diff options
| author |  netblue30 <netblue30@protonmail.com> | 2021-11-11 02:22:02 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2021-11-11 02:22:02 +0000 |
| commit | fbad5a533b7ee9567858b1b6a4ce570d3096cc50 (patch) | |
| tree | cb27800b841b81736d47b9d9a3f4f362ac5b1f64 | |
| parent | disable-common.inc: fix ssh (diff) | |
| parent | change Fedora ssh fix (diff) | |
| download | firejail-fbad5a533b7ee9567858b1b6a4ce570d3096cc50.tar.gz firejail-fbad5a533b7ee9567858b1b6a4ce570d3096cc50.tar.zst firejail-fbad5a533b7ee9567858b1b6a4ce570d3096cc50.zip | |
Merge pull request #4675 from glitsj16/ssh-fixes
more ssh fixes
| -rw-r--r-- | etc/inc/allow-ssh.inc | 9 | ||||
| -rw-r--r-- | etc/inc/disable-common.inc | 4 |
2 files changed, 10 insertions, 3 deletions
diff --git a/etc/inc/allow-ssh.inc b/etc/inc/allow-ssh.inc index a78798a18..5d41e6607 100644 --- a/etc/inc/allow-ssh.inc +++ b/etc/inc/allow-ssh.inc | |||
| @@ -5,6 +5,11 @@ include allow-ssh.local | |||
| 5 | noblacklist ${HOME}/.ssh | 5 | noblacklist ${HOME}/.ssh |
| 6 | noblacklist /etc/ssh | 6 | noblacklist /etc/ssh |
| 7 | noblacklist /etc/ssh/ssh_config | 7 | noblacklist /etc/ssh/ssh_config |
| 8 | noblacklist /tmp/ssh-* | ||
| 9 | noblacklist ${PATH}/ssh | 8 | noblacklist ${PATH}/ssh |
| 10 | noblacklist /usr/lib/openssh/ssh-keysign | 9 | noblacklist /tmp/ssh-* |
| 10 | # Arch Linux and derivatives | ||
| 11 | noblacklist /usr/lib/ssh | ||
| 12 | # Debian/Ubuntu and derivatives | ||
| 13 | noblacklist /usr/lib/openssh | ||
| 14 | # Fedora and derivatives | ||
| 15 | noblacklist /usr/libexec/openssh | ||
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc index 1a4de9b26..bdc5ff6b2 100644 --- a/etc/inc/disable-common.inc +++ b/etc/inc/disable-common.inc | |||
| @@ -495,7 +495,9 @@ blacklist ${PATH}/xev | |||
| 495 | blacklist ${PATH}/xinput | 495 | blacklist ${PATH}/xinput |
| 496 | # from 0.9.67 | 496 | # from 0.9.67 |
| 497 | blacklist ${PATH}/ssh | 497 | blacklist ${PATH}/ssh |
| 498 | blacklist /usr/lib/openssh/ssh-keysign | 498 | blacklist /usr/lib/openssh |
| 499 | blacklist /usr/lib/ssh | ||
| 500 | blacklist /usr/libexec/openssh | ||
| 499 | blacklist ${PATH}/passwd | 501 | blacklist ${PATH}/passwd |
| 500 | blacklist /usr/lib/xorg/Xorg.wrap | 502 | blacklist /usr/lib/xorg/Xorg.wrap |
| 501 | blacklist /usr/lib/policykit-1/polkit-agent-helper-1 | 503 | blacklist /usr/lib/policykit-1/polkit-agent-helper-1 |