aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@protonmail.com>2021-12-18 10:17:52 -0500
committerLibravatar netblue30 <netblue30@protonmail.com>2021-12-18 10:17:52 -0500
commitf3d126bf174f89f4c545a9f89fe50b65dfb0d381 (patch)
treece11b8242e3c11e7c1f9a578f31fbcebbcf834fe
parentRELNOTES: s/deprecated/removed/ (diff)
downloadfirejail-f3d126bf174f89f4c545a9f89fe50b65dfb0d381.tar.gz
firejail-f3d126bf174f89f4c545a9f89fe50b65dfb0d381.tar.zst
firejail-f3d126bf174f89f4c545a9f89fe50b65dfb0d381.zip
disable curl and wget in browsers based on firefox and chromium
-rw-r--r--etc/profile-a-l/chromium-common.profile3
-rw-r--r--etc/profile-a-l/firefox-common.profile3
2 files changed, 6 insertions, 0 deletions
diff --git a/etc/profile-a-l/chromium-common.profile b/etc/profile-a-l/chromium-common.profile
index 7bfb61688..2992a2d6f 100644
--- a/etc/profile-a-l/chromium-common.profile
+++ b/etc/profile-a-l/chromium-common.profile
@@ -53,6 +53,9 @@ private-cache
53?BROWSER_DISABLE_U2F: private-dev 53?BROWSER_DISABLE_U2F: private-dev
54#private-tmp - issues when using multiple browser sessions 54#private-tmp - issues when using multiple browser sessions
55 55
56blacklist ${PATH}/curl
57blacklist ${PATH}/wget
58
56#dbus-user none - prevents access to passwords saved in GNOME Keyring and KWallet, also breaks Gnome connector. 59#dbus-user none - prevents access to passwords saved in GNOME Keyring and KWallet, also breaks Gnome connector.
57dbus-system none 60dbus-system none
58 61
diff --git a/etc/profile-a-l/firefox-common.profile b/etc/profile-a-l/firefox-common.profile
index ef647b5a0..e7d438b46 100644
--- a/etc/profile-a-l/firefox-common.profile
+++ b/etc/profile-a-l/firefox-common.profile
@@ -59,6 +59,9 @@ disable-mnt
59#private-etc alternatives,asound.conf,ca-certificates,crypto-policies,dconf,fonts,group,gtk-2.0,gtk-3.0,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,machine-id,mailcap,mime.types,nsswitch.conf,pango,passwd,pki,pulse,resolv.conf,selinux,ssl,X11,xdg 59#private-etc alternatives,asound.conf,ca-certificates,crypto-policies,dconf,fonts,group,gtk-2.0,gtk-3.0,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,machine-id,mailcap,mime.types,nsswitch.conf,pango,passwd,pki,pulse,resolv.conf,selinux,ssl,X11,xdg
60private-tmp 60private-tmp
61 61
62blacklist ${PATH}/curl
63blacklist ${PATH}/wget
64
62# 'dbus-user none' breaks various desktop integration features like global menus, native notifications, 65# 'dbus-user none' breaks various desktop integration features like global menus, native notifications,
63# Gnome connector, KDE connect and power management on KDE Plasma. 66# Gnome connector, KDE connect and power management on KDE Plasma.
64dbus-user none 67dbus-user none