github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

add 'blacklist ${RUNUSER}/wayland-*' to all profi…

Browse source 
…les with 'blacklist /tmp/.X11-unix'
This commit is contained in:
rusty-snake 2020-01-17 17:07:19 +01:00
parent f60d009a81
commit a3cc09e5d9
23 changed files with 23 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
etc/aria2c.profile
View file

@ -11,6 +11,7 @@ noblacklist ${HOME}/.config/aria2
noblacklist ${HOME}/.netrc
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/artha.profile
View file

@ -11,6 +11,7 @@ noblacklist ${HOME}/.config/artha.log
noblacklist ${HOME}/.config/enchant
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/dnsmasq.profile
View file

@ -11,6 +11,7 @@ noblacklist /sbin
noblacklist /usr/sbin
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/elinks.profile
View file

@ -9,6 +9,7 @@ include globals.local
noblacklist ${HOME}/.elinks
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/gconf-editor.profile
View file

@ -8,6 +8,7 @@ include gconf-editor.local
#include globals.local
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
ignore net none
ignore x11 none

1
etc/gist.profile
View file

@ -8,6 +8,7 @@ include gist.local
include globals.local
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
noblacklist ${HOME}/.gist

1
etc/git.profile
View file

@ -20,6 +20,7 @@ noblacklist ${HOME}/.vim
noblacklist ${HOME}/.viminfo
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-exec.inc

1
etc/gpg-agent.profile
View file

@ -10,6 +10,7 @@ include globals.local
noblacklist ${HOME}/.gnupg
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/gpg.profile
View file

@ -10,6 +10,7 @@ include globals.local
noblacklist ${HOME}/.gnupg
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/links.profile
View file

@ -9,6 +9,7 @@ include globals.local
noblacklist ${HOME}/.links
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/lynx.profile
View file

@ -7,6 +7,7 @@ include lynx.local
include globals.local
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/mutt.profile
View file

@ -32,6 +32,7 @@ noblacklist ${HOME}/postponed
noblacklist ${HOME}/sent
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/rsync-download_only.profile
View file

@ -13,6 +13,7 @@ include globals.local
# Usage: firejail --profile=rsync-download_only rsync
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/seahorse.profile
View file

@ -7,6 +7,7 @@ include seahorse.local
include globals.local
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
noblacklist ${HOME}/.gnupg
noblacklist ${HOME}/.ssh

1
etc/server.profile
View file

@ -14,6 +14,7 @@ noblacklist /usr/sbin
# noblacklist /var/opt
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
# include disable-devel.inc

1
etc/signal-cli.profile
View file

@ -7,6 +7,7 @@ include signal-cli.local
include globals.local
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
noblacklist ${HOME}/.local/share/signal-cli

1
etc/ssh-agent.profile
View file

@ -11,6 +11,7 @@ noblacklist /tmp/ssh-*
noblacklist ${HOME}/.ssh
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-passwdmgr.inc

1
etc/tracker.profile
View file

@ -9,6 +9,7 @@ include globals.local
# Tracker is started by systemd on most systems. Therefore it is not firejailed by default
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/unbound.profile
View file

@ -10,6 +10,7 @@ noblacklist /sbin
noblacklist /usr/sbin
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/w3m.profile
View file

@ -9,6 +9,7 @@ include globals.local
noblacklist ${HOME}/.w3m
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include allow-perl.inc

1
etc/wget.profile
View file

@ -12,6 +12,7 @@ noblacklist ${HOME}/.wget-hsts
noblacklist ${HOME}/.wgetrc
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/whois.profile
View file

@ -8,6 +8,7 @@ include whois.local
include globals.local
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc

1
etc/youtube-dl.profile
View file

@ -21,6 +21,7 @@ include allow-python2.inc
include allow-python3.inc
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-devel.inc