Commit graph

743 commits

Author SHA1 Message Date
netblue30
98fe39849c readme, etc 2021-05-18 11:33:57 -04:00
glitsj16
699a803f17
Node.js stack refactoring (#4255)
* Create node.profile

* Create node-gyp.profile

* refactor npm as redirect

* Create npx.profile

* Create nvm.profile

* Create semver.profile

* refactor yarn as redirect

* collect node.js stack configuration in common profile

* add ~/.nvm to node section

* account for node-gyp python dependency

* read-only ~/.nvm for node.js stack

* blacklist ~/.nvm for node.js stack

* move env var comment cfr. profile.template

* Delete node-gyp.profile

node-gyp is a shell script with a node shebang. We've got that covered via node.profile.

* Delete npx.profile

npx is a shell script with a node shebang. We've got that covered via node.profile.

* Delete semver.profile

semver is a shell script that calls node. We've got that covered via node.profile.

* add node and nvm to new profiles section
2021-05-08 15:27:30 +00:00
netblue30
8988842c1b --build fixes 2021-05-04 16:46:54 -04:00
rusty-snake
6af4ed41be Update README.md & RELNOTES: add new profiles 2021-04-24 11:48:55 +02:00
rusty-snake
51e67fd459 profile fixes
README.md/RELNOTES:
 - Add new profiles

etr.profile:
 - adding passwd to private-etc makes it work for me

file-roller.profile
 - add netfilter
 - add zstd to private-bin
 - add cp,mv,rm to private-bin which seems to be necessary in some
   cases.
   #4113 is likely fixed with this but wait for OP.
2021-04-20 09:17:47 +02:00
rusty-snake
2ae7295f1a profile fixes
discord-canary.profile:
 fix #4175

flameshot.profile:
  - private-tmp break flameshot (wayland only?)
  - Screengrabbing (under wayland) is done via dbus, the following names
    must be allowed:
    - GNOME: org.gnome.Shell
    - KDE: org.kde.KWin
    - Sway: org.freedesktop.portal.Desktop
 - Allow notifications and tray too, because org.gnome.Shell (for
   example) is already totaly unsafe.

mumble.profile:
 fix #4181
2021-04-12 08:52:06 +02:00
Jose Riha
3dbdd64669 Fix typo (adivsory -> advisory) 2021-04-10 20:34:19 +02:00
rusty-snake
e503253e4f Update README.md & RELONTS; Fix manpage HAVE_NETWORK 2021-03-19 15:31:49 +01:00
Tad
4e2f3566b9 Add a profile for PCSX2
I can't seem to get it to work with seccomp enabled.
2021-03-17 16:58:15 -04:00
Tad
6326d89d41 Small changes
- Add netlink to pcsxr fixing controller support
- Add openmw and PPSSPPSDL to firecfg
- Update readme for new profiles

Note: file picker in dolphin-emu is being weird (not showing or freezing)
2021-03-16 14:09:40 -04:00
rusty-snake
b6faaaab21 new profile: com.github.phase1geo.minder 2021-03-06 16:32:20 +01:00
netblue30
00e2d5f866 small fixes and updates 2021-02-26 09:27:40 -05:00
glitsj16
b982402208
add gget 2021-02-25 12:52:15 +00:00
glitsj16
0d33896116
new profile: lzop 2021-02-24 02:57:18 +00:00
netblue30
80868ffa70 jailtest 2021-02-23 08:40:02 -05:00
netblue30
f2b7ec0bfe more calibre profiles 2021-02-22 07:48:24 -05:00
netblue30
42e2db1275 jaitest - simple sandbox testing utility program 2021-02-20 10:06:58 -05:00
netblue30
b24501b14e adding ipcalc, ipcalc-ng 2021-02-19 09:00:00 -05:00
netblue30
527be3f823 display-im6.q16 2021-02-11 08:03:09 -05:00
netblue30
703f16069a formating 2021-02-08 09:01:33 -05:00
netblue30
b7cf89ecf2 security advisory 2021-02-08 08:59:48 -05:00
netblue30
fb9f2a5fb3 disabled overlayfs, fixes pending; added video channels to README* files 2021-02-06 09:05:57 -05:00
rusty-snake
00a17b055e Add profile for vmware-view
blacklist ${HOME}/.vwmare is already in disable-programs.inc
I did not add it to firecfg.config because it has many extra features
such as usb-redirection that I could not test.
2021-02-04 17:42:52 +01:00
Fred Barclay
809659e33a Add Github Actions badges 2021-02-02 16:40:12 -06:00
netblue30
6a1a36704a readme.md 2021-01-27 14:09:48 -05:00
netblue30
964f334460 merge/readme update 2021-01-25 09:41:00 -05:00
netblue30
ec29c6acad profstats 2021-01-24 11:49:48 -05:00
glitsj16
e6d2e32c5e
add pkglog to new profiles 2021-01-18 20:02:43 +00:00
rusty-snake
6613769d6c Add profile for guvcview 2021-01-18 18:59:35 +01:00
glitsj16
73cd6ab5d6
add qnapi to new profiles 2021-01-13 09:22:49 +00:00
glitsj16
7fbe43ec20
add new profile: shotwell (#3889)
* new profile: shotwell

* Create shotwell.profile

* new profile: shotwell

* add shotwell blacklists
2021-01-13 08:06:37 +00:00
glitsj16
662ebd214b
new profile: mdr (#3888)
* add new profile: mdr

* Create mdr.profile
2021-01-13 07:23:15 +00:00
glitsj16
cba5ca031d
new profile: agetpkg (#3887)
* Create agetpkg.profile

* new profile: agetpkg
2021-01-13 07:02:34 +00:00
glitsj16
5164001b73
add new profiles: lsar & unar (ar redirects) (#3886)
* Create lsar.profile

* Create unar.profile

* new profiles lsar & unar
2021-01-13 06:45:50 +00:00
glitsj16
37452ef1a7
refactor nodejs applications (npm & yarn) (#3876)
* add yarn & reorder

* add node-gyp & yarn files

* Create nodejs-common.profile

* Create yarn.profile

* refactor npm.profile

* add new profile: yarn

* read-only's for npm/yarn

Thanks to the [suggestion](https://github.com/netblue30/firejail/pull/3876#pullrequestreview-564682989) from @kmk3.

* ignore read-only's for npm

As [suggested](https://github.com/netblue30/firejail/pull/3876#pullrequestreview-564682989) by @kmk3.

* ignore read-only for yarn

As suggested in https://github.com/netblue30/firejail/pull/3876#pullrequestreview-564682989 by @kmk3.

* remove quiet from nodejs-common.profile

quiet should go into the caller profiles instead

* add quiet to npm.profile

Thanks @rusty-snake for the review.

* re-ordering some options

* re-ordering
2021-01-11 17:32:31 +00:00
rusty-snake
266cfb6cfe Add new profile for marker 2021-01-08 22:03:41 +01:00
glitsj16
af370dac81
Update README.md 2021-01-08 20:53:36 +00:00
glitsj16
ef5c6c3f9a
new profile: tutanota-desktop (#3870)
* new profile: tutanota-desktop

* add tutanota-desktop to firecfg

* blacklist tutanota-desktop files

* Create tutanota-desktop.profile
2021-01-05 12:43:22 +00:00
rusty-snake
e3d27760c4 new profile: servo 2020-12-21 16:37:19 +01:00
rusty-snake
3e7c483044 fixes
- hopefully fix #3795 finally
 - fix README.md codeblock
 - blacklist ${HOME}/.texlive20*
2020-12-09 17:11:47 +01:00
rusty-snake
f4fcdd09da profile fixes from issues
closes #3786; closes #3776
2020-12-07 15:26:28 +01:00
Tad
fb56a266a3 Add a profile for dolphin-emu
Games folder must be whitelisted in a dolphin-emu.local
Its private-etc can likely be shortened
2020-11-29 20:01:50 -05:00
Tad
096b27c6b3 Add a profile for Lutris
- Lutris isn't added to firecfg just yet, needs more testing
- aria2c profile has a comment regarding Lutris/Winetricks,
  but it shouldn't matter since it can't be nested
- Add commented wusc to wine.profile
- Add vulkan and zenity to wusc.inc
2020-11-23 16:54:37 -05:00
rusty-snake
0fa7f9c30f various profiles
- disable-common: read-only ${HOME}/.zfunc
 - fix #3761 -- w3m with w3m-img installed does not display images when on virtual console/framebuffer
 - yelp can be used to display manpages
2020-11-20 19:56:57 +01:00
rusty-snake
f3585e5393 fixes, closes, enhances, improvements, and so on
- .github/ISSUE_TEMPLATE/bug_report.md: get ride off spanish,
   french, ... error messages
 - etc/inc/firefox-common-addons.inc: support ff2mpv
 - etc/profile-a-l/gimp.profile: note about xsane
 - etc/profile-m-z/min.profile: prettify
 - etc/profile-m-z/mpsyt.profile: fix, add lua
 - etc/profile-m-z/qbittorrent.profile: add note for tray-icons; this
   will get a better note once I investigated and audited all the D-Bus
   tray stuff.
 - etc/profile-m-z/transmission-daemon.profile: fix, add protocol packet

close #3686 - mps-youtube needs lua
close #3701 - Firefox native messaging regression in 0.9.62.4 -> 0.9.64rc1
close #3636 - transmission-daemon fills log with error
close #3640 - Gimp - add note how to enable scanning (xsane)
close #3707 - qBittorrent tray icon missing from notification panel when running it with firejail
2020-11-09 20:57:33 +01:00
rusty-snake
eddd3cdbdf profile fixes
- update README.md and RELNOTES
 - add 'blacklist ${RUNUSER}/.flatpak-cache' to disable-common.inc
 - fix #3728, fonts in openSUSE KDE with wc / wusc
 - fix gnome-todo
 - fix xournalpp MathTeX whitelist
2020-11-06 10:35:14 +01:00
Reiner Herrmann
06a885d06e ci: drop Travis CI because of their new pricing model
Meanwhile most tests are also run via GitHub Actions

Fixes #3721
2020-11-04 17:59:10 +01:00
Reiner Herrmann
a8a604ee3e typo 2020-10-25 14:17:06 +01:00
netblue30
e4d053e907 merges 2020-10-25 08:51:18 -04:00
rusty-snake
582ae38e81 harden peek; update README.md; add gnome-sound-…
…recorder to firecfg.config
2020-10-23 14:06:37 +02:00