diff options
author | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2020-04-03 14:38:39 +0200 |
---|---|---|
committer | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2020-04-03 17:52:22 +0200 |
commit | 9264ebbd12fa63a77f062d2801195e815237ac94 (patch) | |
tree | 5e5ac1164e063fcf5979a4163c7d87ebefad269f | |
parent | allow using wruc on any program (diff) | |
download | firejail-9264ebbd12fa63a77f062d2801195e815237ac94.tar.gz firejail-9264ebbd12fa63a77f062d2801195e815237ac94.tar.zst firejail-9264ebbd12fa63a77f062d2801195e815237ac94.zip |
misc fixes & hardening
-rw-r--r-- | etc/0ad.profile | 1 | ||||
-rw-r--r-- | etc/ghostwriter.profile | 10 | ||||
-rw-r--r-- | etc/newsbeuter.profile | 2 | ||||
-rw-r--r-- | src/profstats/main.c | 4 |
4 files changed, 9 insertions, 8 deletions
diff --git a/etc/0ad.profile b/etc/0ad.profile index 8b5820d5e..d01de00d3 100644 --- a/etc/0ad.profile +++ b/etc/0ad.profile | |||
@@ -45,6 +45,7 @@ tracelog | |||
45 | 45 | ||
46 | disable-mnt | 46 | disable-mnt |
47 | private-bin 0ad,pyrogenesis,sh,which | 47 | private-bin 0ad,pyrogenesis,sh,which |
48 | private-cache | ||
48 | private-dev | 49 | private-dev |
49 | private-tmp | 50 | private-tmp |
50 | 51 | ||
diff --git a/etc/ghostwriter.profile b/etc/ghostwriter.profile index 27becf8fe..c18a6b72e 100644 --- a/etc/ghostwriter.profile +++ b/etc/ghostwriter.profile | |||
@@ -19,11 +19,11 @@ include disable-passwdmgr.inc | |||
19 | include disable-programs.inc | 19 | include disable-programs.inc |
20 | include disable-xdg.inc | 20 | include disable-xdg.inc |
21 | 21 | ||
22 | #whitelist /usr/share/ghostwriter | 22 | whitelist /usr/share/ghostwriter |
23 | #whitelist /usr/share/mozilla-dicts | 23 | whitelist /usr/share/mozilla-dicts |
24 | #whitelist /usr/share/texlive | 24 | whitelist /usr/share/texlive |
25 | #whitelist /usr/share/pandoc* | 25 | whitelist /usr/share/pandoc* |
26 | #include whitelist-usr-share-common.inc | 26 | include whitelist-usr-share-common.inc |
27 | 27 | ||
28 | apparmor | 28 | apparmor |
29 | caps.drop all | 29 | caps.drop all |
diff --git a/etc/newsbeuter.profile b/etc/newsbeuter.profile index 059c2156d..85581a2f0 100644 --- a/etc/newsbeuter.profile +++ b/etc/newsbeuter.profile | |||
@@ -1,4 +1,4 @@ | |||
1 | # Firejail profile for Newsboat | 1 | # Firejail profile for Newsbeuter |
2 | # Description: Text based Atom/RSS feed reader | 2 | # Description: Text based Atom/RSS feed reader |
3 | # This file is overwritten after every install/update | 3 | # This file is overwritten after every install/update |
4 | # Persistent local customizations | 4 | # Persistent local customizations |
diff --git a/src/profstats/main.c b/src/profstats/main.c index f8818982f..7c6bfce9d 100644 --- a/src/profstats/main.c +++ b/src/profstats/main.c | |||
@@ -185,7 +185,7 @@ int main(int argc, char **argv) { | |||
185 | 185 | ||
186 | start = i; | 186 | start = i; |
187 | if (i == argc) { | 187 | if (i == argc) { |
188 | fprintf(stderr, "Error: no porfile file specified\n"); | 188 | fprintf(stderr, "Error: no profile file specified\n"); |
189 | return 1; | 189 | return 1; |
190 | } | 190 | } |
191 | 191 | ||
@@ -264,4 +264,4 @@ int main(int argc, char **argv) { | |||
264 | printf(" net none\t\t\t%d\n", cnt_netnone); | 264 | printf(" net none\t\t\t%d\n", cnt_netnone); |
265 | printf("\n"); | 265 | printf("\n"); |
266 | return 0; | 266 | return 0; |
267 | } \ No newline at end of file | 267 | } |