Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

New profile: obsidian #6314

Open
wants to merge 13 commits into
base: master
Choose a base branch
from
Open

New profile: obsidian #6314

Show file tree
Hide file tree
Changes from 4 commits
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
ca41062
profiles: add a profile for obsidian
konstantin1722 Apr 17, 2024
7a935a4
profiles: update obsidian profile file
konstantin1722 Apr 23, 2024
dc3a42c
profiles: rename obsidian profile file
konstantin1722 Apr 24, 2024
bb8c9d0
profiles: fix obsidian profile flaws
konstantin1722 Apr 25, 2024
6969eca
Update etc/profile-m-z/obsidian.profile
glitsj16 Apr 25, 2024
0583908
Update etc/profile-m-z/obsidian.profile
glitsj16 Apr 25, 2024
5e24bef
Update etc/profile-m-z/obsidian.profile
glitsj16 Apr 25, 2024
5033121
Update etc/profile-m-z/obsidian.profile
glitsj16 Apr 25, 2024
cbfa80f
Update etc/profile-m-z/obsidian.profile
glitsj16 Apr 25, 2024
d909387
Update etc/profile-m-z/obsidian.profile
glitsj16 Apr 25, 2024
2cb0795
Update etc/profile-m-z/obsidian.profile
konstantin1722 Apr 28, 2024
1ca7a84
Update etc/profile-m-z/obsidian.profile
konstantin1722 Apr 28, 2024
e2f683d
Update etc/profile-m-z/obsidian.profile
konstantin1722 May 5, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions etc/inc/disable-programs.inc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1254,3 +1254,4 @@ blacklist /var/games/slashem
blacklist /var/games/vulturesclaw
blacklist /var/games/vultureseye
blacklist /var/lib/games/Maelstrom-Scores
blacklist ${HOME}/.config/obsidian
kmk3 marked this conversation as resolved.
Show resolved Hide resolved
42 changes: 42 additions & 0 deletions etc/profile-m-z/obsidian.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,42 @@
# Firejail profile for obsidian-wayland
glitsj16 marked this conversation as resolved.
Show resolved Hide resolved
# Description: Personal knowledge base and note-taking with Markdown files.
# This file is overwritten after every install/update
# Persistent local customizations
include obsidian-wayland.local
kmk3 marked this conversation as resolved.
Show resolved Hide resolved
# Persistent global definitions
include globals.local

noblacklist ${HOME}/.cache/AMD
noblacklist ${HOME}/.cache/mesa_shader_cache
noblacklist ${HOME}/.cache/nvidia
noblacklist ${HOME}/.local/share/applnk
noblacklist ${HOME}/.local/share/vulkan
noblacklist ${HOME}/.local/share/vulkan
noblacklist ${HOME}/.config/kdedefaults
noblacklist ${HOME}/.config/obsidian
noblacklist ${HOME}/.config/vulkan
glitsj16 marked this conversation as resolved.
Show resolved Hide resolved

whitelist ${HOME}/.cache/AMD
whitelist ${HOME}/.cache/mesa_shader_cache
whitelist ${HOME}/.cache/nvidia
whitelist ${HOME}/.local/share/applnk
whitelist ${HOME}/.local/share/vulkan
whitelist ${HOME}/.local/share/vulkan
whitelist ${HOME}/.config/kdedefaults
whitelist ${HOME}/.config/obsidian
kmk3 marked this conversation as resolved.
Show resolved Hide resolved
whitelist ${HOME}/.config/vulkan
glitsj16 marked this conversation as resolved.
Show resolved Hide resolved

ipc-namespace
nonewprivs
noroot
protocol unix,inet,inet6
#net none
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What does it do network-wise?

Just download and update plugins?

I'd leave a comment to clarify:

Suggested change
#net none
#net none # networking is needed to download/update plugins

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Check for obsidian updates, check for plugin updates, review and install plugins in the built in plugin manager, and network features for plugins that use them. In other words, if the user allows networking, it also allows network access to any arbitrary plugin.


private-bin bash,basename,cat,cut,electron28,gawk,grep,obsidian,realpath,tr
glitsj16 marked this conversation as resolved.
Show resolved Hide resolved
private-etc @network,@tls-ca,gnutls,nsswitch.conf,
private-etc @x11,fonts,libva.conf
glitsj16 marked this conversation as resolved.
Show resolved Hide resolved

read-only ${HOME}/.config/kdedefaults
read-only ${HOME}/.config/vulkan
glitsj16 marked this conversation as resolved.
Show resolved Hide resolved

include electron-common.profile
glitsj16 marked this conversation as resolved.
Show resolved Hide resolved
Loading