github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

profiles: clarify and add opengl-game to profile.template (#6300)

Browse source 
To make it consistent with the other include profiles.

See etc/templates/profile.template.

With this, all `etc/inc/allow-*` files are listed in profile.template.

The explanation is based on a comment by @rusty-snake[1].

Relates to #4071.

This is a follow-up to #6299.

[1] https://github.com/netblue30/firejail/pull/4071#issuecomment-822003473
This commit is contained in:
Kelvin M. Klann 2024-04-05 12:09:04 +00:00 • committed by GitHub
parent e6b10a45cd
commit 1cfa06b4c5
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
14 changed files with 23 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
etc/inc/allow-opengl-game.inc
View file

@ -2,6 +2,12 @@
# Persistent customizations should go in a .local file.
include allow-opengl-game.local
# Explanation: Fedora (and maybe others) install a .desktop file that uses
# `Exec=foo-wrapper` instead of `Exec=foo`. Each /usr/bin/foo-wrapper is a
# symlink to /usr/bin/opengl-game-wrapper.sh, which checks hardware
# acceleration and then starts the game or notifies the user that there is a
# problem.
noblacklist ${PATH}/bash
whitelist /usr/share/opengl-games-utils/opengl-game-functions.sh
private-bin basename,bash,cut,glxinfo,grep,head,sed,zenity

1
etc/profile-a-l/alienarena-wrapper.profile
View file

@ -6,6 +6,7 @@ include alienarena-wrapper.local
# added by included profile
#include globals.local
# Allow opengl-game wrapper script (distribution-specific)
include allow-opengl-game.inc
private-bin alienarena-wrapper

1
etc/profile-a-l/ballbuster-wrapper.profile
View file

@ -6,6 +6,7 @@ include ballbuster-wrapper.local
# added by included profile
#include globals.local
# Allow opengl-game wrapper script (distribution-specific)
include allow-opengl-game.inc
private-bin ballbuster-wrapper

1
etc/profile-a-l/colorful-wrapper.profile
View file

@ -6,6 +6,7 @@ include colorful-wrapper.local
# added by included profile
#include globals.local
# Allow opengl-game wrapper script (distribution-specific)
include allow-opengl-game.inc
private-bin colorful-wrapper

1
etc/profile-a-l/etr-wrapper.profile
View file

@ -6,6 +6,7 @@ include etr-wrapper.local
# added by included profile
#include globals.local
# Allow opengl-game wrapper script (distribution-specific)
include allow-opengl-game.inc
private-bin etr-wrapper

1
etc/profile-a-l/gl-117-wrapper.profile
View file

@ -6,6 +6,7 @@ include gl-117-wrapper.local
# added by included profile
#include globals.local
# Allow opengl-game wrapper script (distribution-specific)
include allow-opengl-game.inc
private-bin gl-117-wrapper

1
etc/profile-a-l/glaxium-wrapper.profile
View file

@ -6,6 +6,7 @@ include glaxium-wrapper.local
# added by included profile
#include globals.local
# Allow opengl-game wrapper script (distribution-specific)
include allow-opengl-game.inc
private-bin glaxium-wrapper

1
etc/profile-m-z/neverball-wrapper.profile
View file

@ -6,6 +6,7 @@ include neverball-wrapper.local
# added by included profile
#include globals.local
# Allow opengl-game wrapper script (distribution-specific)
include allow-opengl-game.inc
private-bin neverball-wrapper

1
etc/profile-m-z/neverputt-wrapper.profile
View file

@ -6,6 +6,7 @@ include neverputt-wrapper.local
# added by included profile
#include globals.local
# Allow opengl-game wrapper script (distribution-specific)
include allow-opengl-game.inc
private-bin neverputt-wrapper

1
etc/profile-m-z/pinball-wrapper.profile
View file

@ -6,6 +6,7 @@ include pinball-wrapper.local
# added by included profile
#include globals.local
# Allow opengl-game wrapper script (distribution-specific)
include allow-opengl-game.inc
private-bin pinball-wrapper

1
etc/profile-m-z/scorched3d-wrapper.profile
View file

@ -3,6 +3,7 @@
# Persistent local customizations
include scorched3d-wrapper.local
# Allow opengl-game wrapper script (distribution-specific)
include allow-opengl-game.inc
private-bin scorched3d-wrapper

1
etc/profile-m-z/supertuxkart-wrapper.profile
View file

@ -6,6 +6,7 @@ include supertuxkart-wrapper.local
# added by included profile
#include globals.local
# Allow opengl-game wrapper script (distribution-specific)
include allow-opengl-game.inc
private-bin supertuxkart-wrapper

3
etc/profile-m-z/xonotic.profile
View file

@ -8,7 +8,10 @@ include globals.local
noblacklist ${HOME}/.xonotic
# Allow /bin/sh (blacklisted by disable-shell.inc)
include allow-bin-sh.inc
# Allow opengl-game wrapper script (distribution-specific)
include allow-opengl-game.inc
include disable-common.inc

3
etc/templates/profile.template
View file

@ -91,6 +91,9 @@ include globals.local
# Allow nodejs (blacklisted by disable-interpreters.inc)
#include allow-nodejs.inc
# Allow opengl-game wrapper script (distribution-specific)
#include allow-opengl-game.inc
# Allow perl (blacklisted by disable-interpreters.inc)
#include allow-perl.inc