diff options
author | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-01-18 18:26:27 +0100 |
---|---|---|
committer | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-01-18 18:26:27 +0100 |
commit | 0f65e7fa6ace3757624b08a553515ddf9f7c5269 (patch) | |
tree | 6399477d0c8d086c8b6f027a0b974ab548528bb1 /etc | |
parent | Add new allow include allow-bin-sh.inc (diff) | |
download | firejail-0f65e7fa6ace3757624b08a553515ddf9f7c5269.tar.gz firejail-0f65e7fa6ace3757624b08a553515ddf9f7c5269.tar.zst firejail-0f65e7fa6ace3757624b08a553515ddf9f7c5269.zip |
harden and fix cheese.profile
hardening: wusc + wruc
fix: settings was immutable
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-a-l/cheese.profile | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/etc/profile-a-l/cheese.profile b/etc/profile-a-l/cheese.profile index 337117c4a..aca1f5876 100644 --- a/etc/profile-a-l/cheese.profile +++ b/etc/profile-a-l/cheese.profile | |||
@@ -19,7 +19,10 @@ include disable-xdg.inc | |||
19 | 19 | ||
20 | whitelist ${VIDEOS} | 20 | whitelist ${VIDEOS} |
21 | whitelist ${PICTURES} | 21 | whitelist ${PICTURES} |
22 | whitelist /usr/share/gnome-video-effects | ||
22 | include whitelist-common.inc | 23 | include whitelist-common.inc |
24 | include whitelist-runuser-common.inc | ||
25 | include whitelist-usr-share-common.inc | ||
23 | include whitelist-var-common.inc | 26 | include whitelist-var-common.inc |
24 | 27 | ||
25 | apparmor | 28 | apparmor |
@@ -43,5 +46,6 @@ private-cache | |||
43 | private-etc alternatives,clutter-1.0,dconf,drirc,fonts,gtk-3.0 | 46 | private-etc alternatives,clutter-1.0,dconf,drirc,fonts,gtk-3.0 |
44 | private-tmp | 47 | private-tmp |
45 | 48 | ||
46 | dbus-user none | 49 | dbus-user filter |
50 | dbus-user.talk ca.desrt.dconf | ||
47 | dbus-system none | 51 | dbus-system none |