diff options
| author |  glitsj16 <glitsj16@users.noreply.github.com> | 2021-01-06 19:08:22 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2021-01-06 19:08:22 +0000 |
| commit | aa2c9ade1a37f0a1ad1d107b082d1a895d8dcad3 (patch) | |
| tree | ff5cc971e04c4f03683b8ab32854de7a6945b095 /etc | |
| parent | mount private-lib directories read-only (diff) | |
| download | firejail-aa2c9ade1a37f0a1ad1d107b082d1a895d8dcad3.tar.gz firejail-aa2c9ade1a37f0a1ad1d107b082d1a895d8dcad3.tar.zst firejail-aa2c9ade1a37f0a1ad1d107b082d1a895d8dcad3.zip | |
harden liferea (#3873)
* harden liferea
* dbus fixes
On closer investigation it seems wiser to tighten D-Bus filtering as Liferea implements stuff via plugins that are disabled by default.
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/profile-a-l/liferea.profile | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/etc/profile-a-l/liferea.profile b/etc/profile-a-l/liferea.profile index 7cfd4fc10..a122e9bbc 100644 --- a/etc/profile-a-l/liferea.profile +++ b/etc/profile-a-l/liferea.profile | |||
| @@ -42,7 +42,7 @@ noroot | |||
| 42 | # nosound | 42 | # nosound |
| 43 | notv | 43 | notv |
| 44 | nou2f | 44 | nou2f |
| 45 | # novideo | 45 | novideo |
| 46 | protocol unix,inet,inet6 | 46 | protocol unix,inet,inet6 |
| 47 | seccomp | 47 | seccomp |
| 48 | shell none | 48 | shell none |
| @@ -51,3 +51,12 @@ tracelog | |||
| 51 | disable-mnt | 51 | disable-mnt |
| 52 | private-dev | 52 | private-dev |
| 53 | private-tmp | 53 | private-tmp |
| 54 | |||
| 55 | dbus-user filter | ||
| 56 | dbus-user.own net.sourceforge.liferea | ||
| 57 | dbus-user.talk ca.desrt.dconf | ||
| 58 | # Uncomment the below if you use the 'Popup Notifications' plugin or add 'dbus-user.talk org.freedesktop.Notifications' to your liferea.local | ||
| 59 | #dbus-user.talk org.freedesktop.Notifications | ||
| 60 | # Uncomment the below if you use the 'Libsecret Support' plugin or add 'dbus-user.talk org.freedesktop.secrets' to your liferea.local | ||
| 61 | #dbus-user.talk org.freedesktop.secrets | ||
| 62 | dbus-system none | ||