[PR #1156] [MERGED] profile enhancements #3861

New issue

Closed

opened 2026-05-05 10:09:14 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 10:09:14 -06:00

Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/1156
Author: @SYN-cook
Created: 3/24/2017
Status: ✅ Merged
Merged: 3/26/2017
Merged by: @netblue30

Base: master ← Head: master

📝 Commits (9)

a83a3a9 update gwenview.profile
88f5bd7 harden Audacious
f5eb0b5 Update scribus.profile
408d7c6 update disable-programs.inc (audacious, gwenview, scribus)
9d0a19b fix ~/.pki unblacklisting in browser profiles
a7660de redundant with disable-passwdmgr.inc
867eefd move ~/.pki blacklist to disable-common.inc
02b893d move ~/.pki blacklist to disable-common.inc
f1b5b76 undo netlink addition

📊 Changes

6 files changed (+23 additions, -4 deletions)

View changed files

📝 etc/audacious.profile (+8 -0)
📝 etc/disable-common.inc (+1 -0)
📝 etc/disable-passwdmgr.inc (+0 -1)
📝 etc/disable-programs.inc (+4 -1)
📝 etc/gwenview.profile (+4 -2)
📝 etc/scribus.profile (+6 -0)

📄 Description

harden audacious profile
added KFileDialog history to blacklist (~/.config/Audaciousrc, ~/.config/scribusrc)
added pdf reader support to scribus profile (feature is not yet available in scribus stable though)
netlink added to gwenview profile.
EDIT/REPEATED UPDATE: during startup there is a complaint UdevQt: unable to create udev monitor connection, which disappears when the netlink protocol is allowed.
Google shows this string is in the sources of solid, and apparently it is printed when monitoring of the kernel uevent netlink socket fails. Btw, other programs that depend on the solid library and show exactly the same behavior include Dolphin and Amarok.
However, here it looks like solid is used only to display more precise device information and nicer icons in gwenviews import dialogue, which has been disabled anyways for gwenview5 (but will come back in the future).
The sources also contain two device actions for automatically opening the import dialogue, e.g. when a camera is plugged in, but as far as I understand device actions hide all that netlink stuff from the target application. Guess we don't necessarily need netlink then :) I'll remove it again.
nosound removes the sound from video previews in gwenview
added gwenview KDE5 configuration files
~/.pki blacklisting moved from disable-programs.inc to disable-common.inc (it's the best place I found for it, although "top secret" doesn't really describe what it is)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/1156 **Author:** [@SYN-cook](https://github.com/SYN-cook) **Created:** 3/24/2017 **Status:** ✅ Merged **Merged:** 3/26/2017 **Merged by:** [@netblue30](https://github.com/netblue30) **Base:** `master` ← **Head:** `master` --- ### 📝 Commits (9) - [`a83a3a9`](https://github.com/netblue30/firejail/commit/a83a3a906ead5291a0ad9ca1db1234eda6a43d50) update gwenview.profile - [`88f5bd7`](https://github.com/netblue30/firejail/commit/88f5bd7e28dc63c9122cb1ff8d15d2eae9c4bd79) harden Audacious - [`f5eb0b5`](https://github.com/netblue30/firejail/commit/f5eb0b5df373f0d45bbb9e655de957c3fccd8cbe) Update scribus.profile - [`408d7c6`](https://github.com/netblue30/firejail/commit/408d7c65c2b8429eaf40c4edb12d6b20a14115fc) update disable-programs.inc (audacious, gwenview, scribus) - [`9d0a19b`](https://github.com/netblue30/firejail/commit/9d0a19b7818a67e34f716d45bcb4ccf06e45ae96) fix ~/.pki unblacklisting in browser profiles - [`a7660de`](https://github.com/netblue30/firejail/commit/a7660de8bcabd5bf3dd8aacaf14029436278a024) redundant with disable-passwdmgr.inc - [`867eefd`](https://github.com/netblue30/firejail/commit/867eefd7223445fb68d94e994dcacb426a3a327a) move ~/.pki blacklist to disable-common.inc - [`02b893d`](https://github.com/netblue30/firejail/commit/02b893dc12488a71980596e76b992d247610e0f1) move ~/.pki blacklist to disable-common.inc - [`f1b5b76`](https://github.com/netblue30/firejail/commit/f1b5b764b25f063eea68fc95982dc3b5d674f50e) undo netlink addition ### 📊 Changes **6 files changed** (+23 additions, -4 deletions) <details> <summary>View changed files</summary> 📝 `etc/audacious.profile` (+8 -0) 📝 `etc/disable-common.inc` (+1 -0) 📝 `etc/disable-passwdmgr.inc` (+0 -1) 📝 `etc/disable-programs.inc` (+4 -1) 📝 `etc/gwenview.profile` (+4 -2) 📝 `etc/scribus.profile` (+6 -0) </details> ### 📄 Description - harden audacious profile - added KFileDialog history to blacklist (~/.config/Audaciousrc, ~/.config/scribusrc) - added pdf reader support to scribus profile (feature is not yet available in scribus stable though) - `netlink` added to gwenview profile. **EDIT/REPEATED UPDATE:** during startup there is a complaint `UdevQt: unable to create udev monitor connection`, which disappears when the netlink protocol is allowed. Google shows this string is in the [sources](https://github.com/KDE/solid/blob/master/src/solid/devices/backends/shared/udevqtclient.cpp) of [solid](https://techbase.kde.org/Development/Architecture/KDE4/Solid), and apparently it is printed when monitoring of the kernel uevent netlink socket fails. Btw, other programs that depend on the solid library and show exactly the same behavior include Dolphin and Amarok. However, [here](https://cgit.kde.org/gwenview.git/commit/?id=8c6252178b6376d593f8645bae2e8156d2e009e3&context=1&ignorews=0&dt=0) it looks like solid is used only to display more precise device information and nicer icons in gwenviews import dialogue, which has been disabled anyways for gwenview5 (but will come back in the future). The sources also contain two device actions for automatically opening the import dialogue, e.g. when a camera is plugged in, but as far as I understand device actions hide all that netlink stuff from the target application. Guess we don't necessarily need netlink then :) I'll remove it again. - `nosound` removes the sound from video previews in gwenview - added gwenview KDE5 configuration files - ~/.pki blacklisting moved from disable-programs.inc to disable-common.inc (it's the best place I found for it, although "top secret" doesn't really describe what it is) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

gitea-mirror

2026-05-05 10:09:14 -06:00

closed this issue
added the
pull-request
label

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3861

No description provided.

Rows
Columns