You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# This is a Portable configuration, using TOML 1.1.0
2
+
# For syntax, check https://toml.io/en/v1.1.0
3
+
4
+
# The metadata section contains information of your sandbox.
5
+
[metadata]
6
+
# This is your Application ID, avoid conflict. Should be a reversed DNS name.
7
+
# If the author's DNS domain name contains hyphen/minus characters ('-'), which are not allowed in D-Bus interface names, they should be replaced by underscores. If the DNS domain name contains a digit immediately following a period ('.'), which is also not allowed in interface names), the interface name should add an underscore before that digit. For example, if the owner of 7-zip.org defined an interface for out-of-process plugins, it might be named org._7_zip.Plugin.
8
+
appID = "org.mozilla.thunderbird"
9
+
10
+
# This is a friendly name of an application. It should only contain ASCII characters and not spaces.
11
+
friendlyName = "Thunderbird"
12
+
13
+
# This is the state directory of your application, relative to "XDG_DATA_HOME".
14
+
stateDirectory = "Thunderbird_Data"
15
+
16
+
# The exec section defines how the underlying process is started.
17
+
[exec]
18
+
# target defines the program to start.
19
+
target = "/usr/lib/thunderbird/thunderbird"
20
+
21
+
# The processes section defines how Portable tracks tasks.
22
+
[processes]
23
+
# Watch for spawned commands. When all of them exits, automatically terminate the sandbox. Defaults to true.
24
+
track = true
25
+
26
+
# The system section controls general permission.
27
+
[system]
28
+
# Whether or not an application can call Inhibit Portal to prevent automatic suspend. Defaults to false.
29
+
inhibitSuspend = false
30
+
31
+
# Whether or not an application can call GlobalShortcuts Portal to request shortcuts registration. Defaults to false.
32
+
globalShortcuts = false
33
+
34
+
# Whether or not to expose all GPUs and prefer discrete graphics card. By default, Portable blocks any GPU except the integrated one to improve user experience and power consumption on hybrid systems.
35
+
gameMode = false
36
+
37
+
# Inhibit suspend and idle on behalf of applications. Requires system.inhibitSuspend being true
38
+
inhibitOnBehalf = false
39
+
40
+
# The network section defines behaviour of Portable's network firewall. Requires netsock for filtering.
41
+
[network]
42
+
# Whether or not an application can use network interfaces. Defaults to true.
43
+
enable = true
44
+
45
+
# Whether or not to enable filtering on network packets. Defaults to false.
46
+
filter = false
47
+
48
+
# Destinations to deny. Only effective if netsock is running and listening on /run/netsock/control.sock. IP literals are resolved directly, while strings are mapped to IP addresses by the system resolver. A special string of "private" means private IPs. Note that :53 is allowed regardless to avoid breaking DNS. Defaults to none, meaning sandbox can connect to whatever address.
49
+
filterDest = ["private"]
50
+
51
+
# The privacy section defines several device exposure preference. By default, Portable does not allow apps to see physical devices. This includes discrete GPUs when gameMode is off, input devices, cameras, and all other PCI devices.
52
+
[privacy]
53
+
# When false, prevents application from connecting to X server on Wayland. Defaults to true.
54
+
x11 = false
55
+
56
+
# When false, prevents application from connecting to legacy notifications endpoint. Defaults to true.
57
+
classicNotifications = true
58
+
59
+
# When true, exposes camera devices in the sandbox. Defaults to false.
60
+
cameras = false
61
+
62
+
# When true, allows application to connect to PipeWire server. Note that a proxy is set up to prevent privileged actions. Defaults to false.
63
+
pipeWire = false
64
+
65
+
# When true, allows application to receive Input events, particularly useful for Games. Defaults to false.
66
+
input = false
67
+
68
+
# Do not use. May break apps.
69
+
[advanced]
70
+
zink = false
71
+
qt5Compat = true
72
+
mprisName = []
73
+
trayWake = false
74
+
kDEStatus = true
75
+
flatpakInfo = true
76
+
77
+
# Enables landlock for additional protection, breaks many apps.
0 commit comments