mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-21 06:45:29 -06:00
1759055304
* profiles: drop private-opt (existing whitelist) * profiles: replace private-opt with whitelist In most profiles. Kept private-opt for enpass (~85MB), mate-dictionary (<20MB), minecraft-launcher (~1.6MB) and ppsspp (~44MB). The only app I couldn't check: xmr-stak. * docs: note potential issues with private-opt
41 lines
1.1 KiB
Text
41 lines
1.1 KiB
Text
# Firejail profile for linuxqq
|
|
# Description: IM client based on Electron
|
|
# This file is overwritten after every install/update
|
|
# Persistent local customizations
|
|
include linuxqq.local
|
|
# Persistent global definitions
|
|
include globals.local
|
|
|
|
noblacklist ${HOME}/.config/QQ
|
|
noblacklist ${HOME}/.mozilla
|
|
|
|
include allow-bin-sh.inc
|
|
|
|
include disable-shell.inc
|
|
|
|
mkdir ${HOME}/.config/QQ
|
|
whitelist ${HOME}/.config/QQ
|
|
whitelist ${HOME}/.mozilla/firefox/profiles.ini
|
|
whitelist ${DESKTOP}
|
|
whitelist /opt/QQ
|
|
|
|
ignore apparmor
|
|
noprinters
|
|
|
|
# If you don't need/want to save anything to disk you can add `private` to your linuxqq.local.
|
|
#private
|
|
private-etc @tls-ca,@x11,host.conf,os-release
|
|
|
|
dbus-user filter
|
|
dbus-user.talk org.freedesktop.Notifications
|
|
dbus-user.talk org.freedesktop.portal.Desktop
|
|
dbus-user.talk org.freedesktop.portal.Fcitx
|
|
dbus-user.talk org.freedesktop.portal.IBus
|
|
dbus-user.talk org.freedesktop.ScreenSaver
|
|
dbus-user.talk org.gnome.Mutter.IdleMonitor
|
|
?ALLOW_TRAY: dbus-user.talk org.kde.StatusNotifierWatcher
|
|
dbus-user.talk org.mozilla.*
|
|
ignore dbus-user none
|
|
|
|
# Redirect
|
|
include electron-common.profile
|