diff options
author | 2023-09-26 04:18:28 +0000 | |
---|---|---|
committer | 2023-09-26 04:18:28 +0000 | |
commit | 20d43a6772739b276c2523d9e8b9911258dba05e (patch) | |
tree | 8b5ab99f58b7c6abee39eb1b00f224bccc970742 | |
parent | build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 (diff) | |
download | firejail-20d43a6772739b276c2523d9e8b9911258dba05e.tar.gz firejail-20d43a6772739b276c2523d9e8b9911258dba05e.tar.zst firejail-20d43a6772739b276c2523d9e8b9911258dba05e.zip |
profiles: dpkg fix (#6019)
-rw-r--r-- | etc/profile-a-l/file-roller.profile | 4 | ||||
-rw-r--r-- | etc/profile-a-l/freemind.profile | 4 |
2 files changed, 6 insertions, 2 deletions
diff --git a/etc/profile-a-l/file-roller.profile b/etc/profile-a-l/file-roller.profile index b32f7595c..cc1a290ef 100644 --- a/etc/profile-a-l/file-roller.profile +++ b/etc/profile-a-l/file-roller.profile | |||
@@ -6,6 +6,8 @@ include file-roller.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | noblacklist ${PATH}/dpkg* | ||
10 | |||
9 | include disable-common.inc | 11 | include disable-common.inc |
10 | include disable-devel.inc | 12 | include disable-devel.inc |
11 | include disable-exec.inc | 13 | include disable-exec.inc |
@@ -40,7 +42,7 @@ seccomp | |||
40 | seccomp.block-secondary | 42 | seccomp.block-secondary |
41 | tracelog | 43 | tracelog |
42 | 44 | ||
43 | private-bin 7z,7za,7zr,ar,arj,atool,bash,brotli,bsdtar,bzip2,compress,cp,cpio,dpkg-deb,file-roller,gtar,gzip,isoinfo,lha,lrzip,lsar,lz4,lzip,lzma,lzop,mv,p7zip,rar,rm,rzip,sh,tar,unace,unalz,unar,uncompress,unrar,unsquashfs,unstuff,unzip,unzstd,xz,xzdec,zip,zoo,zstd | 45 | private-bin 7z,7za,7zr,ar,arj,atool,bash,brotli,bsdtar,bzip2,compress,cp,cpio,dpkg*,file-roller,gtar,gzip,isoinfo,lha,lrzip,lsar,lz4,lzip,lzma,lzop,mv,p7zip,rar,rm,rzip,sh,tar,unace,unalz,unar,uncompress,unrar,unsquashfs,unstuff,unzip,unzstd,xz,xzdec,zip,zoo,zstd |
44 | private-cache | 46 | private-cache |
45 | private-dev | 47 | private-dev |
46 | private-etc @x11 | 48 | private-etc @x11 |
diff --git a/etc/profile-a-l/freemind.profile b/etc/profile-a-l/freemind.profile index 9bf5a14be..80958d305 100644 --- a/etc/profile-a-l/freemind.profile +++ b/etc/profile-a-l/freemind.profile | |||
@@ -9,6 +9,8 @@ include globals.local | |||
9 | noblacklist ${DOCUMENTS} | 9 | noblacklist ${DOCUMENTS} |
10 | noblacklist ${HOME}/.freemind | 10 | noblacklist ${HOME}/.freemind |
11 | 11 | ||
12 | noblacklist ${PATH}/dpkg* | ||
13 | |||
12 | # Allow java (blacklisted by disable-devel.inc) | 14 | # Allow java (blacklisted by disable-devel.inc) |
13 | include allow-java.inc | 15 | include allow-java.inc |
14 | 16 | ||
@@ -40,7 +42,7 @@ seccomp | |||
40 | tracelog | 42 | tracelog |
41 | 43 | ||
42 | disable-mnt | 44 | disable-mnt |
43 | private-bin bash,cp,dirname,dpkg,echo,freemind,grep,java,lsb_release,mkdir,readlink,rpm,sed,sh,uname,which | 45 | private-bin bash,cp,dirname,dpkg*,echo,freemind,grep,java,lsb_release,mkdir,readlink,rpm,sed,sh,uname,which |
44 | private-cache | 46 | private-cache |
45 | private-dev | 47 | private-dev |
46 | #private-etc alternatives,fonts,java* | 48 | #private-etc alternatives,fonts,java* |