aboutsummaryrefslogtreecommitdiffstats
path: root/etc/gtk-update-icon-cache.profile
diff options
context:
space:
mode:
authorLibravatar Fred Barclay <Fred-Barclay@users.noreply.github.com>2020-04-07 16:14:25 -0500
committerLibravatar Fred Barclay <Fred-Barclay@users.noreply.github.com>2020-04-07 16:14:25 -0500
commit3848b98961614e1776b29ecfb76ef4c750b6b25f (patch)
tree3c7f0b623978562ee23fba7f52b6a039571cebea /etc/gtk-update-icon-cache.profile
parentdbus-proxy (gnome_games) (diff)
downloadfirejail-3848b98961614e1776b29ecfb76ef4c750b6b25f.tar.gz
firejail-3848b98961614e1776b29ecfb76ef4c750b6b25f.tar.zst
firejail-3848b98961614e1776b29ecfb76ef4c750b6b25f.zip
Replace `nodbus` with dbus-* filters
See - 07fac581f6b9b5ed068f4c54a9521b51826375c5 for new dbus filters - https://github.com/netblue30/firejail/pull/3326#issuecomment-610423183 Except for ocenaudio, access/restrictions on dbus options should be unchanged Ocenaudio profile: dbus filters were sandboxed (initially `nodbus` was enabled) since comments indicated blocking dbus meant preferences were broken
Diffstat (limited to 'etc/gtk-update-icon-cache.profile')
-rw-r--r--etc/gtk-update-icon-cache.profile4
1 files changed, 3 insertions, 1 deletions
diff --git a/etc/gtk-update-icon-cache.profile b/etc/gtk-update-icon-cache.profile
index 668a48f9a..ac2e9891b 100644
--- a/etc/gtk-update-icon-cache.profile
+++ b/etc/gtk-update-icon-cache.profile
@@ -27,7 +27,6 @@ ipc-namespace
27machine-id 27machine-id
28net none 28net none
29no3d 29no3d
30nodbus
31nodvd 30nodvd
32nogroups 31nogroups
33nonewprivs 32nonewprivs
@@ -50,4 +49,7 @@ private-etc none
50private-lib 49private-lib
51private-tmp 50private-tmp
52 51
52dbus-user none
53dbus-system none
54
53memory-deny-write-execute 55memory-deny-write-execute