whitelist-usr-share-common.inc (#2972)

* Work on whitelist-usr-share-common

* sorting; add Modules + QT/KDE stuff

* add wusc.inc to more profiles [needs testing]

* update

* gitg, firefox, evince

* /usr/share/{p11-kit,pixmaps,pki,qt5,tcl8.6,terminfo}

* more profiles

* remove wusc.inc from feedreader

Even with 'whitelist /usr/share/*', feedreader trys to dereference a
NULL pointer.

* more profiles

* whitelist /usr/share breaks wget

even with whitelist /usr/share/*

* extend wusc.inc

* update

* Add alsa,crypto-policies and zoneinfo

* readd wusc.inc to wget and feedreader

* update

* testing results: Debian Buster with KDE

* more KDE stuff

* fix tb

1 files changed, 7 insertions, 0 deletions

diff --git a/etc/ghostwriter.profile b/etc/ghostwriter.profile
index b09d28b21..8a9ccabc2 100644
--- a/etc/ghostwriter.profile
+++ b/etc/ghostwriter.profile
@@ -19,6 +19,13 @@ include disable-passwdmgr.inc
 include disable-programs.inc
 include disable-xdg.inc
 
+whitelist /usr/share/ghostwriter
+whitelist /usr/share/mozilla-dicts
+whitelist /usr/share/texlive
+whitelist /usr/share/pandoc
+whitelist /usr/share/pandoc-*
+include whitelist-usr-share-common.inc
+
 apparmor
 caps.drop all
 machine-id