diff options
author | 2021-09-04 18:57:12 +0200 | |
---|---|---|
committer | 2021-09-04 19:04:03 +0200 | |
commit | 263e3fe7234853cd01070b15d0a11d6b0e9b2f21 (patch) | |
tree | 0f14f80fdb226ba8b10337033da6f7090775887b /etc/profile-m-z | |
parent | Update RELNOTES (diff) | |
download | firejail-263e3fe7234853cd01070b15d0a11d6b0e9b2f21.tar.gz firejail-263e3fe7234853cd01070b15d0a11d6b0e9b2f21.tar.zst firejail-263e3fe7234853cd01070b15d0a11d6b0e9b2f21.zip |
Profile fixes
- disable-programs.inc: blacklist ${HOME}/.local/state/pipewire
If you did not yet noticed, on 08th May 2021 the XDG Base Directory
Specification 0.8 was resleased (the first update since 2010). New are
$XDG_STATE_HOME and $HOME/.local/bin.
- keepassxc: mkdirs are necessary
- gnote: harden
- pngquant: harden
Diffstat (limited to 'etc/profile-m-z')
-rw-r--r-- | etc/profile-m-z/pngquant.profile | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/etc/profile-m-z/pngquant.profile b/etc/profile-m-z/pngquant.profile index 275496496..0b3d2b44c 100644 --- a/etc/profile-m-z/pngquant.profile +++ b/etc/profile-m-z/pngquant.profile | |||
@@ -38,9 +38,8 @@ nosound | |||
38 | notv | 38 | notv |
39 | nou2f | 39 | nou2f |
40 | novideo | 40 | novideo |
41 | # protocol can be empty, but this is not yet supported see #639 | 41 | # block the socket syscall to simulate an be empty protocol line, see #639 |
42 | protocol inet | 42 | seccomp socket |
43 | seccomp | ||
44 | shell none | 43 | shell none |
45 | tracelog | 44 | tracelog |
46 | x11 none | 45 | x11 none |