diff options
| -rw-r--r-- | PKGBUILD | 4 | ||||
| -rw-r--r-- | profiles/antichamber.profile | 9 | ||||
| -rw-r--r-- | profiles/mount-and-blade-ii.profile | 17 | ||||
| -rw-r--r-- | profiles/pandora-first-contact.profile | 2 |
4 files changed, 30 insertions, 2 deletions
@@ -1,7 +1,7 @@ # Maintainer: jc_gargma <jc_gargma@iserlohn-fortress.net> pkgname=firejail-profiles -pkgver=20200909 +pkgver=20201008 pkgrel=1 pkgdesc="Additional firejail profiles and locals" arch=('any') @@ -9,7 +9,7 @@ url="https://library.iserlohn-fortress.net/firejail-profiles.git" license=('GPLv3') depends=('firejail' 'hardened-malloc') source=(profiles.tar.gz) -b2sums=('7a57f7e4ffd9aef29b9135d52030781ee5c47f17b14806827eefd11758ff7369b13dcd97d8bbd66f2f9f00b894cfd09064e9f3e9d1ef976b2eb1248dfa20ef34') +b2sums=('9b3ef58d2ced16b31ba226afef8f70a3a7b4dd49fe9fb66616623dacc3aa26321d8a0194f4743d70ff42092b2f2e35d2dd9062c703ff23777f73163cfa1319b3') package() { install --directory ${pkgdir}/etc/firejail diff --git a/profiles/antichamber.profile b/profiles/antichamber.profile index 876ece3..09fe3ce 100644 --- a/profiles/antichamber.profile +++ b/profiles/antichamber.profile @@ -6,6 +6,15 @@ include globals.local whitelist ${HOME}/games/Antichamber read-only ${HOME}/games/Antichamber +mkdir ${HOME}/.local/share/AlexanderBruce +mkdir ${HOME}/.local/share/AlexanderBruce/Antichamber +read-only ${HOME}/games/Antichamber +whitelist ${HOME}/.local/share/AlexanderBruce/Antichamber + +# # Antichamber requires name_to_handle_at, but whitelisting that syscall does not work +# # Something to do with the game being 32 bit +#seccomp !name_to_handle_at +ignore seccomp ignore noexec ${HOME} diff --git a/profiles/mount-and-blade-ii.profile b/profiles/mount-and-blade-ii.profile new file mode 100644 index 0000000..1a1422b --- /dev/null +++ b/profiles/mount-and-blade-ii.profile @@ -0,0 +1,17 @@ +# This file is overwritten after every install/update +# Persistent local customizations +include mount-and-blade-ii.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.local/share/wineprefixes/MountAndBladeBannerlord +whitelist ${HOME}/.local/share/wineprefixes/MountAndBladeBannerlord + +# MB2 requiers seccomp and ptrace +seccomp !name_to_handle_at,!ptrace + +ignore memory-deny-write-execute + +ignore noexec ${HOME} + +include generic-wine-game.inc diff --git a/profiles/pandora-first-contact.profile b/profiles/pandora-first-contact.profile index e9303b2..e53fa31 100644 --- a/profiles/pandora-first-contact.profile +++ b/profiles/pandora-first-contact.profile @@ -13,6 +13,8 @@ whitelist ${HOME}/.config/Proxy Studios/Pandora whitelist ${HOME}/games/Pandora - First Contact read-only ${HOME}/games/Pandora - First Contact +ignore memory-deny-write-execute + ignore noexec ${HOME} include generic-game-networked.inc |