diff options
author | Vincent43 <31109921+Vincent43@users.noreply.github.com> | 2019-02-03 13:18:07 +0100 |
---|---|---|
committer | Vincent43 <31109921+Vincent43@users.noreply.github.com> | 2019-02-03 13:18:07 +0100 |
commit | 63c35052b7e76f40591f709571e19fbcb7cd8f48 (patch) | |
tree | fe5819efcbba2f637f3c75933a1cd829f6869823 /etc/rambox.profile | |
parent | relnotes (diff) | |
download | firejail-63c35052b7e76f40591f709571e19fbcb7cd8f48.tar.gz firejail-63c35052b7e76f40591f709571e19fbcb7cd8f48.tar.zst firejail-63c35052b7e76f40591f709571e19fbcb7cd8f48.zip |
Add '$HOME/.local/share/pki' to blacklist
Since nss 3.42, '$HOME/.local/share/pki' is supported dir for storing certs
https://hg.mozilla.org/projects/nss/rev/da45424cb9a0b4d8e45e5040e2e3b574d994e254
Diffstat (limited to 'etc/rambox.profile')
-rw-r--r-- | etc/rambox.profile | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/rambox.profile b/etc/rambox.profile index 6c65f869b..6f7f37aaf 100644 --- a/etc/rambox.profile +++ b/etc/rambox.profile | |||
@@ -7,6 +7,7 @@ include globals.local | |||
7 | 7 | ||
8 | noblacklist ${HOME}/.config/Rambox | 8 | noblacklist ${HOME}/.config/Rambox |
9 | noblacklist ${HOME}/.pki | 9 | noblacklist ${HOME}/.pki |
10 | noblacklist ${HOME}/.local/share/pki | ||
10 | 11 | ||
11 | include disable-common.inc | 12 | include disable-common.inc |
12 | include disable-devel.inc | 13 | include disable-devel.inc |
@@ -15,9 +16,11 @@ include disable-programs.inc | |||
15 | 16 | ||
16 | mkdir ${HOME}/.config/Rambox | 17 | mkdir ${HOME}/.config/Rambox |
17 | mkdir ${HOME}/.pki | 18 | mkdir ${HOME}/.pki |
19 | mkdir ${HOME}/.local/share/pki | ||
18 | whitelist ${DOWNLOADS} | 20 | whitelist ${DOWNLOADS} |
19 | whitelist ${HOME}/.config/Rambox | 21 | whitelist ${HOME}/.config/Rambox |
20 | whitelist ${HOME}/.pki | 22 | whitelist ${HOME}/.pki |
23 | whitelist ${HOME}/.local/share/pki | ||
21 | include whitelist-common.inc | 24 | include whitelist-common.inc |
22 | 25 | ||
23 | caps.drop all | 26 | caps.drop all |