github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

firefox: move read-only entries to disable-common.inc

Browse source 
Instead of duplicating them on every profile that tries to allow opening
links in Firefox.

And make that path read-write on firefox.profile.
This commit is contained in:
Kelvin M. Klann 2023-03-23 02:49:53 -03:00
parent 13cb318d40
commit 35885d7256
13 changed files with 4 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

1
etc/inc/disable-common.inc
View file

@ -346,6 +346,7 @@ read-only ${HOME}/.local/share/cool-retro-term
read-only ${HOME}/.local/share/nvim
read-only ${HOME}/.local/state/nvim
read-only ${HOME}/.mailcap
read-only ${HOME}/.mozilla/firefox/profiles.ini
read-only ${HOME}/.msmtprc
read-only ${HOME}/.mutt/muttrc
read-only ${HOME}/.muttrc

1
etc/profile-a-l/electron-mail.profile
View file

@ -24,7 +24,6 @@ whitelist ${HOME}/.config/electron-mail
# there isn't a Firefox instance running with the default profile; see #5352)
noblacklist ${HOME}/.mozilla
whitelist ${HOME}/.mozilla/firefox/profiles.ini
read-only ${HOME}/.mozilla/firefox/profiles.ini
machine-id
nosound

1
etc/profile-a-l/email-common.profile
View file

@ -85,6 +85,5 @@ dbus-user.talk org.gnome.seahorse.*
dbus-user.talk org.mozilla.*
dbus-system none
read-only ${HOME}/.mozilla/firefox/profiles.ini
read-only ${HOME}/.signature
restrict-namespaces

3
etc/profile-a-l/firefox.profile
View file

@ -14,6 +14,9 @@ include globals.local
# https://github.com/netblue30/firejail/wiki/Frequently-Asked-Questions#how-do-i-run-two-instances-of-firefox
# https://github.com/netblue30/firejail/issues/4206#issuecomment-824806968
# (Ignore entry from disable-common.inc)
ignore read-only ${HOME}/.mozilla/firefox/profiles.ini
noblacklist ${HOME}/.cache/mozilla
noblacklist ${HOME}/.mozilla
noblacklist ${RUNUSER}/*firefox*

1
etc/profile-a-l/geary.profile
View file

@ -91,5 +91,4 @@ dbus-user.talk org.gnome.evolution.dataserver.Sources5
dbus-user.talk org.mozilla.*
dbus-system none
read-only ${HOME}/.mozilla/firefox/profiles.ini
restrict-namespaces

1
etc/profile-a-l/kube.profile
View file

@ -77,5 +77,4 @@ dbus-user.talk org.freedesktop.secrets
dbus-user.talk org.freedesktop.Notifications
dbus-system none
read-only ${HOME}/.mozilla/firefox/profiles.ini
restrict-namespaces

2
etc/profile-a-l/linuxqq.profile
View file

@ -37,7 +37,5 @@ dbus-user.talk org.gnome.Mutter.IdleMonitor
dbus-user.talk org.mozilla.*
ignore dbus-user none
read-only ${HOME}/.mozilla/firefox/profiles.ini
# Redirect
include electron-common.profile

1
etc/profile-m-z/signal-desktop.profile
View file

@ -14,7 +14,6 @@ noblacklist ${HOME}/.config/Signal
# These lines are needed to allow Firefox to open links
noblacklist ${HOME}/.mozilla
whitelist ${HOME}/.mozilla/firefox/profiles.ini
read-only ${HOME}/.mozilla/firefox/profiles.ini
mkdir ${HOME}/.config/Signal
whitelist ${HOME}/.config/Signal

1
etc/profile-m-z/thunderbird.profile
View file

@ -24,7 +24,6 @@ writable-run-user
# These lines are needed to allow Firefox to load your profile when clicking a link in an email
noblacklist ${HOME}/.mozilla
whitelist ${HOME}/.mozilla/firefox/profiles.ini
read-only ${HOME}/.mozilla/firefox/profiles.ini
noblacklist ${HOME}/.cache/thunderbird
noblacklist ${HOME}/.gnupg

1
etc/profile-m-z/trojita.profile
View file

@ -60,5 +60,4 @@ dbus-user filter
dbus-user.talk org.freedesktop.secrets
dbus-system none
read-only ${HOME}/.mozilla/firefox/profiles.ini
restrict-namespaces

1
etc/profile-m-z/tutanota-desktop.profile
View file

@ -28,7 +28,6 @@ whitelist ${HOME}/.config/tutanota-desktop
# there isn't a Firefox instance running with the default profile; see #5352)
noblacklist ${HOME}/.mozilla
whitelist ${HOME}/.mozilla/firefox/profiles.ini
read-only ${HOME}/.mozilla/firefox/profiles.ini
machine-id
nosound

1
etc/profile-m-z/youtube-viewers-common.profile
View file

@ -24,7 +24,6 @@ include allow-python3.inc
# there isn't a Firefox instance running with the default profile; see #5352)
noblacklist ${HOME}/.mozilla
whitelist ${HOME}/.mozilla/firefox/profiles.ini
read-only ${HOME}/.mozilla/firefox/profiles.ini
include disable-common.inc
include disable-devel.inc

1
etc/profile-m-z/zeal.profile
View file

@ -23,7 +23,6 @@ include disable-xdg.inc
# This also requires dbus-user filtering (see below).
noblacklist ${HOME}/.mozilla
whitelist ${HOME}/.mozilla/firefox/profiles.ini
read-only ${HOME}/.mozilla/firefox/profiles.ini
mkdir ${HOME}/.cache/Zeal
mkdir ${HOME}/.config/Zeal