diff options
| -rw-r--r-- | PKGBUILD | 4 | ||||
| -rw-r--r-- | profiles/pcsx2-qt.profile | 15 | ||||
| -rw-r--r-- | profiles/ppsspp.local | 4 |
3 files changed, 21 insertions, 2 deletions
@@ -1,14 +1,14 @@ # Maintainer: jc_gargma <jc_gargma@iserlohn-fortress.net> pkgname=firejail-profiles -pkgver=20220726 +pkgver=20220816 pkgrel=1 pkgdesc="Additional firejail profiles and locals" arch=('any') url="https://library.iserlohn-fortress.net/firejail-profiles.git" license=('GPLv3') source=(profiles.tar.gz) -b2sums=('7da7d78a0b4b2880eee24188fc1adeb479eb966fbf6b2318c1c150bd4d2ee64565e21373a912617de185331102517a2c36afaa52d5f9d19b7842dbabf12eb494') +b2sums=('e859722622fff617623db9e543c3a1b6979b75b8887106b98916b194fc901105628b2f04652d601eb043fada4628294aabdb87ddfb5132cabe76000b6ca02837') package() { depends=('firejail' 'hardened-malloc') diff --git a/profiles/pcsx2-qt.profile b/profiles/pcsx2-qt.profile new file mode 100644 index 0000000..afc58ed --- /dev/null +++ b/profiles/pcsx2-qt.profile @@ -0,0 +1,15 @@ +include pcsx2-qt.local + +whitelist-ro ${HOME}/games/Emulators/PS2GAMES +whitelist-ro /usr/share/PCSX2/resources + +ignore ipc-namespace +ignore netfilter +nodvd + +private-bin PCSX2,pcsx2-qt +ignore private-etc alsa,alternatives,asound.conf,bumblebee,ca-certificates,crypto-policies,dconf,drirc,fonts,gconf,glvnd,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,machine-id,mime.types,nsswitch.conf,nvidia,pango,pki,protocols,pulse,resolv.conf,rpc,services,ssl,X11,xdg +# alsa requires /etc/group +private-etc asound.conf,group,localtime,machine-id,pulse + +include PCSX2.profile diff --git a/profiles/ppsspp.local b/profiles/ppsspp.local index fa51b53..aef1625 100644 --- a/profiles/ppsspp.local +++ b/profiles/ppsspp.local @@ -3,6 +3,10 @@ whitelist-ro ${HOME}/games/Emulators/PSPGAMES # machine-id, obs, and alsa don't get along #ignore machine-id +# # alsa audio will work with ipc-namespace, +# # but it hogs the alsa device from other applications +ignore ipc-namespace + net none # # seccomp breaks integrated file manager on qt applications |