diff options
author | crocket <748856+crocket@users.noreply.github.com> | 2022-05-04 08:08:59 +0000 |
---|---|---|
committer | Kelvin M. Klann <kmk3.code@protonmail.com> | 2022-05-12 12:42:34 +0000 |
commit | 89a44f7e88997ebeea6bb4335b511eeada7cff43 (patch) | |
tree | 02c32c2351cfaecffae474e4f8876c2cb49de26e | |
parent | fzenity: fix dead store (diff) | |
download | firejail-89a44f7e88997ebeea6bb4335b511eeada7cff43.tar.gz firejail-89a44f7e88997ebeea6bb4335b511eeada7cff43.tar.zst firejail-89a44f7e88997ebeea6bb4335b511eeada7cff43.zip |
Prevent emptty /usr/share in google-chrome profiles
Without whitelist-usr-share-common, /usr/share becomes empty.
Adding whitelist-runuser-common didn't break google chrome.
Whitelisting /usr/share/mozilla/extensions and
/usr/share/webext shouldn't break google chrome, either.
I tested google-chrome.profile only, but
I think later versions should not be different.
-rw-r--r-- | etc/profile-a-l/google-chrome-beta.profile | 6 | ||||
-rw-r--r-- | etc/profile-a-l/google-chrome-unstable.profile | 6 | ||||
-rw-r--r-- | etc/profile-a-l/google-chrome.profile | 6 |
3 files changed, 0 insertions, 18 deletions
diff --git a/etc/profile-a-l/google-chrome-beta.profile b/etc/profile-a-l/google-chrome-beta.profile index 72766085a..a62e4cf74 100644 --- a/etc/profile-a-l/google-chrome-beta.profile +++ b/etc/profile-a-l/google-chrome-beta.profile | |||
@@ -5,12 +5,6 @@ include google-chrome-beta.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include globals.local | 6 | include globals.local |
7 | 7 | ||
8 | # Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565 | ||
9 | ignore whitelist /usr/share/mozilla/extensions | ||
10 | ignore whitelist /usr/share/webext | ||
11 | ignore include whitelist-runuser-common.inc | ||
12 | ignore include whitelist-usr-share-common.inc | ||
13 | |||
14 | noblacklist ${HOME}/.cache/google-chrome-beta | 8 | noblacklist ${HOME}/.cache/google-chrome-beta |
15 | noblacklist ${HOME}/.config/google-chrome-beta | 9 | noblacklist ${HOME}/.config/google-chrome-beta |
16 | 10 | ||
diff --git a/etc/profile-a-l/google-chrome-unstable.profile b/etc/profile-a-l/google-chrome-unstable.profile index b8ded94d3..14547eab2 100644 --- a/etc/profile-a-l/google-chrome-unstable.profile +++ b/etc/profile-a-l/google-chrome-unstable.profile | |||
@@ -5,12 +5,6 @@ include google-chrome-unstable.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include globals.local | 6 | include globals.local |
7 | 7 | ||
8 | # Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565 | ||
9 | ignore whitelist /usr/share/mozilla/extensions | ||
10 | ignore whitelist /usr/share/webext | ||
11 | ignore include whitelist-runuser-common.inc | ||
12 | ignore include whitelist-usr-share-common.inc | ||
13 | |||
14 | noblacklist ${HOME}/.cache/google-chrome-unstable | 8 | noblacklist ${HOME}/.cache/google-chrome-unstable |
15 | noblacklist ${HOME}/.config/google-chrome-unstable | 9 | noblacklist ${HOME}/.config/google-chrome-unstable |
16 | 10 | ||
diff --git a/etc/profile-a-l/google-chrome.profile b/etc/profile-a-l/google-chrome.profile index 6de1405ee..66f76caa0 100644 --- a/etc/profile-a-l/google-chrome.profile +++ b/etc/profile-a-l/google-chrome.profile | |||
@@ -5,12 +5,6 @@ include google-chrome.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include globals.local | 6 | include globals.local |
7 | 7 | ||
8 | # Disable for now, see https://github.com/netblue30/firejail/pull/3688#issuecomment-718711565 | ||
9 | ignore whitelist /usr/share/mozilla/extensions | ||
10 | ignore whitelist /usr/share/webext | ||
11 | ignore include whitelist-runuser-common.inc | ||
12 | ignore include whitelist-usr-share-common.inc | ||
13 | |||
14 | noblacklist ${HOME}/.cache/google-chrome | 8 | noblacklist ${HOME}/.cache/google-chrome |
15 | noblacklist ${HOME}/.config/google-chrome | 9 | noblacklist ${HOME}/.config/google-chrome |
16 | 10 | ||