Commit graph

11 commits

Author SHA1 Message Date
Kelvin M. Klann
fda7560c49 profiles: standardize on just "GTK" on comments
For consistency and to reduce confusion.

The toolkit has been renamed from "GTK+" to just "GTK" in 2019[1].

Note: This also fixes some adjacent typos.

Commands used to search and replace:

    $ git grep -lz 'G[Tt][Kk]' -- etc | xargs -0 -I '{}' sh -c \
      "printf '%s\n' \"\$(sed -E \
        -e 's/G[Tt][Kk]\+?/GTK/g' \
        -e 's/GTK-.\.0/GTK/g' \
        -e 's/GTK base/GTK-base/g' \
        -e 's/GTK-base /GTK-based /g' \
        -e 's/Light weight/Lightweight/g' \
        -e 's/client with GTK/client made with GTK/g' '{}')\" >'{}'"

Misc: I noticed this on #5722.

[1] https://mail.gnome.org/archives/gtk-devel-list/2019-February/msg00000.html
2023-04-19 17:17:35 -03:00
smitsohu
e4f0f91ebd add restrict-namespaces to (almost) all profiles 2022-12-20 01:39:53 +01:00
Kelvin M. Klann
2aa9bbb4e5 profiles: allow perl/exiftool on the relevant profiles
Programs that seem to support exiftool:

    $ LC_ALL=C pacman -Sii perl-image-exiftool |
      grep -e '^Version' -e '^Required' -e '^Optional For' | head -n 3
    Version         : 12.42-1
    Required By     : digikam  geotag  gitlab-workhorse  mat2  rapid-photo-downloader
    Optional For    : darktable  geeqie  gpsprune  hugin  jpeg-archive  ranger  recoll  shutter

Environment: Artix Linux.

Note for hugin.profile: Does not currently work with private-bin on
Arch/Artix; see the private-bin comment on
etc/profile-a-l/exiftool.profile.

Relates to #5365.
2022-09-17 09:32:08 -03:00
rusty-snake
8049562ef2 Remove shell none from profiles
Command: sed -i "/^shell none/d" etc/*/*

TODO:

```
etc/profile-a-l/beaker.profile:ignore shell none
etc/profile-a-l/default.profile:# shell none
etc/profile-a-l/fdns.profile:#shell none
etc/profile-a-l/gnome-nettool.profile:#shell none
etc/profile-a-l/jitsi-meet-desktop.profile:ignore shell none
etc/profile-m-z/pidgin.profile:# shell none
etc/profile-m-z/rocketchat.profile:ignore shell none
etc/profile-m-z/server.profile:# shell none
etc/templates/profile.template:#   OPTIONS (caps*, net*, no*, protocol, seccomp*, shell none, tracelog)
etc/templates/profile.template:#shell none
```

- manpage
- RELNOTES
- fbuilder
2022-06-19 20:53:39 +02:00
netblue30
50ff078c9d profile checks 2022-02-03 10:01:53 -05:00
netblue30
d11a62564d fix map view in geeqie 2022-02-03 09:32:15 -05:00
rusty-snake
ca8603c09d
Move disable-passwordmgr.inc into disable-common.inc/disable-programs.inc (#4461)
See #4454
2021-08-12 17:25:47 +00:00
Kelvin M. Klann
f43382f1e9 Revert "move whitelist/blacklist to allow/deny"
This reverts commit fe0f975f44.

Note: This only reverts the changes from etc.

The 4 aliases introduced on commit 45f2ba544 are mere, well, aliases.
That is, they fail to address the different usability problems discussed
on [#3447][3447] and in fact only make things more confusing (as has
already been mentioned on [this][4379] and later comments).  The main
reason is that the aliases do not meaningfully map to the original
commands.  For example, the commands from each pair below seem like they
would do the exact same thing:

* `allow` and `nodeny`
* `deny` and `noallow`

Additionally, if these aliases are not the final commands, but only a
test/work-in-progress, then keeping the wide-scale search/replace
changes made on commit fe0f975f4 would only serve to cause confusion, as
users of firejail-git, contributors and downstream projects might start
changing the commands used on their profiles, only to later have to
change them again, potentially to completely different commands.

The sooner this is undone the better, as (besides the above reasons) the
more profile changes there are between the original commit and the
revert, the harder it is to e.g.: `git diff` versions of files across
the following revision ranges: before the commit, after the commit but
before the revert and after the revert.  Note: This is still the case
even if a commit is [ignored by `git blame`][4390].

So let us revert fe0f975f4 and only reapply similar large-scale changes
once we have discussed and settled on better commands.

How the revert was applied: Despite using the auto-generated message
from `git revert`, to ensure correctness and to avoid conflicts the
changes were reverted in different steps: Firstly, revert the files
which can be safely reverted directly ("filestorevert"):

    # Find out which files have been changed on fe0f975f44, but have not
    # been changed afterwards and list them on "filestorevert"
    git show --pretty='' --name-only fe0f975f44 -- etc | LC_ALL=C sort >allfiles
    git diff --name-only fe0f975f44..master -- etc | LC_ALL=C sort >filestoignore
    comm -2 -3 allfiles filestoignore >filestorevert

    # Note: There are 3 extra files on filestoignore because they were
    # added after commit fe0f975f44
    wc -l allfiles filestoignore filestorevert | head -n 3
    #   797 allfiles
    #     8 filestoignore
    #   792 filestorevert

    # Automatically revert files in "filestorevert"
    # See https://stackoverflow.com/a/23401018/10095231
    tr '\n' '\000' <filestorevert | xargs -0 git show fe0f975f44 -- |
    git apply --reverse

    printf 'Total files reverted:\n'
    git diff --name-only | wc -l
    # 792

Secondly, do some search/replace on the rest:

    tr '\n' '\000' <filestoignore | xargs -0 sed -i.bak \
      -e 's/allow  /whitelist /' -e 's/noallow  /nowhitelist /' \
      -e 's/deny  /blacklist /' -e 's/nodeny  /noblacklist /' \
      -e 's/deny-nolog  /blacklist-nolog /'

    find etc -name '*.bak' -print0 | xargs -0 rm

Thirdly, verify the result.  The following command shows the difference
between all the changes in etc from before fe0f975f44 and this commit
(inclusive):

    git diff fe0f975f44~1 -- etc

From the output, it looks like all alias changes are fully reverted and
that the other changes to etc (from after fe0f975f44) remain, so the
revert seems to be done correctly.

[3447]: https://github.com/netblue30/firejail/issues/3447
[4379]: https://github.com/netblue30/firejail/issues/4379#issuecomment-876460222
[4390]: https://github.com/netblue30/firejail/issues/4390
2021-07-18 20:39:14 -03:00
netblue30
fe0f975f44 move whitelist/blacklist to allow/deny 2021-07-05 07:23:31 -04:00
rusty-snake
0cee0ba5a0 Add noinput to all profiles with private-dev 2021-05-05 06:03:18 +00:00
netblue30
018d75775e reorganize github etc directory 2020-04-21 08:24:28 -04:00
Renamed from etc/geeqie.profile (Browse further)