diff options
author | 2021-05-02 14:23:41 +0000 | |
---|---|---|
committer | 2021-05-02 14:23:41 +0000 | |
commit | 6a13ff2321f48df89251a7726c7f6ba06aecaa0f (patch) | |
tree | b91748bdfb11748b1a41e5ceb067f6950e1cbee0 | |
parent | add comment to firefox.profile (#4232) (diff) | |
download | firejail-6a13ff2321f48df89251a7726c7f6ba06aecaa0f.tar.gz firejail-6a13ff2321f48df89251a7726c7f6ba06aecaa0f.tar.zst firejail-6a13ff2321f48df89251a7726c7f6ba06aecaa0f.zip |
harden audio-recorder (#4233)
-rw-r--r-- | etc/profile-a-l/audio-recorder.profile | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/etc/profile-a-l/audio-recorder.profile b/etc/profile-a-l/audio-recorder.profile index b2ed3b030..2c7fdc812 100644 --- a/etc/profile-a-l/audio-recorder.profile +++ b/etc/profile-a-l/audio-recorder.profile | |||
@@ -20,6 +20,7 @@ include disable-xdg.inc | |||
20 | whitelist ${MUSIC} | 20 | whitelist ${MUSIC} |
21 | whitelist ${DOWNLOADS} | 21 | whitelist ${DOWNLOADS} |
22 | whitelist /usr/share/audio-recorder | 22 | whitelist /usr/share/audio-recorder |
23 | whitelist /usr/share/gstreamer-1.0 | ||
23 | include whitelist-common.inc | 24 | include whitelist-common.inc |
24 | include whitelist-usr-share-common.inc | 25 | include whitelist-usr-share-common.inc |
25 | include whitelist-var-common.inc | 26 | include whitelist-var-common.inc |
@@ -44,7 +45,11 @@ tracelog | |||
44 | disable-mnt | 45 | disable-mnt |
45 | # private-bin audio-recorder | 46 | # private-bin audio-recorder |
46 | private-cache | 47 | private-cache |
47 | private-etc alternatives,fonts | 48 | private-etc alternatives,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload |
48 | private-tmp | 49 | private-tmp |
49 | 50 | ||
51 | dbus-user filter | ||
52 | dbus-user.talk ca.desrt.dconf | ||
53 | dbus-system none | ||
54 | |||
50 | # memory-deny-write-execute - breaks on Arch | 55 | # memory-deny-write-execute - breaks on Arch |