aboutsummaryrefslogtreecommitdiffstats
path: root/etc/rambox.profile
diff options
context:
space:
mode:
authorLibravatar Vincent43 <31109921+Vincent43@users.noreply.github.com>2019-02-03 13:18:07 +0100
committerLibravatar Vincent43 <31109921+Vincent43@users.noreply.github.com>2019-02-03 13:18:07 +0100
commit63c35052b7e76f40591f709571e19fbcb7cd8f48 (patch)
treefe5819efcbba2f637f3c75933a1cd829f6869823 /etc/rambox.profile
parentrelnotes (diff)
downloadfirejail-63c35052b7e76f40591f709571e19fbcb7cd8f48.tar.gz
firejail-63c35052b7e76f40591f709571e19fbcb7cd8f48.tar.zst
firejail-63c35052b7e76f40591f709571e19fbcb7cd8f48.zip
Add '$HOME/.local/share/pki' to blacklist
Since nss 3.42, '$HOME/.local/share/pki' is supported dir for storing certs https://hg.mozilla.org/projects/nss/rev/da45424cb9a0b4d8e45e5040e2e3b574d994e254
Diffstat (limited to 'etc/rambox.profile')
-rw-r--r--etc/rambox.profile3
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/rambox.profile b/etc/rambox.profile
index 6c65f869b..6f7f37aaf 100644
--- a/etc/rambox.profile
+++ b/etc/rambox.profile
@@ -7,6 +7,7 @@ include globals.local
7 7
8noblacklist ${HOME}/.config/Rambox 8noblacklist ${HOME}/.config/Rambox
9noblacklist ${HOME}/.pki 9noblacklist ${HOME}/.pki
10noblacklist ${HOME}/.local/share/pki
10 11
11include disable-common.inc 12include disable-common.inc
12include disable-devel.inc 13include disable-devel.inc
@@ -15,9 +16,11 @@ include disable-programs.inc
15 16
16mkdir ${HOME}/.config/Rambox 17mkdir ${HOME}/.config/Rambox
17mkdir ${HOME}/.pki 18mkdir ${HOME}/.pki
19mkdir ${HOME}/.local/share/pki
18whitelist ${DOWNLOADS} 20whitelist ${DOWNLOADS}
19whitelist ${HOME}/.config/Rambox 21whitelist ${HOME}/.config/Rambox
20whitelist ${HOME}/.pki 22whitelist ${HOME}/.pki
23whitelist ${HOME}/.local/share/pki
21include whitelist-common.inc 24include whitelist-common.inc
22 25
23caps.drop all 26caps.drop all