Add ld.so.preload to all private-etc lines

Command:

    sed -i -E "s/^private-etc /private-etc ld.so.preload,/" \
        $(grep -LE "^private-etc .*ld.so.preload" etc/profile-*/*) \
        && python3 contrib/sort.py etc/profile-*/*
This commit is contained in:
rusty-snake 2021-09-18 22:57:55 +02:00
parent 7aec067d5c
commit d8d97acbd9
235 changed files with 235 additions and 235 deletions

View file

@ -42,7 +42,7 @@ tracelog
private-bin abiword
private-cache
private-dev
private-etc fonts,gtk-3.0,passwd
private-etc fonts,gtk-3.0,ld.so.preload,passwd
private-tmp
# dbus-user none

View file

@ -50,7 +50,7 @@ tracelog
private-bin agetpkg,python3
private-cache
private-dev
private-etc ca-certificates,crypto-policies,pki,resolv.conf,ssl
private-etc ca-certificates,crypto-policies,ld.so.preload,pki,resolv.conf,ssl
private-tmp
dbus-user none

View file

@ -53,7 +53,7 @@ disable-mnt
# private-bin alacarte,bash,python*,sh
private-cache
private-dev
private-etc alternatives,dconf,fonts,gtk-3.0,locale.alias,locale.conf,login.defs,mime.types,nsswitch.conf,passwd,pki,X11,xdg
private-etc alternatives,dconf,fonts,gtk-3.0,ld.so.preload,locale.alias,locale.conf,login.defs,mime.types,nsswitch.conf,passwd,pki,X11,xdg
private-tmp
dbus-user none

View file

@ -50,7 +50,7 @@ disable-mnt
private-bin anki,python*
private-cache
private-dev
private-etc alternatives,ca-certificates,fonts,gtk-2.0,hostname,hosts,machine-id,pki,resolv.conf,ssl,Trolltech.conf
private-etc alternatives,ca-certificates,fonts,gtk-2.0,hostname,hosts,ld.so.preload,machine-id,pki,resolv.conf,ssl,Trolltech.conf
private-tmp
dbus-user none

View file

@ -45,7 +45,7 @@ private-bin aria2c,gzip
# Add 'private-cache' to your aria2c.local if you don't use Lutris/winetricks (see issue #2772).
#private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,groups,login.defs,machine-id,nsswitch.conf,passwd,pki,resolv.conf,ssl
private-etc alternatives,ca-certificates,crypto-policies,groups,ld.so.preload,login.defs,machine-id,nsswitch.conf,passwd,pki,resolv.conf,ssl
private-lib libreadline.so.*
private-tmp

View file

@ -43,6 +43,6 @@ tracelog
disable-mnt
private-bin arm,bash,ldconfig,lsof,ps,python*,sh,tor
private-dev
private-etc alternatives,ca-certificates,crypto-policies,passwd,pki,ssl,tor
private-etc alternatives,ca-certificates,crypto-policies,ld.so.preload,passwd,pki,ssl,tor
private-tmp

View file

@ -56,7 +56,7 @@ disable-mnt
private-bin artha,enchant,notify-send
private-cache
private-dev
private-etc alternatives,fonts,machine-id
private-etc alternatives,fonts,ld.so.preload,machine-id
private-lib libnotify.so.*
private-tmp

View file

@ -13,7 +13,7 @@ include allow-perl.inc
noroot
# without login.defs atool complains and uses UID/GID 1000 by default
private-etc alternatives,group,login.defs,passwd
private-etc alternatives,group,ld.so.preload,login.defs,passwd
private-tmp
# Redirect

View file

@ -42,7 +42,7 @@ tracelog
private-bin 7z,7za,7zr,atril,atril-previewer,atril-thumbnailer,sh,tar,unrar,unzip,zipnote
private-dev
private-etc alternatives,fonts,ld.so.cache
private-etc alternatives,fonts,ld.so.cache,ld.so.preload
# atril uses webkit gtk to display epub files
# waiting for globbing support in private-lib; for now hardcoding it to webkit2gtk-4.0
#private-lib webkit2gtk-4.0 - problems on Arch with the new version of WebKit

View file

@ -47,7 +47,7 @@ disable-mnt
private-bin authenticator-rs
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gtk-2.0,gtk-3.0,pki,resolv.conf,ssl,xdg
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gtk-2.0,gtk-3.0,ld.so.preload,pki,resolv.conf,ssl,xdg
private-tmp
dbus-user filter

View file

@ -39,7 +39,7 @@ shell none
disable-mnt
# private-bin authenticator,python*
private-dev
private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.cache,pki,resolv.conf,ssl
private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.cache,ld.so.preload,pki,resolv.conf,ssl
private-tmp
# makes settings immutable

View file

@ -66,7 +66,7 @@ tracelog
private-bin balsa,balsa-ab,gpg,gpg-agent,gpg2,gpgsm
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gcrypt,groups,gtk-2.0,gtk-3.0,hostname,hosts,mailname,passwd,pki,resolv.conf,selinux,ssl,xdg
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gcrypt,groups,gtk-2.0,gtk-3.0,hostname,hosts,ld.so.preload,mailname,passwd,pki,resolv.conf,selinux,ssl,xdg
private-tmp
writable-run-user
writable-var

View file

@ -52,7 +52,7 @@ disable-mnt
# private-bin bibletime,qt5ct
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,fonts,login.defs,machine-id,passwd,pki,resolv.conf,ssl,sword,sword.conf
private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.preload,login.defs,machine-id,passwd,pki,resolv.conf,ssl,sword,sword.conf
private-tmp
dbus-user none

View file

@ -23,7 +23,7 @@ no3d
nosound
?HAS_APPIMAGE: ignore private-dev
private-etc alternatives,ca-certificates,crypto-policies,fonts,hosts,nsswitch.conf,pki,resolv.conf,ssl
private-etc alternatives,ca-certificates,crypto-policies,fonts,hosts,ld.so.preload,nsswitch.conf,pki,resolv.conf,ssl
private-opt Bitwarden
# Redirect

View file

@ -35,7 +35,7 @@ shell none
# private-bin bash,bless,mono,sh
private-cache
private-dev
private-etc alternatives,fonts,mono
private-etc alternatives,fonts,ld.so.preload,mono
private-tmp
dbus-user none

View file

@ -41,7 +41,7 @@ tracelog
disable-mnt
private-bin blobby
private-dev
private-etc alsa,alternatives,asound.conf,drirc,group,hosts,login.defs,machine-id,passwd,pulse
private-etc alsa,alternatives,asound.conf,drirc,group,hosts,ld.so.preload,login.defs,machine-id,passwd,pulse
private-lib
private-tmp

View file

@ -43,7 +43,7 @@ disable-mnt
private-bin blobwars
private-cache
private-dev
private-etc machine-id
private-etc ld.so.preload,machine-id
private-tmp
dbus-user none

View file

@ -6,7 +6,7 @@ include bsdtar.local
# Persistent global definitions
include globals.local
private-etc alternatives,group,localtime,passwd
private-etc alternatives,group,ld.so.preload,localtime,passwd
# Redirect
include archiver-common.profile

View file

@ -46,7 +46,7 @@ tracelog
disable-mnt
private-bin cameramonitor,python*
private-cache
private-etc alternatives,fonts
private-etc alternatives,fonts,ld.so.preload
private-tmp
# dbus-user none

View file

@ -39,7 +39,7 @@ disable-mnt
private-bin cawbird
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,mime.types,nsswitch.conf,pki,resolv.conf,ssl,X11,xdg
private-etc alternatives,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.preload,mime.types,nsswitch.conf,pki,resolv.conf,ssl,X11,xdg
private-tmp
# dbus-user none

View file

@ -53,7 +53,7 @@ tracelog
private-bin celluloid,env,gnome-mpv,python*,youtube-dl
private-cache
private-etc alternatives,ca-certificates,crypto-policies,dconf,drirc,fonts,gtk-3.0,hosts,ld.so.cache,libva.conf,localtime,machine-id,pkcs11,pki,resolv.conf,selinux,ssl,xdg
private-etc alternatives,ca-certificates,crypto-policies,dconf,drirc,fonts,gtk-3.0,hosts,ld.so.cache,ld.so.preload,libva.conf,localtime,machine-id,pkcs11,pki,resolv.conf,selinux,ssl,xdg
private-dev
private-tmp

View file

@ -42,7 +42,7 @@ tracelog
disable-mnt
private-bin cheese
private-cache
private-etc alternatives,clutter-1.0,dconf,drirc,fonts,gtk-3.0
private-etc alternatives,clutter-1.0,dconf,drirc,fonts,gtk-3.0,ld.so.preload
private-tmp
dbus-user filter

View file

@ -44,7 +44,7 @@ disable-mnt
private-bin bash,clawsker,perl,sh,which
private-cache
private-dev
private-etc alternatives,fonts
private-etc alternatives,fonts,ld.so.preload
private-lib girepository-1.*,libdbus-glib-1.so.*,libetpan.so.*,libgirepository-1.*,libgtk-3.so.*,libgtk-x11-2.0.so.*,libstartup-notification-1.so.*,perl*
private-tmp

View file

@ -27,4 +27,4 @@ seccomp
shell none
private-bin cmus
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,group,machine-id,pki,pulse,resolv.conf,ssl
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,group,ld.so.preload,machine-id,pki,pulse,resolv.conf,ssl

View file

@ -45,7 +45,7 @@ disable-mnt
private-bin com.github.bleakgrey.tootle
private-cache
private-dev
private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,dconf,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,machine-id mime.types,nsswitch.conf,pki,pulse,resolv.conf,ssl,X11,xdg
private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,dconf,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.preload,machine-id mime.types,nsswitch.conf,pki,pulse,resolv.conf,ssl,X11,xdg
private-tmp
# Settings are immutable

View file

@ -52,7 +52,7 @@ disable-mnt
private-bin com.github.dahenson.agenda
private-cache
private-dev
private-etc dconf,fonts,gtk-3.0
private-etc dconf,fonts,gtk-3.0,ld.so.preload
private-tmp
dbus-user filter

View file

@ -55,7 +55,7 @@ disable-mnt
private-bin com.github.johnfactotum.Foliate,gjs
private-cache
private-dev
private-etc dconf,fonts,gconf,gtk-3.0
private-etc dconf,fonts,gconf,gtk-3.0,ld.so.preload
private-tmp
read-only ${HOME}

View file

@ -40,7 +40,7 @@ tracelog
disable-mnt
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,fonts,machine-id,pki,ssl
private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.preload,machine-id,pki,ssl
private-tmp
dbus-user none

View file

@ -39,7 +39,7 @@ shell none
disable-mnt
private-bin crow
private-dev
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,dconf,fonts,machine-id,nsswitch.conf,pki,pulse,resolv.conf,ssl
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,dconf,fonts,ld.so.preload,machine-id,nsswitch.conf,pki,pulse,resolv.conf,ssl
private-opt none
private-tmp
private-srv none

View file

@ -50,7 +50,7 @@ disable-mnt
private-bin d-feet,python*
private-cache
private-dev
private-etc alternatives,dbus-1,fonts,machine-id
private-etc alternatives,dbus-1,fonts,ld.so.preload,machine-id
private-tmp
#memory-deny-write-execute - breaks on Arch (see issue #1803)

View file

@ -51,7 +51,7 @@ private
private-bin dbus-send
private-cache
private-dev
private-etc alternatives,dbus-1
private-etc alternatives,dbus-1,ld.so.preload
private-lib libpcre*
private-tmp

View file

@ -43,7 +43,7 @@ disable-mnt
private-bin dconf-editor
private-cache
private-dev
private-etc alternatives,dconf,fonts,gtk-3.0,machine-id
private-etc alternatives,dconf,fonts,gtk-3.0,ld.so.preload,machine-id
private-lib
private-tmp

View file

@ -46,7 +46,7 @@ disable-mnt
private-bin dconf,gsettings
private-cache
private-dev
private-etc alternatives,dconf
private-etc alternatives,dconf,ld.so.preload
private-lib
private-tmp

View file

@ -45,7 +45,7 @@ tracelog
disable-mnt
private-bin bash,dd,ddgtk,grep,lsblk,python*,sed,sh,tr
private-cache
private-etc alternatives,fonts
private-etc alternatives,fonts,ld.so.preload
private-tmp
dbus-user none

View file

@ -42,7 +42,7 @@ disable-mnt
private-bin devhelp
private-cache
private-dev
private-etc alternatives,dconf,fonts,ld.so.cache,machine-id,ssl
private-etc alternatives,dconf,fonts,ld.so.cache,ld.so.preload,machine-id,ssl
private-tmp
# makes settings immutable

View file

@ -48,7 +48,7 @@ disable-mnt
private-bin devilspie
private-cache
private-dev
private-etc alternatives
private-etc alternatives,ld.so.preload
private-lib gconv
private-tmp

View file

@ -24,7 +24,7 @@ whitelist ${HOME}/.config/BetterDiscord
whitelist ${HOME}/.local/share/betterdiscordctl
private-bin bash,cut,echo,egrep,electron,electron[0-9],electron[0-9][0-9],fish,grep,head,sed,sh,tclsh,tr,xdg-mime,xdg-open,zsh
private-etc alternatives,ca-certificates,crypto-policies,fonts,group,ld.so.cache,localtime,login.defs,machine-id,password,pki,pulse,resolv.conf,ssl
private-etc alternatives,ca-certificates,crypto-policies,fonts,group,ld.so.cache,ld.so.preload,localtime,login.defs,machine-id,password,pki,pulse,resolv.conf,ssl
join-or-start discord

View file

@ -40,7 +40,7 @@ shell none
private-bin display,python*
private-dev
# On Debian-based systems, display is a symlink in /etc/alternatives
private-etc alternatives
private-etc alternatives,ld.so.preload
private-tmp
dbus-user none

View file

@ -45,7 +45,7 @@ shell none
private-bin drawio
private-cache
private-dev
private-etc alternatives,fonts
private-etc alternatives,fonts,ld.so.preload
private-tmp
dbus-user none

View file

@ -45,7 +45,7 @@ disable-mnt
#private-bin bash,easystroke,sh
private-cache
private-dev
private-etc alternatives,fonts,group,passwd
private-etc alternatives,fonts,group,ld.so.preload,passwd
# breaks custom shell command functionality
#private-lib gdk-pixbuf-2.*,gio,gvfs/libgvfscommon.so,libgconf-2.so.*,librsvg-2.so.*
private-tmp

View file

@ -45,7 +45,7 @@ shell none
private-bin electron-mail
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,nsswitch.conf,pki,resolv.conf,selinux,ssl,xdg
private-etc alternatives,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,ld.so.preload,nsswitch.conf,pki,resolv.conf,selinux,ssl,xdg
private-opt ElectronMail
private-tmp

View file

@ -47,7 +47,7 @@ private-bin electrum,python*
private-cache
?HAS_APPIMAGE: ignore private-dev
private-dev
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,machine-id,pki,resolv.conf,ssl
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,ld.so.preload,machine-id,pki,resolv.conf,ssl
private-tmp
# dbus-user none

View file

@ -66,7 +66,7 @@ tracelog
# disable-mnt
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gcrypt,gnupg,groups,gtk-2.0,gtk-3.0,hostname,hosts,hosts.conf,mailname,nsswitch.conf,passwd,pki,resolv.conf,selinux,ssl,xdg
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gcrypt,gnupg,groups,gtk-2.0,gtk-3.0,hostname,hosts,hosts.conf,ld.so.preload,mailname,nsswitch.conf,passwd,pki,resolv.conf,selinux,ssl,xdg
private-tmp
# encrypting and signing email
writable-run-user

View file

@ -48,7 +48,7 @@ x11 none
private-bin enchant,enchant-*
private-cache
private-dev
private-etc alternatives
private-etc alternatives,ld.so.preload
private-lib
private-tmp

View file

@ -47,6 +47,6 @@ tracelog
private-cache
private-dev
private-etc alternatives,dconf,fonts,gtk-3.0
private-etc alternatives,dconf,fonts,gtk-3.0,ld.so.preload
private-lib eog,eom,gdk-pixbuf-2.*,gio,girepository-1.*,gvfs,libgconf-2.so.*
private-tmp

View file

@ -54,7 +54,7 @@ disable-mnt
private-bin equalx,gs,pdflatex,pdftocairo
private-cache
private-dev
private-etc equalx,equalx.conf,fonts,gtk-2.0,latexmk.conf,machine-id,papersize,passwd,texlive,Trolltech.conf
private-etc equalx,equalx.conf,fonts,gtk-2.0,latexmk.conf,ld.so.preload,machine-id,papersize,passwd,texlive,Trolltech.conf
private-tmp
dbus-user none

View file

@ -54,7 +54,7 @@ tracelog
private-bin evince,evince-previewer,evince-thumbnailer
private-cache
private-dev
private-etc alternatives,fonts,group,ld.so.cache,machine-id,passwd
private-etc alternatives,fonts,group,ld.so.cache,ld.so.preload,machine-id,passwd
# private-lib might break two-page-view on some systems
private-lib evince,gcc/*/*/libgcc_s.so.*,gcc/*/*/libstdc++.so.*,gconv,gdk-pixbuf-2.*,gio,gvfs/libgvfscommon.so,libdjvulibre.so.*,libgconf-2.so.*,libgraphite2.so.*,libpoppler-glib.so.*,librsvg-2.so.*,libspectre.so.*
private-tmp

View file

@ -48,7 +48,7 @@ x11 none
#private-bin exiftool,perl
private-cache
private-dev
private-etc alternatives
private-etc alternatives,ld.so.preload
private-tmp
dbus-user none

View file

@ -46,7 +46,7 @@ disable-mnt
# private-bin falkon
private-cache
private-dev
private-etc adobe,alternatives,asound.conf,ati,ca-certificates,crypto-policies,dconf,drirc,fonts,group,gtk-2.0,gtk-3.0,hostname,hosts,localtime,machine-id,mailcap,mime.types,nsswitch.conf,pango,passwd,pki,pulse,resolv.conf,selinux,ssl,xdg
private-etc adobe,alternatives,asound.conf,ati,ca-certificates,crypto-policies,dconf,drirc,fonts,group,gtk-2.0,gtk-3.0,hostname,hosts,ld.so.preload,localtime,machine-id,mailcap,mime.types,nsswitch.conf,pango,passwd,pki,pulse,resolv.conf,selinux,ssl,xdg
private-tmp
# dbus-user filter

View file

@ -5,4 +5,4 @@ include feh-network.inc.local
ignore net none
netfilter
protocol unix,inet,inet6
private-etc ca-certificates,crypto-policies,hosts,pki,resolv.conf,ssl
private-etc ca-certificates,crypto-policies,hosts,ld.so.preload,pki,resolv.conf,ssl

View file

@ -36,7 +36,7 @@ shell none
private-bin feh,jpegexiforient,jpegtran
private-cache
private-dev
private-etc alternatives,feh
private-etc alternatives,feh,ld.so.preload
private-tmp
dbus-user none

View file

@ -14,7 +14,7 @@ ignore nogroups
ignore nosound
private-bin ffplay
private-etc alsa,asound.conf,group
private-etc alsa,asound.conf,group,ld.so.preload
# Redirect
include ffmpeg.profile

View file

@ -43,7 +43,7 @@ tracelog
private-bin 7z,7za,7zr,ar,arj,atool,bash,brotli,bsdtar,bzip2,compress,cp,cpio,dpkg-deb,file-roller,gtar,gzip,isoinfo,lha,lrzip,lsar,lz4,lzip,lzma,lzop,mv,p7zip,rar,rm,rzip,sh,tar,unace,unalz,unar,uncompress,unrar,unsquashfs,unstuff,unzip,unzstd,xz,xzdec,zip,zoo,zstd
private-cache
private-dev
private-etc dconf,fonts,gtk-3.0,xdg
private-etc dconf,fonts,gtk-3.0,ld.so.preload,xdg
# private-tmp
dbus-system none

View file

@ -52,7 +52,7 @@ tracelog
disable-mnt
private-bin flameshot
private-cache
private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.conf,machine-id,pki,resolv.conf,ssl
private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.conf,ld.so.preload,machine-id,pki,resolv.conf,ssl
private-dev
#private-tmp

View file

@ -16,7 +16,7 @@ mkdir ${HOME}/.config/FreeTube
whitelist ${HOME}/.config/FreeTube
private-bin electron,electron[0-9],electron[0-9][0-9],freetube,sh
private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,mime.types,nsswitch.conf,pki,pulse,resolv.conf,ssl,X11,xdg
private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.preload,mime.types,nsswitch.conf,pki,pulse,resolv.conf,ssl,X11,xdg
# Redirect
include electron.profile

View file

@ -45,7 +45,7 @@ disable-mnt
private-bin frogatto,sh
private-cache
private-dev
private-etc machine-id
private-etc ld.so.preload,machine-id
private-tmp
dbus-user none

View file

@ -59,7 +59,7 @@ disable-mnt
private-bin bash,gajim,gajim-history-manager,gpg,gpg2,paplay,python*,sh,zsh
private-cache
private-dev
private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,group,hostname,hosts,ld.so.cache,ld.so.conf,localtime,machine-id,passwd,pki,pulse,resolv.conf,ssl,xdg
private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,group,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.preload,localtime,machine-id,passwd,pki,pulse,resolv.conf,ssl,xdg
private-tmp
writable-run-user

View file

@ -43,7 +43,7 @@ tracelog
private-bin galculator
private-cache
private-dev
private-etc alternatives,fonts
private-etc alternatives,fonts,ld.so.preload
private-lib
private-tmp

View file

@ -12,7 +12,7 @@ noblacklist ${HOME}/.config/gallery-dl
noblacklist ${HOME}/.gallery-dl.conf
private-bin gallery-dl
private-etc gallery-dl.conf
private-etc gallery-dl.conf,ld.so.preload
# Redirect
include youtube-dl.profile

View file

@ -49,7 +49,7 @@ private
private-bin gapplication
private-cache
private-dev
private-etc none
private-etc ld.so.preload,none
private-tmp
# Add the next line to your gapplication.local to filter D-Bus names.

View file

@ -36,7 +36,7 @@ tracelog
disable-mnt
private-dev
private-etc alternatives,ca-certificates,crypto-policies,hosts,ld.so.cache,localtime,nsswitch.conf,pki,resolv.conf,ssl
private-etc alternatives,ca-certificates,crypto-policies,hosts,ld.so.cache,ld.so.preload,localtime,nsswitch.conf,pki,resolv.conf,ssl
private-tmp
dbus-user none

View file

@ -54,7 +54,7 @@ disable-mnt
private-bin gconf-editor,gconf-merge-*,gconfpkg,gconftool-2,gsettings-*-convert,python2*
private-cache
private-dev
private-etc alternatives,fonts,gconf
private-etc alternatives,fonts,gconf,ld.so.preload
private-lib GConf,libpython*,python2*
private-tmp

View file

@ -70,7 +70,7 @@ tracelog
private-bin geary
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,fonts,hostname,hosts,pki,resolv.conf,ssl,xdg
private-etc alternatives,ca-certificates,crypto-policies,fonts,hostname,hosts,ld.so.preload,pki,resolv.conf,ssl,xdg
private-tmp
dbus-user filter

View file

@ -42,7 +42,7 @@ disable-mnt
private-bin bash,geekbenc*,sh
private-cache
private-dev
private-etc alternatives,group,lsb-release,passwd
private-etc alternatives,group,ld.so.preload,lsb-release,passwd
private-lib gcc/*/*/libstdc++.so.*
private-opt none
private-tmp

View file

@ -49,7 +49,7 @@ disable-mnt
private-bin gget
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,pki,resolv.conf,ssl
private-etc alternatives,ca-certificates,crypto-policies,ld.so.preload,pki,resolv.conf,ssl
private-lib
private-tmp

View file

@ -52,7 +52,7 @@ tracelog
disable-mnt
private-cache
private-dev
private-etc alternatives
private-etc alternatives,ld.so.preload
private-tmp
dbus-user none

View file

@ -70,7 +70,7 @@ tracelog
private-bin basename,bash,cola,envsubst,gettext,git,git-cola,git-dag,git-gui,gitk,gpg,gpg-agent,nano,ps,python*,sh,ssh,ssh-agent,tclsh,tr,wc,which,xed
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gcrypt,gitconfig,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,localtime,login.defs,machine-id,mime.types,nsswitch.conf,passwd,pki,resolv.conf,selinux,ssh,ssl,X11,xdg
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gcrypt,gitconfig,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.preload,localtime,login.defs,machine-id,mime.types,nsswitch.conf,passwd,pki,resolv.conf,selinux,ssh,ssl,X11,xdg
private-tmp
writable-run-user

View file

@ -37,7 +37,7 @@ shell none
disable-mnt
private-bin bash,env,gitter
private-etc alternatives,ca-certificates,crypto-policies,fonts,pki,pulse,resolv.conf,ssl
private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.preload,pki,pulse,resolv.conf,ssl
private-opt Gitter
private-dev
private-tmp

View file

@ -44,7 +44,7 @@ tracelog
disable-mnt
#private-bin gmpc
private-cache
private-etc alternatives,fonts
private-etc alternatives,fonts,ld.so.preload
private-tmp
writable-run-user

View file

@ -45,7 +45,7 @@ private
private-bin gnome-calendar
private-cache
private-dev
private-etc ca-certificates,crypto-policies,dconf,fonts,gtk-3.0,localtime,nsswitch.conf,pki,resolv.conf,ssl
private-etc ca-certificates,crypto-policies,dconf,fonts,gtk-3.0,ld.so.preload,localtime,nsswitch.conf,pki,resolv.conf,ssl
private-tmp
dbus-user filter

View file

@ -50,5 +50,5 @@ disable-mnt
private-bin fairymax,gnome-chess,gnuchess,hoichess
private-cache
private-dev
private-etc alternatives,dconf,fonts,gnome-chess,gtk-3.0
private-etc alternatives,dconf,fonts,gnome-chess,gtk-3.0,ld.so.preload
private-tmp

View file

@ -42,6 +42,6 @@ disable-mnt
private-bin gnome-clocks,gsound-play
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gtk-3.0,hosts,localtime,machine-id,pkcs11,pki,ssl
private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gtk-3.0,hosts,ld.so.preload,localtime,machine-id,pkcs11,pki,ssl
private-tmp

View file

@ -42,7 +42,7 @@ private
private-bin gnome-hexgl
private-cache
private-dev
private-etc alsa,asound.conf,machine-id,pulse
private-etc alsa,asound.conf,ld.so.preload,machine-id,pulse
private-tmp
dbus-user none

View file

@ -48,6 +48,6 @@ tracelog
private-cache
private-dev
# passwd,login.defs,firejail are a temporary workaround for #2877 and can be removed once it is fixed
private-etc alternatives,dconf,fonts,gtk-3.0,latexmk.conf,login.defs,passwd,texlive
private-etc alternatives,dconf,fonts,gtk-3.0,latexmk.conf,ld.so.preload,login.defs,passwd,texlive
dbus-system none

View file

@ -40,7 +40,7 @@ disable-mnt
private-bin gnome-logs
private-cache
private-dev
private-etc alternatives,fonts,localtime,machine-id
private-etc alternatives,fonts,ld.so.preload,localtime,machine-id
private-lib gdk-pixbuf-2.*,gio,gvfs/libgvfscommon.so,libgconf-2.so.*,librsvg-2.so.*
private-tmp
writable-var-log

View file

@ -42,6 +42,6 @@ tracelog
# private-bin calls a file manager - whatever is installed!
#private-bin env,gio-launch-desktop,gnome-music,python*,yelp
private-dev
private-etc alternatives,asound.conf,dconf,fonts,fonts,gtk-3.0,machine-id,pulse,selinux,xdg
private-etc alternatives,asound.conf,dconf,fonts,fonts,gtk-3.0,ld.so.preload,machine-id,pulse,selinux,xdg
private-tmp

View file

@ -53,7 +53,7 @@ disable-mnt
private-bin gnome-passwordsafe,python3*
private-cache
private-dev
private-etc dconf,fonts,gtk-3.0,passwd
private-etc dconf,fonts,gtk-3.0,ld.so.preload,passwd
private-tmp
dbus-user filter

View file

@ -34,7 +34,7 @@ shell none
disable-mnt
private-cache
private-dev
private-etc alternatives,fonts,machine-id
private-etc alternatives,fonts,ld.so.preload,machine-id
private-lib gdk-pixbuf-2.*,gio,gvfs/libgvfscommon.so,libgconf-2.so.*,librsvg-2.so.*
private-tmp

View file

@ -47,7 +47,7 @@ shell none
disable-mnt
private-bin gnome-recipes,tar
private-dev
private-etc alternatives,ca-certificates,crypto-policies,fonts,pki,ssl
private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.preload,pki,ssl
private-lib gdk-pixbuf-2.0,gio,gvfs/libgvfscommon.so,libgconf-2.so.*,libgnutls.so.*,libjpeg.so.*,libp11-kit.so.*,libproxy.so.*,librsvg-2.so.*
private-tmp

View file

@ -42,7 +42,7 @@ tracelog
disable-mnt
private-bin gnome-screenshot
private-dev
private-etc dconf,fonts,gtk-3.0,localtime,machine-id
private-etc dconf,fonts,gtk-3.0,ld.so.preload,localtime,machine-id
private-tmp
dbus-user filter

View file

@ -40,5 +40,5 @@ tracelog
disable-mnt
private-cache
private-dev
private-etc alsa,asound.conf,dconf,fonts,gtk-2.0,gtk-3.0,machine-id,openal,pango,pulse,xdg
private-etc alsa,asound.conf,dconf,fonts,gtk-2.0,gtk-3.0,ld.so.preload,machine-id,openal,pango,pulse,xdg
private-tmp

View file

@ -43,7 +43,7 @@ disable-mnt
private-bin gnome-system-log
private-cache
private-dev
private-etc alternatives,fonts,localtime,machine-id
private-etc alternatives,fonts,ld.so.preload,localtime,machine-id
private-lib
private-tmp
writable-var-log

View file

@ -46,7 +46,7 @@ disable-mnt
private-bin gnome-todo
private-cache
private-dev
private-etc dconf,fonts,gtk-3.0,localtime,passwd,xdg
private-etc dconf,fonts,gtk-3.0,ld.so.preload,localtime,passwd,xdg
private-tmp
dbus-user filter

View file

@ -41,7 +41,7 @@ tracelog
disable-mnt
private-cache
private-dev
private-etc dconf,fonts,gconf,gtk-2.0,gtk-3.0,machine-id,pango,passwd,X11
private-etc dconf,fonts,gconf,gtk-2.0,gtk-3.0,ld.so.preload,machine-id,pango,passwd,X11
private-tmp
dbus-user filter

View file

@ -51,7 +51,7 @@ disable-mnt
private-bin gnote
private-cache
private-dev
private-etc dconf,fonts,gtk-3.0,pango,X11
private-etc dconf,fonts,gtk-3.0,ld.so.preload,pango,X11
private-tmp
dbus-user filter

View file

@ -43,7 +43,7 @@ private
private-bin gnubik
private-cache
private-dev
private-etc drirc,fonts,gtk-2.0
private-etc drirc,fonts,gtk-2.0,ld.so.preload
private-tmp
dbus-user none

View file

@ -38,7 +38,7 @@ tracelog
# private-bin godot
private-cache
private-dev
private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,drirc,fonts,machine-id,mono,nsswitch.conf,openal,pki,pulse,resolv.conf,ssl
private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,drirc,fonts,ld.so.preload,machine-id,mono,nsswitch.conf,openal,pki,pulse,resolv.conf,ssl
private-tmp
dbus-user none

View file

@ -54,7 +54,7 @@ disable-mnt
private-bin env,python3*,sh,w3m
private-cache
private-dev
private-etc ca-certificates,crypto-policies,host.conf,hostname,hosts,nsswitch.conf,pki,protocols,resolv.conf,rpc,services,ssl
private-etc ca-certificates,crypto-policies,host.conf,hostname,hosts,ld.so.preload,nsswitch.conf,pki,protocols,resolv.conf,rpc,services,ssl
private-tmp
dbus-user none

View file

@ -41,7 +41,7 @@ tracelog
private-bin gpicview
private-cache
private-dev
private-etc alternatives,fonts,group,passwd
private-etc alternatives,fonts,group,ld.so.preload,passwd
private-lib
private-tmp

View file

@ -36,6 +36,6 @@ tracelog
private-bin gpredict
private-dev
private-etc alternatives,ca-certificates,crypto-policies,fonts,pki,resolv.conf,ssl
private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.preload,pki,resolv.conf,ssl
private-tmp

View file

@ -45,7 +45,7 @@ disable-mnt
private-bin gradio
private-cache
private-dev
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-3.0,host.conf,hostname,hosts,machine-id,pki,pulse,resolv.conf,ssl,xdg
private-etc alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-3.0,host.conf,hostname,hosts,ld.so.preload,machine-id,pki,pulse,resolv.conf,ssl,xdg
private-tmp
dbus-user filter

View file

@ -40,7 +40,7 @@ private
private-bin gravity-beams-and-evaporating-stars
private-cache
private-dev
private-etc fonts,machine-id
private-etc fonts,ld.so.preload,machine-id
private-tmp
dbus-user none

View file

@ -46,7 +46,7 @@ disable-mnt
private-bin gtk-update-icon-cache
private-cache
private-dev
private-etc none
private-etc ld.so.preload,none
private-lib
private-tmp

View file

@ -46,7 +46,7 @@ shell none
private-bin gimp*,gwenview,kbuildsycoca4,kdeinit4
private-dev
private-etc alternatives,fonts,gimp,gtk-2.0,kde4rc,kde5rc,ld.so.cache,machine-id,passwd,pulse,xdg
private-etc alternatives,fonts,gimp,gtk-2.0,kde4rc,kde5rc,ld.so.cache,ld.so.preload,machine-id,passwd,pulse,xdg
# dbus-user none
# dbus-system none

View file

@ -44,7 +44,7 @@ private-bin hyperrogue
private-cache
private-cwd ${HOME}
private-dev
private-etc fonts,machine-id
private-etc fonts,ld.so.preload,machine-id
private-tmp
dbus-user none

View file

@ -68,5 +68,5 @@ shell none
disable-mnt
private-cache
private-dev
private-etc alternatives,ca-certificates,crypto-policies,dconf,group,hostname,hosts,i2p,java-10-openjdk,java-11-openjdk,java-12-openjdk,java-13-openjdk,java-8-openjdk,java-9-openjdk,java-openjdk,ld.so.cache,localtime,machine-id,nsswitch.conf,passwd,pki,resolv.conf,ssl
private-etc alternatives,ca-certificates,crypto-policies,dconf,group,hostname,hosts,i2p,java-10-openjdk,java-11-openjdk,java-12-openjdk,java-13-openjdk,java-8-openjdk,java-9-openjdk,java-openjdk,ld.so.cache,ld.so.preload,localtime,machine-id,nsswitch.conf,passwd,pki,resolv.conf,ssl
private-tmp

View file

@ -50,7 +50,7 @@ private-bin bash,ipcalc,ipcalc-ng,perl,sh
# private-cache
private-dev
# empty etc directory
private-etc none
private-etc ld.so.preload,none
private-lib
private-opt none
private-tmp

View file

@ -34,7 +34,7 @@ tracelog
private-bin bash,jerry,sh,stockfish
private-dev
private-etc fonts,gtk-2.0,gtk-3.0
private-etc fonts,gtk-2.0,gtk-3.0,ld.so.preload
private-tmp
dbus-user none

View file

@ -42,7 +42,7 @@ disable-mnt
private-bin jumpnbump
private-cache
private-dev
private-etc none
private-etc ld.so.preload,none
private-tmp
dbus-user none

View file

@ -42,7 +42,7 @@ disable-mnt
private-bin kalgebra,kalgebramobile
private-cache
private-dev
private-etc fonts,machine-id
private-etc fonts,ld.so.preload,machine-id
private-tmp
dbus-user none

Some files were not shown because too many files have changed in this diff Show more