aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar kortewegdevries <kortewegdevries@protonmail.ch>2020-08-28 12:03:10 +0000
committerLibravatar kortewegdevries <kortewegdevries@protonmail.ch>2020-08-28 12:03:10 +0000
commit0c63e854255b0bde014abc17576ac681c5230e4c (patch)
tree31747f0ecce18869437100410fba32a39b279123
parentSwitch Evolution to whitelisting (diff)
downloadfirejail-0c63e854255b0bde014abc17576ac681c5230e4c.tar.gz
firejail-0c63e854255b0bde014abc17576ac681c5230e4c.tar.zst
firejail-0c63e854255b0bde014abc17576ac681c5230e4c.zip
GPG default, fixes...
-rw-r--r--etc/profile-a-l/evolution.profile27
1 files changed, 10 insertions, 17 deletions
diff --git a/etc/profile-a-l/evolution.profile b/etc/profile-a-l/evolution.profile
index 17476aaec..2967218c7 100644
--- a/etc/profile-a-l/evolution.profile
+++ b/etc/profile-a-l/evolution.profile
@@ -7,8 +7,7 @@ include evolution.local
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.bogofilter 9noblacklist ${HOME}/.bogofilter
10# Uncomment for gpg 10noblacklist ${HOME}/.gnupg
11# noblacklist ${HOME}/.gnupg
12noblacklist ${HOME}/.pki 11noblacklist ${HOME}/.pki
13noblacklist ${HOME}/.cache/evolution 12noblacklist ${HOME}/.cache/evolution
14noblacklist ${HOME}/.config/evolution 13noblacklist ${HOME}/.config/evolution
@@ -27,28 +26,24 @@ include disable-shell.inc
27include disable-xdg.inc 26include disable-xdg.inc
28 27
29mkdir ${HOME}/.bogofilter 28mkdir ${HOME}/.bogofilter
30# Uncomment for gpg 29mkdir ${HOME}/.gnupg
31# mkdir ${HOME}/.gnupg
32mkdir ${HOME}/.pki 30mkdir ${HOME}/.pki
33mkdir ${HOME}/.cache/evolution 31mkdir ${HOME}/.cache/evolution
34mkdir ${HOME}/.config/evolution 32mkdir ${HOME}/.config/evolution
35mkdir ${HOME}/.local/share/evolution 33mkdir ${HOME}/.local/share/evolution
36mkdir ${HOME}/.local/share/pki 34mkdir ${HOME}/.local/share/pki
37whitelist ${HOME}/.bogofilter 35whitelist ${HOME}/.bogofilter
38# Uncomment for gpg 36whitelist ${HOME}/.gnupg
39# whitelist ${HOME}/.gnupg
40whitelist ${HOME}/.pki 37whitelist ${HOME}/.pki
41whitelist ${HOME}/.cache/evolution 38whitelist ${HOME}/.cache/evolution
42whitelist ${HOME}/.config/evolution 39whitelist ${HOME}/.config/evolution
43whitelist ${HOME}/.local/share/evolution 40whitelist ${HOME}/.local/share/evolution
44whitelist ${HOME}/.local/share/pki 41whitelist ${HOME}/.local/share/pki
45whitelist ${DOWNLOADS} 42whitelist ${DOWNLOADS}
46# Uncomment for gpg 43whitelist ${RUNUSER}/gnupg
47# whitelist ${RUNUSER}/gnupg
48whitelist /usr/share/evolution 44whitelist /usr/share/evolution
49# Uncomment for gpg 45whitelist /usr/share/gnupg
50# whitelist /usr/share/gnupg 46whitelist /usr/share/gnupg2
51# whitelist /usr/share/gnupg2
52whitelist /var/mail 47whitelist /var/mail
53whitelist /var/spool/mail 48whitelist /var/spool/mail
54include whitelist-common.inc 49include whitelist-common.inc
@@ -74,9 +69,8 @@ seccomp
74shell none 69shell none
75tracelog 70tracelog
76 71
77disable-mnt 72# disable-mnt
78# Add "gpg,gpg2,gpg-agent,pinentry-curses,pinentry-emacs,pinentry-fltk,pinentry-gnome3,pinentry-gtk,pinentry-gtk2,pinentry-gtk-2,pinentry-qt,pinentry-qt4,pinentry-tty,pinentry-x2go,pinentry-kwallet" for gpg 73# private-bin evolution
79private-bin evolution
80private-cache 74private-cache
81private-dev 75private-dev
82private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gcrypt,gtk-2.0,gtk-3.0,groups,hostname,hosts,mailname,passwd,pki,resolv.conf,selinux,ssl,xdg 76private-etc alternatives,ca-certificates,crypto-policies,dconf,fonts,gcrypt,gtk-2.0,gtk-3.0,groups,hostname,hosts,mailname,passwd,pki,resolv.conf,selinux,ssl,xdg
@@ -89,8 +83,7 @@ dbus-user.own org.gnome.Evolution
89dbus-user.talk ca.desrt.dconf 83dbus-user.talk ca.desrt.dconf
90# Uncomment to have keyring access 84# Uncomment to have keyring access
91# dbus-user.talk org.freedesktop.secrets 85# dbus-user.talk org.freedesktop.secrets
86dbus-user.talk org.gnome.keyring.SystemPrompter
87dbus-user.talk org.gnome.OnlineAccounts
92dbus-user.talk org.freedesktop.Notifications 88dbus-user.talk org.freedesktop.Notifications
93dbus-system none 89dbus-system none
94
95# Comment to use gpg
96read-only ${HOME}/.gnupg