diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index 996f0257791..4336999186e 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -687,6 +687,7 @@ blacklist ${HOME}/.mcabber blacklist ${HOME}/.mcabberrc blacklist ${HOME}/.mediathek3 blacklist ${HOME}/.megaglest +blacklist ${HOME}/.minecraft blacklist ${HOME}/.minetest blacklist ${HOME}/.mirrormagic blacklist ${HOME}/.moc diff --git a/etc/profile-m-z/minecraft-launcher.profile b/etc/profile-m-z/minecraft-launcher.profile new file mode 100644 index 00000000000..8c7d18c58d0 --- /dev/null +++ b/etc/profile-m-z/minecraft-launcher.profile @@ -0,0 +1,58 @@ +# Firejail profile for minecraft-launcher +# Description: Official Minecraft launcher from Mojang +# This file is overwritten after every install/update +# Persistent local customizations +include minecraft-launcher.local +# Persistent global definitions +include globals.local + +# On some distros executable may be in '/opt/minecraft-launcher/', if so, run 'firejail /opt/minecraft-launcher/minecraft-launcher' to start it. + +ignore noexec ${HOME} + +noblacklist ${HOME}/.minecraft + +include allow-java.inc + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.minecraft +whitelist ${HOME}/.minecraft +include whitelist-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +netfilter +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +novideo +protocol unix,inet,inet6,netlink +seccomp +shell none +tracelog + +disable-mnt +private-bin java,java-config,minecraft-launcher +private-cache +private-dev +# If multiplayer or realms break add your own java folder from /etc or comment the line below. +private-etc alternatives,asound.conf,ati,ca-certificates,crypto-policies,drirc,fonts,group,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,java-10-openjdk,java-11-openjdk,java-12-openjdk,java-13-openjdk,java-14-openjdk,java-7-openjdk,java-8-openjdk,java-9-openjdk,java-openjdk,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,login.defs,machine-id,mime.types,nvidia,passwd,pki,pulse,resolv.conf,selinux,services,ssl,timezone,X11,xdg +private-opt minecraft-launcher +private-tmp + +dbus-user none +dbus-system none diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 07887a39661..e9ecab92529 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -453,6 +453,7 @@ meteo-qt midori min mindless +minecraft-launcher minetest mirrormagic mocp