Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

New profile: obsidian #6314

Open
wants to merge 13 commits into
base: master
Choose a base branch
from
Open

New profile: obsidian #6314

Changes from 1 commit
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
ca41062
profiles: add a profile for obsidian
konstantin1722 Apr 17, 2024
7a935a4
profiles: update obsidian profile file
konstantin1722 Apr 23, 2024
dc3a42c
profiles: rename obsidian profile file
konstantin1722 Apr 24, 2024
bb8c9d0
profiles: fix obsidian profile flaws
konstantin1722 Apr 25, 2024
6969eca
Update etc/profile-m-z/obsidian.profile
glitsj16 Apr 25, 2024
0583908
Update etc/profile-m-z/obsidian.profile
glitsj16 Apr 25, 2024
5e24bef
Update etc/profile-m-z/obsidian.profile
glitsj16 Apr 25, 2024
5033121
Update etc/profile-m-z/obsidian.profile
glitsj16 Apr 25, 2024
cbfa80f
Update etc/profile-m-z/obsidian.profile
glitsj16 Apr 25, 2024
d909387
Update etc/profile-m-z/obsidian.profile
glitsj16 Apr 25, 2024
2cb0795
Update etc/profile-m-z/obsidian.profile
konstantin1722 Apr 28, 2024
1ca7a84
Update etc/profile-m-z/obsidian.profile
konstantin1722 Apr 28, 2024
e2f683d
Update etc/profile-m-z/obsidian.profile
konstantin1722 May 5, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
profiles: fix obsidian profile flaws
  • Loading branch information
@konstantin1722
konstantin1722 committed Apr 25, 2024
commit bb8c9d0216477c967410fe908f4c0ec70f40633d
29 changes: 10 additions & 19 deletions etc/profile-m-z/obsidian.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,45 +7,36 @@ include obsidian-wayland.local
include globals.local

noblacklist ${HOME}/.cache/AMD
noblacklist ${HOME}/.cache/nvidia
noblacklist ${HOME}/.cache/mesa_shader_cache
noblacklist ${HOME}/.cache/nvidia
noblacklist ${HOME}/.local/share/applnk
noblacklist ${HOME}/.local/share/vulkan
noblacklist ${HOME}/.local/share/vulkan
noblacklist ${HOME}/.config/vulkan
noblacklist ${HOME}/.config/kdedefaults
noblacklist ${HOME}/.config/obsidian
noblacklist ${HOME}/.config/vulkan

whitelist ${HOME}/.cache/AMD
whitelist ${HOME}/.cache/nvidia
whitelist ${HOME}/.cache/mesa_shader_cache
whitelist ${HOME}/.cache/nvidia
whitelist ${HOME}/.local/share/applnk
whitelist ${HOME}/.local/share/vulkan
whitelist ${HOME}/.local/share/vulkan
whitelist ${HOME}/.config/vulkan
whitelist ${HOME}/.config/kdedefaults
whitelist ${HOME}/.config/obsidian
kmk3 marked this conversation as resolved.
Show resolved Hide resolved
whitelist ${HOME}/.config/vulkan

ipc-namespace
nonewprivs
noroot
protocol unix,inet,inet6
#net none
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What does it do network-wise?

Just download and update plugins?

I'd leave a comment to clarify:

Suggested change
#net none
#net none # networking is needed to download/update plugins

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Check for obsidian updates, check for plugin updates, review and install plugins in the built in plugin manager, and network features for plugins that use them. In other words, if the user allows networking, it also allows network access to any arbitrary plugin.


protocol unix,inet,inet6,netlink,

# If you need net disable "net none" and uncomment the rest in this block
net none
#
#noblacklist ${HOME}/.pki/nssdb
#whitelist ${HOME}/.pki/nssdb
#
#private-etc ca-certificates,nsswitch.conf,hosts,gnutls,

private-bin cat,gawk,tr,realpath,cut,grep,basename,bash,obsidian,electron28,
private-etc libva.conf,vulkan,ati,xdg,gtk-3.0,drirc,fonts,
private-bin bash,basename,cat,cut,electron28,gawk,grep,obsidian,realpath,tr
glitsj16 marked this conversation as resolved.
Show resolved Hide resolved
private-etc @network,@tls-ca,gnutls,nsswitch.conf,
private-etc @x11,fonts,libva.conf
glitsj16 marked this conversation as resolved.
Show resolved Hide resolved

?HAS_APPIMAGE: private-lib

read-only ${HOME}/.config/vulkan
read-only ${HOME}/.config/kdedefaults
read-only ${HOME}/.config/vulkan

include electron-common.profile
glitsj16 marked this conversation as resolved.
Show resolved Hide resolved
Loading