diff options
author | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-09-30 08:18:19 +0200 |
---|---|---|
committer | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-09-30 08:26:28 +0200 |
commit | f3912910c1a92883671fce6b75a72ec7de865716 (patch) | |
tree | 2dcacaf5d2e259ce4cf71c968d769533e6858591 /etc/profile-m-z/musixmatch.profile | |
parent | Rework D-Bus policy of nheko (diff) | |
download | firejail-f3912910c1a92883671fce6b75a72ec7de865716.tar.gz firejail-f3912910c1a92883671fce6b75a72ec7de865716.tar.zst firejail-f3912910c1a92883671fce6b75a72ec7de865716.zip |
Profile fixes and hardening
* cheese
- fix: dbus-user.own org.gnome.Cheese
- fix: whitelist /usr/share/gstreamer-1.0
- fix: include allow-python3.inc
- hardening: include disable-shell.inc
- hardening: include whitelist-run-common.inc and whitelist /run/udev/data
- hardening: whitelist /usr/libexec/gstreamer-1.0/gst-plugin-scanner
- hardening: noinput
- hardening: nosound
- hardening: seccomp.block-secondary
- hardening: private-dev
* geekbench (closes #4576)
- fix: noblacklist /sbin and noblacklist /usr/sbin
- fix: noblacklist, blacklist, mkdir, whitelist, read-write ${HOME}/.geekbench5
- fix: comment/remove private-bin, private-lib, private-opt
* inkscape
- add quiet for cli usage
* musixmatch (#4518)
- allow chroot
* pandoc
- fix: include allow-bin-sh.inc
- fix: drop private-bin
- hardening: include whitelist-runuser-common.inc
- hardening: seccomp.block-secondary
Diffstat (limited to 'etc/profile-m-z/musixmatch.profile')
-rw-r--r-- | etc/profile-m-z/musixmatch.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/profile-m-z/musixmatch.profile b/etc/profile-m-z/musixmatch.profile index dac90cfa5..aab2ac19d 100644 --- a/etc/profile-m-z/musixmatch.profile +++ b/etc/profile-m-z/musixmatch.profile | |||
@@ -29,7 +29,7 @@ notv | |||
29 | nou2f | 29 | nou2f |
30 | novideo | 30 | novideo |
31 | protocol unix,inet,inet6,netlink | 31 | protocol unix,inet,inet6,netlink |
32 | seccomp | 32 | seccomp !chroot |
33 | 33 | ||
34 | disable-mnt | 34 | disable-mnt |
35 | private-dev | 35 | private-dev |