diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index 371680b7b..162241b90 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -641,6 +641,7 @@ blacklist ${HOME}/.config/scribus blacklist ${HOME}/.config/scribusrc blacklist ${HOME}/.config/sendgmail blacklist ${HOME}/.config/sinew.in +blacklist ${HOME}/.config/singularity blacklist ${HOME}/.config/sink blacklist ${HOME}/.config/skypeforlinux blacklist ${HOME}/.config/slimjet @@ -1056,6 +1057,7 @@ blacklist ${HOME}/.local/share/rtv blacklist ${HOME}/.local/share/scribus blacklist ${HOME}/.local/share/shotwell blacklist ${HOME}/.local/share/signal-cli +blacklist ${HOME}/.local/share/singularity blacklist ${HOME}/.local/share/sink blacklist ${HOME}/.local/share/smuxi blacklist ${HOME}/.local/share/spotify diff --git a/etc/profile-a-l/singularity.profile b/etc/profile-a-l/singularity.profile new file mode 100644 index 000000000..d976d1c18 --- /dev/null +++ b/etc/profile-a-l/singularity.profile @@ -0,0 +1,47 @@ +# Firejail profile for singularity +# Description: Simulation game about playing as an artificial intelligence +# This file is overwritten after every install/update +# Persistent local customizations +include singularity.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.config/singularity +noblacklist ${HOME}/.local/share/singularity + +# Allow python (blacklisted by disable-interpreters.inc) +include allow-python3.inc + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-proc.inc +include disable-programs.inc + +mkdir ${HOME}/.config/singularity +mkdir ${HOME}/.local/share/singularity +whitelist ${HOME}/.config/singularity +whitelist ${HOME}/.local/share/singularity +include whitelist-common.inc +include whitelist-run-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +net none +#no3d +nodvd +noroot +#nosound +nou2f + +disable-mnt +private-cache +private-dev +private-tmp + +dbus-user none +dbus-system none diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 08170bee6..ceef499d0 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -813,6 +813,7 @@ silentarmy simple-scan simplescreenrecorder simutrans +singularity skanlite skypeforlinux slack