diff options
author | 2021-01-23 20:13:28 +0000 | |
---|---|---|
committer | 2021-01-23 20:13:28 +0000 | |
commit | 526426530915249741e14b8b1ac333872b158e57 (patch) | |
tree | bc3ef032a577e7fc9bed67a1c8d2c328b5cc48a9 /etc/profile-a-l | |
parent | Update bibletime.profile, add new whitelist (#3908) (diff) | |
download | firejail-526426530915249741e14b8b1ac333872b158e57.tar.gz firejail-526426530915249741e14b8b1ac333872b158e57.tar.zst firejail-526426530915249741e14b8b1ac333872b158e57.zip |
refactor google-earth{-pro} (#3915)
* refactor google-earth{-pro} blacklisting
* fix google-earth-pro.profile
I've included all binaries found in the Arch Linux AUR package to private-bin. But I also added a note on ignoring private-bin because I'm not sure what google-earth is doing on other distro's.
* unbreak google-earth.profile
Not sure why we need grep, ls and sed in private-bin exactly but keeping them around wouldn't hurt too much I guess.
Diffstat (limited to 'etc/profile-a-l')
-rw-r--r-- | etc/profile-a-l/google-earth-pro.profile | 11 | ||||
-rw-r--r-- | etc/profile-a-l/google-earth.profile | 15 |
2 files changed, 12 insertions, 14 deletions
diff --git a/etc/profile-a-l/google-earth-pro.profile b/etc/profile-a-l/google-earth-pro.profile index c1f919769..a0e4f6d86 100644 --- a/etc/profile-a-l/google-earth-pro.profile +++ b/etc/profile-a-l/google-earth-pro.profile | |||
@@ -1,7 +1,14 @@ | |||
1 | # Firejail profile alias for google-earth | 1 | # Firejail profile for google-earth-pro |
2 | # This file is overwritten after every install/update | 2 | # This file is overwritten after every install/update |
3 | # Persistent local customizations | ||
4 | include google-earth-pro.local | ||
5 | # Persistent global definitions | ||
6 | # added by included profile | ||
7 | #include globals.local | ||
3 | 8 | ||
4 | private-bin google-earth-pro | 9 | # If you see errors about missing commands, uncomment the below or put 'ignore private-bin' into your google-earth-pro.local |
10 | #ignore private-bin | ||
11 | private-bin google-earth-pro,googleearth,googleearth-bin,gpsbabel,readlink,repair_tool,which,xdg-mime,xdg-settings | ||
5 | 12 | ||
6 | # Redirect | 13 | # Redirect |
7 | include google-earth.profile | 14 | include google-earth.profile |
diff --git a/etc/profile-a-l/google-earth.profile b/etc/profile-a-l/google-earth.profile index a331ef8d2..12b1cbafd 100644 --- a/etc/profile-a-l/google-earth.profile +++ b/etc/profile-a-l/google-earth.profile | |||
@@ -6,10 +6,7 @@ include google-earth.local | |||
6 | include globals.local | 6 | include globals.local |
7 | 7 | ||
8 | noblacklist ${HOME}/.config/Google | 8 | noblacklist ${HOME}/.config/Google |
9 | noblacklist ${HOME}/.googleearth/Cache | 9 | noblacklist ${HOME}/.googleearth |
10 | noblacklist ${HOME}/.googleearth/Temp | ||
11 | noblacklist ${HOME}/.googleearth/myplaces.backup.kml | ||
12 | noblacklist ${HOME}/.googleearth/myplaces.kml | ||
13 | 10 | ||
14 | include disable-common.inc | 11 | include disable-common.inc |
15 | include disable-devel.inc | 12 | include disable-devel.inc |
@@ -19,15 +16,9 @@ include disable-passwdmgr.inc | |||
19 | include disable-programs.inc | 16 | include disable-programs.inc |
20 | 17 | ||
21 | mkdir ${HOME}/.config/Google | 18 | mkdir ${HOME}/.config/Google |
22 | mkdir ${HOME}/.googleearth/Cache | 19 | mkdir ${HOME}/.googleearth |
23 | mkdir ${HOME}/.googleearth/Temp | ||
24 | mkfile ${HOME}/.googleearth/myplaces.backup.kml | ||
25 | mkfile ${HOME}/.googleearth/myplaces.kml | ||
26 | whitelist ${HOME}/.config/Google | 20 | whitelist ${HOME}/.config/Google |
27 | whitelist ${HOME}/.googleearth/Cache | 21 | whitelist ${HOME}/.googleearth |
28 | whitelist ${HOME}/.googleearth/Temp | ||
29 | whitelist ${HOME}/.googleearth/myplaces.backup.kml | ||
30 | whitelist ${HOME}/.googleearth/myplaces.kml | ||
31 | include whitelist-common.inc | 22 | include whitelist-common.inc |
32 | 23 | ||
33 | caps.drop all | 24 | caps.drop all |