github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

Revert allow/deny additional files

Browse source 
See #4410
8b50039a1f
This commit is contained in:
Fred Barclay 2021-07-28 14:12:41 -05:00
parent f591e8e070
commit 2e4d52ec60
4 changed files with 38 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

8
etc/profile-a-l/lifeograph.profile
View file

@ -6,9 +6,9 @@ include lifeograph.local
# Persistent global definitions
include globals.local
nodeny ${DOCUMENTS}
noblacklist ${DOCUMENTS}
deny /usr/libexec
blacklist /usr/libexec
include disable-common.inc
include disable-devel.inc
@ -19,8 +19,8 @@ include disable-programs.inc
include disable-shell.inc
include disable-xdg.inc
allow ${DOCUMENTS}
allow /usr/share/lifeograph
whitelist ${DOCUMENTS}
whitelist /usr/share/lifeograph
include whitelist-common.inc
include whitelist-runuser-common.inc
include whitelist-usr-share-common.inc

10
etc/profile-m-z/io.github.lainsce.Notejot.profile
View file

@ -6,8 +6,8 @@ include io.github.lainsce.Notejot.local
# Persistent global definitions
include globals.local
nodeny ${HOME}/.cache/io.github.lainsce.Notejot
nodeny ${HOME}/.local/share/io.github.lainsce.Notejot
noblacklist ${HOME}/.cache/io.github.lainsce.Notejot
noblacklist ${HOME}/.local/share/io.github.lainsce.Notejot
include disable-common.inc
include disable-devel.inc
@ -20,9 +20,9 @@ include disable-xdg.inc
mkdir ${HOME}/.cache/io.github.lainsce.Notejot
mkdir ${HOME}/.local/share/io.github.lainsce.Notejot
allow ${HOME}/.cache/io.github.lainsce.Notejot
allow ${HOME}/.local/share/io.github.lainsce.Notejot
allow /usr/libexec/webkit2gtk-4.0
whitelist ${HOME}/.cache/io.github.lainsce.Notejot
whitelist ${HOME}/.local/share/io.github.lainsce.Notejot
whitelist /usr/libexec/webkit2gtk-4.0
include whitelist-common.inc
include whitelist-runuser-common.inc
include whitelist-usr-share-common.inc

26
etc/profile-m-z/rednotebook.profile
View file

@ -6,11 +6,11 @@ include rednotebook.local
# Persistent global definitions
include globals.local
nodeny ${HOME}/.cache/rednotebook
nodeny ${HOME}/.rednotebook
noblacklist ${HOME}/.cache/rednotebook
noblacklist ${HOME}/.rednotebook
# Allow python (blacklisted by disable-interpreters.inc)
include allow-python3.inc
# whitelist python (blacklisted by disable-interpreters.inc)
include whitelist-python3.inc
include disable-common.inc
include disable-devel.inc
@ -22,15 +22,15 @@ include disable-shell.inc
mkdir ${HOME}/.cache/rednotebook
mkdir ${HOME}/.rednotebook
allow ${HOME}/.cache/rednotebook
allow ${HOME}/.rednotebook
allow ${DESKTOP}
allow ${DOCUMENTS}
allow ${DOWNLOADS}
allow ${MUSIC}
allow ${PICTURES}
allow ${VIDEOS}
allow /usr/libexec/webkit2gtk-4.0
whitelist ${HOME}/.cache/rednotebook
whitelist ${HOME}/.rednotebook
whitelist ${DESKTOP}
whitelist ${DOCUMENTS}
whitelist ${DOWNLOADS}
whitelist ${MUSIC}
whitelist ${PICTURES}
whitelist ${VIDEOS}
whitelist /usr/libexec/webkit2gtk-4.0
include whitelist-common.inc
include whitelist-runuser-common.inc
include whitelist-usr-share-common.inc

32
etc/profile-m-z/zim.profile
View file

@ -6,14 +6,14 @@ include zim.local
# Persistent global definitions
include globals.local
nodeny ${HOME}/.cache/zim
nodeny ${HOME}/.config/zim
noblacklist ${HOME}/.cache/zim
noblacklist ${HOME}/.config/zim
# Allow python (blacklisted by disable-interpreters.inc)
include allow-python2.inc
include allow-python3.inc
# whitelist python (blacklisted by disable-interpreters.inc)
include whitelist-python2.inc
include whitelist-python3.inc
deny /usr/libexec
blacklist /usr/libexec
include disable-common.inc
include disable-devel.inc
@ -26,16 +26,16 @@ include disable-shell.inc
mkdir ${HOME}/.cache/zim
mkdir ${HOME}/.config/zim
mkdir ${HOME}/Notebooks
allow ${HOME}/.cache/zim
allow ${HOME}/.config/zim
allow ${HOME}/Notebooks
allow ${DESKTOP}
allow ${DOCUMENTS}
allow ${DOWNLOADS}
allow ${MUSIC}
allow ${PICTURES}
allow ${VIDEOS}
allow /usr/share/zim
whitelist ${HOME}/.cache/zim
whitelist ${HOME}/.config/zim
whitelist ${HOME}/Notebooks
whitelist ${DESKTOP}
whitelist ${DOCUMENTS}
whitelist ${DOWNLOADS}
whitelist ${MUSIC}
whitelist ${PICTURES}
whitelist ${VIDEOS}
whitelist /usr/share/zim
include whitelist-common.inc
include whitelist-runuser-common.inc
include whitelist-usr-share-common.inc