github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

openbox fix

Browse source
This commit is contained in:
netblue30 2016-03-27 10:24:46 -04:00
parent eb6a658894
commit 37890f6973
4 changed files with 6 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

2
etc/disable-common.inc
View file

@ -3,6 +3,8 @@ blacklist-nolog ${HOME}/.history
blacklist-nolog ${HOME}/.*_history
blacklist ${HOME}/.local/share/systemd
blacklist-nolog ${HOME}/.adobe
blacklist-nolog ${HOME}/.macromedia
# X11 session autostart
blacklist ${HOME}/.xinitrc

2
etc/disable-programs.inc
View file

@ -6,8 +6,6 @@ blacklist ${HOME}/.FBReader
blacklist ${HOME}/.wine
# HTTP / FTP / Mail
blacklist-nolog ${HOME}/.adobe
blacklist-nolog ${HOME}/.macromedia
blacklist ${HOME}/.icedove
blacklist ${HOME}/.thunderbird
blacklist ${HOME}/.sylpheed-2.0

12
etc/openbox.profile
View file

@ -1,15 +1,9 @@
################################
#######################################
# OpenBox window manager profile
# - all applications started in OpenBox will run in
# this profile
################################
# - all applications started in OpenBox will run in this profile
#######################################
include /etc/firejail/disable-common.inc
blacklist ${HOME}/.pki/nssdb
blacklist ${HOME}/.lastpass
blacklist ${HOME}/.keepassx
blacklist ${HOME}/.password-store
caps.drop all
seccomp
protocol unix,inet,inet6

1
src/firejail/fs.c
View file

@ -732,6 +732,7 @@ void fs_basic_fs(void) {
fs_rdonly("/lib");
fs_rdonly("/lib64");
fs_rdonly("/lib32");
fs_rdonly("/libx32");
fs_rdonly("/usr");
fs_rdonly("/etc");
fs_rdonly("/var");