github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

profile fixes

Browse source 
- update README.md and RELNOTES
 - add 'blacklist ${RUNUSER}/.flatpak-cache' to disable-common.inc
 - fix #3728, fonts in openSUSE KDE with wc / wusc
 - fix gnome-todo
 - fix xournalpp MathTeX whitelist
This commit is contained in:
rusty-snake 2020-11-06 10:35:14 +01:00
parent 06a885d06e
commit eddd3cdbdf
7 changed files with 8 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

1
README.md
View file

@ -194,3 +194,4 @@ Stats:
### New profiles:
spectacle

1
RELNOTES
View file

@ -1,6 +1,7 @@
firejail (0.9.65) baseline; urgency=low
* allow --tmpfs inside $HOME for unprivileged users
* --disable-usertmpfs compile time option
* new profiles: spectacle
-- netblue30 <netblue30@yahoo.com> Wed, 21 Oct 2020 09:00:00 -0500
firejail (0.9.64) baseline; urgency=low

1
etc/inc/disable-common.inc
View file

@ -480,6 +480,7 @@ blacklist ${RUNUSER}/app
blacklist ${RUNUSER}/doc
blacklist ${RUNUSER}/.dbus-proxy
blacklist ${RUNUSER}/.flatpak
blacklist ${RUNUSER}/.flatpak-cache
blacklist ${RUNUSER}/.flatpak-helper
blacklist /usr/share/flatpak
noblacklist /var/lib/flatpak/exports

1
etc/inc/whitelist-common.inc
View file

@ -65,6 +65,7 @@ whitelist ${HOME}/.config/kio_httprc
whitelist ${HOME}/.config/kioslaverc
whitelist ${HOME}/.config/ksslcablacklist
whitelist ${HOME}/.config/qt5ct
whitelist ${HOME}/.config/qtcurve
whitelist ${HOME}/.kde/share/config/kdeglobals
whitelist ${HOME}/.kde/share/config/kio_httprc
whitelist ${HOME}/.kde/share/config/kioslaverc

1
etc/inc/whitelist-usr-share-common.inc
View file

@ -16,6 +16,7 @@ whitelist /usr/share/enchant-2
whitelist /usr/share/file
whitelist /usr/share/fontconfig
whitelist /usr/share/fonts
whitelist /usr/share/fonts-config
whitelist /usr/share/gir-1.0
whitelist /usr/share/gjs-1.0
whitelist /usr/share/glib-2.0

4
etc/profile-a-l/gnome-todo.profile
View file

@ -53,8 +53,8 @@ dbus-user filter
dbus-user.own org.gnome.Todo
dbus-user.talk ca.desrt.dconf
#dbus-user.talk org.gnome.evolution.dataserver.AddressBook9
#dbus-user.talk org.gnome.evolution.dataserver.Calendar8
#dbus-user.talk org.gnome.evolution.dataserver.Sources5
dbus-user.talk org.gnome.evolution.dataserver.Calendar8
dbus-user.talk org.gnome.evolution.dataserver.Sources5
#dbus-user.talk org.gnome.evolution.dataserver.Subprocess.Backend.*
#dbus-user.talk org.gnome.OnlineAccounts
dbus-system none

1
etc/profile-m-z/xournalpp.profile
View file

@ -18,6 +18,7 @@ include whitelist-runuser-common.inc
#mkdir ${HOME}/.xournalpp
#whitelist ${HOME}/.xournalpp
#whitelist ${HOME}/.texlive2019
#whitelist ${DOCUMENTS}
#include whitelist-common.inc