harden audio-recorder (#4233)

This commit is contained in:
glitsj16 2021-05-02 14:23:41 +00:00 committed by GitHub
parent 4b5f0b9fcb
commit 6a13ff2321
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -20,6 +20,7 @@ include disable-xdg.inc
whitelist ${MUSIC}
whitelist ${DOWNLOADS}
whitelist /usr/share/audio-recorder
whitelist /usr/share/gstreamer-1.0
include whitelist-common.inc
include whitelist-usr-share-common.inc
include whitelist-var-common.inc
@ -44,7 +45,11 @@ tracelog
disable-mnt
# private-bin audio-recorder
private-cache
private-etc alternatives,fonts
private-etc alternatives,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload
private-tmp
dbus-user filter
dbus-user.talk ca.desrt.dconf
dbus-system none
# memory-deny-write-execute - breaks on Arch