github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

New profile: singularity (Endgame: Singularity)

Browse source
This commit is contained in:
NetSysFire 2024-09-04 19:51:51 +02:00 • committed by Kelvin M. Klann
parent f833a492cd
commit e562e9726f
3 changed files with 50 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
etc/inc/disable-programs.inc
View file

@ -641,6 +641,7 @@ blacklist ${HOME}/.config/scribus
blacklist ${HOME}/.config/scribusrc
blacklist ${HOME}/.config/sendgmail
blacklist ${HOME}/.config/sinew.in
blacklist ${HOME}/.config/singularity
blacklist ${HOME}/.config/sink
blacklist ${HOME}/.config/skypeforlinux
blacklist ${HOME}/.config/slimjet
@ -1056,6 +1057,7 @@ blacklist ${HOME}/.local/share/rtv
blacklist ${HOME}/.local/share/scribus
blacklist ${HOME}/.local/share/shotwell
blacklist ${HOME}/.local/share/signal-cli
blacklist ${HOME}/.local/share/singularity
blacklist ${HOME}/.local/share/sink
blacklist ${HOME}/.local/share/smuxi
blacklist ${HOME}/.local/share/spotify

47
etc/profile-a-l/singularity.profile Normal file
View file

@ -0,0 +1,47 @@
# Firejail profile for singularity
# Description: Simulation game about playing as an artificial intelligence
# This file is overwritten after every install/update
# Persistent local customizations
include singularity.local
# Persistent global definitions
include globals.local
noblacklist ${HOME}/.config/singularity
noblacklist ${HOME}/.local/share/singularity
# Allow python (blacklisted by disable-interpreters.inc)
include allow-python3.inc
include disable-common.inc
include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
mkdir ${HOME}/.config/singularity
mkdir ${HOME}/.local/share/singularity
whitelist ${HOME}/.config/singularity
whitelist ${HOME}/.local/share/singularity
include whitelist-common.inc
include whitelist-run-common.inc
include whitelist-runuser-common.inc
include whitelist-usr-share-common.inc
include whitelist-var-common.inc
apparmor
caps.drop all
net none
#no3d
nodvd
noroot
#nosound
nou2f
disable-mnt
private-cache
private-dev
private-tmp
dbus-user none
dbus-system none

1
src/firecfg/firecfg.config
View file

@ -813,6 +813,7 @@ silentarmy
simple-scan
simplescreenrecorder
simutrans
singularity
skanlite
skypeforlinux
slack