diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index 1f373279c3..f638e1d97a 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -189,6 +189,7 @@ blacklist ${HOME}/.cache/mutt blacklist ${HOME}/.cache/mypaint blacklist ${HOME}/.cache/netsurf blacklist ${HOME}/.cache/nheko +blacklist ${HOME}/.cache/nhex blacklist ${HOME}/.cache/nvim blacklist ${HOME}/.cache/ocenaudio blacklist ${HOME}/.cache/okular @@ -936,6 +937,7 @@ blacklist ${HOME}/.local/share/data/MusE blacklist ${HOME}/.local/share/data/MuseScore blacklist ${HOME}/.local/share/data/nomacs blacklist ${HOME}/.local/share/data/qBittorrent +blacklist ${HOME}/.local/share/dev.nhex blacklist ${HOME}/.local/share/dino blacklist ${HOME}/.local/share/dolphin blacklist ${HOME}/.local/share/dolphin-emu diff --git a/etc/profile-m-z/nhex.profile b/etc/profile-m-z/nhex.profile new file mode 100644 index 0000000000..184e41a9a0 --- /dev/null +++ b/etc/profile-m-z/nhex.profile @@ -0,0 +1,62 @@ +# Firejail profile for nhex +# Description: Tauri-based IRC client inspired by HexChat +# This file is overwritten after every install/update +# Persistent local customizations +include nhex.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.cache/nhex +noblacklist ${HOME}/.local/share/dev.nhex + +blacklist /usr/libexec + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-proc.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.cache/nhex +mkdir ${HOME}/.local/share/dev.nhex +whitelist ${DOWNLOADS} +whitelist ${HOME}/.cache/nhex +whitelist ${HOME}/.local/share/dev.nhex +include whitelist-common.inc +include whitelist-run-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +caps.drop all +machine-id +netfilter +no3d +nodvd +nogroups +noinput +nonewprivs +noprinters +noroot +nosound +notv +nou2f +novideo +protocol unix,inet,inet6 +seccomp +seccomp.block-secondary +tracelog + +disable-mnt +private-bin nhex +private-cache +private-dev +private-tmp + +dbus-user none +dbus-system none + +restrict-namespaces diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 8a20d939f8..b6eb06d654 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -647,6 +647,7 @@ newsflash nextcloud nextcloud-desktop nheko +nhex nicotine nitroshare nitroshare-cli