aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/start-tor-browser.desktop.profile
diff options
context:
space:
mode:
authorLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2021-07-18 20:39:14 -0300
committerLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2021-07-18 20:39:14 -0300
commitf43382f1e9707b4fd5e63c7bfe881912aa4ee994 (patch)
tree499639bb962c8b071b153dcdad1b42af8286521d /etc/profile-m-z/start-tor-browser.desktop.profile
parentAdd MS Edge Beta profile (diff)
downloadfirejail-f43382f1e9707b4fd5e63c7bfe881912aa4ee994.tar.gz
firejail-f43382f1e9707b4fd5e63c7bfe881912aa4ee994.tar.zst
firejail-f43382f1e9707b4fd5e63c7bfe881912aa4ee994.zip
Revert "move whitelist/blacklist to allow/deny"
This reverts commit fe0f975f447d59977d90c3226cc8c623b31b20b3. Note: This only reverts the changes from etc. The 4 aliases introduced on commit 45f2ba544 are mere, well, aliases. That is, they fail to address the different usability problems discussed on [#3447][3447] and in fact only make things more confusing (as has already been mentioned on [this][4379] and later comments). The main reason is that the aliases do not meaningfully map to the original commands. For example, the commands from each pair below seem like they would do the exact same thing: * `allow` and `nodeny` * `deny` and `noallow` Additionally, if these aliases are not the final commands, but only a test/work-in-progress, then keeping the wide-scale search/replace changes made on commit fe0f975f4 would only serve to cause confusion, as users of firejail-git, contributors and downstream projects might start changing the commands used on their profiles, only to later have to change them again, potentially to completely different commands. The sooner this is undone the better, as (besides the above reasons) the more profile changes there are between the original commit and the revert, the harder it is to e.g.: `git diff` versions of files across the following revision ranges: before the commit, after the commit but before the revert and after the revert. Note: This is still the case even if a commit is [ignored by `git blame`][4390]. So let us revert fe0f975f4 and only reapply similar large-scale changes once we have discussed and settled on better commands. How the revert was applied: Despite using the auto-generated message from `git revert`, to ensure correctness and to avoid conflicts the changes were reverted in different steps: Firstly, revert the files which can be safely reverted directly ("filestorevert"): # Find out which files have been changed on fe0f975f44, but have not # been changed afterwards and list them on "filestorevert" git show --pretty='' --name-only fe0f975f44 -- etc | LC_ALL=C sort >allfiles git diff --name-only fe0f975f44..master -- etc | LC_ALL=C sort >filestoignore comm -2 -3 allfiles filestoignore >filestorevert # Note: There are 3 extra files on filestoignore because they were # added after commit fe0f975f44 wc -l allfiles filestoignore filestorevert | head -n 3 # 797 allfiles # 8 filestoignore # 792 filestorevert # Automatically revert files in "filestorevert" # See https://stackoverflow.com/a/23401018/10095231 tr '\n' '\000' <filestorevert | xargs -0 git show fe0f975f44 -- | git apply --reverse printf 'Total files reverted:\n' git diff --name-only | wc -l # 792 Secondly, do some search/replace on the rest: tr '\n' '\000' <filestoignore | xargs -0 sed -i.bak \ -e 's/allow /whitelist /' -e 's/noallow /nowhitelist /' \ -e 's/deny /blacklist /' -e 's/nodeny /noblacklist /' \ -e 's/deny-nolog /blacklist-nolog /' find etc -name '*.bak' -print0 | xargs -0 rm Thirdly, verify the result. The following command shows the difference between all the changes in etc from before fe0f975f44 and this commit (inclusive): git diff fe0f975f44~1 -- etc From the output, it looks like all alias changes are fully reverted and that the other changes to etc (from after fe0f975f44) remain, so the revert seems to be done correctly. [3447]: https://github.com/netblue30/firejail/issues/3447 [4379]: https://github.com/netblue30/firejail/issues/4379#issuecomment-876460222 [4390]: https://github.com/netblue30/firejail/issues/4390
Diffstat (limited to 'etc/profile-m-z/start-tor-browser.desktop.profile')
-rw-r--r--etc/profile-m-z/start-tor-browser.desktop.profile126
1 files changed, 63 insertions, 63 deletions
diff --git a/etc/profile-m-z/start-tor-browser.desktop.profile b/etc/profile-m-z/start-tor-browser.desktop.profile
index 8f75365e8..2f73c9fee 100644
--- a/etc/profile-m-z/start-tor-browser.desktop.profile
+++ b/etc/profile-m-z/start-tor-browser.desktop.profile
@@ -6,71 +6,71 @@ include start-tor-browser.desktop.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9nodeny ${HOME}/.tor-browser* 9noblacklist ${HOME}/.tor-browser*
10 10
11allow ${HOME}/.tor-browser-ar 11whitelist ${HOME}/.tor-browser-ar
12allow ${HOME}/.tor-browser-ca 12whitelist ${HOME}/.tor-browser-ca
13allow ${HOME}/.tor-browser-cs 13whitelist ${HOME}/.tor-browser-cs
14allow ${HOME}/.tor-browser-da 14whitelist ${HOME}/.tor-browser-da
15allow ${HOME}/.tor-browser-de 15whitelist ${HOME}/.tor-browser-de
16allow ${HOME}/.tor-browser-el 16whitelist ${HOME}/.tor-browser-el
17allow ${HOME}/.tor-browser-en 17whitelist ${HOME}/.tor-browser-en
18allow ${HOME}/.tor-browser-en-us 18whitelist ${HOME}/.tor-browser-en-us
19allow ${HOME}/.tor-browser-es 19whitelist ${HOME}/.tor-browser-es
20allow ${HOME}/.tor-browser-es-es 20whitelist ${HOME}/.tor-browser-es-es
21allow ${HOME}/.tor-browser-fa 21whitelist ${HOME}/.tor-browser-fa
22allow ${HOME}/.tor-browser-fr 22whitelist ${HOME}/.tor-browser-fr
23allow ${HOME}/.tor-browser-ga-ie 23whitelist ${HOME}/.tor-browser-ga-ie
24allow ${HOME}/.tor-browser-he 24whitelist ${HOME}/.tor-browser-he
25allow ${HOME}/.tor-browser-hu 25whitelist ${HOME}/.tor-browser-hu
26allow ${HOME}/.tor-browser-id 26whitelist ${HOME}/.tor-browser-id
27allow ${HOME}/.tor-browser-is 27whitelist ${HOME}/.tor-browser-is
28allow ${HOME}/.tor-browser-it 28whitelist ${HOME}/.tor-browser-it
29allow ${HOME}/.tor-browser-ja 29whitelist ${HOME}/.tor-browser-ja
30allow ${HOME}/.tor-browser-ka 30whitelist ${HOME}/.tor-browser-ka
31allow ${HOME}/.tor-browser-ko 31whitelist ${HOME}/.tor-browser-ko
32allow ${HOME}/.tor-browser-nb 32whitelist ${HOME}/.tor-browser-nb
33allow ${HOME}/.tor-browser-nl 33whitelist ${HOME}/.tor-browser-nl
34allow ${HOME}/.tor-browser-pl 34whitelist ${HOME}/.tor-browser-pl
35allow ${HOME}/.tor-browser-pt-br 35whitelist ${HOME}/.tor-browser-pt-br
36allow ${HOME}/.tor-browser-ru 36whitelist ${HOME}/.tor-browser-ru
37allow ${HOME}/.tor-browser-sv-se 37whitelist ${HOME}/.tor-browser-sv-se
38allow ${HOME}/.tor-browser-tr 38whitelist ${HOME}/.tor-browser-tr
39allow ${HOME}/.tor-browser-vi 39whitelist ${HOME}/.tor-browser-vi
40allow ${HOME}/.tor-browser-zh-cn 40whitelist ${HOME}/.tor-browser-zh-cn
41allow ${HOME}/.tor-browser-zh-tw 41whitelist ${HOME}/.tor-browser-zh-tw
42 42
43allow ${HOME}/.tor-browser_ar 43whitelist ${HOME}/.tor-browser_ar
44allow ${HOME}/.tor-browser_ca 44whitelist ${HOME}/.tor-browser_ca
45allow ${HOME}/.tor-browser_cs 45whitelist ${HOME}/.tor-browser_cs
46allow ${HOME}/.tor-browser_da 46whitelist ${HOME}/.tor-browser_da
47allow ${HOME}/.tor-browser_de 47whitelist ${HOME}/.tor-browser_de
48allow ${HOME}/.tor-browser_el 48whitelist ${HOME}/.tor-browser_el
49allow ${HOME}/.tor-browser_en 49whitelist ${HOME}/.tor-browser_en
50allow ${HOME}/.tor-browser_en_US 50whitelist ${HOME}/.tor-browser_en_US
51allow ${HOME}/.tor-browser_es 51whitelist ${HOME}/.tor-browser_es
52allow ${HOME}/.tor-browser_es-ES 52whitelist ${HOME}/.tor-browser_es-ES
53allow ${HOME}/.tor-browser_fa 53whitelist ${HOME}/.tor-browser_fa
54allow ${HOME}/.tor-browser_fr 54whitelist ${HOME}/.tor-browser_fr
55allow ${HOME}/.tor-browser_ga-IE 55whitelist ${HOME}/.tor-browser_ga-IE
56allow ${HOME}/.tor-browser_he 56whitelist ${HOME}/.tor-browser_he
57allow ${HOME}/.tor-browser_hu 57whitelist ${HOME}/.tor-browser_hu
58allow ${HOME}/.tor-browser_id 58whitelist ${HOME}/.tor-browser_id
59allow ${HOME}/.tor-browser_is 59whitelist ${HOME}/.tor-browser_is
60allow ${HOME}/.tor-browser_it 60whitelist ${HOME}/.tor-browser_it
61allow ${HOME}/.tor-browser_ja 61whitelist ${HOME}/.tor-browser_ja
62allow ${HOME}/.tor-browser_ka 62whitelist ${HOME}/.tor-browser_ka
63allow ${HOME}/.tor-browser_ko 63whitelist ${HOME}/.tor-browser_ko
64allow ${HOME}/.tor-browser_nb 64whitelist ${HOME}/.tor-browser_nb
65allow ${HOME}/.tor-browser_nl 65whitelist ${HOME}/.tor-browser_nl
66allow ${HOME}/.tor-browser_pl 66whitelist ${HOME}/.tor-browser_pl
67allow ${HOME}/.tor-browser_pt-BR 67whitelist ${HOME}/.tor-browser_pt-BR
68allow ${HOME}/.tor-browser_ru 68whitelist ${HOME}/.tor-browser_ru
69allow ${HOME}/.tor-browser_sv-SE 69whitelist ${HOME}/.tor-browser_sv-SE
70allow ${HOME}/.tor-browser_tr 70whitelist ${HOME}/.tor-browser_tr
71allow ${HOME}/.tor-browser_vi 71whitelist ${HOME}/.tor-browser_vi
72allow ${HOME}/.tor-browser_zh-CN 72whitelist ${HOME}/.tor-browser_zh-CN
73allow ${HOME}/.tor-browser_zh-TW 73whitelist ${HOME}/.tor-browser_zh-TW
74 74
75# Redirect 75# Redirect
76include torbrowser-launcher.profile 76include torbrowser-launcher.profile