diff options
author | 2023-01-11 11:07:38 +0000 | |
---|---|---|
committer | 2023-01-11 11:07:38 +0000 | |
commit | 14d3007f975237149b81c12a1c4a4ed20afb346d (patch) | |
tree | c9cfad59fdecd62b853f18f8b99fc9d260db5986 /etc | |
parent | build(deps): bump actions/checkout from 3.2.0 to 3.3.0 (diff) | |
download | firejail-14d3007f975237149b81c12a1c4a4ed20afb346d.tar.gz firejail-14d3007f975237149b81c12a1c4a4ed20afb346d.tar.zst firejail-14d3007f975237149b81c12a1c4a4ed20afb346d.zip |
QMediathekView: hardening
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-m-z/QMediathekView.profile | 23 |
1 files changed, 22 insertions, 1 deletions
diff --git a/etc/profile-m-z/QMediathekView.profile b/etc/profile-m-z/QMediathekView.profile index 1e9af5769..c73124185 100644 --- a/etc/profile-m-z/QMediathekView.profile +++ b/etc/profile-m-z/QMediathekView.profile | |||
@@ -27,10 +27,29 @@ include disable-programs.inc | |||
27 | include disable-shell.inc | 27 | include disable-shell.inc |
28 | include disable-xdg.inc | 28 | include disable-xdg.inc |
29 | 29 | ||
30 | whitelist ${HOME}/.config/QMediathekView | ||
31 | whitelist ${HOME}/.local/share/QMediathekView | ||
32 | |||
33 | whitelist ${HOME}/.config/mpv | ||
34 | whitelist ${HOME}/.config/smplayer | ||
35 | whitelist ${HOME}/.config/totem | ||
36 | whitelist ${HOME}/.config/vlc | ||
37 | whitelist ${HOME}/.config/xplayer | ||
38 | whitelist ${HOME}/.local/share/totem | ||
39 | whitelist ${HOME}/.local/share/xplayer | ||
40 | whitelist ${HOME}/.mplayer | ||
41 | |||
42 | whitelist ${DOWNLOADS} | ||
43 | whitelist ${VIDEOS} | ||
44 | |||
30 | whitelist /usr/share/qtchooser | 45 | whitelist /usr/share/qtchooser |
46 | include whitelist-common.inc | ||
47 | include whitelist-run-common.inc | ||
48 | include whitelist-runuser-common.inc | ||
31 | include whitelist-usr-share-common.inc | 49 | include whitelist-usr-share-common.inc |
32 | include whitelist-var-common.inc | 50 | include whitelist-var-common.inc |
33 | 51 | ||
52 | apparmor | ||
34 | caps.drop all | 53 | caps.drop all |
35 | netfilter | 54 | netfilter |
36 | # no3d | 55 | # no3d |
@@ -38,11 +57,12 @@ nodvd | |||
38 | nogroups | 57 | nogroups |
39 | noinput | 58 | noinput |
40 | nonewprivs | 59 | nonewprivs |
60 | noprinters | ||
41 | noroot | 61 | noroot |
42 | notv | 62 | notv |
43 | nou2f | 63 | nou2f |
44 | novideo | 64 | novideo |
45 | protocol unix,inet,inet6,netlink | 65 | protocol unix,inet,inet6 |
46 | seccomp | 66 | seccomp |
47 | tracelog | 67 | tracelog |
48 | 68 | ||
@@ -50,6 +70,7 @@ disable-mnt | |||
50 | private-bin mplayer,mpv,QMediathekView,smplayer,totem,vlc,xplayer | 70 | private-bin mplayer,mpv,QMediathekView,smplayer,totem,vlc,xplayer |
51 | private-cache | 71 | private-cache |
52 | private-dev | 72 | private-dev |
73 | private-etc alternatives,asound.conf,ca-certificates,crypto-policies,fonts,group,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,login.defs,nsswitch.conf,passwd,pki,pulse,resolv.conf,ssl | ||
53 | private-tmp | 74 | private-tmp |
54 | 75 | ||
55 | dbus-user none | 76 | dbus-user none |