diff options
author | 2019-08-01 11:04:49 +0200 | |
---|---|---|
committer | 2019-08-01 11:04:49 +0200 | |
commit | 8410cd8b2c8bd3c5e683ef4ed95e8c7120045867 (patch) | |
tree | 0e56281945bf346f2f463c27746ea4df40e810cd /etc | |
parent | Merge pull request #2883 from flacks/profiles/whalebird (diff) | |
download | firejail-8410cd8b2c8bd3c5e683ef4ed95e8c7120045867.tar.gz firejail-8410cd8b2c8bd3c5e683ef4ed95e8c7120045867.tar.zst firejail-8410cd8b2c8bd3c5e683ef4ed95e8c7120045867.zip |
some profile fixups
- add a private-bin to firefox for fedora (still need testing)
- add a temporary workaround for #2877 ghostwriter sience this break export and preview with pandoc
- remove 'name slack' from slack.profile sience this is the only profile with name
Diffstat (limited to 'etc')
-rw-r--r-- | etc/firefox.profile | 2 | ||||
-rw-r--r-- | etc/ghostwriter.profile | 3 | ||||
-rw-r--r-- | etc/slack.profile | 1 |
3 files changed, 4 insertions, 2 deletions
diff --git a/etc/firefox.profile b/etc/firefox.profile index 84c647cb9..ad275bab6 100644 --- a/etc/firefox.profile +++ b/etc/firefox.profile | |||
@@ -16,6 +16,8 @@ whitelist ${HOME}/.mozilla | |||
16 | 16 | ||
17 | # firefox requires a shell to launch on Arch. | 17 | # firefox requires a shell to launch on Arch. |
18 | #private-bin bash,dbus-launch,dbus-send,env,firefox,sh,which | 18 | #private-bin bash,dbus-launch,dbus-send,env,firefox,sh,which |
19 | # Fedora use shell scripts to launch firefox, at least this is required | ||
20 | #private-bin bash,firefox,basename,uname,false,pidof,cat,rm,rmdir,mkdir,sed,ln,true,dirname,which,awk,env | ||
19 | # private-etc must first be enabled in firefox-common.profile | 21 | # private-etc must first be enabled in firefox-common.profile |
20 | #private-etc firefox | 22 | #private-etc firefox |
21 | 23 | ||
diff --git a/etc/ghostwriter.profile b/etc/ghostwriter.profile index 1fb2d8f58..a068f85c9 100644 --- a/etc/ghostwriter.profile +++ b/etc/ghostwriter.profile | |||
@@ -39,5 +39,6 @@ shell none | |||
39 | #private-bin ghostwriter,pandoc | 39 | #private-bin ghostwriter,pandoc |
40 | private-cache | 40 | private-cache |
41 | private-dev | 41 | private-dev |
42 | private-etc alternatives,ca-certificates,crypto-policies,dbus-1,dconf,fonts,gconf,groups,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,login.defs,machine-id,mime.types,nsswitch.conf,pango,passwd,pki,protocols,resolv.conf,rpc,services,ssl,Trolltech.conf,X11,xdg | 42 | # passwd,login.defs,firejail are a temporary workaround for #2877 and can be removed once it is fixed |
43 | private-etc alternatives,ca-certificates,crypto-policies,dbus-1,dconf,fonts,gconf,groups,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,machine-id,mime.types,nsswitch.conf,pango,pki,protocols,resolv.conf,rpc,services,ssl,Trolltech.conf,X11,xdg,firejail | ||
43 | private-tmp | 44 | private-tmp |
diff --git a/etc/slack.profile b/etc/slack.profile index 5c10ef0ba..f9ad7c190 100644 --- a/etc/slack.profile +++ b/etc/slack.profile | |||
@@ -20,7 +20,6 @@ include whitelist-common.inc | |||
20 | include whitelist-var-common.inc | 20 | include whitelist-var-common.inc |
21 | 21 | ||
22 | caps.drop all | 22 | caps.drop all |
23 | name slack | ||
24 | netfilter | 23 | netfilter |
25 | nodvd | 24 | nodvd |
26 | nogroups | 25 | nogroups |