diff options
author | 2021-11-09 12:50:52 -0500 | |
---|---|---|
committer | 2021-11-09 12:50:52 -0500 | |
commit | 2352920cb09580fd2bbcf0655bc8c8b934422be2 (patch) | |
tree | 460736aa69ba07978139989c7c0c6e6daa865998 | |
parent | disable-common.inc: disable chrome-sandbox (diff) | |
download | firejail-2352920cb09580fd2bbcf0655bc8c8b934422be2.tar.gz firejail-2352920cb09580fd2bbcf0655bc8c8b934422be2.tar.zst firejail-2352920cb09580fd2bbcf0655bc8c8b934422be2.zip |
disable-common.inc: vmware SUID binaries
-rw-r--r-- | etc/inc/disable-common.inc | 1 | ||||
-rw-r--r-- | etc/profile-m-z/vmware-view.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/vmware.profile | 1 |
3 files changed, 3 insertions, 0 deletions
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc index 768fe9870..1d56cab0c 100644 --- a/etc/inc/disable-common.inc +++ b/etc/inc/disable-common.inc | |||
@@ -502,6 +502,7 @@ blacklist /usr/lib/policykit-1/polkit-agent-helper-1 | |||
502 | blacklist /usr/lib/dbus-1.0/dbus-daemon-launch-helper | 502 | blacklist /usr/lib/dbus-1.0/dbus-daemon-launch-helper |
503 | blacklist /usr/lib/eject/dmcrypt-get-device | 503 | blacklist /usr/lib/eject/dmcrypt-get-device |
504 | blacklist /usr/lib/chromium/chrome-sandbox | 504 | blacklist /usr/lib/chromium/chrome-sandbox |
505 | blacklist /usr/lib/vmware | ||
505 | 506 | ||
506 | # other SUID binaries | 507 | # other SUID binaries |
507 | blacklist /usr/lib/virtualbox | 508 | blacklist /usr/lib/virtualbox |
diff --git a/etc/profile-m-z/vmware-view.profile b/etc/profile-m-z/vmware-view.profile index b2b019ff4..278a66149 100644 --- a/etc/profile-m-z/vmware-view.profile +++ b/etc/profile-m-z/vmware-view.profile | |||
@@ -7,6 +7,7 @@ include vmware-view.local | |||
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | noblacklist ${HOME}/.vmware | 9 | noblacklist ${HOME}/.vmware |
10 | noblacklist /usr/lib/vmware | ||
10 | 11 | ||
11 | noblacklist /sbin | 12 | noblacklist /sbin |
12 | noblacklist /usr/sbin | 13 | noblacklist /usr/sbin |
diff --git a/etc/profile-m-z/vmware.profile b/etc/profile-m-z/vmware.profile index 1e3983f0e..57fbbae96 100644 --- a/etc/profile-m-z/vmware.profile +++ b/etc/profile-m-z/vmware.profile | |||
@@ -8,6 +8,7 @@ include globals.local | |||
8 | 8 | ||
9 | noblacklist ${HOME}/.cache/vmware | 9 | noblacklist ${HOME}/.cache/vmware |
10 | noblacklist ${HOME}/.vmware | 10 | noblacklist ${HOME}/.vmware |
11 | noblacklist /usr/lib/vmware | ||
11 | 12 | ||
12 | include disable-common.inc | 13 | include disable-common.inc |
13 | include disable-devel.inc | 14 | include disable-devel.inc |