diff options
author | glitsj16 <glitsj16@users.noreply.github.com> | 2020-05-04 18:48:42 +0000 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-05-04 18:48:42 +0000 |
commit | 276f250e2fae884d421cff52f3b7ac7c9762cf79 (patch) | |
tree | 5167a1917db2c4176f917534b594a1b3ac08f21f /etc/profile-a-l | |
parent | Merge pull request #3395 from matu3ba/template_bug (diff) | |
download | firejail-276f250e2fae884d421cff52f3b7ac7c9762cf79.tar.gz firejail-276f250e2fae884d421cff52f3b7ac7c9762cf79.tar.zst firejail-276f250e2fae884d421cff52f3b7ac7c9762cf79.zip |
* use the new dbus format in chromium-common.profile
* use new dbus format in firejail.config
Now that #3326 landed I think it might be less confusing to keep using the --nodbus wording. Couldn't come up with a better alternative (yet), so this might need future improvements.
* block dbus system bus
Blocking the system bus shouldn't affect password functionality etc, as that uses the session bus.
Diffstat (limited to 'etc/profile-a-l')
-rw-r--r-- | etc/profile-a-l/chromium-common.profile | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/etc/profile-a-l/chromium-common.profile b/etc/profile-a-l/chromium-common.profile index c54fb0e19..899400d25 100644 --- a/etc/profile-a-l/chromium-common.profile +++ b/etc/profile-a-l/chromium-common.profile | |||
@@ -29,7 +29,6 @@ include whitelist-var-common.inc | |||
29 | apparmor | 29 | apparmor |
30 | caps.keep sys_admin,sys_chroot | 30 | caps.keep sys_admin,sys_chroot |
31 | netfilter | 31 | netfilter |
32 | # nodbus - prevents access to passwords saved in GNOME Keyring and KWallet, also breaks Gnome connector | ||
33 | nodvd | 32 | nodvd |
34 | nogroups | 33 | nogroups |
35 | notv | 34 | notv |
@@ -40,5 +39,9 @@ disable-mnt | |||
40 | ?BROWSER_DISABLE_U2F: private-dev | 39 | ?BROWSER_DISABLE_U2F: private-dev |
41 | # private-tmp - problems with multiple browser sessions | 40 | # private-tmp - problems with multiple browser sessions |
42 | 41 | ||
42 | # prevents access to passwords saved in GNOME Keyring and KWallet, also breaks Gnome connector | ||
43 | # dbus-user none | ||
44 | dbus-system none | ||
45 | |||
43 | # the file dialog needs to work without d-bus | 46 | # the file dialog needs to work without d-bus |
44 | ?HAS_NODBUS: env NO_CHROME_KDE_FILE_DIALOG=1 | 47 | ?HAS_NODBUS: env NO_CHROME_KDE_FILE_DIALOG=1 |