mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-21 06:45:29 -06:00
ed5c259fcc
rxvt needs Perl modules, thus does not work. And its blacklist is needed so that Firefox can run applications with Terminal=true in their .desktop file (depending on what is installed).
78 lines
2 KiB
Text
78 lines
2 KiB
Text
# This file is overwritten during software install.
|
|
# Persistent customizations should go in a .local file.
|
|
include disable-interpreters.local
|
|
|
|
# gjs
|
|
blacklist ${PATH}/gjs
|
|
blacklist ${PATH}/gjs-console
|
|
blacklist /usr/lib/gjs
|
|
blacklist /usr/lib/libgjs*
|
|
blacklist /usr/lib64/gjs
|
|
blacklist /usr/lib64/libgjs*
|
|
|
|
# Lua
|
|
blacklist ${PATH}/lua*
|
|
blacklist /usr/include/lua*
|
|
blacklist /usr/lib/liblua*
|
|
blacklist /usr/lib/lua
|
|
blacklist /usr/lib64/liblua*
|
|
blacklist /usr/lib64/lua
|
|
blacklist /usr/share/lua*
|
|
|
|
# mozjs
|
|
blacklist /usr/lib/libmozjs-*
|
|
blacklist /usr/lib64/libmozjs-*
|
|
|
|
# Node.js
|
|
blacklist ${PATH}/node
|
|
blacklist /usr/include/node
|
|
|
|
# nvm
|
|
blacklist ${HOME}/.nvm
|
|
|
|
# Perl
|
|
blacklist ${PATH}/core_perl
|
|
blacklist ${PATH}/cpan*
|
|
blacklist ${PATH}/perl
|
|
blacklist ${PATH}/site_perl
|
|
blacklist ${PATH}/vendor_perl
|
|
blacklist /usr/lib/perl*
|
|
blacklist /usr/lib64/perl*
|
|
blacklist /usr/share/perl*
|
|
|
|
# rxvt needs Perl modules, thus does not work. In particular, blacklisting
|
|
# it is needed so that Firefox can run applications with Terminal=true in
|
|
# their .desktop file (depending on what is installed). The reason is that
|
|
# this is done via glib, which currently uses a hardcoded list of terminal
|
|
# emulators:
|
|
# https://gitlab.gnome.org/GNOME/glib/-/issues/338
|
|
# And in this list, rxvt comes before xterm.
|
|
blacklist ${PATH}/rxvt
|
|
|
|
# PHP
|
|
blacklist ${PATH}/php*
|
|
blacklist /usr/lib/php*
|
|
blacklist /usr/share/php*
|
|
|
|
# Ruby
|
|
blacklist ${PATH}/ruby
|
|
blacklist /usr/lib/ruby
|
|
blacklist /usr/lib64/ruby
|
|
|
|
# Programs using python: deluge, firefox addons, filezilla, cherrytree, xchat, hexchat, libreoffice, scribus
|
|
# Python 2
|
|
blacklist ${PATH}/python2*
|
|
blacklist /usr/include/python2*
|
|
blacklist /usr/lib/python2*
|
|
blacklist /usr/local/lib/python2*
|
|
blacklist /usr/share/python2*
|
|
|
|
# You will want to add noblacklist for python3 stuff in the firefox and/or chromium profiles if you use the Gnome connector (see Issue #2026)
|
|
|
|
# Python 3
|
|
blacklist ${PATH}/python3*
|
|
blacklist /usr/include/python3*
|
|
blacklist /usr/lib/python3*
|
|
blacklist /usr/lib64/python3*
|
|
blacklist /usr/local/lib/python3*
|
|
blacklist /usr/share/python3*
|