-
Notifications
You must be signed in to change notification settings - Fork 584
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
New profile: prismlauncher #6558
Conversation
Also unrelated but if this does get merged, will it override my current profile and get everything running as if this was an in-built profile? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please follow the profile template. It gives you a lot of suggestion for further hardening your prismlauncher profile and keeps profiles consistent.
Yeah apologies for that, I just used the Firejail configuration tool and modified it, will fix. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks already good. Maybe we can harden it a bit more.
include disable-common.inc | ||
include disable-interpreters.inc | ||
include disable-proc.inc | ||
include disable-shell.inc |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Every added include disable-*.inc
is a win, you can try to add more.
include disable-shell.inc | ||
|
||
whitelist ${HOME}/.local/share/PrismLauncher | ||
whitelist ${HOME}/Downloads |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Every added include whitelist-*-common.inc
is a win, you can try to add more.
Co-authored-by: rusty-snake <[email protected]>
Co-authored-by: rusty-snake <[email protected]>
Thanks for the patch, merging in! @xplanthris, give it a try and bring in any other fixes if necessary. |
Thanks netblue30! |
no problem |
Relates to #6558. Suggested-by: @rusty-snake
Relates to #6558. Suggested-by: @rusty-snake
Created a firejail profile for prismlauncher, I've attempted to limit it as much as possible while allowing Minecraft to run.
As for Downloads, PrismLauncher can get files from Downloads, I'm not sure for what so I have set it to read-only.
If anyone has any ideas on improvement let me know.