diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 8cfcaa838..6288f14e2 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -453,6 +453,7 @@ blacklist ${HOME}/.wireshark blacklist ${HOME}/.wine64 blacklist ${HOME}/.xiphos blacklist ${HOME}/.xmms +blacklist ${HOME}/.xmr-stak blacklist ${HOME}/.xonotic blacklist ${HOME}/.xpdfrc blacklist ${HOME}/.zoom diff --git a/etc/xmr-stak-cpu.profile b/etc/xmr-stak.profile similarity index 62% rename from etc/xmr-stak-cpu.profile rename to etc/xmr-stak.profile index 9cc6e0c1f..151a4c694 100644 --- a/etc/xmr-stak-cpu.profile +++ b/etc/xmr-stak.profile @@ -1,22 +1,24 @@ -# Firejail profile for xmr-stak-cpu +# Firejail profile for xmr-stak # This file is overwritten after every install/update # Persistent local customizations -include /etc/firejail/xmr-stak-cpu.local +include /etc/firejail/xmr-stak.local # Persistent global definitions include /etc/firejail/globals.local +noblacklist ${HOME}/.xmr-stak +noblacklist /usr/lib/llvm* include /etc/firejail/disable-common.inc include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc include /etc/firejail/disable-programs.inc +mkdir ${HOME}/.xmr-stak include /etc/firejail/whitelist-var-common.inc caps.drop all ipc-namespace netfilter -no3d nodvd nogroups nonewprivs @@ -29,12 +31,12 @@ seccomp shell none disable-mnt -private -private-bin xmr-stak-cpu +private ${HOME}/.xmr-stak +private-bin xmr-stak private-dev -private-etc xmr-stak-cpu.json -private-lib -private-opt none +private-etc ca-certificates,crypto-policies,nsswitch.conf,pki,resolv.conf,ssl +#private-lib libxmrstak_opencl_backend,libxmrstak_cuda_backend +private-opt cuda private-tmp memory-deny-write-execute diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 1cd9d9c1f..aff20d998 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -393,7 +393,7 @@ xfce4-dict xfce4-notes xiphos xmms -xmr-stak-cpu +xmr-stak xonotic xonotic-glx xonotic-sdl