diff options
| author |  Hugo Osvaldo Barrera <hugo@barrera.io> | 2021-12-06 21:47:07 +0100 |
|---|---|---|
| committer | Hugo Osvaldo Barrera <hugo@barrera.io> | 2021-12-07 19:49:54 +0100 |
| commit | debfef929d20809e61130ef360d6e89cfbd19991 (patch) | |
| tree | 571cdcc23e975cfc855cee201f1be90b0491743b | |
| parent | skype: Create and whitelist config dir (diff) | |
| download | firejail-debfef929d20809e61130ef360d6e89cfbd19991.tar.gz firejail-debfef929d20809e61130ef360d6e89cfbd19991.tar.zst firejail-debfef929d20809e61130ef360d6e89cfbd19991.zip | |
skype: Harden D-Bus profile
Tested these settings and they work fine, including a test call. I can't
explain why, but if the `org.kde.StatusNotifierWatcher` entry is
removed, Skype will immediately log out the previous session when
started.
| -rw-r--r-- | etc/profile-m-z/skypeforlinux.profile | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/etc/profile-m-z/skypeforlinux.profile b/etc/profile-m-z/skypeforlinux.profile index 0abd03c77..3ddebb765 100644 --- a/etc/profile-m-z/skypeforlinux.profile +++ b/etc/profile-m-z/skypeforlinux.profile | |||
| @@ -14,8 +14,8 @@ ignore include whitelist-var-common.inc | |||
| 14 | ignore nou2f | 14 | ignore nou2f |
| 15 | ignore novideo | 15 | ignore novideo |
| 16 | ignore private-dev | 16 | ignore private-dev |
| 17 | |||
| 17 | ignore dbus-user none | 18 | ignore dbus-user none |
| 18 | ignore dbus-system none | ||
| 19 | 19 | ||
| 20 | # breaks Skype | 20 | # breaks Skype |
| 21 | ignore apparmor | 21 | ignore apparmor |
| @@ -28,5 +28,11 @@ whitelist ${HOME}/.config/skypeforlinux | |||
| 28 | 28 | ||
| 29 | # private-dev - needs /dev/disk | 29 | # private-dev - needs /dev/disk |
| 30 | 30 | ||
| 31 | dbus-user filter | ||
| 32 | dbus-user.talk org.freedesktop.Notifications | ||
| 33 | dbus-user.talk org.freedesktop.secrets | ||
| 34 | # Note: Skype will log out the current session on start-up without this: | ||
| 35 | dbus-user.talk org.kde.StatusNotifierWatcher | ||
| 36 | |||
| 31 | # Redirect | 37 | # Redirect |
| 32 | include electron.profile | 38 | include electron.profile |