profiles: use xdg macros with subpaths (#7160)

Commands used to search and replace:

    $ git grep -IElz '\$\{HOME\}/(Desktop|Documents|Downloads|Music|Pictures|Projects|Videos)' -- etc |
      xargs -0 perl -pi -e '
        s/\$\{HOME\}\/Desktop/\${DESKTOP}/;
        s/\$\{HOME\}\/Documents/\${DOCUMENTS}/;
        s/\$\{HOME\}\/Downloads/\${DOWNLOADS}/;
        s/\$\{HOME\}\/Music/\${MUSIC}/;
        s/\$\{HOME\}\/Pictures/\${PICTURES}/;
        s/\$\{HOME\}\/Projects/\${PROJECTS}/;
        s/\$\{HOME\}\/Videos/\${VIDEOS}/;
      '

Note: The entries in the following profiles were sorted manually:

* etc/profile-m-z/Mathematica.profile
* etc/profile-m-z/prismlauncher.profile
* etc/profile-m-z/zoom.profile

This is a follow-up to #7151.
This commit is contained in:
Kelvin M. Klann 2026-05-11 14:07:42 +00:00 committed by GitHub
parent 3664750f8f
commit 0298a7eba7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
5 changed files with 10 additions and 10 deletions

View file

@ -10,9 +10,9 @@ include jami.local
noblacklist ${HOME}/.config/jami.net
mkdir ${HOME}/.config/jami.net
mkdir ${HOME}/Videos/Jami
mkdir ${VIDEOS}/Jami
whitelist ${HOME}/.config/jami.net
whitelist ${HOME}/Videos/Jami
whitelist ${VIDEOS}/Jami
# Redirect
include jami-gnome.profile

View file

@ -37,9 +37,9 @@ include disable-shell.inc
include disable-xdg.inc
# You can enable whitelisting for keepassxc by adding the below to your keepassxc.local.
# If you do, you MUST store your database under ${HOME}/Documents/KeePassXC/foo.kdbx.
#mkdir ${HOME}/Documents/KeePassXC
#whitelist ${HOME}/Documents/KeePassXC
# If you do, you MUST store your database under ${DOCUMENTS}/KeePassXC/foo.kdbx.
#mkdir ${DOCUMENTS}/KeePassXC
#whitelist ${DOCUMENTS}/KeePassXC
# Needed for KeePassXC-Browser.
#mkdir ${HOME}/.config/BraveSoftware/Brave-Browser/NativeMessagingHosts
#mkfile ${HOME}/.config/BraveSoftware/Brave-Browser/NativeMessagingHosts/org.keepassxc.keepassxc_browser.json

View file

@ -13,12 +13,12 @@ include disable-devel.inc
include disable-interpreters.inc
include disable-programs.inc
mkdir ${DOCUMENTS}/Wolfram Mathematica
mkdir ${HOME}/.Mathematica
mkdir ${HOME}/.Wolfram Research
mkdir ${HOME}/Documents/Wolfram Mathematica
whitelist ${DOCUMENTS}/Wolfram Mathematica
whitelist ${HOME}/.Mathematica
whitelist ${HOME}/.Wolfram Research
whitelist ${HOME}/Documents/Wolfram Mathematica
include whitelist-common.inc
caps.drop all

View file

@ -14,8 +14,8 @@ include disable-interpreters.inc
include disable-proc.inc
include disable-shell.inc
whitelist ${DOWNLOADS}
whitelist ${HOME}/.local/share/PrismLauncher
whitelist ${HOME}/Downloads
include whitelist-common.inc
apparmor

View file

@ -23,16 +23,16 @@ noblacklist ${HOME}/.zoom
nowhitelist ${DOWNLOADS}
mkdir ${DOCUMENTS}/Zoom
mkdir ${HOME}/.cache/zoom
mkdir ${HOME}/.zoom
mkdir ${HOME}/Documents/Zoom
mkfile ${HOME}/.config/zoom.conf
mkfile ${HOME}/.config/zoomus.conf
whitelist ${DOCUMENTS}/Zoom
whitelist ${HOME}/.cache/zoom
whitelist ${HOME}/.config/zoom.conf
whitelist ${HOME}/.config/zoomus.conf
whitelist ${HOME}/.zoom
whitelist ${HOME}/Documents/Zoom
# Disable for now, see https://github.com/netblue30/firejail/issues/3726
#private-etc alternatives,ca-certificates,crypto-policies,fonts,group,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id,nsswitch.conf,pki,resolv.conf,ssl