diff options
author | rusty-snake <print_hello_world+Public@protonmail.com> | 2019-06-16 19:59:21 +0200 |
---|---|---|
committer | rusty-snake <print_hello_world+Public@protonmail.com> | 2019-06-16 19:59:21 +0200 |
commit | a6954438f3cf3175edccc92489a6d1cae1d1d5cf (patch) | |
tree | b6564b698667147806f4a60e8b33ae5aa315b58d | |
parent | Fix writing places file for gnome-maps (diff) | |
download | firejail-a6954438f3cf3175edccc92489a6d1cae1d1d5cf.tar.gz firejail-a6954438f3cf3175edccc92489a6d1cae1d1d5cf.tar.zst firejail-a6954438f3cf3175edccc92489a6d1cae1d1d5cf.zip |
some fixes in profile.template
-rw-r--r-- | etc/aosp.profile | 1 | ||||
-rw-r--r-- | etc/templates/profile.template | 8 |
2 files changed, 4 insertions, 5 deletions
diff --git a/etc/aosp.profile b/etc/aosp.profile index bdfefa923..701bf4733 100644 --- a/etc/aosp.profile +++ b/etc/aosp.profile | |||
@@ -5,7 +5,6 @@ include aosp.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include globals.local | 6 | include globals.local |
7 | 7 | ||
8 | |||
9 | noblacklist ${HOME}/.android | 8 | noblacklist ${HOME}/.android |
10 | noblacklist ${HOME}/.bash_history | 9 | noblacklist ${HOME}/.bash_history |
11 | noblacklist ${HOME}/.config/git | 10 | noblacklist ${HOME}/.config/git |
diff --git a/etc/templates/profile.template b/etc/templates/profile.template index 9ca711719..0ccb3fae0 100644 --- a/etc/templates/profile.template +++ b/etc/templates/profile.template | |||
@@ -30,8 +30,8 @@ | |||
30 | # MKDIRS | 30 | # MKDIRS |
31 | # WHITELISTS | 31 | # WHITELISTS |
32 | # WHITELIST INCLUDES | 32 | # WHITELIST INCLUDES |
33 | # OPTIONS (no*) | 33 | # OPTIONS (caps*, net*, no*, protocol, seccomp, shell none, tracelog) |
34 | # PRIVATE OPTIONS (disable-mnt, private-*) | 34 | # PRIVATE OPTIONS (disable-mnt, private-*, writable-*) |
35 | # SPECIAL OPTIONS (mdwx, noexec, read-only, join-or-start) | 35 | # SPECIAL OPTIONS (mdwx, noexec, read-only, join-or-start) |
36 | # REDIRECT INCLUDES | 36 | # REDIRECT INCLUDES |
37 | # | 37 | # |
@@ -98,7 +98,7 @@ | |||
98 | # in PROFILE.local but still be protected by BLACKLISTS section | 98 | # in PROFILE.local but still be protected by BLACKLISTS section |
99 | # (further explanation at https://github.com/netblue30/firejail/issues/1569) | 99 | # (further explanation at https://github.com/netblue30/firejail/issues/1569) |
100 | #mkdir PATH | 100 | #mkdir PATH |
101 | #mkfile PATH | 101 | ##mkfile PATH |
102 | #whitelist PATH | 102 | #whitelist PATH |
103 | #include whitelist-common.inc | 103 | #include whitelist-common.inc |
104 | #include whitelist-var-common.inc | 104 | #include whitelist-var-common.inc |
@@ -136,7 +136,7 @@ | |||
136 | # private-etc templates (see also #1734, #2093) | 136 | # private-etc templates (see also #1734, #2093) |
137 | # Common: ld.so.cache,ld.so.preload,ld.so.conf,ld.so.conf.d,locale,locale.alias,locale.conf,localtime,alternatives,mime.types,xdg | 137 | # Common: ld.so.cache,ld.so.preload,ld.so.conf,ld.so.conf.d,locale,locale.alias,locale.conf,localtime,alternatives,mime.types,xdg |
138 | # Extra: magic,magic.mgc,passwd,group | 138 | # Extra: magic,magic.mgc,passwd,group |
139 | # Networking: ca-certificates,ssl,pki,crypto-policies,nsswitch.conf,resolv,conf,hosts,host.conf,hostname,protocols,services,rpc | 139 | # Networking: ca-certificates,ssl,pki,crypto-policies,nsswitch.conf,resolv.conf,hosts,host.conf,hostname,protocols,services,rpc |
140 | # Extra: proxychains.conf,gai.conf | 140 | # Extra: proxychains.conf,gai.conf |
141 | # Sound: alsa,asound.conf,pulse,machine-id | 141 | # Sound: alsa,asound.conf,pulse,machine-id |
142 | # GUI: fonts,pango,X11 | 142 | # GUI: fonts,pango,X11 |