diff options
| author | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2023-03-08 15:13:03 -0800 |
|---|---|---|
| committer | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2023-03-08 15:13:03 -0800 |
| commit | e7674c0341b27cf3b588782584abc781ac4cc7cb (patch) | |
| tree | 804d2f75d12f6bcac5022fb6ef7b7656cfa9ffa9 /profiles | |
| parent | More drox operative 1 typos. (diff) | |
| download | firejail-profiles-e7674c0341b27cf3b588782584abc781ac4cc7cb.tar.xz | |
Add profile for brigador.
Temporaily disable private-bin for w3m.
Diffstat (limited to 'profiles')
| -rw-r--r-- | profiles/brigador.profile | 38 | ||||
| -rw-r--r-- | profiles/w3m.local | 3 |
2 files changed, 41 insertions, 0 deletions
diff --git a/profiles/brigador.profile b/profiles/brigador.profile new file mode 100644 index 0000000..1f1e8a3 --- /dev/null +++ b/profiles/brigador.profile @@ -0,0 +1,38 @@ +# This file is overwritten after every install/update +# Persistent local customizations +include brigador.local +# Persistent global definitions +include globals.local + +ignore include disable-shell.inc + +mkfile ${HOME}/games/Brigador/profile.json +mkfile ${HOME}/games/Brigador/settings.json +mkfile ${HOME}/games/Brigador/imgui.ini +mkfile ${HOME}/games/Brigador/log.txt + +# # Brigador needs write access to the game folder +# # Else "Failed to write pack file: assets.pack" +whitelist ${HOME}/games/Brigador +read-only ${HOME}/games/Brigador/assets.pack +read-only ${HOME}/games/Brigador/brigador + +read-only ${HOME}/games/Brigador/assets +read-only ${HOME}/games/Brigador/cfg +read-only ${HOME}/games/Brigador/fonts +read-only ${HOME}/games/Brigador/lib +read-only ${HOME}/games/Brigador/shaders +read-only ${HOME}/games/Brigador/sound + +# noinput breaks controller support +# Brigador only supports Xinput controllers. +# DirectInput will be detected, but not function. +ignore noinput + +protocol unix,netlink + +ignore memory-deny-write-execute + +ignore noexec ${HOME} + +include generic-game.inc diff --git a/profiles/w3m.local b/profiles/w3m.local index 53edfe2..119eccb 100644 --- a/profiles/w3m.local +++ b/profiles/w3m.local @@ -1,4 +1,7 @@ protocol inet,inet6 +# w3m apears to require more than these binaries now +ignore private-bin perl,sh,w3m + # # Use with hardened-malloc package env LD_PRELOAD=/usr/lib/libhardened_malloc.so |