diff options
| author |  glitsj16 <glitsj16@users.noreply.github.com> | 2023-09-07 13:08:52 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2023-09-07 13:08:52 +0000 |
| commit | 9ab6b8746f9a5ad06e7ed5440c0ec96da215493b (patch) | |
| tree | 3863ecd222e38e47d0d085578724ad286e789d03 /etc/profile-m-z/transgui.profile | |
| parent | VSCodium: Fix developing Arduino (#5991) (diff) | |
| download | firejail-9ab6b8746f9a5ad06e7ed5440c0ec96da215493b.tar.gz firejail-9ab6b8746f9a5ad06e7ed5440c0ec96da215493b.tar.zst firejail-9ab6b8746f9a5ad06e7ed5440c0ec96da215493b.zip | |
transgui: hardening (#5989)
Diffstat (limited to 'etc/profile-m-z/transgui.profile')
| -rw-r--r-- | etc/profile-m-z/transgui.profile | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/etc/profile-m-z/transgui.profile b/etc/profile-m-z/transgui.profile index 645c55c3b..9f1f1c241 100644 --- a/etc/profile-m-z/transgui.profile +++ b/etc/profile-m-z/transgui.profile | |||
| @@ -12,6 +12,7 @@ include disable-common.inc | |||
| 12 | include disable-devel.inc | 12 | include disable-devel.inc |
| 13 | include disable-exec.inc | 13 | include disable-exec.inc |
| 14 | include disable-interpreters.inc | 14 | include disable-interpreters.inc |
| 15 | include disable-proc.inc | ||
| 15 | include disable-programs.inc | 16 | include disable-programs.inc |
| 16 | include disable-shell.inc | 17 | include disable-shell.inc |
| 17 | include disable-xdg.inc | 18 | include disable-xdg.inc |
| @@ -19,7 +20,10 @@ include disable-xdg.inc | |||
| 19 | mkdir ${HOME}/.config/transgui | 20 | mkdir ${HOME}/.config/transgui |
| 20 | whitelist ${HOME}/.config/transgui | 21 | whitelist ${HOME}/.config/transgui |
| 21 | whitelist ${DOWNLOADS} | 22 | whitelist ${DOWNLOADS} |
| 23 | whitelist /usr/share/transgui | ||
| 22 | include whitelist-common.inc | 24 | include whitelist-common.inc |
| 25 | include whitelist-run-common.inc | ||
| 26 | include whitelist-runuser-common.inc | ||
| 23 | include whitelist-usr-share-common.inc | 27 | include whitelist-usr-share-common.inc |
| 24 | include whitelist-var-common.inc | 28 | include whitelist-var-common.inc |
| 25 | 29 | ||
| @@ -44,7 +48,7 @@ tracelog | |||
| 44 | private-bin geoiplookup,geoiplookup6,transgui | 48 | private-bin geoiplookup,geoiplookup6,transgui |
| 45 | private-cache | 49 | private-cache |
| 46 | private-dev | 50 | private-dev |
| 47 | private-etc | 51 | private-etc @network,@tls-ca,@x11 |
| 48 | private-lib libgdk_pixbuf-2.0.so.*,libGeoIP.so*,libgthread-2.0.so.*,libgtk-x11-2.0.so.*,libX11.so.* | 52 | private-lib libgdk_pixbuf-2.0.so.*,libGeoIP.so*,libgthread-2.0.so.*,libgtk-x11-2.0.so.*,libX11.so.* |
| 49 | private-tmp | 53 | private-tmp |
| 50 | 54 | ||