Add discord screenaudio firejail config

main
trivernis 10 months ago
parent f1f7d9572c
commit dd42875001
Signed by: Trivernis
GPG Key ID: 7E6D18B61C8D2F4B

@ -0,0 +1,19 @@
##quiet
# Persistent local customizations
include discord-screenaudio.local
# Persistent global definitions
include globals.local
# Discord defaults
include discord.profile
# add executable
private-bin discord-screenaudio
private-opt discord-screenaudio
# blacklist mount paths
blacklist /mnt
blacklist /run/media
# allow access to config
# ignore blacklist ${HOME}/.config/discord-screenaudio
# whitelist ${HOME}/.config/discord-screenaudio

@ -0,0 +1,960 @@
# /etc/firejail/firecfg.config - firecfg utility configuration file
# This is the list of programs in alphabetical order handled by firecfg utility
#
0ad
1password
2048-qt
Books
Builder
Cheese
Cryptocat
Cyberfox
Discord
DiscordCanary
Documents
FossaMail
Fritzing
Gitter
JDownloader
Logs
Maelstrom
Maps
Mathematica
Natron
PCSX2
PPSSPPQt
PPSSPPSDL
QMediathekView
QOwnNotes
Screenshot
Telegram
Viber
VirtualBox
XMind
Xephyr
ZeGrapher
abiword
abrowser
akonadi_control
akregator
alacarte
alpine
alpinef
amarok
amule
amuled
android-studio
anydesk
apktool
apostrophe
# ar - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
arch-audit
archaudit-report
ardour4
ardour5
arduino
aria2c
ark
arm
artha
assogiate
asunder
# atom
# atom-beta
# atool - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
atril
atril-previewer
atril-thumbnailer
audacious
audacity
audio-recorder
authenticator
authenticator-rs
autokey-gtk
autokey-qt
autokey-run
autokey-shell
avidemux3_cli
avidemux3_jobs_qt5
avidemux3_qt5
aweather
ballbuster
baloo_file
baloo_filemetadata_temp_extractor
balsa
baobab
barrier
basilisk
bcompare
beaker
bibletime
bijiben
bitcoin-qt
bitlbee
bitwarden
bleachbit
blender
blender-2.8
bless
blobby
blobwars
bluefish
bnox
brackets
brasero
brave
brave-browser
brave-browser-beta
brave-browser-dev
brave-browser-nightly
brave-browser-stable
# bunzip2 - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
# bzcat - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
bzflag
# bzip2 - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
cachy-browser
calibre
calligra
calligraauthor
calligraconverter
calligraflow
calligragemini
calligraplan
calligraplanwork
calligrasheets
calligrastage
calligrawords
cameramonitor
cantata
catfish
cawbird
celluloid
chafa
chatterino
checkbashisms
cheese
cherrytree
chromium
chromium-browser
chromium-browser-privacy
chromium-freeworld
cin
cinelerra
cinelerra-gg
clamdscan
clamdtop
clamscan
clamtk
clawsker
claws-mail
clementine
clion
clion-eap
clipgrab
clipit
cliqz
clocks
cmus
code
code-oss
codium
cointop
cola
colorful
com.github.bleakgrey.tootle
com.github.dahenson.agenda
com.github.johnfactotum.Foliate
com.github.phase1geo.minder
com.github.tchx84.Flatseal
com.gitlab.newsflash
conkeror
conky
conplay
corebird
coyim
crawl
crawl-tiles
crow
cryptocat
cvlc
cyberfox
darktable
dconf-editor
ddgr
ddgtk
deadbeef
deluge
desktopeditors
devhelp
dex2jar
d-feet
dia
dig
digikam
dillo
dino
dino-im
discord
discord-canary
display
display-im6.q16
dnox
dnscrypt-proxy
dnsmasq
dolphin-emu
dooble
dooble-qt4
dosbox
dragon
drawio
drill
dropbox
easystroke
ebook-convert
ebook-edit
ebook-meta
ebook-polish
ebook-viewer
electron-mail
electrum
element-desktop
elinks
empathy
enchant
enchant-2
enchant-lsmod
enchant-lsmod-2
engrampa
enox
enpass
eog
eom
ephemeral
#epiphany - see #2995
equalx
et
etr
evince
evince-previewer
evince-thumbnailer
#evolution - see #3647
exfalso
exiftool
falkon
fbreader
feedreader
feh
ferdi
#ffmpeg
ffmpegthumbnailer
ffplay
ffprobe
file-roller
filezilla
firedragon
firefox
firefox-beta
firefox-developer-edition
firefox-esr
firefox-nightly
firefox-wayland
firefox-x11
five-or-more
flacsplt
flameshot
flashpeak-slimjet
flowblade
fontforge
font-manager
fossamail
four-in-a-row
fractal
franz
freecad
freecadcmd
freeciv
freeciv-gtk3
freeciv-mp-gtk3
freecol
freemind
freeoffice-planmaker
freeoffice-presentations
freeoffice-textmaker
freetube
freshclam
frogatto
frozen-bubble
ftp
funnyboat
gajim
gajim-history-manager
galculator
gallery-dl
gapplication
gcalccmd
gcloud
gconf-editor
gdu
geany
geary
gedit
geekbench
geeqie
gfeeds
ghb
ghostwriter
gimp
gimp-2.10
gimp-2.8
gist
gist-paste
git-cola
gitg
github-desktop
gitter
# gjs -- https://github.com/netblue30/firejail/issues/3333#issuecomment-612601102
gl-117
glaxium
globaltime
gmpc
gnome-2048
gnome-books
gnome-builder
gnome-calculator
gnome-calendar
gnome-character-map
gnome-characters
gnome-chess
gnome-clocks
gnome-contacts
gnome-documents
gnome-font-viewer
gnome-hexgl
gnome-klotski
gnome-latex
gnome-logs
gnome-mahjongg
gnome-maps
gnome-mines
gnome-mplayer
gnome-mpv
gnome-music
gnome-nettool
gnome-nibbles
gnome-passwordsafe
gnome-photos
gnome-pomodoro
gnome-recipes
gnome-robots
gnome-schedule
gnome-screenshot
gnome-sound-recorder
gnome-sudoku
gnome-system-log
gnome-taquin
gnome-tetravex
gnome-todo
gnome-twitch
gnome-weather
gnote
gnubik
godot
godot3
goldendict
goobox
google-chrome
google-chrome-beta
google-chrome-stable
google-chrome-unstable
google-earth
google-earth-pro
google-play-music-desktop-player
googler
gpa
gpicview
gpredict
gradio
gramps
gravity-beams-and-evaporating-stars
gthumb
gtk2-youtube-viewer
gtk3-youtube-viewer
gtk-lbry-viewer
gtk-pipe-viewer
gtk-straw-viewer
gtk-youtube-viewer
guayadeque
gucharmap
gummi
gwenview
handbrake
handbrake-gtk
hashcat
hedgewars
hexchat
highlight
hitori
homebank
host
hugin
hyperrogue
iagno
icecat
icedove
iceweasel
idea
ideaIC
idea.sh
imagej
img2txt
impressive
imv
inkscape
inkview
inox
io.github.lainsce.Notejot
ipcalc
ipcalc-ng
iridium
iridium-browser
jd-gui
jdownloader
jerry
jitsi
jitsi-meet-desktop
jumpnbump
jumpnbump-menu
k3b
kaffeine
kalgebra
kalgebramobile
karbon
kate
kazam
kcalc
# kdeinit4
kdenlive
kdiff3
keepass
keepass2
keepassx
keepassx2
keepassxc
keepassxc-cli
keepassxc-proxy
# kfind
kget
kid3
kid3-cli
kid3-qt
kino
kiwix-desktop
klatexformula
klatexformula_cmdl
klavaro
kmail
kmplayer
knotes
kodi
konversation
kopete
krita
# krunner
ktorrent
ktouch
kube
# kwin_x11
kwrite
lbry-viewer
leafpad
# less - breaks man
librecad
libreoffice
librewolf
librewolf-nightly
lifeograph
liferea
lightsoff
lincity-ng
links
links2
linphone
linuxqq
lmms
lobase
localc
lodraw
loffice
lofromtemplate
loimpress
lollypop
lomath
loweb
lowriter
# lrunzip - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
# lrz - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
# lrzcat - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
# lrzip - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
# lrztar - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
# lrzuntar - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
luminance-hdr
lximage-qt
lxmusic
lynx
lyx
macrofusion
magicor
man
manaplus
marker
masterpdfeditor
masterpdfeditor4
masterpdfeditor5
mate-calc
mate-calculator
mate-color-select
mate-dictionary
mathematica
matrix-mirage
mattermost-desktop
mcabber
mcomix
mediainfo
mediathekview
megaglest
megaglest_editor
meld
mencoder
mendeleydesktop
menulibre
meteo-qt
microsoft-edge
microsoft-edge-beta
microsoft-edge-dev
midori
min
mindless
minecraft-launcher
minetest
minitube
mirage
mirrormagic
mocp
mousepad
mp3splt
mp3splt-gtk
mp3wrap
mpDris2
mpg123
mpg123-alsa
mpg123.bin
mpg123-id3dump
mpg123-jack
mpg123-nas
mpg123-openal
mpg123-oss
mpg123-portaudio
mpg123-pulse
mpg123-strip
mplayer
mpsyt
mpv
mrrescue
ms-excel
ms-office
ms-onenote
ms-outlook
ms-powerpoint
ms-skype
ms-word
mtpaint
multimc
multimc5
mumble
mupdf
mupdf-gl
mupdf-x11
mupdf-x11-curl
mupen64plus
muraster
musescore
musictube
musixmatch
mutool
mutt
mypaint
mypaint-ora-thumbnailer
natron
ncdu
ncdu2
neochat
neomutt
netactview
nethack
netsurf
neverball
neverputt
newsbeuter
newsboat
newsflash
nextcloud
nextcloud-desktop
nheko
nicotine
nitroshare
nitroshare-cli
nitroshare-nmh
nitroshare-send
nitroshare-ui
nomacs
notable
nslookup
nuclear
nylas
nyx
obs
ocenaudio
odt2txt
oggsplt
okular
onboard
onionshare
onionshare-cli
onionshare-gui
ooffice
ooviewdoc
openarena
openarena_ded
opencity
openclonk
open-invaders
openmw
openmw-launcher
openoffice.org
openshot
openshot-qt
openstego
openttd
opera
opera-beta
opera-developer
orage
ostrichriders
otter-browser
out123
palemoon
#pandoc
parole
patch
pavucontrol
pavucontrol-qt
pcsxr
pdfchain
pdfmod
pdfsam
pdftotext
peek
penguin-command
photoflare
picard
pidgin
pinball
ping
pingus
pinta
pioneer
pipe-viewer
pithos
pitivi
pix
planmaker18
planmaker18free
playonlinux
pluma
plv
pngquant
polari
ppsspp
pragha
presentations18
presentations18free
profanity
psi
psi-plus
pybitmessage
# pycharm-community - FB note: may enable later
# pycharm-professional
# pzstd - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
qbittorrent
qcomicbook
qemu-launcher
#qemu-system-x86_64
qgis
qlipper
qmmp
qnapi
qpdfview
qq
qt-faststart
qtox
quadrapassel
quassel
quaternion
quiterss
qupzilla
qutebrowser
raincat
rambox
redeclipse
rednotebook
redshift
regextester
remmina
retroarch
rhythmbox
rhythmbox-client
ricochet
riot-desktop
riot-web
ripperx
ristretto
rocketchat
rpcs3
rtorrent
runenpass.sh
sayonara
scallion
scorched3d
scorchwentbonkers
scribus
sdat2img
seafile-applet
seahorse
seahorse-adventures
seahorse-daemon
seahorse-tool
seamonkey
seamonkey-bin
secret-tool
shellcheck
shortwave
shotcut
shotwell
signal-cli
# signal-desktop - profile needs to be modified
silentarmy
simple-scan
simplescreenrecorder
simutrans
skanlite
skypeforlinux
slack
slashem
smplayer
smtube
smuxi-frontend-gnome
snox
soffice
sol
soundconverter
sound-juicer
spectacle
spectral
spotify
sqlitebrowser
ssh
# ssh-agent - problems on Arch with Fish shell (#1568)
standardnotes-desktop
start-tor-browser
steam
steam-native
steam-runtime
stellarium
strawberry
straw-viewer
strings
studio.sh
subdownloader
supertux2
supertuxkart
surf
sushi
swell-foop
sylpheed
synfigstudio
sysprof
sysprof-cli
tb-starter-wrapper
teams
teams-for-linux
teamspeak3
teeworlds
telegram
telegram-desktop
telnet
terasology
tesseract
textmaker18
textmaker18free
thunderbird
thunderbird-beta
thunderbird-wayland
tilp
tor-browser
torbrowser
tor-browser-ar
tor-browser-ca
tor-browser-cs
tor-browser-da
tor-browser-de
tor-browser-el
tor-browser-en
tor-browser-en-us
tor-browser-es
tor-browser-es-es
tor-browser-fa
tor-browser-fr
tor-browser-ga-ie
tor-browser-he
tor-browser-hu
tor-browser-id
tor-browser-is
tor-browser-it
tor-browser-ja
tor-browser-ka
tor-browser-ko
torbrowser-launcher
tor-browser-nb
tor-browser-nl
tor-browser-pl
tor-browser-pt-br
tor-browser-ru
tor-browser-sv-se
tor-browser-tr
tor-browser-vi
tor-browser-zh-cn
tor-browser-zh-tw
torcs
totem
tracker
transgui
transmission-cli
transmission-create
transmission-daemon
transmission-edit
transmission-gtk
transmission-qt
transmission-remote
transmission-remote-cli
transmission-remote-gtk
transmission-show
tremulous
trojita
truecraft
tshark
tuir
tutanota-desktop
tuxguitar
tvbrowser
twitch
udiskie
uefitool
uget-gtk
unbound
unf
unknown-horizons
# unzstd - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
utox
uudeview
uzbl-browser
viewnior
viking
virtualbox
vivaldi
vivaldi-beta
vivaldi-snapshot
vivaldi-stable
vlc
vmware
vmware-player
vmware-workstation
vscodium
vulturesclaw
vultureseye
vym
w3m
warmux
warsow
warzone2100
waterfox
waterfox-classic
waterfox-current
webstorm
weechat
weechat-curses
wesnoth
wget
wget2
whalebird
whois
widelands
wine
wire-desktop
wireshark
wireshark-gtk
wireshark-qt
wordwarvi
wpp
wps
wpspdf
x2goclient
xbill
xcalc
xchat
xed
xfburn
xfce4-dict
xfce4-mixer
xfce4-notes
xfce4-screenshooter
xiphos
xlinks
xlinks2
xmms
xmr-stak
xonotic
xonotic-glx
xonotic-sdl
xournal
xournalpp
xpdf
xplayer
xplayer-audio-preview
xplayer-video-thumbnailer
xpra
xreader
xreader-previewer
xreader-thumbnailer
xviewer
yandex-browser
yelp
youtube
youtube-dl
youtube-dl-gui
youtubemusic-nativefier
youtube-viewer
yt-dlp
ytmdesktop
zaproxy
zart
zathura
zeal
zim
zoom
# zpaq - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
# zstd - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
# zstdcat - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
# zstdgrep - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
# zstdless - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
# zstdmt - disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
zulip

@ -0,0 +1,2 @@
# Enable apparmor
apparmor
Loading…
Cancel
Save