harden liferea (#3873)

* harden liferea

* dbus fixes

On closer investigation it seems wiser to tighten D-Bus filtering as Liferea implements stuff via plugins that are disabled by default.
This commit is contained in:
glitsj16 2021-01-06 19:08:22 +00:00 committed by GitHub
parent 6c7138edf7
commit aa2c9ade1a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -42,7 +42,7 @@ noroot
# nosound
notv
nou2f
# novideo
novideo
protocol unix,inet,inet6
seccomp
shell none
@ -51,3 +51,12 @@ tracelog
disable-mnt
private-dev
private-tmp
dbus-user filter
dbus-user.own net.sourceforge.liferea
dbus-user.talk ca.desrt.dconf
# Uncomment the below if you use the 'Popup Notifications' plugin or add 'dbus-user.talk org.freedesktop.Notifications' to your liferea.local
#dbus-user.talk org.freedesktop.Notifications
# Uncomment the below if you use the 'Libsecret Support' plugin or add 'dbus-user.talk org.freedesktop.secrets' to your liferea.local
#dbus-user.talk org.freedesktop.secrets
dbus-system none