diff options
| author |  glitsj16 <glitsj16@users.noreply.github.com> | 2020-01-18 23:29:09 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2020-01-18 23:29:09 +0000 |
| commit | 789c30eb984ea638735726e39f2e65fbc25c989e (patch) | |
| tree | 508e45f6a4328304a3ab19d82de1ecb4c155c667 /etc/dnscrypt-proxy.profile | |
| parent | Update SECURITY.md (diff) | |
| download | firejail-789c30eb984ea638735726e39f2e65fbc25c989e.tar.gz firejail-789c30eb984ea638735726e39f2e65fbc25c989e.tar.zst firejail-789c30eb984ea638735726e39f2e65fbc25c989e.zip | |
fixes for 'blacklist ${RUNUSER}/wayland-*' (#3166)
* unbreak audio-recorder
Support both X11 and Wayland by default. Users can add 'blacklist ${RUNUSER}/wayland-*' or 'x11 none' in their audio-recorder.local.
* unbreak ddgtk
Support both X11 and Wayland by default. Users can add 'blacklist ${RUNUSER}/wayland-*' or 'x11 none' in their ddgtk.local.
* unbreak and harden gconf-editor
Support both X11 and Wayland by default. Also whitelist /usr/share/gconf-editor for wusc.
* unbreak seahorse
Support both X11 and Wayland by default.
* add blacklist ${RUNUSER}/wayland-* to dnscrypt-proxy
Diffstat (limited to 'etc/dnscrypt-proxy.profile')
| -rw-r--r-- | etc/dnscrypt-proxy.profile | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/dnscrypt-proxy.profile b/etc/dnscrypt-proxy.profile index 65722b3ef..6637b8d02 100644 --- a/etc/dnscrypt-proxy.profile +++ b/etc/dnscrypt-proxy.profile | |||
| @@ -8,6 +8,7 @@ include dnscrypt-proxy.local | |||
| 8 | include globals.local | 8 | include globals.local |
| 9 | 9 | ||
| 10 | blacklist /tmp/.X11-unix | 10 | blacklist /tmp/.X11-unix |
| 11 | blacklist ${RUNUSER}/wayland-* | ||
| 11 | 12 | ||
| 12 | noblacklist /sbin | 13 | noblacklist /sbin |
| 13 | noblacklist /usr/sbin | 14 | noblacklist /usr/sbin |