diff options
author | glitsj16 <glitsj16@users.noreply.github.com> | 2023-10-18 22:47:07 +0000 |
---|---|---|
committer | GitHub <noreply@github.com> | 2023-10-18 22:47:07 +0000 |
commit | 17590553045f40e8c7628608c8330b72412fd7f4 (patch) | |
tree | a1c5d0888101865866492269f5f194ce0ecffc3c /etc/profile-a-l/google-earth.profile | |
parent | steam.profile: Allow Baba Is You (#6054) (diff) | |
download | firejail-17590553045f40e8c7628608c8330b72412fd7f4.tar.gz firejail-17590553045f40e8c7628608c8330b72412fd7f4.tar.zst firejail-17590553045f40e8c7628608c8330b72412fd7f4.zip |
profiles: exchange private-opt with a whitelist (#6021)
* profiles: drop private-opt (existing whitelist)
* profiles: replace private-opt with whitelist
In most profiles.
Kept private-opt for enpass (~85MB), mate-dictionary (<20MB),
minecraft-launcher (~1.6MB) and ppsspp (~44MB). The only app I couldn't
check: xmr-stak.
* docs: note potential issues with private-opt
Diffstat (limited to 'etc/profile-a-l/google-earth.profile')
-rw-r--r-- | etc/profile-a-l/google-earth.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/profile-a-l/google-earth.profile b/etc/profile-a-l/google-earth.profile index 4af6ce36b..1087b3d6e 100644 --- a/etc/profile-a-l/google-earth.profile +++ b/etc/profile-a-l/google-earth.profile | |||
@@ -18,6 +18,7 @@ mkdir ${HOME}/.config/Google | |||
18 | mkdir ${HOME}/.googleearth | 18 | mkdir ${HOME}/.googleearth |
19 | whitelist ${HOME}/.config/Google | 19 | whitelist ${HOME}/.config/Google |
20 | whitelist ${HOME}/.googleearth | 20 | whitelist ${HOME}/.googleearth |
21 | whitelist /opt/google | ||
21 | include whitelist-common.inc | 22 | include whitelist-common.inc |
22 | 23 | ||
23 | caps.drop all | 24 | caps.drop all |
@@ -37,6 +38,5 @@ seccomp | |||
37 | disable-mnt | 38 | disable-mnt |
38 | private-bin bash,dirname,google-earth,grep,ls,sed,sh | 39 | private-bin bash,dirname,google-earth,grep,ls,sed,sh |
39 | private-dev | 40 | private-dev |
40 | private-opt google | ||
41 | 41 | ||
42 | restrict-namespaces | 42 | restrict-namespaces |