github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 22:01:33 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

fix qutebrowser

Browse source
This commit is contained in:
smitsohu 2017-12-11 19:12:58 +01:00
parent 49901c8760
commit ca3964fed3
2 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

1
etc/disable-programs.inc
View file

@ -368,6 +368,7 @@ blacklist ${HOME}/.local/share/org.kde.gwenview
blacklist ${HOME}/.local/share/pix
blacklist ${HOME}/.local/share/psi+
blacklist ${HOME}/.local/share/qpdfview
blacklist ${HOME}/.local/share/qutebrowser
blacklist ${HOME}/.local/share/remmina
blacklist ${HOME}/.local/share/scribus
blacklist ${HOME}/.local/share/spotify

6
etc/qutebrowser.profile
View file

@ -7,6 +7,7 @@ include /etc/firejail/globals.local
noblacklist ${HOME}/.cache/qutebrowser
noblacklist ${HOME}/.config/qutebrowser
noblacklist ${HOME}/.local/share/qutebrowser
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
@ -28,5 +29,6 @@ nonewprivs
noroot
notv
protocol unix,inet,inet6,netlink
seccomp
tracelog
# blacklisting of chroot system calls breaks qt webengine
seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
# tracelog