aboutsummaryrefslogtreecommitdiffstats
path: root/etc/inc
diff options
context:
space:
mode:
authorLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2020-12-10 10:42:18 -0300
committerLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2020-12-10 22:40:21 -0300
commit9e291a15dd64dde0b105c6006938e98a7d41b354 (patch)
tree5415305a7a2df75505247bae09e21f9f152af030 /etc/inc
parentdisable-common.inc: sort DNS / RUNUSER paths (diff)
downloadfirejail-9e291a15dd64dde0b105c6006938e98a7d41b354.tar.gz
firejail-9e291a15dd64dde0b105c6006938e98a7d41b354.tar.zst
firejail-9e291a15dd64dde0b105c6006938e98a7d41b354.zip
disable-common.inc: blacklist ldns tools
drill(1) from ldns is the first tool suggested on the Arch Wiki for DNS lookup: https://wiki.archlinux.org/index.php/Domain_name_resolution#Lookup_utilities Home page: https://www.nlnetlabs.nl/projects/ldns/about/ $ pacman -Q ldns ldns 1.7.1-2 $ pacman -Qlq ldns | grep bin /usr/bin/ /usr/bin/drill /usr/bin/ldns-chaos /usr/bin/ldns-compare-zones /usr/bin/ldns-config /usr/bin/ldns-dane /usr/bin/ldns-dpa /usr/bin/ldns-gen-zone /usr/bin/ldns-key2ds /usr/bin/ldns-keyfetcher /usr/bin/ldns-keygen /usr/bin/ldns-mx /usr/bin/ldns-notify /usr/bin/ldns-nsec3-hash /usr/bin/ldns-read-zone /usr/bin/ldns-resolver /usr/bin/ldns-revoke /usr/bin/ldns-rrsig /usr/bin/ldns-signzone /usr/bin/ldns-test-edns /usr/bin/ldns-testns /usr/bin/ldns-update /usr/bin/ldns-verify-zone /usr/bin/ldns-version /usr/bin/ldns-walk /usr/bin/ldns-zcat /usr/bin/ldns-zsplit /usr/bin/ldnsd
Diffstat (limited to 'etc/inc')
-rw-r--r--etc/inc/disable-common.inc3
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc
index 0f708ae29..2b56bb5be 100644
--- a/etc/inc/disable-common.inc
+++ b/etc/inc/disable-common.inc
@@ -518,10 +518,13 @@ blacklist ${PATH}/dig
518blacklist ${PATH}/dlint 518blacklist ${PATH}/dlint
519blacklist ${PATH}/dns2tcp 519blacklist ${PATH}/dns2tcp
520blacklist ${PATH}/dnswalk 520blacklist ${PATH}/dnswalk
521blacklist ${PATH}/drill
521blacklist ${PATH}/host 522blacklist ${PATH}/host
522blacklist ${PATH}/iodine 523blacklist ${PATH}/iodine
523blacklist ${PATH}/kdig 524blacklist ${PATH}/kdig
524blacklist ${PATH}/knsupdate 525blacklist ${PATH}/knsupdate
526blacklist ${PATH}/ldns-*
527blacklist ${PATH}/ldnsd
525blacklist ${PATH}/nslookup 528blacklist ${PATH}/nslookup
526blacklist ${PATH}/resolvectl 529blacklist ${PATH}/resolvectl
527 530