diff options
author | glitsj16 <glitsj16@users.noreply.github.com> | 2022-03-14 18:09:42 +0000 |
---|---|---|
committer | GitHub <noreply@github.com> | 2022-03-14 18:09:42 +0000 |
commit | cc5baf32027594e05ff03ce71c563e85114651d6 (patch) | |
tree | bc5da91d8c44deaae5bc54711665216eb4a009c7 /etc/profile-m-z | |
parent | fbuilder: fix private-etc (diff) | |
download | firejail-cc5baf32027594e05ff03ce71c563e85114651d6.tar.gz firejail-cc5baf32027594e05ff03ce71c563e85114651d6.tar.zst firejail-cc5baf32027594e05ff03ce71c563e85114651d6.zip |
mupdf refactoring cfr. https://github.com/netblue30/firejail/discussions/4993 (#5042)
* refactor mupdf
* refactor mupdf
* refactor mupdf
* refactor mupdf
* add mupdf-gl blacklist
* move history file back to mupdf-gl
* refactor mupdf-gl
* add no3d to mupdf.profile
* add suggestions from review
* drop unix from protocol [accumulates]
* fix protocol
Diffstat (limited to 'etc/profile-m-z')
-rw-r--r-- | etc/profile-m-z/mupdf-gl.profile | 3 | ||||
-rw-r--r-- | etc/profile-m-z/mupdf-x11.profile | 3 | ||||
-rw-r--r-- | etc/profile-m-z/mupdf.profile | 4 |
3 files changed, 7 insertions, 3 deletions
diff --git a/etc/profile-m-z/mupdf-gl.profile b/etc/profile-m-z/mupdf-gl.profile index be94a9083..c5d94c371 100644 --- a/etc/profile-m-z/mupdf-gl.profile +++ b/etc/profile-m-z/mupdf-gl.profile | |||
@@ -7,7 +7,10 @@ include mupdf-gl.local | |||
7 | # added by included profile | 7 | # added by included profile |
8 | #include globals.local | 8 | #include globals.local |
9 | 9 | ||
10 | noblacklist ${HOME}/.cache/mupdf.history | ||
10 | noblacklist ${HOME}/.mupdf.history | 11 | noblacklist ${HOME}/.mupdf.history |
11 | 12 | ||
13 | ignore no3d | ||
14 | |||
12 | # Redirect | 15 | # Redirect |
13 | include mupdf.profile | 16 | include mupdf.profile |
diff --git a/etc/profile-m-z/mupdf-x11.profile b/etc/profile-m-z/mupdf-x11.profile index 256201d0c..547aa4f2f 100644 --- a/etc/profile-m-z/mupdf-x11.profile +++ b/etc/profile-m-z/mupdf-x11.profile | |||
@@ -7,8 +7,5 @@ include mupdf-x11.local | |||
7 | # added by included profile | 7 | # added by included profile |
8 | #include globals.local | 8 | #include globals.local |
9 | 9 | ||
10 | memory-deny-write-execute | ||
11 | read-only ${HOME} | ||
12 | |||
13 | # Redirect | 10 | # Redirect |
14 | include mupdf.profile | 11 | include mupdf.profile |
diff --git a/etc/profile-m-z/mupdf.profile b/etc/profile-m-z/mupdf.profile index 22cb83cc4..7a1f62858 100644 --- a/etc/profile-m-z/mupdf.profile +++ b/etc/profile-m-z/mupdf.profile | |||
@@ -21,6 +21,7 @@ apparmor | |||
21 | caps.drop all | 21 | caps.drop all |
22 | machine-id | 22 | machine-id |
23 | net none | 23 | net none |
24 | no3d | ||
24 | nodvd | 25 | nodvd |
25 | nogroups | 26 | nogroups |
26 | noinput | 27 | noinput |
@@ -41,3 +42,6 @@ private-tmp | |||
41 | 42 | ||
42 | dbus-user none | 43 | dbus-user none |
43 | dbus-system none | 44 | dbus-system none |
45 | |||
46 | memory-deny-write-execute | ||
47 | read-only ${HOME} | ||