diff options
author | netblue30 <netblue30@protonmail.com> | 2021-07-25 12:32:05 +0000 |
---|---|---|
committer | GitHub <noreply@github.com> | 2021-07-25 12:32:05 +0000 |
commit | 8b50039a1fad123b90172fadc85bc232e97eb6d1 (patch) | |
tree | c17c687e310c9d3ad7874dd40636c104d308e9a6 /etc/profile-a-l/gnome-schedule.profile | |
parent | Merge branch 'master' of https://github.com/netblue30/firejail (diff) | |
parent | Merge branch 'master' into revert-allow-deny-etc (diff) | |
download | firejail-8b50039a1fad123b90172fadc85bc232e97eb6d1.tar.gz firejail-8b50039a1fad123b90172fadc85bc232e97eb6d1.tar.zst firejail-8b50039a1fad123b90172fadc85bc232e97eb6d1.zip |
Merge pull request #4410 from kmk3/revert-allow-deny-etc
Revert "move whitelist/blacklist to allow/deny"
Diffstat (limited to 'etc/profile-a-l/gnome-schedule.profile')
-rw-r--r-- | etc/profile-a-l/gnome-schedule.profile | 22 |
1 files changed, 11 insertions, 11 deletions
diff --git a/etc/profile-a-l/gnome-schedule.profile b/etc/profile-a-l/gnome-schedule.profile index 146f8bc4e..69c90b33d 100644 --- a/etc/profile-a-l/gnome-schedule.profile +++ b/etc/profile-a-l/gnome-schedule.profile | |||
@@ -6,17 +6,17 @@ include gnome-schedule.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | nodeny ${HOME}/.gnome/gnome-schedule | 9 | noblacklist ${HOME}/.gnome/gnome-schedule |
10 | 10 | ||
11 | # Needs at and crontab to read/write user cron | 11 | # Needs at and crontab to read/write user cron |
12 | nodeny ${PATH}/at | 12 | noblacklist ${PATH}/at |
13 | nodeny ${PATH}/crontab | 13 | noblacklist ${PATH}/crontab |
14 | 14 | ||
15 | # Needs access to these files/dirs | 15 | # Needs access to these files/dirs |
16 | nodeny /etc/cron.allow | 16 | noblacklist /etc/cron.allow |
17 | nodeny /etc/cron.deny | 17 | noblacklist /etc/cron.deny |
18 | nodeny /etc/shadow | 18 | noblacklist /etc/shadow |
19 | nodeny /var/spool/cron | 19 | noblacklist /var/spool/cron |
20 | 20 | ||
21 | # cron job testing needs a terminal, resulting in sandbox escape (see disable-common.inc) | 21 | # cron job testing needs a terminal, resulting in sandbox escape (see disable-common.inc) |
22 | # add 'noblacklist ${PATH}/your-terminal' to gnome-schedule.local if you need that functionality | 22 | # add 'noblacklist ${PATH}/your-terminal' to gnome-schedule.local if you need that functionality |
@@ -34,10 +34,10 @@ include disable-programs.inc | |||
34 | include disable-xdg.inc | 34 | include disable-xdg.inc |
35 | 35 | ||
36 | mkfile ${HOME}/.gnome/gnome-schedule | 36 | mkfile ${HOME}/.gnome/gnome-schedule |
37 | allow ${HOME}/.gnome/gnome-schedule | 37 | whitelist ${HOME}/.gnome/gnome-schedule |
38 | allow /usr/share/gnome-schedule | 38 | whitelist /usr/share/gnome-schedule |
39 | allow /var/spool/atd | 39 | whitelist /var/spool/atd |
40 | allow /var/spool/cron | 40 | whitelist /var/spool/cron |
41 | include whitelist-common.inc | 41 | include whitelist-common.inc |
42 | include whitelist-runuser-common.inc | 42 | include whitelist-runuser-common.inc |
43 | include whitelist-usr-share-common.inc | 43 | include whitelist-usr-share-common.inc |