From 6d3a6e8ab664444aef60b8795146b39246403b12 Mon Sep 17 00:00:00 2001 From: jc_gargma Date: Sat, 20 Jun 2020 12:40:25 -0700 Subject: Allow vlc to read from pictures Set vlc access to xdg folders to read-only --- PKGBUILD | 6 +++--- profiles/vlc.local | 6 ++++++ 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/PKGBUILD b/PKGBUILD index 5f1d6ea..e35bd2d 100644 --- a/PKGBUILD +++ b/PKGBUILD @@ -1,15 +1,15 @@ # Maintainer: jc_gargma pkgname=firejail-profiles -pkgver=20200610 -pkgrel=2 +pkgver=20200620 +pkgrel=1 pkgdesc="Additional firejail profiles and locals" arch=('any') url="https://library.iserlohn-fortress.net/firejail-profiles.git" license=('GPLv3') depends=('firejail' 'hardened-malloc') source=(profiles.tar.gz) -b2sums=('56108baed83967a29c806d959c612fb8112e78d1d420a3f854f57138c20ef778e9787f641d6c96a9fc629eaf3b9244d66f00dfcff64b4e529a1bab8c19032dca') +b2sums=('718acc400843f4d3cf3e0c605aa9a7f6c74b3fd073fdc3fa1cfa2248025165d50bd67bacf976338f56ee715776047310ec707b152c5876b9a17e231a9b011339') package() { install --directory ${pkgdir}/etc/firejail diff --git a/profiles/vlc.local b/profiles/vlc.local index e34e172..a753263 100644 --- a/profiles/vlc.local +++ b/profiles/vlc.local @@ -9,3 +9,9 @@ nodbus # # due to syscall name_to_handle_at # # kcmp syscall requied by amdgpu hardware acceleration seccomp !name_to_handle_at,!kcmp + +read-only ${DOWNLOADS} +read-only ${MUSIC} +noblacklist ${PICTURES} +read-only ${PICTURES} +read-only $(VIDEOS} -- cgit v1.2.1