mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
profiles: add missing mailcap entries (#6884)
Allow `~/.mailcap` for the profiles that have `mailcap` in `private-etc` and vice-versa. Fixes #6883. Reported-by: @vinc17fr Suggested-by: @vinc17fr
This commit is contained in:
parent
d789fe44a2
commit
8e5171b971
10 changed files with 18 additions and 2 deletions
|
|
@ -10,6 +10,7 @@ include globals.local
|
|||
#noblacklist ${HOME}/.cache/ephemeral
|
||||
|
||||
noblacklist ${HOME}/.local/share/pki
|
||||
noblacklist ${HOME}/.mailcap
|
||||
noblacklist ${HOME}/.pki
|
||||
|
||||
# noexec ${HOME} breaks DRM binaries.
|
||||
|
|
@ -27,6 +28,7 @@ mkdir ${HOME}/.local/share/pki
|
|||
# enforce private-cache
|
||||
#whitelist ${HOME}/.cache/ephemeral
|
||||
whitelist ${HOME}/.local/share/pki
|
||||
whitelist ${HOME}/.mailcap
|
||||
whitelist ${HOME}/.pki
|
||||
whitelist ${DOWNLOADS}
|
||||
include whitelist-common.inc
|
||||
|
|
|
|||
|
|
@ -8,6 +8,7 @@ include globals.local
|
|||
|
||||
noblacklist ${HOME}/.cache/falkon
|
||||
noblacklist ${HOME}/.config/falkon
|
||||
noblacklist ${HOME}/.mailcap
|
||||
|
||||
include disable-common.inc
|
||||
include disable-devel.inc
|
||||
|
|
@ -21,6 +22,7 @@ mkdir ${HOME}/.config/falkon
|
|||
whitelist ${DOWNLOADS}
|
||||
whitelist ${HOME}/.cache/falkon
|
||||
whitelist ${HOME}/.config/falkon
|
||||
whitelist ${HOME}/.mailcap
|
||||
whitelist /usr/share/falkon
|
||||
include whitelist-common.inc
|
||||
include whitelist-run-common.inc
|
||||
|
|
|
|||
|
|
@ -30,6 +30,7 @@ include firefox-common.local
|
|||
#include firefox-common-addons.profile
|
||||
|
||||
noblacklist ${HOME}/.local/share/pki
|
||||
noblacklist ${HOME}/.mailcap
|
||||
noblacklist ${HOME}/.pki
|
||||
|
||||
blacklist ${PATH}/curl
|
||||
|
|
@ -46,6 +47,7 @@ include disable-programs.inc
|
|||
mkdir ${HOME}/.local/share/pki
|
||||
whitelist ${DOWNLOADS}
|
||||
whitelist ${HOME}/.local/share/pki
|
||||
whitelist ${HOME}/.mailcap
|
||||
whitelist ${HOME}/.pki
|
||||
whitelist /usr/share/doc
|
||||
whitelist /usr/share/gtk-doc/html
|
||||
|
|
|
|||
|
|
@ -14,6 +14,7 @@ noblacklist ${HOME}/.config/geary
|
|||
noblacklist ${HOME}/.local/share/evolution
|
||||
noblacklist ${HOME}/.local/share/geary
|
||||
noblacklist ${HOME}/.local/share/pki
|
||||
noblacklist ${HOME}/.mailcap
|
||||
noblacklist ${HOME}/.pki
|
||||
|
||||
# sh is needed to allow Firefox to open links
|
||||
|
|
@ -49,6 +50,7 @@ whitelist ${HOME}/.config/geary
|
|||
whitelist ${HOME}/.local/share/evolution
|
||||
whitelist ${HOME}/.local/share/geary
|
||||
whitelist ${HOME}/.local/share/pki
|
||||
whitelist ${HOME}/.mailcap
|
||||
whitelist ${HOME}/.pki
|
||||
whitelist /usr/share/geary
|
||||
include whitelist-common.inc
|
||||
|
|
|
|||
|
|
@ -6,6 +6,7 @@ include Viber.local
|
|||
include globals.local
|
||||
|
||||
noblacklist ${HOME}/.ViberPC
|
||||
noblacklist ${HOME}/.mailcap
|
||||
noblacklist ${PATH}/dig
|
||||
|
||||
include disable-common.inc
|
||||
|
|
@ -17,6 +18,7 @@ include disable-programs.inc
|
|||
mkdir ${HOME}/.ViberPC
|
||||
whitelist ${DOWNLOADS}
|
||||
whitelist ${HOME}/.ViberPC
|
||||
whitelist ${HOME}/.mailcap
|
||||
include whitelist-common.inc
|
||||
|
||||
caps.drop all
|
||||
|
|
|
|||
|
|
@ -130,7 +130,7 @@ tracelog
|
|||
#disable-mnt
|
||||
private-cache
|
||||
private-dev
|
||||
private-etc @tls-ca,@x11,Mutt,Muttrc,Muttrc.d,gai.conf,gnupg,host.conf,mail,mailname,msmtprc,nntpserver,terminfo
|
||||
private-etc @tls-ca,@x11,Mutt,Muttrc,Muttrc.d,gai.conf,gnupg,host.conf,mail,mailcap,mailname,msmtprc,nntpserver,terminfo
|
||||
private-tmp
|
||||
|
||||
dbus-user none
|
||||
|
|
|
|||
|
|
@ -122,7 +122,7 @@ tracelog
|
|||
#disable-mnt
|
||||
private-cache
|
||||
private-dev
|
||||
private-etc @tls-ca,@x11,Mutt,Muttrc,Muttrc.d,gnupg,host.conf,mail,mailname,msmtprc,neomuttrc,neomuttrc.d,nntpserver
|
||||
private-etc @tls-ca,@x11,Mutt,Muttrc,Muttrc.d,gnupg,host.conf,mail,mailcap,mailname,msmtprc,neomuttrc,neomuttrc.d,nntpserver
|
||||
private-tmp
|
||||
|
||||
dbus-user none
|
||||
|
|
|
|||
|
|
@ -11,6 +11,7 @@ include globals.local
|
|||
noblacklist ${HOME}/.cache/Otter
|
||||
noblacklist ${HOME}/.config/otter
|
||||
noblacklist ${HOME}/.local/share/pki
|
||||
noblacklist ${HOME}/.mailcap
|
||||
noblacklist ${HOME}/.pki
|
||||
|
||||
include disable-common.inc
|
||||
|
|
@ -27,6 +28,7 @@ whitelist ${DOWNLOADS}
|
|||
whitelist ${HOME}/.cache/Otter
|
||||
whitelist ${HOME}/.config/otter
|
||||
whitelist ${HOME}/.local/share/pki
|
||||
whitelist ${HOME}/.mailcap
|
||||
whitelist ${HOME}/.pki
|
||||
whitelist /usr/share/otter-browser
|
||||
include whitelist-common.inc
|
||||
|
|
|
|||
|
|
@ -9,6 +9,7 @@ include globals.local
|
|||
noblacklist ${HOME}/.cache/mozilla
|
||||
noblacklist ${HOME}/.gnupg
|
||||
noblacklist ${HOME}/.local/share/pki
|
||||
noblacklist ${HOME}/.mailcap
|
||||
noblacklist ${HOME}/.mozilla
|
||||
noblacklist ${HOME}/.pki
|
||||
|
||||
|
|
@ -31,6 +32,7 @@ whitelist ${HOME}/.gnupg
|
|||
whitelist ${HOME}/.keysnail.js
|
||||
whitelist ${HOME}/.lastpass
|
||||
whitelist ${HOME}/.local/share/pki
|
||||
whitelist ${HOME}/.mailcap
|
||||
whitelist ${HOME}/.mozilla
|
||||
whitelist ${HOME}/.pentadactyl
|
||||
whitelist ${HOME}/.pentadactylrc
|
||||
|
|
|
|||
|
|
@ -12,6 +12,7 @@ include globals.local
|
|||
#ignore private-dev
|
||||
#ignore private-etc
|
||||
|
||||
noblacklist ${HOME}/.mailcap
|
||||
noblacklist ${HOME}/.w3m
|
||||
|
||||
blacklist ${RUNUSER}/wayland-*
|
||||
|
|
@ -33,6 +34,7 @@ include disable-xdg.inc
|
|||
|
||||
mkdir ${HOME}/.w3m
|
||||
whitelist ${DOWNLOADS}
|
||||
whitelist ${HOME}/.mailcap
|
||||
whitelist ${HOME}/.w3m
|
||||
whitelist /usr/share/w3m
|
||||
include whitelist-runuser-common.inc
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue