diff options
author | 2021-01-28 20:07:45 +0000 | |
---|---|---|
committer | 2021-01-28 20:07:45 +0000 | |
commit | 7c1dae04c896e4afe3bf279b84d6c7f1e56c96bd (patch) | |
tree | 64ae51a4bc05a8e0ced5a3a958d3c911848014c9 /etc/profile-m-z | |
parent | add extensive comment on sandboxing google-earth-pro (#3923) (diff) | |
parent | Profile ordering/sorting as in profile.template (diff) | |
download | firejail-7c1dae04c896e4afe3bf279b84d6c7f1e56c96bd.tar.gz firejail-7c1dae04c896e4afe3bf279b84d6c7f1e56c96bd.tar.zst firejail-7c1dae04c896e4afe3bf279b84d6c7f1e56c96bd.zip |
Merge pull request #3897 from nidamanx/patch-1
Update telegram.profile
Diffstat (limited to 'etc/profile-m-z')
-rw-r--r-- | etc/profile-m-z/telegram.profile | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/etc/profile-m-z/telegram.profile b/etc/profile-m-z/telegram.profile index 0e7413fc9..50983dfec 100644 --- a/etc/profile-m-z/telegram.profile +++ b/etc/profile-m-z/telegram.profile | |||
@@ -12,8 +12,22 @@ include disable-common.inc | |||
12 | include disable-devel.inc | 12 | include disable-devel.inc |
13 | include disable-exec.inc | 13 | include disable-exec.inc |
14 | include disable-interpreters.inc | 14 | include disable-interpreters.inc |
15 | include disable-passwdmgr.inc | ||
15 | include disable-programs.inc | 16 | include disable-programs.inc |
17 | include disable-shell.inc | ||
18 | include disable-xdg.inc | ||
16 | 19 | ||
20 | mkdir ${HOME}/.TelegramDesktop | ||
21 | mkdir ${HOME}/.local/share/TelegramDesktop | ||
22 | whitelist ${HOME}/.TelegramDesktop | ||
23 | whitelist ${HOME}/.local/share/TelegramDesktop | ||
24 | whitelist ${DOWNLOADS} | ||
25 | include whitelist-common.inc | ||
26 | include whitelist-runuser-common.inc | ||
27 | include whitelist-usr-share-common.inc | ||
28 | include whitelist-var-common.inc | ||
29 | |||
30 | apparmor | ||
17 | caps.drop all | 31 | caps.drop all |
18 | netfilter | 32 | netfilter |
19 | nodvd | 33 | nodvd |
@@ -22,8 +36,10 @@ noroot | |||
22 | notv | 36 | notv |
23 | protocol unix,inet,inet6,netlink | 37 | protocol unix,inet,inet6,netlink |
24 | seccomp | 38 | seccomp |
39 | shell none | ||
25 | 40 | ||
26 | disable-mnt | 41 | disable-mnt |
27 | private-cache | 42 | private-cache |
43 | private-dev | ||
28 | private-etc alsa,alternatives,ca-certificates,crypto-policies,fonts,group,ld.so.cache,localtime,machine-id,os-release,pki,pulse,resolv.conf,ssl,xdg | 44 | private-etc alsa,alternatives,ca-certificates,crypto-policies,fonts,group,ld.so.cache,localtime,machine-id,os-release,pki,pulse,resolv.conf,ssl,xdg |
29 | private-tmp | 45 | private-tmp |