diff options
author | 2020-01-25 22:15:20 +0000 | |
---|---|---|
committer | 2020-01-25 22:15:20 +0000 | |
commit | 0e85136b5de52a7d949d8f7512ca8493776b144d (patch) | |
tree | 82cf4b589e83cfd2b7a26177253d874421ec194c | |
parent | new profile: gnome-passwordsafe (diff) | |
download | firejail-0e85136b5de52a7d949d8f7512ca8493776b144d.tar.gz firejail-0e85136b5de52a7d949d8f7512ca8493776b144d.tar.zst firejail-0e85136b5de52a7d949d8f7512ca8493776b144d.zip |
blacklist gjs in disable-interpreters (#3186)
* blacklist gjs in disable-interpreters
* Update
-rw-r--r-- | etc/allow-gjs.inc | 6 | ||||
-rw-r--r-- | etc/disable-interpreters.inc | 8 | ||||
-rw-r--r-- | etc/gjs.profile | 3 | ||||
-rw-r--r-- | etc/gnome-books.profile | 3 | ||||
-rw-r--r-- | etc/gnome-characters.profile | 3 | ||||
-rw-r--r-- | etc/gnome-documents.profile | 3 | ||||
-rw-r--r-- | etc/gnome-maps.profile | 3 | ||||
-rw-r--r-- | etc/gnome-sound-recorder.profile | 3 | ||||
-rw-r--r-- | etc/gnome-weather.profile | 3 | ||||
-rw-r--r-- | etc/polari.profile | 2 | ||||
-rw-r--r-- | etc/templates/profile.template | 3 |
11 files changed, 40 insertions, 0 deletions
diff --git a/etc/allow-gjs.inc b/etc/allow-gjs.inc new file mode 100644 index 000000000..aabf0a70b --- /dev/null +++ b/etc/allow-gjs.inc | |||
@@ -0,0 +1,6 @@ | |||
1 | noblacklist ${PATH}/gjs | ||
2 | noblacklist ${PATH}/gjs-console | ||
3 | noblacklist /usr/lib/gjs | ||
4 | noblacklist /usr/lib64/gjs | ||
5 | noblacklist /usr/lib/libgjs* | ||
6 | noblacklist /usr/lib64/libgjs* | ||
diff --git a/etc/disable-interpreters.inc b/etc/disable-interpreters.inc index 6acd1de8e..ae539e1bc 100644 --- a/etc/disable-interpreters.inc +++ b/etc/disable-interpreters.inc | |||
@@ -2,6 +2,14 @@ | |||
2 | # Persistent customizations should go in a .local file. | 2 | # Persistent customizations should go in a .local file. |
3 | include disable-interpreters.local | 3 | include disable-interpreters.local |
4 | 4 | ||
5 | # gjs | ||
6 | blacklist ${PATH}/gjs | ||
7 | blacklist ${PATH}/gjs-console | ||
8 | blacklist /usr/lib/gjs | ||
9 | blacklist /usr/lib64/gjs | ||
10 | blacklist /usr/lib/libgjs* | ||
11 | blacklist /usr/lib64/libgjs* | ||
12 | |||
5 | # Lua | 13 | # Lua |
6 | blacklist ${PATH}/lua* | 14 | blacklist ${PATH}/lua* |
7 | blacklist /usr/include/lua* | 15 | blacklist /usr/include/lua* |
diff --git a/etc/gjs.profile b/etc/gjs.profile index 871020ae0..aba020bc7 100644 --- a/etc/gjs.profile +++ b/etc/gjs.profile | |||
@@ -13,6 +13,9 @@ noblacklist ${HOME}/.cache/org.gnome.Books | |||
13 | noblacklist ${HOME}/.config/libreoffice | 13 | noblacklist ${HOME}/.config/libreoffice |
14 | noblacklist ${HOME}/.local/share/gnome-photos | 14 | noblacklist ${HOME}/.local/share/gnome-photos |
15 | 15 | ||
16 | # Allow gjs (blacklisted by disable-interpreters.inc) | ||
17 | include allow-gjs.inc | ||
18 | |||
16 | include disable-common.inc | 19 | include disable-common.inc |
17 | include disable-devel.inc | 20 | include disable-devel.inc |
18 | include disable-interpreters.inc | 21 | include disable-interpreters.inc |
diff --git a/etc/gnome-books.profile b/etc/gnome-books.profile index 25cd94f0c..84e38d0e1 100644 --- a/etc/gnome-books.profile +++ b/etc/gnome-books.profile | |||
@@ -10,6 +10,9 @@ include globals.local | |||
10 | noblacklist ${HOME}/.cache/org.gnome.Books | 10 | noblacklist ${HOME}/.cache/org.gnome.Books |
11 | noblacklist ${DOCUMENTS} | 11 | noblacklist ${DOCUMENTS} |
12 | 12 | ||
13 | # Allow gjs (blacklisted by disable-interpreters.inc) | ||
14 | include allow-gjs.inc | ||
15 | |||
13 | include disable-common.inc | 16 | include disable-common.inc |
14 | include disable-devel.inc | 17 | include disable-devel.inc |
15 | include disable-exec.inc | 18 | include disable-exec.inc |
diff --git a/etc/gnome-characters.profile b/etc/gnome-characters.profile index c3e9466d7..2d4724610 100644 --- a/etc/gnome-characters.profile +++ b/etc/gnome-characters.profile | |||
@@ -6,6 +6,9 @@ include gnome-characters.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | # Allow gjs (blacklisted by disable-interpreters.inc) | ||
10 | include allow-gjs.inc | ||
11 | |||
9 | include disable-common.inc | 12 | include disable-common.inc |
10 | include disable-devel.inc | 13 | include disable-devel.inc |
11 | include disable-exec.inc | 14 | include disable-exec.inc |
diff --git a/etc/gnome-documents.profile b/etc/gnome-documents.profile index 078e8c34e..705fe624e 100644 --- a/etc/gnome-documents.profile +++ b/etc/gnome-documents.profile | |||
@@ -11,6 +11,9 @@ include globals.local | |||
11 | noblacklist ${HOME}/.config/libreoffice | 11 | noblacklist ${HOME}/.config/libreoffice |
12 | noblacklist ${DOCUMENTS} | 12 | noblacklist ${DOCUMENTS} |
13 | 13 | ||
14 | # Allow gjs (blacklisted by disable-interpreters.inc) | ||
15 | include allow-gjs.inc | ||
16 | |||
14 | include disable-common.inc | 17 | include disable-common.inc |
15 | include disable-devel.inc | 18 | include disable-devel.inc |
16 | include disable-exec.inc | 19 | include disable-exec.inc |
diff --git a/etc/gnome-maps.profile b/etc/gnome-maps.profile index 78f5ddc3a..6540186fe 100644 --- a/etc/gnome-maps.profile +++ b/etc/gnome-maps.profile | |||
@@ -13,6 +13,9 @@ noblacklist ${HOME}/.cache/org.gnome.Maps | |||
13 | noblacklist ${HOME}/.local/share/flatpak | 13 | noblacklist ${HOME}/.local/share/flatpak |
14 | noblacklist ${HOME}/.local/share/maps-places.json | 14 | noblacklist ${HOME}/.local/share/maps-places.json |
15 | 15 | ||
16 | # Allow gjs (blacklisted by disable-interpreters.inc) | ||
17 | include allow-gjs.inc | ||
18 | |||
16 | include disable-common.inc | 19 | include disable-common.inc |
17 | include disable-devel.inc | 20 | include disable-devel.inc |
18 | include disable-exec.inc | 21 | include disable-exec.inc |
diff --git a/etc/gnome-sound-recorder.profile b/etc/gnome-sound-recorder.profile index 135106c1e..7f8fc8a0c 100644 --- a/etc/gnome-sound-recorder.profile +++ b/etc/gnome-sound-recorder.profile | |||
@@ -10,6 +10,9 @@ noblacklist ${MUSIC} | |||
10 | noblacklist ${HOME}/.local/share/flatpak | 10 | noblacklist ${HOME}/.local/share/flatpak |
11 | noblacklist ${HOME}/.local/share/Trash | 11 | noblacklist ${HOME}/.local/share/Trash |
12 | 12 | ||
13 | # Allow gjs (blacklisted by disable-interpreters.inc) | ||
14 | include allow-gjs.inc | ||
15 | |||
13 | include disable-common.inc | 16 | include disable-common.inc |
14 | include disable-devel.inc | 17 | include disable-devel.inc |
15 | include disable-exec.inc | 18 | include disable-exec.inc |
diff --git a/etc/gnome-weather.profile b/etc/gnome-weather.profile index a43db7e2f..10db6296b 100644 --- a/etc/gnome-weather.profile +++ b/etc/gnome-weather.profile | |||
@@ -10,6 +10,9 @@ include globals.local | |||
10 | 10 | ||
11 | noblacklist ${HOME}/.cache/libgweather | 11 | noblacklist ${HOME}/.cache/libgweather |
12 | 12 | ||
13 | # Allow gjs (blacklisted by disable-interpreters.inc) | ||
14 | include allow-gjs.inc | ||
15 | |||
13 | include disable-common.inc | 16 | include disable-common.inc |
14 | include disable-devel.inc | 17 | include disable-devel.inc |
15 | include disable-exec.inc | 18 | include disable-exec.inc |
diff --git a/etc/polari.profile b/etc/polari.profile index b9f81eece..939e2537e 100644 --- a/etc/polari.profile +++ b/etc/polari.profile | |||
@@ -6,6 +6,8 @@ include polari.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | # Allow gjs (blacklisted by disable-interpreters.inc) | ||
10 | include allow-gjs.inc | ||
9 | 11 | ||
10 | include disable-common.inc | 12 | include disable-common.inc |
11 | include disable-devel.inc | 13 | include disable-devel.inc |
diff --git a/etc/templates/profile.template b/etc/templates/profile.template index 828b3f50e..0362b82af 100644 --- a/etc/templates/profile.template +++ b/etc/templates/profile.template | |||
@@ -93,6 +93,9 @@ include globals.local | |||
93 | # Allow ruby (blacklisted by disable-interpreters.inc) | 93 | # Allow ruby (blacklisted by disable-interpreters.inc) |
94 | #include allow-ruby.inc | 94 | #include allow-ruby.inc |
95 | 95 | ||
96 | # Allow gjs (blacklisted by disable-interpreters.inc) | ||
97 | #include allow-gjs.inc | ||
98 | |||
96 | # Allows files commonly used by IDEs | 99 | # Allows files commonly used by IDEs |
97 | #include allow-common-devel.inc | 100 | #include allow-common-devel.inc |
98 | 101 | ||