mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-21 06:45:29 -06:00
Added on commit 2d8ff695a ("WIP: Blacklist common programming
interpreters. (#1837)", 2018-04-02).
111 lines
2.4 KiB
Text
111 lines
2.4 KiB
Text
# This file is overwritten during software install.
|
|
# Persistent customizations should go in a .local file.
|
|
include disable-devel.local
|
|
|
|
# development tools
|
|
|
|
# autoconf/automake
|
|
blacklist ${PATH}/aclocal*
|
|
blacklist ${PATH}/autoconf
|
|
blacklist ${PATH}/autoheader
|
|
blacklist ${PATH}/autom4te
|
|
blacklist ${PATH}/automake*
|
|
blacklist ${PATH}/autoreconf
|
|
blacklist ${PATH}/autoscan
|
|
blacklist ${PATH}/autoupdate
|
|
blacklist ${PATH}/ifnames
|
|
blacklist ${PATH}/m4
|
|
|
|
# patch
|
|
blacklist ${PATH}/elfedit
|
|
blacklist ${PATH}/espdiff
|
|
blacklist ${PATH}/patch
|
|
blacklist ${PATH}/patchview
|
|
|
|
# packaging
|
|
blacklist ${PATH}/dh_*
|
|
blacklist ${PATH}/fakeroot*
|
|
blacklist ${PATH}/lintian
|
|
|
|
# expect
|
|
blacklist ${PATH}/autoexpect
|
|
blacklist ${PATH}/expect*
|
|
|
|
# clang/llvm
|
|
blacklist ${PATH}/analyze-build*
|
|
blacklist ${PATH}/asan_symbolize*
|
|
blacklist ${PATH}/bugpoint*
|
|
blacklist ${PATH}/c-index-test*
|
|
blacklist ${PATH}/clang*
|
|
blacklist ${PATH}/llc*
|
|
blacklist ${PATH}/lldb*
|
|
blacklist ${PATH}/lli*
|
|
blacklist ${PATH}/llvm*
|
|
blacklist ${PATH}/scan-build
|
|
# see issue #2106 - it disables hardware acceleration in Firefox on Radeon GPU
|
|
#blacklist /usr/lib/llvm*
|
|
|
|
# GCC
|
|
blacklist ${PATH}/*-g++*
|
|
blacklist ${PATH}/*-gcc*
|
|
blacklist ${PATH}/as
|
|
blacklist ${PATH}/c++*
|
|
blacklist ${PATH}/c8*
|
|
blacklist ${PATH}/c9*
|
|
blacklist ${PATH}/cc
|
|
blacklist ${PATH}/cpp*
|
|
blacklist ${PATH}/elfedit
|
|
blacklist ${PATH}/g++*
|
|
blacklist ${PATH}/gcc*
|
|
blacklist ${PATH}/gcov*
|
|
blacklist ${PATH}/gdb
|
|
blacklist ${PATH}/gmake
|
|
blacklist ${PATH}/ld
|
|
blacklist ${PATH}/make
|
|
blacklist ${PATH}/make-first-existing-target
|
|
blacklist ${PATH}/x86_64-linux-gnu-*
|
|
# seems to create problems on Gentoo
|
|
#blacklist /usr/lib/gcc
|
|
|
|
# Go
|
|
blacklist ${PATH}/gccgo
|
|
blacklist ${PATH}/go
|
|
blacklist ${PATH}/gofmt
|
|
|
|
# Java
|
|
blacklist ${PATH}/java
|
|
blacklist ${PATH}/javac
|
|
blacklist /etc/java
|
|
blacklist /usr/lib/java
|
|
blacklist /usr/share/java
|
|
|
|
# Scala
|
|
blacklist ${PATH}/scala
|
|
blacklist ${PATH}/scala3
|
|
blacklist ${PATH}/scala3-compiler
|
|
blacklist ${PATH}/scala3-repl
|
|
blacklist ${PATH}/scalac
|
|
|
|
# OpenSSL
|
|
blacklist ${PATH}/openssl
|
|
blacklist ${PATH}/openssl-1.0
|
|
|
|
# Rust
|
|
blacklist ${PATH}/rust-gdb
|
|
blacklist ${PATH}/rust-lldb
|
|
blacklist ${PATH}/rustc
|
|
|
|
# tcc - Tiny C Compiler
|
|
blacklist ${PATH}/tcc
|
|
blacklist ${PATH}/x86_64-tcc
|
|
blacklist /usr/lib/tcc
|
|
|
|
# Valgrind
|
|
blacklist ${PATH}/valgrind*
|
|
blacklist /usr/lib/valgrind
|
|
|
|
# Source-Code
|
|
blacklist /usr/include
|
|
blacklist /usr/local/include
|
|
blacklist /usr/local/src
|
|
blacklist /usr/src
|