github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

profiles: sort blacklist sections (#6289)

Browse source 
See etc/templates/profile.template.

This is a follow-up to #6286.
This commit is contained in:
Kelvin M. Klann 2024-03-27 12:13:21 +00:00 • committed by GitHub
parent e600fd7cf9
commit 0d8fb3d1b4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
11 changed files with 13 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

2
etc/profile-a-l/bpftop.profile
View file

@ -7,8 +7,8 @@ include bpftop.local
# Persistent global definitions
include globals.local
blacklist /usr/libexec
blacklist ${RUNUSER}
blacklist /usr/libexec
include disable-common.inc
include disable-devel.inc

2
etc/profile-a-l/cloneit.profile
View file

@ -7,8 +7,8 @@ include cloneit.local
# Persistent global definitions
include globals.local
blacklist /usr/libexec
blacklist ${RUNUSER}
blacklist /usr/libexec
include disable-common.inc
include disable-devel.inc

2
etc/profile-a-l/deadlink.profile
View file

@ -6,8 +6,8 @@ include deadlink.local
# Persistent global definitions
include globals.local
blacklist /usr/libexec
blacklist ${RUNUSER}
blacklist /usr/libexec
noblacklist ${HOME}/.config/deadlink

2
etc/profile-a-l/dexios.profile
View file

@ -7,8 +7,8 @@ include dexios.local
# Persistent global definitions
include globals.local
blacklist /usr/libexec
blacklist ${RUNUSER}
blacklist /usr/libexec
include disable-common.inc
include disable-devel.inc

2
etc/profile-a-l/editorconfiger.profile
View file

@ -6,8 +6,8 @@ include editorconfiger.local
# Persistent global definitions
include globals.local
blacklist /usr/libexec
blacklist ${RUNUSER}
blacklist /usr/libexec
include disable-common.inc
include disable-devel.inc

2
etc/profile-a-l/kdiff3.profile
View file

@ -12,8 +12,8 @@ noblacklist ${HOME}/.config/kdiff3rc
# Add the next line to your kdiff3.local if you don't need to compare files in disable-common.inc.
# By default we deny access only to .ssh and .gnupg.
#include disable-common.inc
blacklist ${HOME}/.ssh
blacklist ${HOME}/.gnupg
blacklist ${HOME}/.ssh
include disable-devel.inc
include disable-exec.inc

6
etc/profile-m-z/makepkg.profile
View file

@ -20,11 +20,11 @@ blacklist ${RUNUSER}/wayland-*
noblacklist ${HOME}/.gnupg
read-only ${HOME}/.gnupg/trustdb.gpg
read-only ${HOME}/.gnupg/pubring.kbx
blacklist ${HOME}/.gnupg/random_seed
blacklist ${HOME}/.gnupg/pubring.kbx~
blacklist ${HOME}/.gnupg/private-keys-v1.d
blacklist ${HOME}/.gnupg/crls.d
blacklist ${HOME}/.gnupg/openpgp-revocs.d
blacklist ${HOME}/.gnupg/private-keys-v1.d
blacklist ${HOME}/.gnupg/pubring.kbx~
blacklist ${HOME}/.gnupg/random_seed
# Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only.
noblacklist /var/lib/pacman

2
etc/profile-m-z/statusof.profile
View file

@ -7,8 +7,8 @@ include statusof.local
# Persistent global definitions
include globals.local
blacklist /usr/libexec
blacklist ${RUNUSER}
blacklist /usr/libexec
# Allow python (blacklisted by disable-interpreters.inc)
include allow-python3.inc

2
etc/profile-m-z/textroom.profile
View file

@ -6,8 +6,8 @@ include textroom.local
# Persistent global definitions
include globals.local
blacklist /usr/libexec
blacklist ${RUNUSER}/wayland-*
blacklist /usr/libexec
noblacklist ${HOME}/.config/textroom

2
etc/profile-m-z/torbrowser.profile
View file

@ -12,8 +12,8 @@ ignore dbus-user none
noblacklist ${HOME}/.cache/mozilla
noblacklist ${HOME}/.mozilla
blacklist /usr/libexec
blacklist /sys/class/net
blacklist /usr/libexec
mkdir ${HOME}/.cache/mozilla/torbrowser
mkdir ${HOME}/.mozilla

2
etc/profile-m-z/tvnamer.profile
View file

@ -6,8 +6,8 @@ include tvnamer.local
# Persistent global definitions
include globals.local
blacklist /usr/libexec
blacklist ${RUNUSER}
blacklist /usr/libexec
noblacklist ${HOME}/.config/tvnamer
noblacklist ${VIDEOS}