forked from netblue30/firejail
-
Notifications
You must be signed in to change notification settings - Fork 0
/
firecfg.config
992 lines (992 loc) · 12.4 KB
/
firecfg.config
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
# /etc/firejail/firecfg.config - firecfg utility configuration file
# This is the list of programs in alphabetical order handled by firecfg utility
#
# Note: Normal comment lines should start with `# ` and commented code lines
# should start with just `#` (no spaces).
0ad
1password
2048-qt
Books
Builder
Cheese
Cryptocat
Cyberfox
Discord
DiscordCanary
DiscordPTB
Documents
FBReader
FossaMail
Fritzing
Gitter
JDownloader
Logs
Maelstrom
Maps
Mathematica
Natron
PCSX2
PPSSPPQt
PPSSPPSDL
Postman
QMediathekView
QOwnNotes
Screenshot
Telegram
Viber
VirtualBox
XMind
Xephyr
ZeGrapher
abiword
abrowser
akonadi_control
akregator
alacarte
alpine
alpinef
amarok
amule
amuled
android-studio
ani-cli
anydesk
apktool
apostrophe
#ar # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
arch-audit
archaudit-report
ardour4
ardour5
arduino
aria2c
ark
arm
artha
assogiate
asunder
#atom
#atom-beta
#atool # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
atril
atril-previewer
atril-thumbnailer
audacious
audacity
audio-recorder
authenticator
authenticator-rs
autokey-gtk
autokey-qt
autokey-run
autokey-shell
avidemux3_cli
avidemux3_jobs_qt5
avidemux3_qt5
aweather
ballbuster
baloo_file
baloo_filemetadata_temp_extractor
balsa
baobab
barrier
basilisk
bcompare
beaker
bibletime
bijiben
bitcoin-qt
bitlbee
bitwarden
bleachbit
blender
blender-2.8
bless
blobby
blobwars
bluefish
bnox
brackets
brasero
brave
brave-browser
brave-browser-beta
brave-browser-dev
brave-browser-nightly
brave-browser-stable
#bunzip2 # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
#bzcat # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
bzflag
#bzip2 # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
cachy-browser
calibre
calligra
calligraauthor
calligraconverter
calligraflow
calligragemini
calligraplan
calligraplanwork
calligrasheets
calligrastage
calligrawords
cameramonitor
cantata
catfish
cawbird
celluloid
chafa
chatterino
checkbashisms
cheese
cherrytree
chromium
chromium-browser
chromium-browser-privacy
chromium-freeworld
cin
cinelerra
cinelerra-gg
clac
clamdscan
clamdtop
clamscan
clamtk
claws-mail
clawsker
clementine
clion
clion-eap
clipgrab
clipit
cliqz
clocks
cmus
code
code-oss
codium
cointop
cola
colorful
com.github.bleakgrey.tootle
com.github.dahenson.agenda
com.github.johnfactotum.Foliate
com.github.phase1geo.minder
com.github.tchx84.Flatseal
com.gitlab.newsflash
conkeror
conky
conplay
corebird
coyim
crawl
crawl-tiles
crow
cryptocat
cvlc
cyberfox
d-feet
daisy
darktable
dconf-editor
ddgr
ddgtk
deadbeef
deluge
desktopeditors
devhelp
dex2jar
dia
dig
digikam
dillo
dino
dino-im
discord
discord-canary
discord-ptb
display
display-im6.q16
dnox
dnscrypt-proxy
dnsmasq
dolphin-emu
dooble
dooble-qt4
dosbox
dragon
drawio
drill
dropbox
easystroke
ebook-convert
ebook-edit
ebook-meta
ebook-polish
ebook-viewer
electron-mail
electrum
element-desktop
elinks
empathy
enchant
enchant-2
enchant-lsmod
enchant-lsmod-2
engrampa
enox
enpass
eog
eom
ephemeral
#epiphany # see #2995
equalx
et
etr
evince
evince-previewer
evince-thumbnailer
#evolution # see #3647
exfalso
exiftool
falkon
fbreader
feedreader
feh
ferdi
#ffmpeg
ffmpegthumbnailer
ffplay
ffprobe
file-roller
filezilla
firedragon
firefox
firefox-beta
firefox-developer-edition
firefox-esr
firefox-nightly
firefox-wayland
firefox-x11
five-or-more
fix-qdf
flacsplt
flameshot
flashpeak-slimjet
flowblade
font-manager
fontforge
fossamail
four-in-a-row
fractal
franz
freecad
freecadcmd
freeciv
freeciv-gtk3
freeciv-mp-gtk3
freecol
freemind
freeoffice-planmaker
freeoffice-presentations
freeoffice-textmaker
freetube
freshclam
frogatto
frozen-bubble
ftp
funnyboat
gajim
gajim-history-manager
galculator
gallery-dl
gapplication
gcalccmd
gcloud
gconf-editor
gdu
geany
geary
gedit
geekbench
geeqie
gfeeds
ghb
ghostwriter
gimp
gimp-2.10
gimp-2.8
gist
gist-paste
git-cola
gitg
github-desktop
gitter
#gjs # https://github.com/netblue30/firejail/issues/3333#issuecomment-612601102
gl-117
glaxium
globaltime
gmpc
gnome-2048
gnome-books
gnome-builder
gnome-calculator
gnome-calendar
gnome-character-map
gnome-characters
gnome-chess
gnome-clocks
gnome-contacts
gnome-documents
gnome-font-viewer
gnome-hexgl
gnome-klotski
gnome-latex
gnome-logs
gnome-mahjongg
gnome-maps
gnome-mines
gnome-mplayer
gnome-mpv
gnome-music
gnome-nettool
gnome-nibbles
gnome-passwordsafe
gnome-photos
gnome-pomodoro
gnome-recipes
gnome-robots
gnome-schedule
gnome-screenshot
gnome-sound-recorder
gnome-sudoku
gnome-system-log
gnome-taquin
gnome-tetravex
gnome-todo
gnome-twitch
gnome-weather
gnote
gnubik
godot
godot3
goldendict
goobox
google-chrome
google-chrome-beta
google-chrome-stable
google-chrome-unstable
google-earth
google-earth-pro
google-play-music-desktop-player
googler
gpa
gpicview
gpredict
gradio
gramps
gravity-beams-and-evaporating-stars
gthumb
gtk-lbry-viewer
gtk-pipe-viewer
gtk-straw-viewer
gtk-youtube-viewer
gtk2-youtube-viewer
gtk3-youtube-viewer
guayadeque
gucharmap
gummi
gwenview
handbrake
handbrake-gtk
hashcat
hedgewars
hexchat
highlight
hitori
homebank
host
hugin
hyperrogue
iagno
icecat
icedove
iceweasel
idea
idea.sh
ideaIC
imagej
img2txt
impressive
imv
inkscape
inkview
inox
io.github.lainsce.Notejot
ipcalc
ipcalc-ng
iridium
iridium-browser
jami
jd-gui
jdownloader
jerry
jitsi
jitsi-meet-desktop
journal-viewer
jumpnbump
jumpnbump-menu
k3b
kaffeine
kalgebra
kalgebramobile
karbon
kate
kazam
kcalc
#kdeinit4
kdenlive
kdiff3
keepass
keepass2
keepassx
keepassx2
keepassxc
keepassxc-cli
keepassxc-proxy
#kfind
kget
kid3
kid3-cli
kid3-qt
kino
kiwix-desktop
klatexformula
klatexformula_cmdl
klavaro
kmail
kmplayer
knotes
kodi
konversation
kopete
krita
#krunner
ktorrent
ktouch
kube
#kwin_x11
kwrite
lbry-viewer
leafpad
#less # breaks man
librecad
libreoffice
librewolf
librewolf-nightly
lifeograph
liferea
lightsoff
lincity-ng
links
links2
linphone
linuxqq
lmms
lobase
lobster
localc
lodraw
loffice
lofromtemplate
loimpress
lollypop
lomath
loweb
lowriter
#lrunzip # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
#lrz # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
#lrzcat # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
#lrzip # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
#lrztar # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
#lrzuntar # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
luminance-hdr
lximage-qt
lxmusic
lynx
lyx
macrofusion
magicor
man
manaplus
marker
masterpdfeditor
masterpdfeditor4
masterpdfeditor5
mate-calc
mate-calculator
mate-color-select
mate-dictionary
mathematica
matrix-mirage
mattermost-desktop
mcabber
mcomix
md5sum
mediainfo
mediathekview
megaglest
megaglest_editor
meld
mencoder
mendeleydesktop
menulibre
meteo-qt
microsoft-edge
microsoft-edge-beta
microsoft-edge-dev
microsoft-edge-stable
midori
min
mindless
minecraft-launcher
minetest
minitube
mirage
mirrormagic
mocp
mousepad
mov-cli
mp3splt
mp3splt-gtk
mp3wrap
mpDris2
mpg123
mpg123-alsa
mpg123-id3dump
mpg123-jack
mpg123-nas
mpg123-openal
mpg123-oss
mpg123-portaudio
mpg123-pulse
mpg123-strip
mpg123.bin
mplayer
mpsyt
mpv
mrrescue
ms-excel
ms-office
ms-onenote
ms-outlook
ms-powerpoint
ms-skype
ms-word
mtpaint
mullvad-browser
multimc
multimc5
mumble
mupdf
mupdf-gl
mupdf-x11
mupdf-x11-curl
mupen64plus
muraster
musescore
musictube
musixmatch
mutool
mutt
mypaint
mypaint-ora-thumbnailer
natron
ncdu
ncdu2
neochat
neomutt
netactview
nethack
netsurf
neverball
neverputt
newsbeuter
newsboat
newsflash
nextcloud
nextcloud-desktop
nheko
nicotine
nitroshare
nitroshare-cli
nitroshare-nmh
nitroshare-send
nitroshare-ui
nomacs
notable
nslookup
nuclear
nylas
nyx
obs
ocenaudio
odt2txt
oggsplt
okular
onboard
onionshare
onionshare-cli
onionshare-gui
ooffice
ooviewdoc
open-invaders
openarena
openarena_ded
opencity
openclonk
openmw
openmw-launcher
openoffice.org
openshot
openshot-qt
openstego
openttd
opera
opera-beta
opera-developer
orage
ostrichriders
otter-browser
out123
palemoon
#pandoc
parole
patch
pavucontrol
pavucontrol-qt
pcsxr
pdfchain
pdfmod
pdfsam
pdftotext
peek
penguin-command
photoflare
picard
pidgin
pinball
ping
pingus
pinta
pioneer
pipe-viewer
pithos
pitivi
pix
planmaker18
planmaker18free
playonlinux
pluma
plv
pngquant
polari
porn-cli
postman
ppsspp
pragha
presentations18
presentations18free
profanity
psi
psi-plus
pybitmessage
#pycharm-community # FB note: may enable later
#pycharm-professional
#pzstd # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
qbittorrent
qcomicbook
qemu-launcher
#qemu-system-x86_64
qgis
qlipper
qmmp
qnapi
qpdf
qpdfview
qq
qt-faststart
qtox
quadrapassel
quassel
quaternion
quiterss
qupzilla
qutebrowser
raincat
rambox
reader
redeclipse
rednotebook
redshift
regextester
remmina
retroarch
rhythmbox
rhythmbox-client
ricochet
riot-desktop
riot-web
ripperx
ristretto
rocketchat
rpcs3
rssguard
rtorrent
runenpass.sh
sayonara
scallion
scorched3d
scorchwentbonkers
scribus
sdat2img
seafile-applet
seahorse
seahorse-adventures
seahorse-daemon
seahorse-tool
seamonkey
seamonkey-bin
secret-tool
sha1sum
sha224sum
sha256sum
sha348sum
sha512sum
shellcheck
shortwave
shotcut
shotwell
signal-cli
signal-desktop
silentarmy
simple-scan
simplescreenrecorder
simutrans
skanlite
skypeforlinux
slack
slashem
smplayer
smtube
smuxi-frontend-gnome
sniffnet
snox
soffice
sol
sound-juicer
soundconverter
spectacle
spectral
spotify
sqlitebrowser
ssh
#ssh-agent # problems on Arch with Fish shell (#1568)
standardnotes-desktop
start-tor-browser
steam
steam-native
steam-runtime
stellarium
straw-viewer
strawberry
strings
studio.sh
subdownloader
sum
supertux2
supertuxkart
surf
sushi
swell-foop
sylpheed
synfigstudio
sysprof
sysprof-cli
tb-starter-wrapper
teams
teams-for-linux
teamspeak3
teeworlds
telegram
telegram-desktop
telnet
terasology
tesseract
textmaker18
textmaker18free
thunderbird
thunderbird-beta
thunderbird-wayland
tilp
tor-browser
tor-browser-ar
tor-browser-ca
tor-browser-cs
tor-browser-da
tor-browser-de
tor-browser-el
tor-browser-en
tor-browser-en-us
tor-browser-es
tor-browser-es-es
tor-browser-fa
tor-browser-fr
tor-browser-ga-ie
tor-browser-he
tor-browser-hu
tor-browser-id
tor-browser-is
tor-browser-it
tor-browser-ja
tor-browser-ka
tor-browser-ko
tor-browser-nb
tor-browser-nl
tor-browser-pl
tor-browser-pt-br
tor-browser-ru
tor-browser-sv-se
tor-browser-tr
tor-browser-vi
tor-browser-zh-cn
tor-browser-zh-tw
torbrowser
torbrowser-launcher
torcs
totem
tracker
transgui
transmission-cli
transmission-create
transmission-daemon
transmission-edit
transmission-gtk
transmission-qt
transmission-remote
transmission-remote-cli
transmission-remote-gtk
transmission-show
tremulous
trojita
truecraft
tshark
tuir
tutanota-desktop
tuxguitar
tvbrowser
twitch
udiskie
uefitool
uget-gtk
unbound
unf
unknown-horizons
#unzstd # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
url-eater
utox
uudeview
uzbl-browser
viewnior
viking
virtualbox
vivaldi
vivaldi-beta
vivaldi-snapshot
vivaldi-stable
vlc
#vmplayer # unable to install kernel modules (see #5861)
#vmware # unable to install kernel modules (see #5861)
#vmware-player # unable to install kernel modules (see #5861)
#vmware-workstation # unable to install kernel modules (see #5861)
vscodium
vulturesclaw
vultureseye
vym
w3m
warmux
warsow
warzone2100
waterfox
waterfox-classic
waterfox-current
webstorm
weechat
weechat-curses
wesnoth
wget
wget2
whalebird
whois
widelands
wine
wire-desktop
wireshark
wireshark-gtk
wireshark-qt
wordwarvi
wpp
wps
wpspdf
x2goclient
xbill
xcalc
xchat
xed
xfburn
xfce4-dict
xfce4-mixer
xfce4-notes
xfce4-screenshooter
xiphos
xlinks
xlinks2
xmms
xmr-stak
xonotic
xonotic-glx
xonotic-sdl
xournal
xournalpp
xpdf
xplayer
xplayer-audio-preview
xplayer-video-thumbnailer
xpra
xreader
xreader-previewer
xreader-thumbnailer
xviewer
yandex-browser
yelp
youtube
youtube-dl
youtube-dl-gui
youtube-viewer
youtubemusic-nativefier
yt-dlp
ytmdesktop
zaproxy
zart
zathura
zeal
zim
zlib-flate
zoom
#zpaq # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
#zstd # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
#zstdcat # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
#zstdgrep # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
#zstdless # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
#zstdmt # disable until we fix CLI archivers for makepkg on Arch (see discussion in #3095)
zulip