aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2016-04-18 06:56:08 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2016-04-18 06:56:08 -0400
commit8a08c221ce2dc6e7cc6a7564f6ed9caee4a3ff93 (patch)
tree03038c07bb527b5e78f627ff441de703bdb0d849
parentwarzone2100 and firecfg fixes (diff)
parentMerge pull request #451 from Fred-Barclay/proposed-todo (diff)
downloadfirejail-8a08c221ce2dc6e7cc6a7564f6ed9caee4a3ff93.tar.gz
firejail-8a08c221ce2dc6e7cc6a7564f6ed9caee4a3ff93.tar.zst
firejail-8a08c221ce2dc6e7cc6a7564f6ed9caee4a3ff93.zip
fixes
-rw-r--r--README1
-rw-r--r--etc/disable-common.inc8
-rw-r--r--todo6
3 files changed, 11 insertions, 4 deletions
diff --git a/README b/README
index e42c187e2..55f9109da 100644
--- a/README
+++ b/README
@@ -29,6 +29,7 @@ Fred-Barclay (https://github.com/Fred-Barclay)
29 - added 0ad profile 29 - added 0ad profile
30 - fixed version for deb packages 30 - fixed version for deb packages
31 - added Warzone2100 profile 31 - added Warzone2100 profile
32 - blacklisted VeraCrypt
32avoidr (https://github.com/avoidr) 33avoidr (https://github.com/avoidr)
33 - whitelist fix 34 - whitelist fix
34 - recently-used.xbel fix 35 - recently-used.xbel fix
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index b1133f28f..4d05ba783 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -26,6 +26,14 @@ blacklist ${HOME}/.VirtualBox
26blacklist ${HOME}/VirtualBox VMs 26blacklist ${HOME}/VirtualBox VMs
27blacklist ${HOME}/.config/VirtualBox 27blacklist ${HOME}/.config/VirtualBox
28 28
29# VeraCrypt
30blacklist ${PATH}/veracrypt
31blacklist ${PATH}/veracrypt-uninstall.sh
32blacklist /usr/share/veracrypt
33blacklist /usr/share/applications/veracrypt.*
34blacklist /usr/share/pixmaps/veracrypt.*
35blacklist ${HOME}/.VeraCrypt
36
29# var 37# var
30blacklist /var/spool/cron 38blacklist /var/spool/cron
31blacklist /var/spool/anacron 39blacklist /var/spool/anacron
diff --git a/todo b/todo
index da732be9f..f23b4b13d 100644
--- a/todo
+++ b/todo
@@ -74,11 +74,9 @@ CapEff: 0000000000000000
74CapBnd: 0000003fffffffff 74CapBnd: 0000003fffffffff
75CapAmb: 0000000000000000 75CapAmb: 0000000000000000
76 76
7711. cleanup thunderbird profile - disable-common was commented out 7711. check seccomp on Docker: https://docs.docker.com/engine/security/seccomp/
78
7912. check seccomp on Docker: https://docs.docker.com/engine/security/seccomp/
80Seccomp lists: 78Seccomp lists:
81https://github.com/torvalds/linux/blob/1e75a9f34a5ed5902707fb74b468356c55142b71/arch/x86/entry/syscalls/syscall_64.tbl 79https://github.com/torvalds/linux/blob/1e75a9f34a5ed5902707fb74b468356c55142b71/arch/x86/entry/syscalls/syscall_64.tbl
82https://github.com/torvalds/linux/blob/1e75a9f34a5ed5902707fb74b468356c55142b71/arch/x86/entry/syscalls/syscall_32.tbl 80https://github.com/torvalds/linux/blob/1e75a9f34a5ed5902707fb74b468356c55142b71/arch/x86/entry/syscalls/syscall_32.tbl
83 81
8413. check for --chroot why .config/pulse dir is not created 8212. check for --chroot why .config/pulse dir is not created