firejail/etc/profile-a-l/discord-common.profile
haarp 95998519dd
discord-common.profile: harden & allow notifications (#5978)
What works:
- Basic functionality
- Receiving notifications
- Voice communication
- Watching streams

What wasn't tested:
- Casting streams
- Opening links
- Tracking/displaying "current activity" as status message
- Apparmor

Notes:
- Discord tries to access system dbus (`[ERROR:bus.cc(399)] Failed to
  connect to the bus: Failed to connect to socket
  /run/firejail/mnt/dbus/system: Permission denied`). I don't know what
  business it has with the system dbus, and didn't notice any problems
  due to that.
- I had one crash after 2h of watching a stream. Probably unrelated.

Fixes #5971.
2023-09-06 06:09:24 +00:00

29 lines
763 B
Text

# Firejail profile for discord
# This file is overwritten after every install/update
# Persistent local customizations
include discord-common.local
# Persistent global definitions
# added by caller profile
#include globals.local
# Disabled until someone reported positive feedback
ignore apparmor
ignore noexec ${HOME}
ignore novideo
whitelist ${HOME}/.config/BetterDiscord
whitelist ${HOME}/.local/share/betterdiscordctl
private-bin awk,bash,cut,echo,egrep,electron,electron[0-9],electron[0-9][0-9],fish,grep,head,sed,sh,tclsh,tr,which,xdg-mime,xdg-open,zsh
private-etc @tls-ca
# allow D-Bus notifications
dbus-user filter
dbus-user.talk org.freedesktop.Notifications
ignore dbus-user none
join-or-start discord
# Redirect
include electron-common.profile