diff options
| author |  rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-01-18 18:26:27 +0100 |
|---|---|---|
| committer | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-01-18 18:26:27 +0100 |
| commit | 0f65e7fa6ace3757624b08a553515ddf9f7c5269 (patch) | |
| tree | 6399477d0c8d086c8b6f027a0b974ab548528bb1 | |
| parent | Add new allow include allow-bin-sh.inc (diff) | |
| download | firejail-0f65e7fa6ace3757624b08a553515ddf9f7c5269.tar.gz firejail-0f65e7fa6ace3757624b08a553515ddf9f7c5269.tar.zst firejail-0f65e7fa6ace3757624b08a553515ddf9f7c5269.zip | |
harden and fix cheese.profile
hardening: wusc + wruc
fix: settings was immutable
| -rw-r--r-- | etc/profile-a-l/cheese.profile | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/etc/profile-a-l/cheese.profile b/etc/profile-a-l/cheese.profile index 337117c4a..aca1f5876 100644 --- a/etc/profile-a-l/cheese.profile +++ b/etc/profile-a-l/cheese.profile | |||
| @@ -19,7 +19,10 @@ include disable-xdg.inc | |||
| 19 | 19 | ||
| 20 | whitelist ${VIDEOS} | 20 | whitelist ${VIDEOS} |
| 21 | whitelist ${PICTURES} | 21 | whitelist ${PICTURES} |
| 22 | whitelist /usr/share/gnome-video-effects | ||
| 22 | include whitelist-common.inc | 23 | include whitelist-common.inc |
| 24 | include whitelist-runuser-common.inc | ||
| 25 | include whitelist-usr-share-common.inc | ||
| 23 | include whitelist-var-common.inc | 26 | include whitelist-var-common.inc |
| 24 | 27 | ||
| 25 | apparmor | 28 | apparmor |
| @@ -43,5 +46,6 @@ private-cache | |||
| 43 | private-etc alternatives,clutter-1.0,dconf,drirc,fonts,gtk-3.0 | 46 | private-etc alternatives,clutter-1.0,dconf,drirc,fonts,gtk-3.0 |
| 44 | private-tmp | 47 | private-tmp |
| 45 | 48 | ||
| 46 | dbus-user none | 49 | dbus-user filter |
| 50 | dbus-user.talk ca.desrt.dconf | ||
| 47 | dbus-system none | 51 | dbus-system none |