[PR #1489] [MERGED] profile fixes and enhancements #3991

Closed
opened 2026-05-05 10:11:43 -06:00 by gitea-mirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/1489
Author: @smitsohu
Created: 8/22/2017
Status: Merged
Merged: 8/23/2017
Merged by: @netblue30

Base: masterHead: profilefixes


📝 Commits (3)

📊 Changes

25 files changed (+82 additions, -20 deletions)

View changed files

📝 etc/atril.profile (+8 -1)
📝 etc/audacious.profile (+3 -0)
📝 etc/audacity.profile (+1 -0)
📝 etc/cvlc.profile (+5 -2)
📝 etc/engrampa.profile (+6 -1)
📝 etc/eog.profile (+1 -1)
📝 etc/eom.profile (+4 -0)
📝 etc/file-roller.profile (+1 -1)
📝 etc/fossamail.profile (+2 -3)
📝 etc/gedit.profile (+2 -1)
📝 etc/goobox.profile (+1 -1)
📝 etc/handbrake.profile (+0 -1)
📝 etc/konversation.profile (+1 -0)
📝 etc/mediathekview.profile (+3 -0)
📝 etc/pluma.profile (+8 -1)
📝 etc/qpdfview.profile (+3 -0)
📝 etc/scribus.profile (+1 -0)
📝 etc/simple-scan.profile (+1 -1)
📝 etc/skanlite.profile (+1 -1)
📝 etc/vlc.profile (+2 -0)

...and 5 more files

📄 Description

  • an attempt to bring the forks gedit-pluma-xed, evince-atril-xreader, eog-eom-xviewer, totem-xplayer, engrampa-file-roller to the same level.
    net none makes the settings of various programs immutable, which is both a bug and a feature (dconf isolation). This pull request would make the feature opt-in. If we instead leave it as it is now, maybe we should at least put a comment in the profiles.
  • added memory-deny-write-execute to audacious, audacity, qpdfview. As it seems to work for some, may I also propose putting this option back (but commented) in the vlc profile?
  • commented recently added novideo in skanlite, simple-scan profiles. Apparently these scanning tools can make snapshots with the webcam, too.
  • fixed some more nodvd, notv options
  • EDIT: vlc and cvlc profiles are harmonized again.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/1489 **Author:** [@smitsohu](https://github.com/smitsohu) **Created:** 8/22/2017 **Status:** ✅ Merged **Merged:** 8/23/2017 **Merged by:** [@netblue30](https://github.com/netblue30) **Base:** `master` ← **Head:** `profilefixes` --- ### 📝 Commits (3) - [`f12c7af`](https://github.com/netblue30/firejail/commit/f12c7af205ddd6c0d75587702f01688dc62a86c5) various profile fixes - [`3388347`](https://github.com/netblue30/firejail/commit/33883473268a1966279c76dc53fe7e3c2b5d8f50) comment private-etc - [`8ecf31c`](https://github.com/netblue30/firejail/commit/8ecf31ca78cd7b600158a19b2b93db21e53d54e1) harmonize vlc and cvlc ### 📊 Changes **25 files changed** (+82 additions, -20 deletions) <details> <summary>View changed files</summary> 📝 `etc/atril.profile` (+8 -1) 📝 `etc/audacious.profile` (+3 -0) 📝 `etc/audacity.profile` (+1 -0) 📝 `etc/cvlc.profile` (+5 -2) 📝 `etc/engrampa.profile` (+6 -1) 📝 `etc/eog.profile` (+1 -1) 📝 `etc/eom.profile` (+4 -0) 📝 `etc/file-roller.profile` (+1 -1) 📝 `etc/fossamail.profile` (+2 -3) 📝 `etc/gedit.profile` (+2 -1) 📝 `etc/goobox.profile` (+1 -1) 📝 `etc/handbrake.profile` (+0 -1) 📝 `etc/konversation.profile` (+1 -0) 📝 `etc/mediathekview.profile` (+3 -0) 📝 `etc/pluma.profile` (+8 -1) 📝 `etc/qpdfview.profile` (+3 -0) 📝 `etc/scribus.profile` (+1 -0) 📝 `etc/simple-scan.profile` (+1 -1) 📝 `etc/skanlite.profile` (+1 -1) 📝 `etc/vlc.profile` (+2 -0) _...and 5 more files_ </details> ### 📄 Description - an attempt to bring the forks gedit-pluma-xed, evince-atril-xreader, eog-eom-xviewer, totem-xplayer, engrampa-file-roller to the same level. `net none` makes the settings of various programs immutable, which is both a bug and a feature (dconf isolation). This pull request would make the feature opt-in. If we instead leave it as it is now, maybe we should at least put a comment in the profiles. - added `memory-deny-write-execute` to audacious, audacity, qpdfview. As it seems to work for some, may I also propose putting this option back (but commented) in the vlc profile? - commented recently added `novideo` in skanlite, simple-scan profiles. Apparently these scanning tools can make snapshots with the webcam, too. - fixed some more `nodvd`, `notv` options - EDIT: vlc and cvlc profiles are harmonized again. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
gitea-mirror 2026-05-05 10:11:43 -06:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3991
No description provided.