diff --git a/README.md b/README.md index 652862646..8d061f4bc 100644 --- a/README.md +++ b/README.md @@ -102,4 +102,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe ## Current development version: 0.9.59 ## New profiles: -crow, nyx, klavaro, mypaint, celluoid, nano, transgui, sysprof, simplescreenrecorder, geekbench, xfce4-mixer, pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring, regextester, hardinfo, gnome-system-log, gnome-nettool, netactview, redshift, devhelp, assogiate, subdownloader, font-manager, exfalso, gconf-editor, dconf-editor, mpdris2, sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings, code-oss, pragha, Maelstrom, ostrichriders, bzflag, freeciv, lincity-ng, megaglest, openttd +crow, nyx, klavaro, mypaint, celluoid, nano, transgui, sysprof, simplescreenrecorder, geekbench, xfce4-mixer, pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring, regextester, hardinfo, gnome-system-log, gnome-nettool, netactview, redshift, devhelp, assogiate, subdownloader, font-manager, exfalso, gconf-editor, dconf-editor, mpdris2, sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings, code-oss, pragha, Maelstrom, ostrichriders, bzflag, freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles diff --git a/RELNOTES b/RELNOTES index 92a6a4109..f3ee1bfab 100644 --- a/RELNOTES +++ b/RELNOTES @@ -7,7 +7,7 @@ firejail (0.9.59) baseline; urgency=low * new profiles: font-manager, exfalso, gconf-editor, dconf-editor * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag - * new profiles: freeciv, lincity-ng, megaglest, openttd + * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles * memory-deny-write-execute now also blocks memfd_create * drop support for flatpak/snap packages diff --git a/etc/crawl-tiles.profile b/etc/crawl-tiles.profile new file mode 100644 index 000000000..39151865e --- /dev/null +++ b/etc/crawl-tiles.profile @@ -0,0 +1,7 @@ +# Firejail profile alias for crawl +# This file is overwritten after every install/update + +ignore no3d + +# Redirect +include crawl.profile diff --git a/etc/crawl.profile b/etc/crawl.profile new file mode 100644 index 000000000..af78ac738 --- /dev/null +++ b/etc/crawl.profile @@ -0,0 +1,45 @@ +# Firejail profile for crawl-tiles +# Description: Roguelike dungeon exploration game +# This file is overwritten after every install/update +# Persistent local customizations +include crawl-tiles.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.crawl + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +mkdir ${HOME}/.crawl +whitelist ${HOME}/.crawl +include whitelist-common.inc +include whitelist-var-common.inc + +caps.drop all +ipc-namespace +net none +no3d +nodbus +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix +seccomp +shell none + +disable-mnt +private-bin crawl,crawl-tiles +private-cache +private-dev +private-tmp diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 790768290..90dd07dea 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -106,6 +106,8 @@ code-oss conkeror conky corebird +crawl +crawl-tiles crow cryptocat cvlc