diff options
| -rw-r--r-- | .config/firejail/electron.local | 6 | ||||
| -rw-r--r-- | .config/firejail/libva.inc | 2 | ||||
| -rw-r--r-- | .config/firejail/portal.inc | 10 | ||||
| -rw-r--r-- | .config/firejail/qtwlfix.inc | 3 | ||||
| -rw-r--r-- | .config/firejail/spotify.local | 2 | ||||
| -rw-r--r-- | .config/firejail/telegram.local | 15 | ||||
| -rw-r--r-- | .config/firejail/zoom.local | 10 |
7 files changed, 31 insertions, 17 deletions
diff --git a/.config/firejail/electron.local b/.config/firejail/electron.local index 9218813..d13f71a 100644 --- a/.config/firejail/electron.local +++ b/.config/firejail/electron.local @@ -1,5 +1 @@ -include x11fy.inc - -dbus-user filter -dbus-user.talk org.freedesktop.Notifications -dbus-user.talk org.freedesktop.portal.* +include chromium-common-hardened.inc.profile diff --git a/.config/firejail/libva.inc b/.config/firejail/libva.inc new file mode 100644 index 0000000..eb58a15 --- /dev/null +++ b/.config/firejail/libva.inc @@ -0,0 +1,2 @@ + +env LIBVA_DRIVER_NAME=iHD diff --git a/.config/firejail/portal.inc b/.config/firejail/portal.inc new file mode 100644 index 0000000..324cdc2 --- /dev/null +++ b/.config/firejail/portal.inc @@ -0,0 +1,10 @@ +ignore dbus-user none +dbus-user filter +dbus-user.talk org.freedesktop.Notifications +dbus-user.talk org.freedesktop.portal.* +dbus-system none + +# allow opening links via portal +whitelist ${HOME}/bin +ignore noexec ${HOME} +#private-bin gdbus,wl-copy,notify-send diff --git a/.config/firejail/qtwlfix.inc b/.config/firejail/qtwlfix.inc index 197879f..45dabbf 100644 --- a/.config/firejail/qtwlfix.inc +++ b/.config/firejail/qtwlfix.inc @@ -4,3 +4,6 @@ rmenv QT_STYLE_OVERRIDE rmenv QT_QPA_PLATFORMTHEME rmenv QT_IM_MODULE rmenv QT_QPA_PLATFORM + +env QT_QPA_PLATFORM=wayland +env QT_WAYLAND_DISABLE_WINDOWDECORATION=1 diff --git a/.config/firejail/spotify.local b/.config/firejail/spotify.local index fe20106..6e8287c 100644 --- a/.config/firejail/spotify.local +++ b/.config/firejail/spotify.local @@ -1,3 +1,5 @@ +include libva.inc + ignore private-etc include qtwlfix.inc diff --git a/.config/firejail/telegram.local b/.config/firejail/telegram.local index 5917107..986cccf 100644 --- a/.config/firejail/telegram.local +++ b/.config/firejail/telegram.local @@ -1,18 +1,11 @@ -rmenv QT_WAYLAND_FORCE_DPI +#rmenv QT_WAYLAND_FORCE_DPI +include portal.inc +include qtwlfix.inc env QT_QPA_PLATFORMTHEME=gtk3 blacklist /usr/share/fonts/noto* - -ignore dbus-user none -dbus-user filter -dbus-user.talk org.freedesktop.Notifications -dbus-user.talk org.freedesktop.portal.* -dbus-system none - whitelist /var/lib/syncthing/Sync whitelist /var/lib/syncthing/Sync/* -# allow opening links via portal -env PATH=/home/robert/bin:/usr/bin:/bin -ignore noexec ${HOME} +#private-bin telegram-desktop diff --git a/.config/firejail/zoom.local b/.config/firejail/zoom.local index 071c445..1436432 100644 --- a/.config/firejail/zoom.local +++ b/.config/firejail/zoom.local @@ -1,2 +1,10 @@ -include qtwlfix.inc +#include qtwlfix.inc +include portal.inc + +#private-etc alternatives,ca-certificates,crypto-policies,fonts,group,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id,nsswitch.conf,pki,resolv.conf,ssl,os-release + +#env XDG_SESSION_TYPE=wayland +#env XDG_CURRENT_DESKTOP=GNOME +# env QT_QPA_PLATFORM=wayland +env XDG_CACHE_HOME=/tmp/ |