Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add new profile: plv #3410

Merged
merged 5 commits into from
May 11, 2020
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion RELNOTES
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ firejail (0.9.63) baseline; urgency=low
* new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
* new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
* new profiles: swell-foop, fdns, five-or-more, steam-runtime, jitsi-meet-desktop
* new profiles: nicontine
* new profiles: nicotine, plv
-- netblue30 <netblue30@yahoo.com> Tue, 21 Apr 2020 08:00:00 -0500

firejail (0.9.62) baseline; urgency=low
Expand Down
1 change: 1 addition & 0 deletions etc/inc/disable-programs.inc
Original file line number Diff line number Diff line change
Expand Up @@ -108,6 +108,7 @@ blacklist ${HOME}/.config/MuseScore
blacklist ${HOME}/.config/MusicBrainz
blacklist ${HOME}/.config/Nathan Osman
blacklist ${HOME}/.config/Nylas Mail
blacklist ${HOME}/.config/PacmanLogViewer
blacklist ${HOME}/.config/PBE
blacklist ${HOME}/.config/Philipp Schmieder
blacklist ${HOME}/.config/QGIS
Expand Down
59 changes: 59 additions & 0 deletions etc/profile-m-z/plv.profile
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
# Firejail profile for plv
# Description: Inspect pacman log files
# This file is overwritten after every install/update
# Persistent local customizations
include plv.local
# Persistent global definitions
include globals.local

noblacklist ${HOME}/.config/PacmanLogViewer

include disable-common.inc
include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-passwdmgr.inc
include disable-programs.inc
include disable-xdg.inc

mkdir ${HOME}/.config/PacmanLogViewer
whitelist ${HOME}/.config/PacmanLogViewer
whitelist /var/log/pacman*
include whitelist-common.inc
include whitelist-usr-share-common.inc
include whitelist-runuser-common.inc
include whitelist-var-common.inc

apparmor
caps.drop all
ipc-namespace
machine-id
net none
no3d
nodvd
nogroups
nonewprivs
noroot
nosound
notv
nou2f
novideo
seccomp
shell none
tracelog

disable-mnt
private-bin plv
private-cache
private-dev
private-etc alternatives,fonts
private-opt none
private-tmp
writable-var-log

dbus-user none
dbus-system none

#memory-deny-write-execute - breaks opening file-chooser
read-only ${HOME}
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

read-write ${HOME}/.config/PacmanLogViewer?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice catch, forgot about the write access to its config. Thanks @rusty-snake!

read-write ${HOME}/.config/PacmanLogViewer
1 change: 1 addition & 0 deletions src/firecfg/firecfg.config
Original file line number Diff line number Diff line change
Expand Up @@ -549,6 +549,7 @@ planmaker18
planmaker18free
playonlinux
pluma
plv
pngquant
polari
ppsspp
Expand Down