Skip to content

Commit 4c5f558

Browse files
netblue30netblue30
committed
several kids programs
1 parent fd5df9a commit 4c5f558

File tree

8 files changed

+326
-0
lines changed

8 files changed

+326
-0
lines changed

‎etc/inc/disable-programs.inc

+4
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,8 @@ blacklist ${HOME}/.ZAP
2828
blacklist ${HOME}/.aMule
2929
blacklist ${HOME}/.abook
3030
blacklist ${HOME}/.addressbook
31+
blacklist ${HOME}/.alienblaster
32+
blacklist ${HOME}/.alienblaster_highscore
3133
blacklist ${HOME}/.alpine-smime
3234
blacklist ${HOME}/.ammonite
3335
blacklist ${HOME}/.android
@@ -851,6 +853,7 @@ blacklist ${HOME}/.klatexformula
851853
blacklist ${HOME}/.klei
852854
blacklist ${HOME}/.kodi
853855
blacklist ${HOME}/.lastpass
856+
blacklist ${HOME}/.lbreakouthd
854857
blacklist ${HOME}/.lettura
855858
blacklist ${HOME}/.librewolf
856859
blacklist ${HOME}/.lincity-ng
@@ -1187,6 +1190,7 @@ blacklist ${HOME}/.torcs
11871190
blacklist ${HOME}/.tremulous
11881191
blacklist ${HOME}/.ts3client
11891192
blacklist ${HOME}/.tuxguitar*
1193+
blacklist ${HOME}/.tuxtype
11901194
blacklist ${HOME}/.tvbrowser
11911195
blacklist ${HOME}/.unknown-horizons
11921196
blacklist ${HOME}/.viking

‎etc/profile-a-l/alienblaster.profile

+55
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
# Firejail profile for alienblaster
2+
# Persistent local customizations
3+
include alienblaster.local
4+
# Persistent global definitions
5+
include globals.local
6+
7+
noblacklist ${HOME}/.alienblaster
8+
noblacklist ${HOME}/.alienblaster_highscore
9+
10+
include disable-common.inc
11+
include disable-devel.inc
12+
include disable-exec.inc
13+
include disable-interpreters.inc
14+
include disable-programs.inc
15+
include disable-xdg.inc
16+
17+
mkfile ${HOME}/.alienblaster_highscore
18+
whitelist ${HOME}/.alienblaster_highscore
19+
mkdir ${HOME}/.alienblaster
20+
whitelist ${HOME}/.alienblaster
21+
include whitelist-common.inc
22+
include whitelist-run-common.inc
23+
whitelist ${RUNUSER}/pulse
24+
include whitelist-runuser-common.inc
25+
whitelist /usr/share/games/alienblaster
26+
whitelist /usr/share/timidity
27+
include whitelist-usr-share-common.inc
28+
include whitelist-var-common.inc
29+
30+
apparmor
31+
caps.drop all
32+
ipc-namespace
33+
netfilter
34+
net none
35+
nodvd
36+
noinput
37+
nonewprivs
38+
noroot
39+
notv
40+
nou2f
41+
novideo
42+
protocol unix
43+
seccomp
44+
tracelog
45+
46+
disable-mnt
47+
private-dev
48+
private-etc @x11,@sound,@games
49+
private-tmp
50+
51+
dbus-user none
52+
dbus-system none
53+
54+
memory-deny-write-execute
55+
restrict-namespaces

‎etc/profile-a-l/geki2.profile

+49
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
# Firejail profile for geki2
2+
# Persistent local customizations
3+
include geki2.local
4+
# Persistent global definitions
5+
include globals.local
6+
7+
include disable-common.inc
8+
include disable-devel.inc
9+
include disable-exec.inc
10+
include disable-interpreters.inc
11+
include disable-programs.inc
12+
include disable-shell.inc
13+
include disable-xdg.inc
14+
15+
include whitelist-run-common.inc
16+
include whitelist-runuser-common.inc
17+
whitelist /usr/share/games/geki2
18+
include whitelist-usr-share-common.inc
19+
writable-var # game scores stored under /var/games
20+
include whitelist-var-common.inc
21+
22+
apparmor
23+
caps.drop all
24+
ipc-namespace
25+
net none
26+
netfilter
27+
nodvd
28+
noinput
29+
nonewprivs
30+
noroot
31+
notv
32+
nou2f
33+
novideo
34+
protocol unix
35+
seccomp
36+
tracelog
37+
38+
disable-mnt
39+
private
40+
private-bin geki2
41+
private-dev
42+
private-etc @x11,@sound,@games
43+
private-tmp
44+
45+
dbus-user none
46+
dbus-system none
47+
48+
memory-deny-write-execute
49+
restrict-namespaces

‎etc/profile-a-l/geki3.profile

+49
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
# Firejail profile for geki3
2+
# Persistent local customizations
3+
include geki3.local
4+
# Persistent global definitions
5+
include globals.local
6+
7+
include disable-common.inc
8+
include disable-devel.inc
9+
include disable-exec.inc
10+
include disable-interpreters.inc
11+
include disable-programs.inc
12+
include disable-shell.inc
13+
include disable-xdg.inc
14+
15+
include whitelist-run-common.inc
16+
include whitelist-runuser-common.inc
17+
whitelist /usr/share/games/geki3
18+
include whitelist-usr-share-common.inc
19+
writable-var # game scores stored under /var/games
20+
include whitelist-var-common.inc
21+
22+
apparmor
23+
caps.drop all
24+
ipc-namespace
25+
net none
26+
netfilter
27+
nodvd
28+
noinput
29+
nonewprivs
30+
noroot
31+
notv
32+
nou2f
33+
novideo
34+
protocol unix
35+
seccomp
36+
tracelog
37+
38+
disable-mnt
39+
private
40+
private-bin geki3
41+
private-dev
42+
private-etc @x11,@sound,@games
43+
private-tmp
44+
45+
dbus-user none
46+
dbus-system none
47+
48+
memory-deny-write-execute
49+
restrict-namespaces

‎etc/profile-a-l/lbreakouthd.profile

+59
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,59 @@
1+
# Firejail profile for lbreakouthd
2+
# Persistent local customizations
3+
include lbreakouthd.local
4+
# Persistent global definitions
5+
include globals.local
6+
7+
# Note: this profile requires the current user to be a member of games group
8+
9+
noblacklist ${HOME}/.lbreakouthd
10+
11+
include disable-common.inc
12+
include disable-devel.inc
13+
include disable-exec.inc
14+
include disable-interpreters.inc
15+
include disable-programs.inc
16+
include disable-shell.inc
17+
include disable-xdg.inc
18+
19+
mkdir ${HOME}/.lbreakouthd
20+
whitelist ${HOME}/.lbreakouthd
21+
include whitelist-common.inc
22+
23+
whitelist /run/udev/control
24+
whitelist /run/host/container-manager
25+
include whitelist-run-common.inc
26+
whitelist ${RUNUSER}/pulse
27+
include whitelist-runuser-common.inc
28+
whitelist /usr/share/games/lbreakouthd
29+
include whitelist-usr-share-common.inc
30+
writable-var # game scores stored under /var/games
31+
include whitelist-var-common.inc
32+
33+
apparmor
34+
caps.drop all
35+
ipc-namespace
36+
net none
37+
netfilter
38+
nodvd
39+
noinput
40+
nonewprivs
41+
noroot
42+
notv
43+
nou2f
44+
novideo
45+
protocol unix
46+
seccomp
47+
tracelog
48+
49+
disable-mnt
50+
private-bin lbreakouthd
51+
private-dev
52+
private-etc @x11,@sound,@games
53+
private-tmp
54+
55+
dbus-user none
56+
dbus-system none
57+
58+
memory-deny-write-execute
59+
restrict-namespaces

‎etc/profile-m-z/tuxtype.profile

+56
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
# Firejail profile for tuxtype
2+
# Persistent local customizations
3+
include tuxtype.local
4+
# Persistent global definitions
5+
include globals.local
6+
7+
noblacklist ${HOME}/.tuxtype
8+
9+
include disable-common.inc
10+
include disable-devel.inc
11+
include disable-exec.inc
12+
include disable-interpreters.inc
13+
include disable-programs.inc
14+
include disable-shell.inc
15+
include disable-xdg.inc
16+
17+
mkdir ${HOME}/.tuxtype
18+
whitelist ${HOME}/.tuxtype
19+
include whitelist-common.inc
20+
21+
22+
include whitelist-run-common.inc
23+
whitelist ${RUNUSER}/pulse
24+
include whitelist-runuser-common.inc
25+
whitelist /usr/share/tuxtype
26+
include whitelist-usr-share-common.inc
27+
writable-var # game scores stored under /var/games
28+
include whitelist-var-common.inc
29+
30+
apparmor
31+
caps.drop all
32+
ipc-namespace
33+
net none
34+
netfilter
35+
nodvd
36+
noinput
37+
nonewprivs
38+
noroot
39+
notv
40+
nou2f
41+
novideo
42+
protocol unix
43+
seccomp
44+
tracelog
45+
46+
disable-mnt
47+
private-bin tuxtype
48+
private-dev
49+
private-etc @x11,@sound,@games,tuxtype
50+
private-tmp
51+
52+
dbus-user none
53+
dbus-system none
54+
55+
memory-deny-write-execute
56+
restrict-namespaces

‎etc/profile-m-z/typespeed.profile

+48
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
# Firejail profile for typespeed
2+
# Persistent local customizations
3+
include typespeed.local
4+
# Persistent global definitions
5+
include globals.local
6+
7+
# Note: this profile requires the current user to be a member of games group
8+
9+
include disable-common.inc
10+
include disable-devel.inc
11+
include disable-exec.inc
12+
include disable-interpreters.inc
13+
include disable-programs.inc
14+
include disable-xdg.inc
15+
16+
include whitelist-run-common.inc
17+
include whitelist-runuser-common.inc
18+
whitelist /usr/share/typespeed
19+
include whitelist-usr-share-common.inc
20+
writable-var # game scores stored under /var/games
21+
include whitelist-var-common.inc
22+
23+
apparmor
24+
caps.drop all
25+
ipc-namespace
26+
netfilter
27+
nodvd
28+
noinput
29+
nonewprivs
30+
noroot
31+
notv
32+
nou2f
33+
novideo
34+
protocol unix,inet,inet6,netlink
35+
seccomp
36+
tracelog
37+
38+
disable-mnt
39+
private
40+
private-dev
41+
private-etc @x11,@sound,@games
42+
private-tmp
43+
44+
dbus-user none
45+
dbus-system none
46+
47+
memory-deny-write-execute
48+
restrict-namespaces

‎src/firecfg/firecfg.config

+6
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,7 @@ abrowser
4343
akonadi_control
4444
akregator
4545
alacarte
46+
alienblaster
4647
alpine
4748
alpinef
4849
amarok
@@ -320,6 +321,8 @@ geany
320321
gedit
321322
geekbench
322323
geeqie
324+
geki2
325+
geki3
323326
gfeeds
324327
gh
325328
ghb
@@ -493,6 +496,7 @@ ktouch
493496
kube
494497
#kwin_x11
495498
kwrite
499+
lbreakouthd
496500
lbry-viewer
497501
lbry-viewer-gtk
498502
leafpad
@@ -920,9 +924,11 @@ tshark
920924
tuir
921925
tutanota-desktop
922926
tuxguitar
927+
tuxtype
923928
tvbrowser
924929
tvnamer
925930
twitch
931+
typespeed
926932
udiskie
927933
uefitool
928934
uget-gtk

0 commit comments

Comments
 (0)