[PR #6687] [MERGED] profiles: split commands that increase/reduce access #6124

New issue

Closed

opened 2026-05-05 10:51:12 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 10:51:12 -06:00

Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/6687
Author: @kmk3
Created: 3/23/2025
Status: ✅ Merged
Merged: 3/30/2025
Merged by: @kmk3

Base: master ← Head: template-split-res-sections

📝 Commits (3)

c90f460 profiles: split commands that increase/reduce access (template)
21bb8db profiles: add missing allow-/keep- commands to profile.template
fe64b62 profiles: split commands that increase/reduce access (profiles)

📊 Changes

46 files changed (+119 additions, -64 deletions)

View changed files

📝 etc/profile-a-l/alpine.profile (+3 -2)
📝 etc/profile-a-l/audacity.profile (+1 -0)
📝 etc/profile-a-l/dnsmasq.profile (+2 -1)
📝 etc/profile-a-l/email-common.profile (+4 -3)
📝 etc/profile-a-l/evolution.profile (+2 -1)
📝 etc/profile-a-l/file-manager-common.profile (+1 -0)
📝 etc/profile-a-l/freshclam.profile (+3 -2)
📝 etc/profile-a-l/gajim.profile (+2 -1)
📝 etc/profile-a-l/geki2.profile (+2 -1)
📝 etc/profile-a-l/geki3.profile (+2 -1)
📝 etc/profile-a-l/git-cola.profile (+2 -1)
📝 etc/profile-a-l/gmpc.profile (+2 -1)
📝 etc/profile-a-l/gnome-schedule.profile (+2 -1)
📝 etc/profile-a-l/kmail.profile (+3 -2)
📝 etc/profile-a-l/kopete.profile (+2 -1)
📝 etc/profile-a-l/kube.profile (+2 -1)
📝 etc/profile-a-l/lbreakouthd.profile (+2 -1)
📝 etc/profile-a-l/less.profile (+2 -1)
📝 etc/profile-a-l/lutris.profile (+2 -1)
📝 etc/profile-m-z/mutt.profile (+3 -2)

...and 26 more files

📄 Description

This should clarify which commands do what (increase/reduce access) and
also make etc/templates/profile.template more consistent with
etc/profile-m-z/noprofile.profile.

Command used to search for the relevant profiles:

git grep -El 'allow-debuggers|allusers|keep-|writable-' -- etc

This is a follow-up to #6660.

See also the discussion at [1].

[1] https://github.com/netblue30/firejail/pull/6660#discussion_r1975233984

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/6687 **Author:** [@kmk3](https://github.com/kmk3) **Created:** 3/23/2025 **Status:** ✅ Merged **Merged:** 3/30/2025 **Merged by:** [@kmk3](https://github.com/kmk3) **Base:** `master` ← **Head:** `template-split-res-sections` --- ### 📝 Commits (3) - [`c90f460`](https://github.com/netblue30/firejail/commit/c90f4600e4bc20cb25e95da1083de0853e09758e) profiles: split commands that increase/reduce access (template) - [`21bb8db`](https://github.com/netblue30/firejail/commit/21bb8dbe96cd767cd4d0d7efe589eef2750bd425) profiles: add missing allow-/keep- commands to profile.template - [`fe64b62`](https://github.com/netblue30/firejail/commit/fe64b62f21575a569267be6dbfdf4a0fbd5f83f0) profiles: split commands that increase/reduce access (profiles) ### 📊 Changes **46 files changed** (+119 additions, -64 deletions) <details> <summary>View changed files</summary> 📝 `etc/profile-a-l/alpine.profile` (+3 -2) 📝 `etc/profile-a-l/audacity.profile` (+1 -0) 📝 `etc/profile-a-l/dnsmasq.profile` (+2 -1) 📝 `etc/profile-a-l/email-common.profile` (+4 -3) 📝 `etc/profile-a-l/evolution.profile` (+2 -1) 📝 `etc/profile-a-l/file-manager-common.profile` (+1 -0) 📝 `etc/profile-a-l/freshclam.profile` (+3 -2) 📝 `etc/profile-a-l/gajim.profile` (+2 -1) 📝 `etc/profile-a-l/geki2.profile` (+2 -1) 📝 `etc/profile-a-l/geki3.profile` (+2 -1) 📝 `etc/profile-a-l/git-cola.profile` (+2 -1) 📝 `etc/profile-a-l/gmpc.profile` (+2 -1) 📝 `etc/profile-a-l/gnome-schedule.profile` (+2 -1) 📝 `etc/profile-a-l/kmail.profile` (+3 -2) 📝 `etc/profile-a-l/kopete.profile` (+2 -1) 📝 `etc/profile-a-l/kube.profile` (+2 -1) 📝 `etc/profile-a-l/lbreakouthd.profile` (+2 -1) 📝 `etc/profile-a-l/less.profile` (+2 -1) 📝 `etc/profile-a-l/lutris.profile` (+2 -1) 📝 `etc/profile-m-z/mutt.profile` (+3 -2) _...and 26 more files_ </details> ### 📄 Description This should clarify which commands do what (increase/reduce access) and also make etc/templates/profile.template more consistent with etc/profile-m-z/noprofile.profile. Command used to search for the relevant profiles: git grep -El 'allow-debuggers|allusers|keep-|writable-' -- etc This is a follow-up to #6660. See also the discussion at [1]. [1] https://github.com/netblue30/firejail/pull/6660#discussion_r1975233984 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

gitea-mirror

2026-05-05 10:51:12 -06:00

closed this issue
added the
pull-request
label

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#6124

No description provided.

Rows
Columns