summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorjc_gargma <jc_gargma@iserlohn-fortress.net>2022-02-11 14:25:29 -0800
committerjc_gargma <jc_gargma@iserlohn-fortress.net>2022-02-11 14:25:29 -0800
commitb7962ca7f3a6d0d8db13a717ed6316748cb73748 (patch)
tree7b24c1586d4c777b39df0ae48bd62c8fb1cbaeb6
parentUpdated for firejail 0.9.68 (diff)
downloadfirejail-profiles-b7962ca7f3a6d0d8db13a717ed6316748cb73748.tar.xz
Fix controller support for mgba and desmume
-rw-r--r--PKGBUILD4
-rw-r--r--profiles/desmume.profile5
-rw-r--r--profiles/mgba.profile5
3 files changed, 7 insertions, 7 deletions
diff --git a/PKGBUILD b/PKGBUILD
index ad2aefe..ca3e7a6 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,7 +1,7 @@
# Maintainer: jc_gargma <jc_gargma@iserlohn-fortress.net>
pkgname=firejail-profiles
-pkgver=20220209
+pkgver=20220211
pkgrel=1
pkgdesc="Additional firejail profiles and locals"
arch=('any')
@@ -9,7 +9,7 @@ url="https://library.iserlohn-fortress.net/firejail-profiles.git"
license=('GPLv3')
depends=('firejail' 'hardened-malloc')
source=(profiles.tar.gz)
-b2sums=('8efe93f490d3980a4463b31d2ba730ed395550e95f3e2a8f74eed12fa394f68ce38eec7245f55cdd972e7433f6647ecaef20c9485264d4e1cc39ba4efc770009')
+b2sums=('7335e6b3210225b56874b88c7c349c1f7a3510a6b4187c3569f26689be01f8677417ea33a94341c728c1e63de8da6525029dc4e861e5202f7d66dfe722198ba0')
package() {
install --directory ${pkgdir}/etc/firejail
diff --git a/profiles/desmume.profile b/profiles/desmume.profile
index 3544be3..5508d9e 100644
--- a/profiles/desmume.profile
+++ b/profiles/desmume.profile
@@ -15,8 +15,9 @@ include whitelist-common.inc
seccomp !name_to_handle_at
-# private-dev breaks joysticks
-ignore private-dev
+# desmume requires input and protocol netlink for controller support
+ignore noinput
+protocol unix,netlink
ignore memory-deny-write-execute
diff --git a/profiles/mgba.profile b/profiles/mgba.profile
index f84044e..8415985 100644
--- a/profiles/mgba.profile
+++ b/profiles/mgba.profile
@@ -20,11 +20,10 @@ include whitelist-common.inc
# # due to syscall name_to_handle_at
seccomp !name_to_handle_at
-# netlink required for controller support
+# mgba requires input and protocol netlink for controller support
+ignore noinput
protocol unix,netlink
-# noinput breaks controllers
-ignore noinput
ignore memory-deny-write-execute