move whitelist/blacklist to allow/deny

author: netblue30 <netblue30@protonmail.com> 2021-07-05 07:23:31 -0400
committer: netblue30 <netblue30@protonmail.com> 2021-07-05 07:23:31 -0400
commit: fe0f975f447d59977d90c3226cc8c623b31b20b3 (patch)
tree: 70897a33cde6c716e273d927d18a6be4b54c18a9 /etc/inc/whitelist-runuser-common.inc
parent: deprecated whitelist=yes/no in /etc/firejail/firejail.config (diff)
download: firejail-fe0f975f447d59977d90c3226cc8c623b31b20b3.tar.gz
firejail-fe0f975f447d59977d90c3226cc8c623b31b20b3.tar.zst
firejail-fe0f975f447d59977d90c3226cc8c623b31b20b3.zip
1 files changed, 10 insertions, 10 deletions
diff --git a/etc/inc/whitelist-runuser-common.inc b/etc/inc/whitelist-runuser-common.inc
index 48309ffe3..86e5264b9 100644
--- a/etc/inc/whitelist-runuser-common.inc
+++ b/etc/inc/whitelist-runuser-common.inc
@@ -4,13 +4,13 @@ include whitelist-runuser-common.local
 # common ${RUNUSER} (=/run/user/$UID) whitelist for all profiles
-whitelist ${RUNUSER}/bus
+allow  ${RUNUSER}/bus
-whitelist ${RUNUSER}/dconf
+allow  ${RUNUSER}/dconf
-whitelist ${RUNUSER}/gdm/Xauthority
+allow  ${RUNUSER}/gdm/Xauthority
-whitelist ${RUNUSER}/ICEauthority
+allow  ${RUNUSER}/ICEauthority
-whitelist ${RUNUSER}/.mutter-Xwaylandauth.*
+allow  ${RUNUSER}/.mutter-Xwaylandauth.*
-whitelist ${RUNUSER}/pulse/native
+allow  ${RUNUSER}/pulse/native
-whitelist ${RUNUSER}/wayland-0
+allow  ${RUNUSER}/wayland-0
-whitelist ${RUNUSER}/wayland-1
+allow  ${RUNUSER}/wayland-1
-whitelist ${RUNUSER}/xauth_*
+allow  ${RUNUSER}/xauth_*
-whitelist ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]
+allow  ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]
author	netblue30 <netblue30@protonmail.com>	2021-07-05 07:23:31 -0400
committer	netblue30 <netblue30@protonmail.com>	2021-07-05 07:23:31 -0400
commit	fe0f975f447d59977d90c3226cc8c623b31b20b3 (patch)
tree	70897a33cde6c716e273d927d18a6be4b54c18a9 /etc/inc/whitelist-runuser-common.inc
parent	deprecated whitelist=yes/no in /etc/firejail/firejail.config (diff)
download	firejail-fe0f975f447d59977d90c3226cc8c623b31b20b3.tar.gz firejail-fe0f975f447d59977d90c3226cc8c623b31b20b3.tar.zst firejail-fe0f975f447d59977d90c3226cc8c623b31b20b3.zip

diff --git a/etc/inc/whitelist-runuser-common.inc b/etc/inc/whitelist-runuser-common.inc index 48309ffe3..86e5264b9 100644 --- a/etc/inc/whitelist-runuser-common.inc +++ b/etc/inc/whitelist-runuser-common.inc
@@ -4,13 +4,13 @@ include whitelist-runuser-common.local
4		4
5	# common ${RUNUSER} (=/run/user/$UID) whitelist for all profiles	5	# common ${RUNUSER} (=/run/user/$UID) whitelist for all profiles
6		6
7	whitelist ${RUNUSER}/bus	7	allow ${RUNUSER}/bus
8	whitelist ${RUNUSER}/dconf	8	allow ${RUNUSER}/dconf
9	whitelist ${RUNUSER}/gdm/Xauthority	9	allow ${RUNUSER}/gdm/Xauthority
10	whitelist ${RUNUSER}/ICEauthority	10	allow ${RUNUSER}/ICEauthority
11	whitelist ${RUNUSER}/.mutter-Xwaylandauth.*	11	allow ${RUNUSER}/.mutter-Xwaylandauth.*
12	whitelist ${RUNUSER}/pulse/native	12	allow ${RUNUSER}/pulse/native
13	whitelist ${RUNUSER}/wayland-0	13	allow ${RUNUSER}/wayland-0
14	whitelist ${RUNUSER}/wayland-1	14	allow ${RUNUSER}/wayland-1
15	whitelist ${RUNUSER}/xauth_*	15	allow ${RUNUSER}/xauth_*
16	whitelist ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]	16	allow ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]