19 commits

Author	SHA1	Message	Date
Fred-Barclay	eb4b505ac2	Consistent home directory nomenclature	2017-11-17 12:32:32 -06:00
smitsohu	162d53558a	fix baloo_file	2017-10-22 11:18:46 +02:00
smitsohu	9b99215a1e	various profile enhancements ... * okular needs kdeinit4 for open file dialog since recently * memory-deny-write-execute should be a safe addition for desktop use of dnscrypt and unbound * cleanup works	2017-09-25 15:57:50 +02:00
smitsohu	23de97c4a6	update seccomp filter, add no3d	2017-09-14 20:15:10 +02:00
Tad	104dde49c0	Fix nodvd placement	2017-08-13 15:53:04 -04:00
netblue30	647b6a220e	added nodvd to most profiles	2017-08-13 07:36:06 -04:00
Tad	71f838b5ba	Fix notv placement	2017-08-11 21:03:13 -04:00
netblue30	b97ca53e7b	added notv to most profiles	2017-08-11 10:21:18 -04:00
smitsohu	40a51e179d	various little profile fixes and enhancements (#1442) ... * add novideo * add novideo * add novideo * put noexec last * blacklist Clementine configuration and database * blacklist Clementine configuration and database * add novideo * add novideo, permit access to ~/.java * add novideo * spoof machine-id * mimeapps.list is already in whitelist-common.inc * ~/.local/share/applications is already read-only see disable-common.inc * mimeapps.list is already in whitelist-common.inc * ~/.local/share/applications is already read-only see disable-common.inc * drop machine-id option private-etc hides it anyway	2017-08-08 14:31:50 -05:00
Tad	39dc3c893b	Unify last 8 profiles	2017-08-07 14:29:40 -04:00
Fred Barclay	05fbfe6389	test: add novideo to profiles (part 1)	2017-06-15 12:02:43 -05:00
netblue30	dce9b9b9eb	added /etc/firejail/globals.local for global customizations	2017-05-23 12:02:22 -04:00
SYN-cook	7c8b3d1bd8	harden baloo_file ... but loosen write-protections in commented section. due to KDE creating write-lock files, stricter settings for ~/.local/share don't work	2017-05-05 22:21:31 +02:00
SYN-cook	b3a9e5721b	make Baloo experiment more meaningful (#1214) ... * make experiment more meaningful (baloo_file) Baloo fails to update configuration files, if the folder is read-only * note about warning message (baloo_file)	2017-04-13 14:16:10 +00:00
SYN-cook	9e55a9bc67	fix baloo_file profile (x11 isolation) ... blacklisting /tmp/.X11-unix can cause Baloo to hang	2017-04-10 13:16:36 +02:00
netblue30	8f8fdfcbf9	enable seccomp in baloo-file.profile	2017-04-09 11:38:15 -04:00
SYN-cook	605453cb75	improve x11 isolation ... taken from tracker.profile	2017-04-09 16:32:22 +02:00
SYN-cook	e76037947d	add x11 isolation	2017-04-09 15:45:35 +02:00
SYN-cook	9c3bf8306b	new baloo profile	2017-04-08 23:54:28 +02:00