mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[PR #1489] [MERGED] profile fixes and enhancements #3991
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#3991
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
📋 Pull Request Information
Original PR: https://github.com/netblue30/firejail/pull/1489
Author: @smitsohu
Created: 8/22/2017
Status: ✅ Merged
Merged: 8/23/2017
Merged by: @netblue30
Base:
master← Head:profilefixes📝 Commits (3)
f12c7afvarious profile fixes3388347comment private-etc8ecf31charmonize vlc and cvlc📊 Changes
25 files changed (+82 additions, -20 deletions)
View changed files
📝
etc/atril.profile(+8 -1)📝
etc/audacious.profile(+3 -0)📝
etc/audacity.profile(+1 -0)📝
etc/cvlc.profile(+5 -2)📝
etc/engrampa.profile(+6 -1)📝
etc/eog.profile(+1 -1)📝
etc/eom.profile(+4 -0)📝
etc/file-roller.profile(+1 -1)📝
etc/fossamail.profile(+2 -3)📝
etc/gedit.profile(+2 -1)📝
etc/goobox.profile(+1 -1)📝
etc/handbrake.profile(+0 -1)📝
etc/konversation.profile(+1 -0)📝
etc/mediathekview.profile(+3 -0)📝
etc/pluma.profile(+8 -1)📝
etc/qpdfview.profile(+3 -0)📝
etc/scribus.profile(+1 -0)📝
etc/simple-scan.profile(+1 -1)📝
etc/skanlite.profile(+1 -1)📝
etc/vlc.profile(+2 -0)...and 5 more files
📄 Description
net nonemakes the settings of various programs immutable, which is both a bug and a feature (dconf isolation). This pull request would make the feature opt-in. If we instead leave it as it is now, maybe we should at least put a comment in the profiles.memory-deny-write-executeto audacious, audacity, qpdfview. As it seems to work for some, may I also propose putting this option back (but commented) in the vlc profile?novideoin skanlite, simple-scan profiles. Apparently these scanning tools can make snapshots with the webcam, too.nodvd,notvoptions🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.