Mirrors/spark
1
0
Fork 0
mirror of https://github.com/pigmonkey/spark.git synced 2026-01-23 02:24:09 +00:00
Code Issues Projects Releases Wiki Activity

remove firejail generic.profile

Browse source 
include the appropriate files instead
This commit is contained in:
Pig Monkey 2017-07-29 16:11:31 -07:00
parent e2aed9edd7
commit 8d499dc7f7
8 changed files with 10 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

3
roles/calibre/files/firejail/calibre.profile
View file

@ -1,4 +1,5 @@
include /usr/local/etc/firejail/generic.profile
include /etc/firejail/default.profile
include /etc/firejail/disable-devel.inc
private-dev
private-etc firejail,passwd,group,hostname,hosts,nsswitch.conf,resolv.conf,gtk-2.0,gtk-3.0,fonts,mime.types

18
roles/firejail/files/disable-more.inc
View file

@ -1,18 +0,0 @@
# Passwords
blacklist ${HOME}/.password-store
blacklist ${HOME}/.keys
# Ledger
blacklist ${HOME}/ledger
blacklist ${HOME}/library/ledger
# Mail
blacklist ${HOME}/.offlineimaprc
blacklist ${HOME}/.offlineimap
blacklist ${HOME}/.mbsyncrc
# PIM
blacklist ${HOME}/.config/vdirsyncer
blacklist ${HOME}/.vdirsyncer
blacklist ${HOME}/.contacts
blacklist ${HOME}/.calendars

2
roles/firejail/files/generic.profile
View file

@ -1,2 +0,0 @@
include /etc/firejail/default.profile
include /etc/firejail/disable-devel.inc

5
roles/firejail/tasks/main.yml
View file

@ -21,8 +21,3 @@
state=present
line="blacklist {{ item }}"
with_items: "{{ firejail.blacklist }}"
- name: Push generic firejail profile
copy: src=generic.profile dest=/usr/local/etc/firejail/generic.profile
notify:
- activate firejail profiles

3
roles/mpd/files/firejail/ncmpcpp.profile
View file

@ -1,4 +1,5 @@
include /usr/local/etc/firejail/generic.profile
include /etc/firejail/default.profile
include /etc/firejail/disable-devel.inc
whitelist ~/.ncmpcpp
whitelist ~/audio

3
roles/pianobar/files/firejail/pianobar.profile
View file

@ -1,4 +1,5 @@
include /usr/local/etc/firejail/generic.profile
include /etc/firejail/default.profile
include /etc/firejail/disable-devel.inc
private-etc firejail,group,hosts,nsswitch.conf,resolv.conf,asound.conf,pulse,ssl,ca-certificates
private-tmp

3
roles/redshift/files/firejail/redshift.profile
View file

@ -1,4 +1,5 @@
include /usr/local/etc/firejail/generic.profile
include /etc/firejail/default.profile
include /etc/firejail/disable-devel.inc
whitelist ~/.config/redshift.conf
net none

3
roles/wormhole/files/firejail/wormhole.profile
View file

@ -1,4 +1,5 @@
include /usr/local/etc/firejail/generic.profile
include /etc/firejail/default.profile
include /etc/firejail/disable-devel.inc
private-dev
private-etc firejail