summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorjc_gargma <jc_gargma@iserlohn-fortress.net>2020-05-16 00:50:32 -0700
committerjc_gargma <jc_gargma@iserlohn-fortress.net>2020-05-16 00:50:32 -0700
commitca88b9cce8fb36e7ebc2da8b49ca511b0ac637eb (patch)
treea6058560863908928e07cc1bb94a5e6f0039f14e
parentAdd pioneer (diff)
downloadfirejail-profiles-ca88b9cce8fb36e7ebc2da8b49ca511b0ac637eb.tar.xz
Fix pioneer.profile into pioneer.local
-rw-r--r--PKGBUILD4
-rw-r--r--profiles/pioneer.local12
-rw-r--r--profiles/pioneer.profile18
3 files changed, 14 insertions, 20 deletions
diff --git a/PKGBUILD b/PKGBUILD
index 0fe33a5..a2da12b 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,7 +1,7 @@
# Maintainer: jc_gargma <jc_gargma@iserlohn-fortress.net>
pkgname=firejail-profiles
-pkgver=20200515
+pkgver=20200516
pkgrel=1
pkgdesc="Additional firejail profiles and locals"
arch=('any')
@@ -9,7 +9,7 @@ url="https://library.iserlohn-fortress.net/firejail-profiles.git"
license=('GPLv3')
depends=('firejail' 'hardened-malloc')
source=(profiles.tar.gz)
-b2sums=('20d960893b04bf8f9471b83cda8c40eb6368c5f69ce0582249a9c5b435a1534371b66f739e19537ecf2322aa69d6d0a824e5db6049c72192add96fea4065bcc1')
+b2sums=('1faf425ba4cebef0132949b371c3558738f4e6c227916ece00a0a99cb181db5e71b77c40991ef49d017094f63c21f76d023aa8a0c8be952f1eddb5b8cc519130')
package() {
install --directory ${pkgdir}/etc/firejail
diff --git a/profiles/pioneer.local b/profiles/pioneer.local
new file mode 100644
index 0000000..4838164
--- /dev/null
+++ b/profiles/pioneer.local
@@ -0,0 +1,12 @@
+# # alsa audio will work with ipc-namespace,
+# # but it hogs the alsa device from other applications
+ignore ipc-namespace
+machine-id
+# # no3d breaks gpu rendering
+ignore no3d
+seccomp !name_to_handle_at
+
+private-bin pioneer
+private-etc asound.conf,group,localtime,machine-id,pulse
+
+ignore memory-deny-write-execute
diff --git a/profiles/pioneer.profile b/profiles/pioneer.profile
deleted file mode 100644
index de079f5..0000000
--- a/profiles/pioneer.profile
+++ /dev/null
@@ -1,18 +0,0 @@
-# This file is overwritten after every install/update
-# Persistent local customizations
-include pioneer.local
-# Persistent global definitions
-include globals.local
-
-noblacklist ${HOME}/.pioneer
-mkdir ${HOME}/.pioneer
-whitelist ${HOME}/.pioneer
-
-protocol unix,netlink
-seccomp !name_to_handle_at
-
-private-bin pioneer
-
-ignore memory-deny-write-execute
-
-include generic-game.inc