diff options
author | 2020-12-10 10:37:19 -0300 | |
---|---|---|
committer | 2020-12-10 22:40:21 -0300 | |
commit | 7154f1231fad810e90b1001e729d0068e0592459 (patch) | |
tree | 53441acec756112c97b0cd402c8723d672bc8dba | |
parent | fix audio/video play in yelp.profile (diff) | |
download | firejail-7154f1231fad810e90b1001e729d0068e0592459.tar.gz firejail-7154f1231fad810e90b1001e729d0068e0592459.tar.zst firejail-7154f1231fad810e90b1001e729d0068e0592459.zip |
disable-common.inc: sort DNS / RUNUSER paths
-rw-r--r-- | etc/inc/disable-common.inc | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc index bf40457a2..0f708ae29 100644 --- a/etc/inc/disable-common.inc +++ b/etc/inc/disable-common.inc | |||
@@ -515,18 +515,18 @@ blacklist /proc/config.gz | |||
515 | # prevent DNS malware attempting to communicate with the server | 515 | # prevent DNS malware attempting to communicate with the server |
516 | # using regular DNS tools | 516 | # using regular DNS tools |
517 | blacklist ${PATH}/dig | 517 | blacklist ${PATH}/dig |
518 | blacklist ${PATH}/kdig | ||
519 | blacklist ${PATH}/nslookup | ||
520 | blacklist ${PATH}/host | ||
521 | blacklist ${PATH}/dlint | 518 | blacklist ${PATH}/dlint |
522 | blacklist ${PATH}/dnswalk | ||
523 | blacklist ${PATH}/dns2tcp | 519 | blacklist ${PATH}/dns2tcp |
520 | blacklist ${PATH}/dnswalk | ||
521 | blacklist ${PATH}/host | ||
524 | blacklist ${PATH}/iodine | 522 | blacklist ${PATH}/iodine |
523 | blacklist ${PATH}/kdig | ||
525 | blacklist ${PATH}/knsupdate | 524 | blacklist ${PATH}/knsupdate |
525 | blacklist ${PATH}/nslookup | ||
526 | blacklist ${PATH}/resolvectl | 526 | blacklist ${PATH}/resolvectl |
527 | 527 | ||
528 | # rest of ${RUNUSER} | 528 | # rest of ${RUNUSER} |
529 | blacklist ${RUNUSER}/*.lock | 529 | blacklist ${RUNUSER}/*.lock |
530 | blacklist ${RUNUSER}/inaccessible | 530 | blacklist ${RUNUSER}/inaccessible |
531 | blacklist ${RUNUSER}/update-notifier.pid | ||
532 | blacklist ${RUNUSER}/pk-debconf-socket | 531 | blacklist ${RUNUSER}/pk-debconf-socket |
532 | blacklist ${RUNUSER}/update-notifier.pid | ||