aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar SkewedZeppelin <8296104+SkewedZeppelin@users.noreply.github.com>2019-01-30 19:34:11 +0000
committerLibravatar GitHub <noreply@github.com>2019-01-30 19:34:11 +0000
commitbb76241f4af039e7b8120af68cca54bac15e7872 (patch)
treed92c44d27c05611fc529520092f98eab8833da60
parentpybitmessage.profile: remove memory-deny-write-execute (diff)
parentUpdate some IDE profiles (diff)
downloadfirejail-bb76241f4af039e7b8120af68cca54bac15e7872.tar.gz
firejail-bb76241f4af039e7b8120af68cca54bac15e7872.tar.zst
firejail-bb76241f4af039e7b8120af68cca54bac15e7872.zip
Merge pull request #2372 from rusty-snake/additional-blacklisting
additional blacklisting
-rw-r--r--etc/disable-common.inc3
-rw-r--r--etc/disable-programs.inc1
-rw-r--r--etc/emacs.profile1
-rw-r--r--etc/geany.profile1
-rw-r--r--etc/gedit.profile1
-rw-r--r--etc/gnome-builder.profile1
-rw-r--r--etc/pycharm-community.profile1
-rw-r--r--etc/vim.profile1
-rw-r--r--etc/wget.profile1
9 files changed, 11 insertions, 0 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 6a599893e..985d658e0 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -11,12 +11,15 @@ blacklist ${HOME}/.local/share/Trash
11blacklist-nolog ${HOME}/.*_history 11blacklist-nolog ${HOME}/.*_history
12blacklist-nolog ${HOME}/.adobe 12blacklist-nolog ${HOME}/.adobe
13blacklist-nolog ${HOME}/.cache/greenclip* 13blacklist-nolog ${HOME}/.cache/greenclip*
14blacklist-nolog ${HOME}/.histfile
14blacklist-nolog ${HOME}/.history 15blacklist-nolog ${HOME}/.history
15blacklist-nolog ${HOME}/.kde/share/apps/klipper 16blacklist-nolog ${HOME}/.kde/share/apps/klipper
16blacklist-nolog ${HOME}/.kde4/share/apps/klipper 17blacklist-nolog ${HOME}/.kde4/share/apps/klipper
17blacklist-nolog ${HOME}/.local/share/fish/fish_history 18blacklist-nolog ${HOME}/.local/share/fish/fish_history
18blacklist-nolog ${HOME}/.local/share/klipper 19blacklist-nolog ${HOME}/.local/share/klipper
19blacklist-nolog ${HOME}/.macromedia 20blacklist-nolog ${HOME}/.macromedia
21blacklist-nolog ${HOME}/.python-history
22blacklist-nolog ${HOME}/.pythonhist
20blacklist-nolog /tmp/clipmenu* 23blacklist-nolog /tmp/clipmenu*
21 24
22# X11 session autostart 25# X11 session autostart
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 20bf38bb5..308b76bd1 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -539,6 +539,7 @@ blacklist ${HOME}/.w3m
539blacklist ${HOME}/.warzone2100-3.* 539blacklist ${HOME}/.warzone2100-3.*
540blacklist ${HOME}/.waterfox 540blacklist ${HOME}/.waterfox
541blacklist ${HOME}/.weechat 541blacklist ${HOME}/.weechat
542blacklist ${HOME}/.wget-hsts
542blacklist ${HOME}/.wgetrc 543blacklist ${HOME}/.wgetrc
543blacklist ${HOME}/.wine 544blacklist ${HOME}/.wine
544blacklist ${HOME}/.wireshark 545blacklist ${HOME}/.wireshark
diff --git a/etc/emacs.profile b/etc/emacs.profile
index 06f1a6c53..0d87507df 100644
--- a/etc/emacs.profile
+++ b/etc/emacs.profile
@@ -10,6 +10,7 @@ noblacklist ${HOME}/.emacs
10noblacklist ${HOME}/.emacs.d 10noblacklist ${HOME}/.emacs.d
11# uncomment the following line if you need gpg 11# uncomment the following line if you need gpg
12#noblacklist ${HOME}/.gnupg 12#noblacklist ${HOME}/.gnupg
13noblacklist ${HOME}/.python-history
13 14
14include disable-common.inc 15include disable-common.inc
15include disable-passwdmgr.inc 16include disable-passwdmgr.inc
diff --git a/etc/geany.profile b/etc/geany.profile
index a236ea2c5..a21e19329 100644
--- a/etc/geany.profile
+++ b/etc/geany.profile
@@ -7,6 +7,7 @@ include geany.local
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/geany 9noblacklist ${HOME}/.config/geany
10noblacklist ${HOME}/.python-history
10 11
11include disable-common.inc 12include disable-common.inc
12include disable-passwdmgr.inc 13include disable-passwdmgr.inc
diff --git a/etc/gedit.profile b/etc/gedit.profile
index d537f1294..af0a3da56 100644
--- a/etc/gedit.profile
+++ b/etc/gedit.profile
@@ -9,6 +9,7 @@ include globals.local
9noblacklist ${HOME}/.config/enchant 9noblacklist ${HOME}/.config/enchant
10noblacklist ${HOME}/.config/gedit 10noblacklist ${HOME}/.config/gedit
11noblacklist ${HOME}/.gitconfig 11noblacklist ${HOME}/.gitconfig
12noblacklist ${HOME}/.python-history
12 13
13include disable-common.inc 14include disable-common.inc
14# include disable-devel.inc 15# include disable-devel.inc
diff --git a/etc/gnome-builder.profile b/etc/gnome-builder.profile
index d497440f0..05ebea80c 100644
--- a/etc/gnome-builder.profile
+++ b/etc/gnome-builder.profile
@@ -8,6 +8,7 @@ include globals.local
8 8
9noblacklist ${HOME}/.cargo/config 9noblacklist ${HOME}/.cargo/config
10noblacklist ${HOME}/.cargo/registry 10noblacklist ${HOME}/.cargo/registry
11noblacklist ${HOME}/.python-history
11 12
12include disable-common.inc 13include disable-common.inc
13include disable-passwdmgr.inc 14include disable-passwdmgr.inc
diff --git a/etc/pycharm-community.profile b/etc/pycharm-community.profile
index 32fdc750f..bb948a971 100644
--- a/etc/pycharm-community.profile
+++ b/etc/pycharm-community.profile
@@ -7,6 +7,7 @@ include globals.local
7 7
8noblacklist ${HOME}/snap 8noblacklist ${HOME}/snap
9noblacklist ${HOME}/.PyCharmCE* 9noblacklist ${HOME}/.PyCharmCE*
10noblacklist ${HOME}/.python-history
10noblacklist ${HOME}/.java 11noblacklist ${HOME}/.java
11 12
12# Allow access to java 13# Allow access to java
diff --git a/etc/vim.profile b/etc/vim.profile
index e4e759b86..55fa22a54 100644
--- a/etc/vim.profile
+++ b/etc/vim.profile
@@ -6,6 +6,7 @@ include vim.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.python-history
9noblacklist ${HOME}/.vim 10noblacklist ${HOME}/.vim
10noblacklist ${HOME}/.viminfo 11noblacklist ${HOME}/.viminfo
11noblacklist ${HOME}/.vimrc 12noblacklist ${HOME}/.vimrc
diff --git a/etc/wget.profile b/etc/wget.profile
index 213840726..87c0501da 100644
--- a/etc/wget.profile
+++ b/etc/wget.profile
@@ -9,6 +9,7 @@ include globals.local
9 9
10blacklist /tmp/.X11-unix 10blacklist /tmp/.X11-unix
11 11
12noblacklist ${HOME}/.wget-hsts
12noblacklist ${HOME}/.wgetrc 13noblacklist ${HOME}/.wgetrc
13 14
14include disable-common.inc 15include disable-common.inc