diff options
author | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2020-07-09 10:49:17 +0000 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-07-09 10:49:17 +0000 |
commit | deb6c12454191b7aeff3d259612a00427d1aa6a1 (patch) | |
tree | bdf4351c170112ded7b076298b2b4bddd7664f2b /etc/profile-a-l/keepassxc.profile | |
parent | Update disable-common.inc (#3499) (diff) | |
download | firejail-deb6c12454191b7aeff3d259612a00427d1aa6a1.tar.gz firejail-deb6c12454191b7aeff3d259612a00427d1aa6a1.tar.zst firejail-deb6c12454191b7aeff3d259612a00427d1aa6a1.zip |
hardening some profiles (#3505)
* hardening some profiles
- harden and fix flameshot
- wruc: frogatto, ghostwriter
- harden gnome-latex
- add whitelist opt-in note to keepassxc
- add comment to minetest
- harden openarena, tremulous, xonotic
- add profile for xonotic-sdl-wrapper
* followup
Diffstat (limited to 'etc/profile-a-l/keepassxc.profile')
-rw-r--r-- | etc/profile-a-l/keepassxc.profile | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/etc/profile-a-l/keepassxc.profile b/etc/profile-a-l/keepassxc.profile index d1893e412..6e35299be 100644 --- a/etc/profile-a-l/keepassxc.profile +++ b/etc/profile-a-l/keepassxc.profile | |||
@@ -23,6 +23,17 @@ include disable-programs.inc | |||
23 | include disable-shell.inc | 23 | include disable-shell.inc |
24 | include disable-xdg.inc | 24 | include disable-xdg.inc |
25 | 25 | ||
26 | # You can enable whitelisting for keepassxc by uncommenting (or adding to you keepassxc.local) the following lines. | ||
27 | # If you do so, you MUST store your database under ${HOME}/Documents/KeePassXC/foo.kdbx | ||
28 | #mkdir ${HOME}/Documents/KeePassXC | ||
29 | #whitelist ${HOME}/Documents/KeePassXC | ||
30 | # Needed for KeePassXC-Browser | ||
31 | #mkfile ${HOME}/.mozilla/native-messaging-hosts/org.keepassxc.keepassxc_browser.json | ||
32 | #whitelist ${HOME}/.mozilla/native-messaging-hosts/org.keepassxc.keepassxc_browser.json | ||
33 | #mkdir ${HOME}/.config/keepassxc | ||
34 | #whitelist ${HOME}/.config/keepassxc | ||
35 | #include whitelist-common.inc | ||
36 | |||
26 | whitelist /usr/share/keepassxc | 37 | whitelist /usr/share/keepassxc |
27 | include whitelist-usr-share-common.inc | 38 | include whitelist-usr-share-common.inc |
28 | include whitelist-var-common.inc | 39 | include whitelist-var-common.inc |