aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2019-08-01 11:04:49 +0200
committerLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2019-08-01 11:04:49 +0200
commit8410cd8b2c8bd3c5e683ef4ed95e8c7120045867 (patch)
tree0e56281945bf346f2f463c27746ea4df40e810cd
parentMerge pull request #2883 from flacks/profiles/whalebird (diff)
downloadfirejail-8410cd8b2c8bd3c5e683ef4ed95e8c7120045867.tar.gz
firejail-8410cd8b2c8bd3c5e683ef4ed95e8c7120045867.tar.zst
firejail-8410cd8b2c8bd3c5e683ef4ed95e8c7120045867.zip
some profile fixups
- add a private-bin to firefox for fedora (still need testing) - add a temporary workaround for #2877 ghostwriter sience this break export and preview with pandoc - remove 'name slack' from slack.profile sience this is the only profile with name
-rw-r--r--etc/firefox.profile2
-rw-r--r--etc/ghostwriter.profile3
-rw-r--r--etc/slack.profile1
3 files changed, 4 insertions, 2 deletions
diff --git a/etc/firefox.profile b/etc/firefox.profile
index 84c647cb9..ad275bab6 100644
--- a/etc/firefox.profile
+++ b/etc/firefox.profile
@@ -16,6 +16,8 @@ whitelist ${HOME}/.mozilla
16 16
17# firefox requires a shell to launch on Arch. 17# firefox requires a shell to launch on Arch.
18#private-bin bash,dbus-launch,dbus-send,env,firefox,sh,which 18#private-bin bash,dbus-launch,dbus-send,env,firefox,sh,which
19# Fedora use shell scripts to launch firefox, at least this is required
20#private-bin bash,firefox,basename,uname,false,pidof,cat,rm,rmdir,mkdir,sed,ln,true,dirname,which,awk,env
19# private-etc must first be enabled in firefox-common.profile 21# private-etc must first be enabled in firefox-common.profile
20#private-etc firefox 22#private-etc firefox
21 23
diff --git a/etc/ghostwriter.profile b/etc/ghostwriter.profile
index 1fb2d8f58..a068f85c9 100644
--- a/etc/ghostwriter.profile
+++ b/etc/ghostwriter.profile
@@ -39,5 +39,6 @@ shell none
39#private-bin ghostwriter,pandoc 39#private-bin ghostwriter,pandoc
40private-cache 40private-cache
41private-dev 41private-dev
42private-etc alternatives,ca-certificates,crypto-policies,dbus-1,dconf,fonts,gconf,groups,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,login.defs,machine-id,mime.types,nsswitch.conf,pango,passwd,pki,protocols,resolv.conf,rpc,services,ssl,Trolltech.conf,X11,xdg 42# passwd,login.defs,firejail are a temporary workaround for #2877 and can be removed once it is fixed
43private-etc alternatives,ca-certificates,crypto-policies,dbus-1,dconf,fonts,gconf,groups,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,machine-id,mime.types,nsswitch.conf,pango,pki,protocols,resolv.conf,rpc,services,ssl,Trolltech.conf,X11,xdg,firejail
43private-tmp 44private-tmp
diff --git a/etc/slack.profile b/etc/slack.profile
index 5c10ef0ba..f9ad7c190 100644
--- a/etc/slack.profile
+++ b/etc/slack.profile
@@ -20,7 +20,6 @@ include whitelist-common.inc
20include whitelist-var-common.inc 20include whitelist-var-common.inc
21 21
22caps.drop all 22caps.drop all
23name slack
24netfilter 23netfilter
25nodvd 24nodvd
26nogroups 25nogroups