diff options
author | glitsj16 <glitsj16@users.noreply.github.com> | 2020-01-25 22:18:04 +0000 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-01-25 22:18:04 +0000 |
commit | ebe7dca1c0d0422ac38f4689ae13a2f8af847b20 (patch) | |
tree | 9767f67f657825953c38bdd69d19de29afbe1ed8 /etc | |
parent | blacklist gjs in disable-interpreters (#3186) (diff) | |
download | firejail-ebe7dca1c0d0422ac38f4689ae13a2f8af847b20.tar.gz firejail-ebe7dca1c0d0422ac38f4689ae13a2f8af847b20.tar.zst firejail-ebe7dca1c0d0422ac38f4689ae13a2f8af847b20.zip |
allow-*.local customizations (#3187)
* local customizations for allow-common-devel.inc
* local customizations for allow-java.inc
* local customizations for allow-lua.inc
* local customizations for allow-perl.inc
* local customizations for allow-python2.inc
* local customizations for allow-python3.inc
* local customizations for allow-ruby.inc
Diffstat (limited to 'etc')
-rw-r--r-- | etc/allow-common-devel.inc | 16 | ||||
-rw-r--r-- | etc/allow-java.inc | 7 | ||||
-rw-r--r-- | etc/allow-lua.inc | 4 | ||||
-rw-r--r-- | etc/allow-perl.inc | 6 | ||||
-rw-r--r-- | etc/allow-python2.inc | 4 | ||||
-rw-r--r-- | etc/allow-python3.inc | 4 | ||||
-rw-r--r-- | etc/allow-ruby.inc | 4 |
7 files changed, 36 insertions, 9 deletions
diff --git a/etc/allow-common-devel.inc b/etc/allow-common-devel.inc index 1d794462c..63174eda6 100644 --- a/etc/allow-common-devel.inc +++ b/etc/allow-common-devel.inc | |||
@@ -1,17 +1,21 @@ | |||
1 | # Rust | 1 | # This file is overwritten during software install. |
2 | noblacklist ${HOME}/.cargo/config | 2 | # Persistent customizations should go in a .local file. |
3 | noblacklist ${HOME}/.cargo/registry | 3 | include allow-common-devel.local |
4 | 4 | ||
5 | # Git | 5 | # Git |
6 | noblacklist ${HOME}/.config/git | 6 | noblacklist ${HOME}/.config/git |
7 | noblacklist ${HOME}/.gitconfig | 7 | noblacklist ${HOME}/.gitconfig |
8 | noblacklist ${HOME}/.git-credentials | 8 | noblacklist ${HOME}/.git-credentials |
9 | 9 | ||
10 | # Java | ||
11 | noblacklist ${HOME}/.gradle | ||
12 | noblacklist ${HOME}/.java | ||
13 | |||
10 | # Python | 14 | # Python |
11 | noblacklist ${HOME}/.python-history | 15 | noblacklist ${HOME}/.python-history |
12 | noblacklist ${HOME}/.python_history | 16 | noblacklist ${HOME}/.python_history |
13 | noblacklist ${HOME}/.pythonhist | 17 | noblacklist ${HOME}/.pythonhist |
14 | 18 | ||
15 | # Java | 19 | # Rust |
16 | noblacklist ${HOME}/.gradle | 20 | noblacklist ${HOME}/.cargo/config |
17 | noblacklist ${HOME}/.java | 21 | noblacklist ${HOME}/.cargo/registry |
diff --git a/etc/allow-java.inc b/etc/allow-java.inc index 5204d2dea..24d18fb77 100644 --- a/etc/allow-java.inc +++ b/etc/allow-java.inc | |||
@@ -1,6 +1,9 @@ | |||
1 | noblacklist ${HOME}/.java | 1 | # This file is overwritten during software install. |
2 | # Persistent customizations should go in a .local file. | ||
3 | include allow-java.local | ||
2 | 4 | ||
5 | noblacklist ${HOME}/.java | ||
3 | noblacklist ${PATH}/java | 6 | noblacklist ${PATH}/java |
4 | noblacklist /usr/lib/java | ||
5 | noblacklist /etc/java | 7 | noblacklist /etc/java |
8 | noblacklist /usr/lib/java | ||
6 | noblacklist /usr/share/java | 9 | noblacklist /usr/share/java |
diff --git a/etc/allow-lua.inc b/etc/allow-lua.inc index 51d76f9b1..fbdee22ee 100644 --- a/etc/allow-lua.inc +++ b/etc/allow-lua.inc | |||
@@ -1,3 +1,7 @@ | |||
1 | # This file is overwritten during software install. | ||
2 | # Persistent customizations should go in a .local file. | ||
3 | include allow-lua.local | ||
4 | |||
1 | noblacklist ${PATH}/lua* | 5 | noblacklist ${PATH}/lua* |
2 | noblacklist /usr/include/lua* | 6 | noblacklist /usr/include/lua* |
3 | noblacklist /usr/lib/lua | 7 | noblacklist /usr/lib/lua |
diff --git a/etc/allow-perl.inc b/etc/allow-perl.inc index d37328936..f44e1e3cc 100644 --- a/etc/allow-perl.inc +++ b/etc/allow-perl.inc | |||
@@ -1,5 +1,9 @@ | |||
1 | noblacklist ${PATH}/cpan* | 1 | # This file is overwritten during software install. |
2 | # Persistent customizations should go in a .local file. | ||
3 | include allow-perl.local | ||
4 | |||
2 | noblacklist ${PATH}/core_perl | 5 | noblacklist ${PATH}/core_perl |
6 | noblacklist ${PATH}/cpan* | ||
3 | noblacklist ${PATH}/perl | 7 | noblacklist ${PATH}/perl |
4 | noblacklist ${PATH}/site_perl | 8 | noblacklist ${PATH}/site_perl |
5 | noblacklist ${PATH}/vendor_perl | 9 | noblacklist ${PATH}/vendor_perl |
diff --git a/etc/allow-python2.inc b/etc/allow-python2.inc index 8ea61648b..b0525e2e1 100644 --- a/etc/allow-python2.inc +++ b/etc/allow-python2.inc | |||
@@ -1,3 +1,7 @@ | |||
1 | # This file is overwritten during software install. | ||
2 | # Persistent customizations should go in a .local file. | ||
3 | include allow-python2.local | ||
4 | |||
1 | noblacklist ${PATH}/python2* | 5 | noblacklist ${PATH}/python2* |
2 | noblacklist /usr/include/python2* | 6 | noblacklist /usr/include/python2* |
3 | noblacklist /usr/lib/python2* | 7 | noblacklist /usr/lib/python2* |
diff --git a/etc/allow-python3.inc b/etc/allow-python3.inc index 4f7c76d0a..d968886b0 100644 --- a/etc/allow-python3.inc +++ b/etc/allow-python3.inc | |||
@@ -1,3 +1,7 @@ | |||
1 | # This file is overwritten during software install. | ||
2 | # Persistent customizations should go in a .local file. | ||
3 | include allow-python3.local | ||
4 | |||
1 | noblacklist ${PATH}/python3* | 5 | noblacklist ${PATH}/python3* |
2 | noblacklist /usr/include/python3* | 6 | noblacklist /usr/include/python3* |
3 | noblacklist /usr/lib/python3* | 7 | noblacklist /usr/lib/python3* |
diff --git a/etc/allow-ruby.inc b/etc/allow-ruby.inc index 3165a981a..a8c701219 100644 --- a/etc/allow-ruby.inc +++ b/etc/allow-ruby.inc | |||
@@ -1,2 +1,6 @@ | |||
1 | # This file is overwritten during software install. | ||
2 | # Persistent customizations should go in a .local file. | ||
3 | include allow-ruby.local | ||
4 | |||
1 | noblacklist ${PATH}/ruby | 5 | noblacklist ${PATH}/ruby |
2 | noblacklist /usr/lib/ruby | 6 | noblacklist /usr/lib/ruby |