diff options
author | 2023-09-07 13:08:52 +0000 | |
---|---|---|
committer | 2023-09-07 13:08:52 +0000 | |
commit | 9ab6b8746f9a5ad06e7ed5440c0ec96da215493b (patch) | |
tree | 3863ecd222e38e47d0d085578724ad286e789d03 | |
parent | VSCodium: Fix developing Arduino (#5991) (diff) | |
download | firejail-9ab6b8746f9a5ad06e7ed5440c0ec96da215493b.tar.gz firejail-9ab6b8746f9a5ad06e7ed5440c0ec96da215493b.tar.zst firejail-9ab6b8746f9a5ad06e7ed5440c0ec96da215493b.zip |
transgui: hardening (#5989)
-rw-r--r-- | etc/profile-m-z/transgui.profile | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/etc/profile-m-z/transgui.profile b/etc/profile-m-z/transgui.profile index 645c55c3b..9f1f1c241 100644 --- a/etc/profile-m-z/transgui.profile +++ b/etc/profile-m-z/transgui.profile | |||
@@ -12,6 +12,7 @@ include disable-common.inc | |||
12 | include disable-devel.inc | 12 | include disable-devel.inc |
13 | include disable-exec.inc | 13 | include disable-exec.inc |
14 | include disable-interpreters.inc | 14 | include disable-interpreters.inc |
15 | include disable-proc.inc | ||
15 | include disable-programs.inc | 16 | include disable-programs.inc |
16 | include disable-shell.inc | 17 | include disable-shell.inc |
17 | include disable-xdg.inc | 18 | include disable-xdg.inc |
@@ -19,7 +20,10 @@ include disable-xdg.inc | |||
19 | mkdir ${HOME}/.config/transgui | 20 | mkdir ${HOME}/.config/transgui |
20 | whitelist ${HOME}/.config/transgui | 21 | whitelist ${HOME}/.config/transgui |
21 | whitelist ${DOWNLOADS} | 22 | whitelist ${DOWNLOADS} |
23 | whitelist /usr/share/transgui | ||
22 | include whitelist-common.inc | 24 | include whitelist-common.inc |
25 | include whitelist-run-common.inc | ||
26 | include whitelist-runuser-common.inc | ||
23 | include whitelist-usr-share-common.inc | 27 | include whitelist-usr-share-common.inc |
24 | include whitelist-var-common.inc | 28 | include whitelist-var-common.inc |
25 | 29 | ||
@@ -44,7 +48,7 @@ tracelog | |||
44 | private-bin geoiplookup,geoiplookup6,transgui | 48 | private-bin geoiplookup,geoiplookup6,transgui |
45 | private-cache | 49 | private-cache |
46 | private-dev | 50 | private-dev |
47 | private-etc | 51 | private-etc @network,@tls-ca,@x11 |
48 | private-lib libgdk_pixbuf-2.0.so.*,libGeoIP.so*,libgthread-2.0.so.*,libgtk-x11-2.0.so.*,libX11.so.* | 52 | private-lib libgdk_pixbuf-2.0.so.*,libGeoIP.so*,libgthread-2.0.so.*,libgtk-x11-2.0.so.*,libX11.so.* |
49 | private-tmp | 53 | private-tmp |
50 | 54 | ||