github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

profiles: anki: fix dark mode detection & misc changes (#6581)

Browse source 
Relates to #6545.
This commit is contained in:
amano-kenji 2025-01-16 12:53:08 +00:00 • committed by GitHub
parent dd2bcfd891
commit 5a42f0ee47
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 17 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

21
etc/profile-a-l/anki.profile
View file

@ -6,8 +6,7 @@ include anki.local
# Persistent global definitions # Persistent global definitions
include globals.local include globals.local
# Add the following to anki.local if you don't need media playing/recording # Add the following to anki.local if you don't need media playing/recording:
# (lua is needed by mpv):
#ignore include allow-lua.inc #ignore include allow-lua.inc
#machine-id #machine-id
#nosound #nosound
@ -17,6 +16,12 @@ noblacklist ${HOME}/.config/mpv
noblacklist ${HOME}/.local/share/Anki2 noblacklist ${HOME}/.local/share/Anki2
noblacklist ${HOME}/.mplayer noblacklist ${HOME}/.mplayer
# sh and dbus-send are used by aqt/theme.py to query dark mode through
# org.freedesktop.portal.Desktop.
# Allow /bin/sh (blacklisted by disable-shell.inc)
include allow-bin-sh.inc
# Lua is required by mpv.
# Allow lua (blacklisted by disable-interpreters.inc) # Allow lua (blacklisted by disable-interpreters.inc)
include allow-lua.inc include allow-lua.inc
@ -57,15 +62,23 @@ novideo
protocol unix,inet,inet6 protocol unix,inet,inet6
# QtWebengine needs chroot to set up its own sandbox # QtWebengine needs chroot to set up its own sandbox
seccomp !chroot seccomp !chroot
seccomp.block-secondary
disable-mnt disable-mnt
private-bin anki,mplayer,mpv,python* # env is required for python scripts on Gentoo Linux.
# anki uses mpv or mplayer for playing audio and uses lame to record audio.
# sh and dbus-send are used by aqt/theme.py to query dark mode through
# org.freedesktop.portal.Desktop.
private-bin anki,dbus-send,env,lame,mplayer,mpv,python*,sh
private-cache private-cache
private-dev private-dev
private-etc @tls-ca,@x11 private-etc @tls-ca,@x11
private-tmp private-tmp
dbus-user none dbus-user filter
# org.freedesktop.portal.Desktop is queried for dark mode.
dbus-user.talk org.freedesktop.portal.Desktop
dbus-system none dbus-system none
deterministic-shutdown
#restrict-namespaces #restrict-namespaces