[PR #6708] [MERGED] profiles: add more xorg paths #6131

Closed
opened 2026-05-05 10:51:18 -06:00 by gitea-mirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/6708
Author: @kmk3
Created: 4/14/2025
Status: Merged
Merged: 4/15/2025
Merged by: @kmk3

Base: masterHead: profiles-xorg-paths


📝 Commits (1)

  • 6cbd069 profiles: add more xorg paths

📊 Changes

3 files changed (+11 additions, -0 deletions)

View changed files

📝 etc/inc/disable-common.inc (+7 -0)
📝 etc/inc/disable-x11.inc (+2 -0)
📝 etc/inc/whitelist-common.inc (+2 -0)

📄 Description

Add the following files, which may be used to configure X clients:

  • ~/.Xdefaults
  • ~/.Xdefaults-* (~/.Xdefaults-$(hostname))
  • ~/.Xresources

And block the following paths, which are intended for the X server:

  • ~/.local/share/xorg (rootless Xorg log directory)
  • /etc/X11/xinit
  • /etc/X11/xorg.conf.d
  • /var/log/Xorg.* (default Xorg log path)

Note: ~/.Xdefaults is read directly by each application when it starts,
while ~/.Xresources is loaded once into the X root window with xrdb(1)
when starting the session, such as by a DE or directly in ~/.xinitrc.
Both use the same format and it appears that users are encouraged to use
~/.Xresources instead of ~/.Xdefaults but applications still try to read
~/.Xdefaults if it exists.

From xrdb(1):

FILES
Xrdb does not load any files on its own, but many desktop
environments use xrdb to load ~/.Xresources files on session
startup to initialize the resource database, as a generalized
replacement for ~/.Xdefaults files.

See X(1), Xorg(1), xinit(1) and xrdb(1).


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/6708 **Author:** [@kmk3](https://github.com/kmk3) **Created:** 4/14/2025 **Status:** ✅ Merged **Merged:** 4/15/2025 **Merged by:** [@kmk3](https://github.com/kmk3) **Base:** `master` ← **Head:** `profiles-xorg-paths` --- ### 📝 Commits (1) - [`6cbd069`](https://github.com/netblue30/firejail/commit/6cbd069bf217d66c21f47b45ad40d7b019fbe4a5) profiles: add more xorg paths ### 📊 Changes **3 files changed** (+11 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `etc/inc/disable-common.inc` (+7 -0) 📝 `etc/inc/disable-x11.inc` (+2 -0) 📝 `etc/inc/whitelist-common.inc` (+2 -0) </details> ### 📄 Description Add the following files, which may be used to configure X clients: * `~/.Xdefaults` * `~/.Xdefaults-*` (`~/.Xdefaults-$(hostname)`) * `~/.Xresources` And block the following paths, which are intended for the X server: * `~/.local/share/xorg` (rootless Xorg log directory) * `/etc/X11/xinit` * `/etc/X11/xorg.conf.d` * `/var/log/Xorg.*` (default Xorg log path) Note: ~/.Xdefaults is read directly by each application when it starts, while ~/.Xresources is loaded once into the X root window with xrdb(1) when starting the session, such as by a DE or directly in ~/.xinitrc. Both use the same format and it appears that users are encouraged to use ~/.Xresources instead of ~/.Xdefaults but applications still try to read ~/.Xdefaults if it exists. From xrdb(1): > FILES > Xrdb does not load any files on its own, but many desktop > environments use xrdb to load ~/.Xresources files on session > startup to initialize the resource database, as a generalized > replacement for ~/.Xdefaults files. See X(1), Xorg(1), xinit(1) and xrdb(1). --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
gitea-mirror 2026-05-05 10:51:18 -06:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#6131
No description provided.