diff options
author | 2021-10-09 13:16:31 +0000 | |
---|---|---|
committer | 2021-10-09 13:16:31 +0000 | |
commit | 44c15b67d48f2e5d2deff3f88cbf1129979065f7 (patch) | |
tree | 093e526ad450867c3cdf0b19a48a35553a91d342 /etc/profile-a-l/cheese.profile | |
parent | firejail.h: add missing linux/limits.h include (diff) | |
parent | Merge pull request #4579 from dm9pZCAq/master (diff) | |
download | firejail-44c15b67d48f2e5d2deff3f88cbf1129979065f7.tar.gz firejail-44c15b67d48f2e5d2deff3f88cbf1129979065f7.tar.zst firejail-44c15b67d48f2e5d2deff3f88cbf1129979065f7.zip |
Merge branch 'master' into fix-include-limits-h
Diffstat (limited to 'etc/profile-a-l/cheese.profile')
-rw-r--r-- | etc/profile-a-l/cheese.profile | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/etc/profile-a-l/cheese.profile b/etc/profile-a-l/cheese.profile index 53d221631..978d727f4 100644 --- a/etc/profile-a-l/cheese.profile +++ b/etc/profile-a-l/cheese.profile | |||
@@ -9,17 +9,24 @@ include globals.local | |||
9 | noblacklist ${VIDEOS} | 9 | noblacklist ${VIDEOS} |
10 | noblacklist ${PICTURES} | 10 | noblacklist ${PICTURES} |
11 | 11 | ||
12 | include allow-python3.inc | ||
13 | |||
12 | include disable-common.inc | 14 | include disable-common.inc |
13 | include disable-devel.inc | 15 | include disable-devel.inc |
14 | include disable-exec.inc | 16 | include disable-exec.inc |
15 | include disable-interpreters.inc | 17 | include disable-interpreters.inc |
16 | include disable-programs.inc | 18 | include disable-programs.inc |
19 | include disable-shell.inc | ||
17 | include disable-xdg.inc | 20 | include disable-xdg.inc |
18 | 21 | ||
19 | whitelist ${VIDEOS} | 22 | whitelist ${VIDEOS} |
20 | whitelist ${PICTURES} | 23 | whitelist ${PICTURES} |
24 | whitelist /run/udev/data | ||
25 | whitelist /usr/libexec/gstreamer-1.0/gst-plugin-scanner | ||
21 | whitelist /usr/share/gnome-video-effects | 26 | whitelist /usr/share/gnome-video-effects |
27 | whitelist /usr/share/gstreamer-1.0 | ||
22 | include whitelist-common.inc | 28 | include whitelist-common.inc |
29 | include whitelist-run-common.inc | ||
23 | include whitelist-runuser-common.inc | 30 | include whitelist-runuser-common.inc |
24 | include whitelist-usr-share-common.inc | 31 | include whitelist-usr-share-common.inc |
25 | include whitelist-var-common.inc | 32 | include whitelist-var-common.inc |
@@ -30,21 +37,26 @@ machine-id | |||
30 | net none | 37 | net none |
31 | nodvd | 38 | nodvd |
32 | nogroups | 39 | nogroups |
40 | noinput | ||
33 | nonewprivs | 41 | nonewprivs |
34 | noroot | 42 | noroot |
43 | nosound | ||
35 | notv | 44 | notv |
36 | nou2f | 45 | nou2f |
37 | protocol unix | 46 | protocol unix |
38 | seccomp | 47 | seccomp |
48 | seccomp.block-secondary | ||
39 | shell none | 49 | shell none |
40 | tracelog | 50 | tracelog |
41 | 51 | ||
42 | disable-mnt | 52 | disable-mnt |
43 | private-bin cheese | 53 | private-bin cheese |
44 | private-cache | 54 | private-cache |
55 | private-dev | ||
45 | private-etc alternatives,clutter-1.0,dconf,drirc,fonts,gtk-3.0,ld.so.preload | 56 | private-etc alternatives,clutter-1.0,dconf,drirc,fonts,gtk-3.0,ld.so.preload |
46 | private-tmp | 57 | private-tmp |
47 | 58 | ||
48 | dbus-user filter | 59 | dbus-user filter |
60 | dbus-user.own org.gnome.Cheese | ||
49 | dbus-user.talk ca.desrt.dconf | 61 | dbus-user.talk ca.desrt.dconf |
50 | dbus-system none | 62 | dbus-system none |