aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2024-03-27 12:13:21 +0000
committerLibravatar GitHub <noreply@github.com>2024-03-27 12:13:21 +0000
commit0d8fb3d1b41f7c403c0061efda4be35e7ad70344 (patch)
treecb67019a07fd6f68909e49c6880ad4703d7aa08b
parentRELNOTES: add many profile items (diff)
downloadfirejail-0d8fb3d1b41f7c403c0061efda4be35e7ad70344.tar.gz
firejail-0d8fb3d1b41f7c403c0061efda4be35e7ad70344.tar.zst
firejail-0d8fb3d1b41f7c403c0061efda4be35e7ad70344.zip
profiles: sort blacklist sections (#6289)
See etc/templates/profile.template. This is a follow-up to #6286.
-rw-r--r--etc/profile-a-l/bpftop.profile2
-rw-r--r--etc/profile-a-l/cloneit.profile2
-rw-r--r--etc/profile-a-l/deadlink.profile2
-rw-r--r--etc/profile-a-l/dexios.profile2
-rw-r--r--etc/profile-a-l/editorconfiger.profile2
-rw-r--r--etc/profile-a-l/kdiff3.profile2
-rw-r--r--etc/profile-m-z/makepkg.profile6
-rw-r--r--etc/profile-m-z/statusof.profile2
-rw-r--r--etc/profile-m-z/textroom.profile2
-rw-r--r--etc/profile-m-z/torbrowser.profile2
-rw-r--r--etc/profile-m-z/tvnamer.profile2
11 files changed, 13 insertions, 13 deletions
diff --git a/etc/profile-a-l/bpftop.profile b/etc/profile-a-l/bpftop.profile
index 8c64a77c6..7670f1b4b 100644
--- a/etc/profile-a-l/bpftop.profile
+++ b/etc/profile-a-l/bpftop.profile
@@ -7,8 +7,8 @@ include bpftop.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist /usr/libexec
11blacklist ${RUNUSER} 10blacklist ${RUNUSER}
11blacklist /usr/libexec
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/cloneit.profile b/etc/profile-a-l/cloneit.profile
index 445ef4890..827dd1de2 100644
--- a/etc/profile-a-l/cloneit.profile
+++ b/etc/profile-a-l/cloneit.profile
@@ -7,8 +7,8 @@ include cloneit.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist /usr/libexec
11blacklist ${RUNUSER} 10blacklist ${RUNUSER}
11blacklist /usr/libexec
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/deadlink.profile b/etc/profile-a-l/deadlink.profile
index f7535c597..9b378b455 100644
--- a/etc/profile-a-l/deadlink.profile
+++ b/etc/profile-a-l/deadlink.profile
@@ -6,8 +6,8 @@ include deadlink.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9blacklist /usr/libexec
10blacklist ${RUNUSER} 9blacklist ${RUNUSER}
10blacklist /usr/libexec
11 11
12noblacklist ${HOME}/.config/deadlink 12noblacklist ${HOME}/.config/deadlink
13 13
diff --git a/etc/profile-a-l/dexios.profile b/etc/profile-a-l/dexios.profile
index 55d6c83ce..7d549d745 100644
--- a/etc/profile-a-l/dexios.profile
+++ b/etc/profile-a-l/dexios.profile
@@ -7,8 +7,8 @@ include dexios.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist /usr/libexec
11blacklist ${RUNUSER} 10blacklist ${RUNUSER}
11blacklist /usr/libexec
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/editorconfiger.profile b/etc/profile-a-l/editorconfiger.profile
index a921ae2d5..8812db35f 100644
--- a/etc/profile-a-l/editorconfiger.profile
+++ b/etc/profile-a-l/editorconfiger.profile
@@ -6,8 +6,8 @@ include editorconfiger.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9blacklist /usr/libexec
10blacklist ${RUNUSER} 9blacklist ${RUNUSER}
10blacklist /usr/libexec
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/kdiff3.profile b/etc/profile-a-l/kdiff3.profile
index d9e4480f5..02b389dff 100644
--- a/etc/profile-a-l/kdiff3.profile
+++ b/etc/profile-a-l/kdiff3.profile
@@ -12,8 +12,8 @@ noblacklist ${HOME}/.config/kdiff3rc
12# Add the next line to your kdiff3.local if you don't need to compare files in disable-common.inc. 12# Add the next line to your kdiff3.local if you don't need to compare files in disable-common.inc.
13# By default we deny access only to .ssh and .gnupg. 13# By default we deny access only to .ssh and .gnupg.
14#include disable-common.inc 14#include disable-common.inc
15blacklist ${HOME}/.ssh
16blacklist ${HOME}/.gnupg 15blacklist ${HOME}/.gnupg
16blacklist ${HOME}/.ssh
17 17
18include disable-devel.inc 18include disable-devel.inc
19include disable-exec.inc 19include disable-exec.inc
diff --git a/etc/profile-m-z/makepkg.profile b/etc/profile-m-z/makepkg.profile
index 3bda47fad..a8dd3988b 100644
--- a/etc/profile-m-z/makepkg.profile
+++ b/etc/profile-m-z/makepkg.profile
@@ -20,11 +20,11 @@ blacklist ${RUNUSER}/wayland-*
20noblacklist ${HOME}/.gnupg 20noblacklist ${HOME}/.gnupg
21read-only ${HOME}/.gnupg/trustdb.gpg 21read-only ${HOME}/.gnupg/trustdb.gpg
22read-only ${HOME}/.gnupg/pubring.kbx 22read-only ${HOME}/.gnupg/pubring.kbx
23blacklist ${HOME}/.gnupg/random_seed
24blacklist ${HOME}/.gnupg/pubring.kbx~
25blacklist ${HOME}/.gnupg/private-keys-v1.d
26blacklist ${HOME}/.gnupg/crls.d 23blacklist ${HOME}/.gnupg/crls.d
27blacklist ${HOME}/.gnupg/openpgp-revocs.d 24blacklist ${HOME}/.gnupg/openpgp-revocs.d
25blacklist ${HOME}/.gnupg/private-keys-v1.d
26blacklist ${HOME}/.gnupg/pubring.kbx~
27blacklist ${HOME}/.gnupg/random_seed
28 28
29# Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only. 29# Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only.
30noblacklist /var/lib/pacman 30noblacklist /var/lib/pacman
diff --git a/etc/profile-m-z/statusof.profile b/etc/profile-m-z/statusof.profile
index 25c8df680..45da84e11 100644
--- a/etc/profile-m-z/statusof.profile
+++ b/etc/profile-m-z/statusof.profile
@@ -7,8 +7,8 @@ include statusof.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist /usr/libexec
11blacklist ${RUNUSER} 10blacklist ${RUNUSER}
11blacklist /usr/libexec
12 12
13# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
14include allow-python3.inc 14include allow-python3.inc
diff --git a/etc/profile-m-z/textroom.profile b/etc/profile-m-z/textroom.profile
index 6fdba7501..912fce6c1 100644
--- a/etc/profile-m-z/textroom.profile
+++ b/etc/profile-m-z/textroom.profile
@@ -6,8 +6,8 @@ include textroom.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9blacklist /usr/libexec
10blacklist ${RUNUSER}/wayland-* 9blacklist ${RUNUSER}/wayland-*
10blacklist /usr/libexec
11 11
12noblacklist ${HOME}/.config/textroom 12noblacklist ${HOME}/.config/textroom
13 13
diff --git a/etc/profile-m-z/torbrowser.profile b/etc/profile-m-z/torbrowser.profile
index 15ca5b550..669394aaf 100644
--- a/etc/profile-m-z/torbrowser.profile
+++ b/etc/profile-m-z/torbrowser.profile
@@ -12,8 +12,8 @@ ignore dbus-user none
12noblacklist ${HOME}/.cache/mozilla 12noblacklist ${HOME}/.cache/mozilla
13noblacklist ${HOME}/.mozilla 13noblacklist ${HOME}/.mozilla
14 14
15blacklist /usr/libexec
16blacklist /sys/class/net 15blacklist /sys/class/net
16blacklist /usr/libexec
17 17
18mkdir ${HOME}/.cache/mozilla/torbrowser 18mkdir ${HOME}/.cache/mozilla/torbrowser
19mkdir ${HOME}/.mozilla 19mkdir ${HOME}/.mozilla
diff --git a/etc/profile-m-z/tvnamer.profile b/etc/profile-m-z/tvnamer.profile
index 24439672a..19c94feea 100644
--- a/etc/profile-m-z/tvnamer.profile
+++ b/etc/profile-m-z/tvnamer.profile
@@ -6,8 +6,8 @@ include tvnamer.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9blacklist /usr/libexec
10blacklist ${RUNUSER} 9blacklist ${RUNUSER}
10blacklist /usr/libexec
11 11
12noblacklist ${HOME}/.config/tvnamer 12noblacklist ${HOME}/.config/tvnamer
13noblacklist ${VIDEOS} 13noblacklist ${VIDEOS}