├── .gitattributes ├── COPYING ├── README.md ├── flatpak ├── README.md ├── com.brave.Browser ├── com.frogatto.Frogatto ├── com.github.Anuken.Mindustry ├── com.github.tchx84.Flatseal ├── com.github.xournalpp.xournalpp ├── com.gitlab.newsflash ├── com.google.AndroidStudio ├── com.jetbrains.IntelliJ-IDEA-Community ├── com.jetbrains.PyCharm-Community ├── com.nextcloud.desktopclient.nextcloud ├── com.play0ad.zeroad ├── dev.lapce.lapce ├── global ├── io.github.celluloid_player.Celluloid ├── io.gitlab.news_flash.NewsFlash ├── io.osdn.simplesok ├── net.minetest.Minetest ├── net.supertuxkart.SuperTuxKart ├── net.veloren.airshipper ├── org.audacityteam.Audacity ├── org.gimp.GIMP ├── org.gnome.Calendar ├── org.gnome.EasyTAG ├── org.gnome.Evince ├── org.gnome.GHex ├── org.gnome.Hitori ├── org.gnome.Loupe ├── org.gnome.Maps ├── org.gnome.TextEditor ├── org.gnome.design.IconLibrary ├── org.gnome.eog ├── org.gnome.gitlab.somas.Apostrophe ├── org.inkscape.Inkscape ├── org.libreoffice.LibreOffice ├── org.onlyoffice.desktopeditors ├── org.openshot.OpenShot ├── org.sqlitebrowser.sqlitebrowser ├── org.supertuxproject.SuperTux ├── org.tuxfamily.StuntRally ├── org.wireshark.Wireshark └── org.xonotic.Xonotic └── systemd ├── NetworkManager.service.d+override.conf ├── README.md ├── avahi-daemon.service.d+override.conf ├── caddy.service.d+override.conf ├── cups.service.d+override.conf ├── dnsmasq.service.d+override.conf └── systemd-service-hardening.rst /.gitattributes: -------------------------------------------------------------------------------- 1 | *.inc linguist-language=text 2 | -------------------------------------------------------------------------------- /COPYING: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/COPYING -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/README.md -------------------------------------------------------------------------------- /flatpak/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/README.md -------------------------------------------------------------------------------- /flatpak/com.brave.Browser: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/com.brave.Browser -------------------------------------------------------------------------------- /flatpak/com.frogatto.Frogatto: -------------------------------------------------------------------------------- 1 | [Context] 2 | sockets=fallback-x11;x11 3 | -------------------------------------------------------------------------------- /flatpak/com.github.Anuken.Mindustry: -------------------------------------------------------------------------------- 1 | [Context] 2 | sockets=x11 3 | -------------------------------------------------------------------------------- /flatpak/com.github.tchx84.Flatseal: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/com.github.tchx84.Flatseal -------------------------------------------------------------------------------- /flatpak/com.github.xournalpp.xournalpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/com.github.xournalpp.xournalpp -------------------------------------------------------------------------------- /flatpak/com.gitlab.newsflash: -------------------------------------------------------------------------------- 1 | [Context] 2 | shared=network 3 | sockets=!pulseaudio 4 | -------------------------------------------------------------------------------- /flatpak/com.google.AndroidStudio: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/com.google.AndroidStudio -------------------------------------------------------------------------------- /flatpak/com.jetbrains.IntelliJ-IDEA-Community: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/com.jetbrains.IntelliJ-IDEA-Community -------------------------------------------------------------------------------- /flatpak/com.jetbrains.PyCharm-Community: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/com.jetbrains.PyCharm-Community -------------------------------------------------------------------------------- /flatpak/com.nextcloud.desktopclient.nextcloud: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/com.nextcloud.desktopclient.nextcloud -------------------------------------------------------------------------------- /flatpak/com.play0ad.zeroad: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/com.play0ad.zeroad -------------------------------------------------------------------------------- /flatpak/dev.lapce.lapce: -------------------------------------------------------------------------------- 1 | [Context] 2 | sockets=!ssh-auth 3 | 4 | [Session Bus Policy] 5 | org.freedesktop.Flatpak=none 6 | -------------------------------------------------------------------------------- /flatpak/global: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/global -------------------------------------------------------------------------------- /flatpak/io.github.celluloid_player.Celluloid: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/io.github.celluloid_player.Celluloid -------------------------------------------------------------------------------- /flatpak/io.gitlab.news_flash.NewsFlash: -------------------------------------------------------------------------------- 1 | [Context] 2 | shared=network 3 | sockets=!pulseaudio 4 | -------------------------------------------------------------------------------- /flatpak/io.osdn.simplesok: -------------------------------------------------------------------------------- 1 | [Context] 2 | sockets=wayland 3 | devices=!all;dri 4 | -------------------------------------------------------------------------------- /flatpak/net.minetest.Minetest: -------------------------------------------------------------------------------- 1 | [Context] 2 | shared=network 3 | sockets=x11 4 | devices=!all;dri 5 | -------------------------------------------------------------------------------- /flatpak/net.supertuxkart.SuperTuxKart: -------------------------------------------------------------------------------- 1 | [Context] 2 | shared=network 3 | devices=!all;dri 4 | -------------------------------------------------------------------------------- /flatpak/net.veloren.airshipper: -------------------------------------------------------------------------------- 1 | [Context] 2 | shared=network 3 | -------------------------------------------------------------------------------- /flatpak/org.audacityteam.Audacity: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/org.audacityteam.Audacity -------------------------------------------------------------------------------- /flatpak/org.gimp.GIMP: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/org.gimp.GIMP -------------------------------------------------------------------------------- /flatpak/org.gnome.Calendar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/org.gnome.Calendar -------------------------------------------------------------------------------- /flatpak/org.gnome.EasyTAG: -------------------------------------------------------------------------------- 1 | [Context] 2 | filesystems=xdg-music; 3 | -------------------------------------------------------------------------------- /flatpak/org.gnome.Evince: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/org.gnome.Evince -------------------------------------------------------------------------------- /flatpak/org.gnome.GHex: -------------------------------------------------------------------------------- 1 | [Session Bus Policy] 2 | org.gtk.vfs.*=none 3 | -------------------------------------------------------------------------------- /flatpak/org.gnome.Hitori: -------------------------------------------------------------------------------- 1 | [Context] 2 | devices=dri 3 | -------------------------------------------------------------------------------- /flatpak/org.gnome.Loupe: -------------------------------------------------------------------------------- 1 | [Context] 2 | filesystems=xdg-pictures:ro; 3 | 4 | [Session Bus Policy] 5 | org.gtk.vfs.*=none 6 | -------------------------------------------------------------------------------- /flatpak/org.gnome.Maps: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/org.gnome.Maps -------------------------------------------------------------------------------- /flatpak/org.gnome.TextEditor: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/org.gnome.TextEditor -------------------------------------------------------------------------------- /flatpak/org.gnome.design.IconLibrary: -------------------------------------------------------------------------------- 1 | [Session Bus Policy] 2 | org.gnome.design.IconLibrary.SearchProvider=none 3 | -------------------------------------------------------------------------------- /flatpak/org.gnome.eog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/org.gnome.eog -------------------------------------------------------------------------------- /flatpak/org.gnome.gitlab.somas.Apostrophe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/org.gnome.gitlab.somas.Apostrophe -------------------------------------------------------------------------------- /flatpak/org.inkscape.Inkscape: -------------------------------------------------------------------------------- 1 | [Context] 2 | devices=dri 3 | 4 | [Session Bus Policy] 5 | org.gtk.vfs.*=none 6 | -------------------------------------------------------------------------------- /flatpak/org.libreoffice.LibreOffice: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/org.libreoffice.LibreOffice -------------------------------------------------------------------------------- /flatpak/org.onlyoffice.desktopeditors: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/org.onlyoffice.desktopeditors -------------------------------------------------------------------------------- /flatpak/org.openshot.OpenShot: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/org.openshot.OpenShot -------------------------------------------------------------------------------- /flatpak/org.sqlitebrowser.sqlitebrowser: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/org.sqlitebrowser.sqlitebrowser -------------------------------------------------------------------------------- /flatpak/org.supertuxproject.SuperTux: -------------------------------------------------------------------------------- 1 | [Context] 2 | devices=!all;dri 3 | -------------------------------------------------------------------------------- /flatpak/org.tuxfamily.StuntRally: -------------------------------------------------------------------------------- 1 | [Context] 2 | devices=!all;dri 3 | -------------------------------------------------------------------------------- /flatpak/org.wireshark.Wireshark: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/flatpak/org.wireshark.Wireshark -------------------------------------------------------------------------------- /flatpak/org.xonotic.Xonotic: -------------------------------------------------------------------------------- 1 | [Context] 2 | devices=!all;dri 3 | -------------------------------------------------------------------------------- /systemd/NetworkManager.service.d+override.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/systemd/NetworkManager.service.d+override.conf -------------------------------------------------------------------------------- /systemd/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/systemd/README.md -------------------------------------------------------------------------------- /systemd/avahi-daemon.service.d+override.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/systemd/avahi-daemon.service.d+override.conf -------------------------------------------------------------------------------- /systemd/caddy.service.d+override.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/systemd/caddy.service.d+override.conf -------------------------------------------------------------------------------- /systemd/cups.service.d+override.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/systemd/cups.service.d+override.conf -------------------------------------------------------------------------------- /systemd/dnsmasq.service.d+override.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/systemd/dnsmasq.service.d+override.conf -------------------------------------------------------------------------------- /systemd/systemd-service-hardening.rst: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rusty-snake/kyst/HEAD/systemd/systemd-service-hardening.rst --------------------------------------------------------------------------------