github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

new profile: gzdoom (#7010)

Browse source 
One of the profile requests lists GZDoom.

So create profiles for GZDoom and its variants: UZDoom and LZDoom.

GZDoom served as the primary port for several years after ZDoom was
discontinued.

UZDoom has now become the latest version targeting systems with modern
graphics hardware.

LZDoom is geared towards systems with legacy hardware.

All three profiles work.

https://zdoom.org
This commit is contained in:
StellariusOrion592 2025-12-31 19:34:10 +00:00 • committed by GitHub
parent 7a52945182
commit fd76695fa4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
6 changed files with 132 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
etc/inc/disable-programs.inc
View file

@ -505,6 +505,7 @@ blacklist ${HOME}/.config/gthumb
blacklist ${HOME}/.config/gummi
blacklist ${HOME}/.config/guvcview2
blacklist ${HOME}/.config/gwenviewrc
blacklist ${HOME}/.config/gzdoom
blacklist ${HOME}/.config/hexchat
blacklist ${HOME}/.config/homebank
blacklist ${HOME}/.config/i2p
@ -561,6 +562,7 @@ blacklist ${HOME}/.config/lobster
blacklist ${HOME}/.config/lugaru
blacklist ${HOME}/.config/lutris
blacklist ${HOME}/.config/lximage-qt
blacklist ${HOME}/.config/lzdoom
blacklist ${HOME}/.config/mailtransports
blacklist ${HOME}/.config/mana
blacklist ${HOME}/.config/mate-calc
@ -695,6 +697,7 @@ blacklist ${HOME}/.config/uGet
blacklist ${HOME}/.config/ueberzugpp
blacklist ${HOME}/.config/ungoogled-chromium
blacklist ${HOME}/.config/uzbl
blacklist ${HOME}/.config/uzdoom
blacklist ${HOME}/.config/vesktop
blacklist ${HOME}/.config/viewnior
blacklist ${HOME}/.config/vivaldi
@ -977,6 +980,10 @@ blacklist ${HOME}/.local/share/fluffychat
blacklist ${HOME}/.local/share/fractal
blacklist ${HOME}/.local/share/freecol
blacklist ${HOME}/.local/share/gajim
blacklist ${HOME}/.local/share/games/doom
blacklist ${HOME}/.local/share/games/gzdoom
blacklist ${HOME}/.local/share/games/lzdoom
blacklist ${HOME}/.local/share/games/uzdoom
blacklist ${HOME}/.local/share/gdfuse
blacklist ${HOME}/.local/share/geary
blacklist ${HOME}/.local/share/geeqie

60
etc/profile-a-l/gzdoom-common.profile Normal file
View file

@ -0,0 +1,60 @@
# Firejail profile for gzdoom-common
# This file is overwritten after every install/update
# Persistent local customizations
include gzdoom-common.local
# Persistent global definitions
# added by caller profile
#include globals.local
noblacklist ${HOME}/.local/share/games/doom
# Allow /bin/sh (blacklisted by disable-shell.inc)
include allow-bin-sh.inc
blacklist /usr/libexec
include disable-common.inc
include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
include disable-shell.inc
include disable-xdg.inc
mkdir ${HOME}/.local/share/games/doom
whitelist ${HOME}/.local/share/games/doom
whitelist /usr/share/doom
whitelist /usr/share/games/doom
whitelist /usr/share/soundfonts
include whitelist-usr-share-common.inc
apparmor
caps.drop all
ipc-namespace
machine-id
netfilter
nodvd
nogroups
nonewprivs
noprinters
noroot
notv
nou2f
novideo
protocol unix,inet,inet6
seccomp
seccomp.block-secondary
tracelog
disable-mnt
private-bin bash,dash,gdb,sh,uname,which,xmessage
private-cache
private-dev
private-etc @games,@x11
private-tmp
dbus-user none
dbus-system none
restrict-namespaces

20
etc/profile-a-l/gzdoom.profile Normal file
View file

@ -0,0 +1,20 @@
# Firejail profile for gzdoom
# Description: OpenGL version of ZDoom
# This file is overwritten after every install/update
# Persistent local customizations
include gzdoom.local
# Persistent global definitions
include globals.local
noblacklist ${HOME}/.config/gzdoom
noblacklist ${HOME}/.local/share/games/gzdoom
mkdir ${HOME}/.config/gzdoom
mkdir ${HOME}/.local/share/games/gzdoom
whitelist ${HOME}/.config/gzdoom
whitelist ${HOME}/.local/share/games/gzdoom
private-bin gzdoom
# Redirect
include gzdoom-common.profile

21
etc/profile-a-l/lzdoom.profile Normal file
View file

@ -0,0 +1,21 @@
# Firejail profile for lzdoom
# Description: Legacy OpenGL version of GZDoom
# This file is overwritten after every install/update
# Persistent local customizations
include lzdoom.local
# Persistent global definitions
include globals.local
noblacklist ${HOME}/.config/lzdoom
noblacklist ${HOME}/.local/share/games/lzdoom
mkdir ${HOME}/.config/lzdoom
mkdir ${HOME}/.local/share/games/lzdoom
whitelist ${HOME}/.config/lzdoom
whitelist ${HOME}/.local/share/games/lzdoom
whitelist /usr/share/games/lzdoom
private-bin lzdoom
# Redirect
include gzdoom-common.profile

21
etc/profile-m-z/uzdoom.profile Normal file
View file

@ -0,0 +1,21 @@
# Firejail profile for uzdoom
# Description: UZDoom is a modern, feature-rich source port for the classic game DOOM
# This file is overwritten after every install/update
# Persistent local customizations
include uzdoom.local
# Persistent global definitions
include globals.local
noblacklist ${HOME}/.config/uzdoom
noblacklist ${HOME}/.local/share/games/uzdoom
mkdir ${HOME}/.config/uzdoom
mkdir ${HOME}/.local/share/games/uzdoom
whitelist ${HOME}/.config/uzdoom
whitelist ${HOME}/.local/share/games/uzdoom
whitelist /usr/share/games/uzdoom
private-bin uzdoom
# Redirect
include gzdoom-common.profile

3
src/firecfg/firecfg.config
View file

@ -432,6 +432,7 @@ guayadeque
gucharmap
gummi
gwenview
gzdoom
handbrake
handbrake-gtk
hashcat
@ -562,6 +563,7 @@ lyx
#lz4 # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
#lz4c # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
#lz4cat # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
lzdoom
macrofusion
magicor
man
@ -970,6 +972,7 @@ url-eater
utox
uudeview
uzbl-browser
uzdoom
vesktop
viewnior
viking