Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New profile: obsidian #6314

Open
wants to merge 13 commits into
base: master
Choose a base branch
from
1 change: 1 addition & 0 deletions etc/inc/disable-programs.inc
Original file line number Diff line number Diff line change
Expand Up @@ -1254,3 +1254,4 @@ blacklist /var/games/slashem
blacklist /var/games/vulturesclaw
blacklist /var/games/vultureseye
blacklist /var/lib/games/Maelstrom-Scores
blacklist ${HOME}/.config/obsidian
kmk3 marked this conversation as resolved.
Show resolved Hide resolved
24 changes: 24 additions & 0 deletions etc/profile-m-z/obsidian.profile
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
# Firejail profile for obsidian-wayland
glitsj16 marked this conversation as resolved.
Show resolved Hide resolved
# Description: Personal knowledge base and note-taking with Markdown files.
# This file is overwritten after every install/update
# Persistent local customizations
include obsidian-wayland.local
kmk3 marked this conversation as resolved.
Show resolved Hide resolved
# Persistent global definitions
include globals.local

noblacklist ${DOCUMENTS}
noblacklist ${HOME}/.config/git
noblacklist ${HOME}/.config/obsidian
noblacklist ${HOME}/.gitconfig

ipc-namespace
nonewprivs
noroot
protocol unix,inet,inet6
#net none
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What does it do network-wise?

Just download and update plugins?

I'd leave a comment to clarify:

Suggested change
#net none
#net none # networking is needed to download/update plugins

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Check for obsidian updates, check for plugin updates, review and install plugins in the built in plugin manager, and network features for plugins that use them. In other words, if the user allows networking, it also allows network access to any arbitrary plugin.


private-bin basename,bash,cat,cut,electron,electron[0-9],electron[0-9][0-9],gawk,grep,obsidian,realpath,tr
private-etc @network,@tls-ca,@x11,gnutls,libva.conf

# Redirect
include electron-common.profile
glitsj16 marked this conversation as resolved.
Show resolved Hide resolved
Loading