github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

seahorse refactoring (#5543)

Browse source 
* seahorse: fixes and hardening

* seahorse-daemon: hardening

* seahorse-tool: move private-etc items to seahorse

* seahorse: unbreak nautilus file encryption

As suggested [in review](https://github.com/netblue30/firejail/pull/5543#pullrequestreview-1225250520).

* seahorse-tool: move private-tmp to seahorse

* seahorse: add private-tmp

* seahorse: fix access to ssh-agent socket
This commit is contained in:
glitsj16 2022-12-21 23:35:59 +00:00 • committed by GitHub
parent e1e1cb8f86
commit 5bb73dbcdd
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 6 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

3
etc/profile-m-z/seahorse-daemon.profile
View file

@ -8,6 +8,9 @@ include seahorse-daemon.local
# added by included profile
#include globals.local
blacklist ${RUNUSER}/wayland-*
include disable-X11.inc
memory-deny-write-execute
# Redirect

4
etc/profile-m-z/seahorse-tool.profile
View file

@ -7,9 +7,5 @@ include seahorse-tool.local
# added by included profile
#include globals.local
# private-etc workaround for: #2877
private-etc alternatives,firejail,ld.so.cache,ld.so.preload,login.defs,passwd
private-tmp
# Redirect
include seahorse.profile

6
etc/profile-m-z/seahorse.profile
View file

@ -6,8 +6,6 @@ include seahorse.local
# Persistent global definitions
include globals.local
blacklist /tmp/.X11-unix
noblacklist ${HOME}/.gnupg
# Allow ssh (blacklisted by disable-common.inc)
@ -59,12 +57,14 @@ tracelog
disable-mnt
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gconf,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,nsswitch.conf,pango,pki,protocols,resolv.conf,rpc,services,ssh,ssl,X11
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gconf,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,login.defs,nsswitch.conf,pango,passwd,pkcs11,pki,protocols,resolv.conf,rpc,services,ssh,ssl,xdg
private-tmp
writable-run-user
dbus-user filter
dbus-user.own org.gnome.seahorse
dbus-user.own org.gnome.seahorse.Application
dbus-user.talk ca.desrt.dconf
dbus-user.talk org.freedesktop.secrets
dbus-system none