mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 22:01:33 -06:00
blacklist gjs in disable-interpreters (#3186)
* blacklist gjs in disable-interpreters * Update
This commit is contained in:
parent
baf72cb8f8
commit
0e85136b5d
11 changed files with 40 additions and 0 deletions
6
etc/allow-gjs.inc
Normal file
6
etc/allow-gjs.inc
Normal file
|
|
@ -0,0 +1,6 @@
|
|||
noblacklist ${PATH}/gjs
|
||||
noblacklist ${PATH}/gjs-console
|
||||
noblacklist /usr/lib/gjs
|
||||
noblacklist /usr/lib64/gjs
|
||||
noblacklist /usr/lib/libgjs*
|
||||
noblacklist /usr/lib64/libgjs*
|
||||
|
|
@ -2,6 +2,14 @@
|
|||
# Persistent customizations should go in a .local file.
|
||||
include disable-interpreters.local
|
||||
|
||||
# gjs
|
||||
blacklist ${PATH}/gjs
|
||||
blacklist ${PATH}/gjs-console
|
||||
blacklist /usr/lib/gjs
|
||||
blacklist /usr/lib64/gjs
|
||||
blacklist /usr/lib/libgjs*
|
||||
blacklist /usr/lib64/libgjs*
|
||||
|
||||
# Lua
|
||||
blacklist ${PATH}/lua*
|
||||
blacklist /usr/include/lua*
|
||||
|
|
|
|||
|
|
@ -13,6 +13,9 @@ noblacklist ${HOME}/.cache/org.gnome.Books
|
|||
noblacklist ${HOME}/.config/libreoffice
|
||||
noblacklist ${HOME}/.local/share/gnome-photos
|
||||
|
||||
# Allow gjs (blacklisted by disable-interpreters.inc)
|
||||
include allow-gjs.inc
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
include disable-interpreters.inc
|
||||
|
|
|
|||
|
|
@ -10,6 +10,9 @@ include globals.local
|
|||
noblacklist ${HOME}/.cache/org.gnome.Books
|
||||
noblacklist ${DOCUMENTS}
|
||||
|
||||
# Allow gjs (blacklisted by disable-interpreters.inc)
|
||||
include allow-gjs.inc
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
include disable-exec.inc
|
||||
|
|
|
|||
|
|
@ -6,6 +6,9 @@ include gnome-characters.local
|
|||
# Persistent global definitions
|
||||
include globals.local
|
||||
|
||||
# Allow gjs (blacklisted by disable-interpreters.inc)
|
||||
include allow-gjs.inc
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
include disable-exec.inc
|
||||
|
|
|
|||
|
|
@ -11,6 +11,9 @@ include globals.local
|
|||
noblacklist ${HOME}/.config/libreoffice
|
||||
noblacklist ${DOCUMENTS}
|
||||
|
||||
# Allow gjs (blacklisted by disable-interpreters.inc)
|
||||
include allow-gjs.inc
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
include disable-exec.inc
|
||||
|
|
|
|||
|
|
@ -13,6 +13,9 @@ noblacklist ${HOME}/.cache/org.gnome.Maps
|
|||
noblacklist ${HOME}/.local/share/flatpak
|
||||
noblacklist ${HOME}/.local/share/maps-places.json
|
||||
|
||||
# Allow gjs (blacklisted by disable-interpreters.inc)
|
||||
include allow-gjs.inc
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
include disable-exec.inc
|
||||
|
|
|
|||
|
|
@ -10,6 +10,9 @@ noblacklist ${MUSIC}
|
|||
noblacklist ${HOME}/.local/share/flatpak
|
||||
noblacklist ${HOME}/.local/share/Trash
|
||||
|
||||
# Allow gjs (blacklisted by disable-interpreters.inc)
|
||||
include allow-gjs.inc
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
include disable-exec.inc
|
||||
|
|
|
|||
|
|
@ -10,6 +10,9 @@ include globals.local
|
|||
|
||||
noblacklist ${HOME}/.cache/libgweather
|
||||
|
||||
# Allow gjs (blacklisted by disable-interpreters.inc)
|
||||
include allow-gjs.inc
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
include disable-exec.inc
|
||||
|
|
|
|||
|
|
@ -6,6 +6,8 @@ include polari.local
|
|||
# Persistent global definitions
|
||||
include globals.local
|
||||
|
||||
# Allow gjs (blacklisted by disable-interpreters.inc)
|
||||
include allow-gjs.inc
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
|
|
|
|||
|
|
@ -93,6 +93,9 @@ include globals.local
|
|||
# Allow ruby (blacklisted by disable-interpreters.inc)
|
||||
#include allow-ruby.inc
|
||||
|
||||
# Allow gjs (blacklisted by disable-interpreters.inc)
|
||||
#include allow-gjs.inc
|
||||
|
||||
# Allows files commonly used by IDEs
|
||||
#include allow-common-devel.inc
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue