Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Librewolf profile and Add Sway profile #4164

Merged
merged 24 commits into from
Apr 19, 2021
Merged
Show file tree
Hide file tree
Changes from 4 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions etc/inc/disable-common.inc
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,7 @@ blacklist ${HOME}/.config/autostart
blacklist ${HOME}/.config/autostart-scripts
blacklist ${HOME}/.config/awesome
blacklist ${HOME}/.config/i3
blacklist ${HOME}/.config/sway
blacklist ${HOME}/.config/lxsession/LXDE/autostart
blacklist ${HOME}/.config/openbox
blacklist ${HOME}/.config/plasma-workspace
Expand Down
6 changes: 6 additions & 0 deletions etc/profile-a-l/librewolf.profile
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,12 @@ whitelist ${HOME}/.librewolf
#noblacklist ${HOME}/.mozilla
#whitelist ${HOME}/.mozilla

whitelist /usr/share/doc
whitelist /usr/share/gnome-shell/search-providers/firefox-search-provider.ini
whitelist /usr/share/gtk-doc/html
whitelist /usr/share/mozilla
whitelist /usr/share/webext

# librewolf requires a shell to launch on Arch. We can possibly remove sh though.
#private-bin bash,dbus-launch,dbus-send,env,librewolf,python*,sh,which
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
#private-bin bash,dbus-launch,dbus-send,env,librewolf,python*,sh,which
#private-bin bash,dbus-launch,dbus-send,env,librewolf,sh,which

Copy link
Contributor Author

@vnepogodin vnepogodin Apr 18, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've had added before but it can't merge changes
1d8c94c

btw tested

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

After a rebase (unlike a merge of master) it should work w/o conflicting. Rebasing and squashing some of the commits makes sense anyway if you look at the history. So if you can do an interactive rebase.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done 😃

# private-etc must first be enabled in firefox-common.profile
Expand Down
19 changes: 19 additions & 0 deletions etc/profile-a-l/sway.profile
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
# Firejail profile for Sway
# Description: i3-compatible Wayland compositor
# This file is overwritten after every install/update
# Persistent local customizations
include sway.local
# Persistent global definitions
include globals.local

# all applications started in sway will run in this profile
noblacklist ${HOME}/.config/sway
rusty-snake marked this conversation as resolved.
Show resolved Hide resolved
# sway uses ~/.config/i3 as fallback if there is no ~/.config/sway
noblacklist ${HOME}/.config/i3
include disable-common.inc

caps.drop all
netfilter
noroot
protocol unix,inet,inet6
seccomp