -38,5 +38,5 @@ tracelog
private-bin unrar
private-dev
private-etc alternatives,passwd,group,localtime
private-etc alternatives,group,localtime,passwd
private-tmp

Some files were not shown because too many files have changed in this diff Show more