diff options
Diffstat (limited to '.config/firejail')
| -rw-r--r-- | .config/firejail/calibre.local | 9 | ||||
| -rw-r--r-- | .config/firejail/default.local | 27 | ||||
| -rw-r--r-- | .config/firejail/discord.local | 40 | ||||
| -rw-r--r-- | .config/firejail/electron.local | 1 | ||||
| -rw-r--r-- | .config/firejail/firefox.local | 6 | ||||
| -rw-r--r-- | .config/firejail/gimp.local | 3 | ||||
| -rw-r--r-- | .config/firejail/kdenlive.local | 9 | ||||
| -rw-r--r-- | .config/firejail/libva.inc | 2 | ||||
| -rw-r--r-- | .config/firejail/lossless-cut.local | 2 | ||||
| -rw-r--r-- | .config/firejail/obs.local | 6 | ||||
| -rw-r--r-- | .config/firejail/osu.profile | 6 | ||||
| -rw-r--r-- | .config/firejail/portal.inc | 10 | ||||
| -rw-r--r-- | .config/firejail/qtwlfix.inc | 9 | ||||
| -rw-r--r-- | .config/firejail/slack.local | 12 | ||||
| -rw-r--r-- | .config/firejail/spotify.local | 8 | ||||
| -rw-r--r-- | .config/firejail/telegram.local | 8 | ||||
| -rw-r--r-- | .config/firejail/tor-browser.local | 2 | ||||
| -rw-r--r-- | .config/firejail/x11fy.inc | 10 | ||||
| -rw-r--r-- | .config/firejail/zoom.local | 11 |
19 files changed, 0 insertions, 181 deletions
diff --git a/.config/firejail/calibre.local b/.config/firejail/calibre.local deleted file mode 100644 index 46b4dc2..0000000 --- a/.config/firejail/calibre.local +++ /dev/null @@ -1,9 +0,0 @@ - -include qtwlfix.inc -#include x11fy.inc - -whitelist ${HOME}/Documents/bookcloud3 -whitelist ${HOME}/Downloads/inbox -whitelist ${HOME}/.config/calibre - -ignore protocol unix,inet,inet6,netlink diff --git a/.config/firejail/default.local b/.config/firejail/default.local deleted file mode 100644 index bfade50..0000000 --- a/.config/firejail/default.local +++ /dev/null @@ -1,27 +0,0 @@ - -apparmor -machine-id -net none - -no3d -nodvd -nogroups -nosound -notv -nou2f -novideo - -shell none -tracelog - -disable-mnt -private -private-cache -private-dev - -private-etc alternatives,fonts,machine-id -private-opt none -private-tmp - -dbus-user none -dbus-system none diff --git a/.config/firejail/discord.local b/.config/firejail/discord.local deleted file mode 100644 index 15b3ef9..0000000 --- a/.config/firejail/discord.local +++ /dev/null @@ -1,40 +0,0 @@ - -include x11fy.inc - -dbus-user filter -dbus-user.talk org.freedesktop.Notifications -dbus-user.talk org.freedesktop.portal.* -dbus-system none - -#ignore nogroups - -# we want webcam -ignore novideo -# can't do anything without network -ignore net none -# TODO is this needed? -# ignore memory-deny-write-execute - -#ignore apparmor -#ignore noexec ${HOME} - -whitelist ${HOME}/.config/discord -whitelist ${HOME}/.gtkrc-2.0 -whitelist ${HOME}/.themes -#whitelist ${DOWNLOADS} - -# appindicator breaks without this -# ignore private-tmp - -# hide a bunch of stuff -# blacklist /tmp/wl-copy* -# blacklist /tmp/nvim* -# blacklist /tmp/go-build* -# blacklist /tmp/gopls* -# blacklist /tmp/lua-language-server* -# blacklist /tmp/ssh* -# blacklist /tmp/waybar* -# blacklist /tmp/sway* -# blacklist /tmp/keepass* -# blacklist /tmp/fzf-interactive* - diff --git a/.config/firejail/electron.local b/.config/firejail/electron.local deleted file mode 100644 index d13f71a..0000000 --- a/.config/firejail/electron.local +++ /dev/null @@ -1 +0,0 @@ -include chromium-common-hardened.inc.profile diff --git a/.config/firejail/firefox.local b/.config/firejail/firefox.local deleted file mode 100644 index caf5469..0000000 --- a/.config/firejail/firefox.local +++ /dev/null @@ -1,6 +0,0 @@ - -ignore dbus-user none -dbus-user filter -dbus-user.talk org.freedesktop.Notifications -dbus-user.talk org.freedesktop.portal.* -dbus-system none diff --git a/.config/firejail/gimp.local b/.config/firejail/gimp.local deleted file mode 100644 index f9b29ce..0000000 --- a/.config/firejail/gimp.local +++ /dev/null @@ -1,3 +0,0 @@ - -whitelist /usr/lib64/* -env LD_PRELOAD=/usr/lib64/libwayland-client.so:/usr/lib64/libwayland-server.so:/usr/lib64/libwayland-cursor.so:/usr/lib64/libwayland-egl.so:/usr/lib64/libgdk-3.so:/usr/lib64/libgdk_pixbuf-2.0.so diff --git a/.config/firejail/kdenlive.local b/.config/firejail/kdenlive.local deleted file mode 100644 index 1191a73..0000000 --- a/.config/firejail/kdenlive.local +++ /dev/null @@ -1,9 +0,0 @@ - -include qtwlfix.inc -blacklist /usr/share/fonts/noto-emoji - -env QT_QPA_PLATFORM=xcb -ignore net none - -#whitelist /usr/lib64/* -#env LD_PRELOAD=/usr/lib64/libwayland-client.so:/usr/lib64/libwayland-egl.so:/usr/lib64/qt5/plugins/platforms/libqwayland-egl.so:/usr/lib64/qt5/plugins/wayland-shell-integration/libfullscreen-shell-v1.so:/usr/lib64/qt5/plugins/wayland-shell-integration/libxdg-shell.so:/usr/lib64/qt5/plugins/wayland-shell-integration/libxdg-shell-v5.so:/usr/lib64/qt5/plugins/wayland-shell-integration/libxdg-shell-v6.so:/usr/lib64/libQt5WaylandClient.so diff --git a/.config/firejail/libva.inc b/.config/firejail/libva.inc deleted file mode 100644 index eb58a15..0000000 --- a/.config/firejail/libva.inc +++ /dev/null @@ -1,2 +0,0 @@ - -env LIBVA_DRIVER_NAME=iHD diff --git a/.config/firejail/lossless-cut.local b/.config/firejail/lossless-cut.local deleted file mode 100644 index 351231f..0000000 --- a/.config/firejail/lossless-cut.local +++ /dev/null @@ -1,2 +0,0 @@ -include x11fy.inc -#include whitelist-runuser-common.inc diff --git a/.config/firejail/obs.local b/.config/firejail/obs.local deleted file mode 100644 index 7a9c9c7..0000000 --- a/.config/firejail/obs.local +++ /dev/null @@ -1,6 +0,0 @@ - -include qtwlfix.inc - -ignore dbus-user none -dbus-user filter -dbus-user.talk org.freedesktop.portal.* diff --git a/.config/firejail/osu.profile b/.config/firejail/osu.profile deleted file mode 100644 index afdb7e3..0000000 --- a/.config/firejail/osu.profile +++ /dev/null @@ -1,6 +0,0 @@ - -include whitelist-common.inc -include whitelist-runuser-common.inc - -whitelist ${HOME}/.cache/thumbnails -whitelist ${HOME}/.local/share/osu diff --git a/.config/firejail/portal.inc b/.config/firejail/portal.inc deleted file mode 100644 index 324cdc2..0000000 --- a/.config/firejail/portal.inc +++ /dev/null @@ -1,10 +0,0 @@ -ignore dbus-user none -dbus-user filter -dbus-user.talk org.freedesktop.Notifications -dbus-user.talk org.freedesktop.portal.* -dbus-system none - -# allow opening links via portal -whitelist ${HOME}/bin -ignore noexec ${HOME} -#private-bin gdbus,wl-copy,notify-send diff --git a/.config/firejail/qtwlfix.inc b/.config/firejail/qtwlfix.inc deleted file mode 100644 index 45dabbf..0000000 --- a/.config/firejail/qtwlfix.inc +++ /dev/null @@ -1,9 +0,0 @@ - -rmenv QT_WAYLAND_FORCE_DPI -rmenv QT_STYLE_OVERRIDE -rmenv QT_QPA_PLATFORMTHEME -rmenv QT_IM_MODULE -rmenv QT_QPA_PLATFORM - -env QT_QPA_PLATFORM=wayland -env QT_WAYLAND_DISABLE_WINDOWDECORATION=1 diff --git a/.config/firejail/slack.local b/.config/firejail/slack.local deleted file mode 100644 index 4bc95b2..0000000 --- a/.config/firejail/slack.local +++ /dev/null @@ -1,12 +0,0 @@ -include x11fy.inc - -# ignore dbus-user none -dbus-user filter -dbus-user.talk org.freedesktop.Notifications -dbus-user.talk org.freedesktop.portal.* -#dbus-system none - -# allow opening links via portal -whitelist ${HOME}/bin -ignore noexec ${HOME} -private-bin slack,gdbus diff --git a/.config/firejail/spotify.local b/.config/firejail/spotify.local deleted file mode 100644 index b412965..0000000 --- a/.config/firejail/spotify.local +++ /dev/null @@ -1,8 +0,0 @@ -include portal.inc -dbus-user.own org.mpris.MediaPlayer2.spotify - -include libva.inc -include qtwlfix.inc - -#ignore private-etc -ignore private-tmp diff --git a/.config/firejail/telegram.local b/.config/firejail/telegram.local deleted file mode 100644 index 20468f1..0000000 --- a/.config/firejail/telegram.local +++ /dev/null @@ -1,8 +0,0 @@ - -#rmenv QT_WAYLAND_FORCE_DPI -include portal.inc -include qtwlfix.inc -env QT_QPA_PLATFORMTHEME=gtk3 - -blacklist /usr/share/fonts/noto* -#private-bin telegram-desktop diff --git a/.config/firejail/tor-browser.local b/.config/firejail/tor-browser.local deleted file mode 100644 index 9d520b2..0000000 --- a/.config/firejail/tor-browser.local +++ /dev/null @@ -1,2 +0,0 @@ - -whitelist /opt/torbrowser diff --git a/.config/firejail/x11fy.inc b/.config/firejail/x11fy.inc deleted file mode 100644 index ea4e183..0000000 --- a/.config/firejail/x11fy.inc +++ /dev/null @@ -1,10 +0,0 @@ -rmenv GDK_BACKEND -rmenv CLUTTER_BACKEND -rmenv QT_QPA_PLATFORM -rmenv SDL_VIDEODRIVER -rmenv ECORE_EVAS_ENGINE -rmenv ELM_ENGINE -rmenv _JAVA_AWT_WM_NONREPARENTING -rmenv GTK_IM_MODULE -rmenv QT_IM_MODULE -rmenv GTK_CSD diff --git a/.config/firejail/zoom.local b/.config/firejail/zoom.local deleted file mode 100644 index 8a39b93..0000000 --- a/.config/firejail/zoom.local +++ /dev/null @@ -1,11 +0,0 @@ - -#include qtwlfix.inc -include portal.inc -#private-bin gdbus,wl-copy,notify-send - -private-etc alternatives,ca-certificates,crypto-policies,fonts,group,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id,nsswitch.conf,pki,resolv.conf,ssl,os-release - -# fix screensharing -env XDG_CURRENT_DESKTOP=GNOME - -env XDG_CACHE_HOME=/tmp/ |