diff options
author | 2022-01-06 23:11:23 +0000 | |
---|---|---|
committer | 2022-01-06 21:46:37 -0300 | |
commit | 324c73ea4a0c2e39eb45c4150ac21ebeb918923e (patch) | |
tree | 1a102d66f3c61fe7f9ee798e6afd059307ce7313 /etc | |
parent | Merge pull request #4828 from netblue30/chromium_webext (diff) | |
download | firejail-324c73ea4a0c2e39eb45c4150ac21ebeb918923e.tar.gz firejail-324c73ea4a0c2e39eb45c4150ac21ebeb918923e.tar.zst firejail-324c73ea4a0c2e39eb45c4150ac21ebeb918923e.zip |
ordering fixes
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-a-l/chromium-common.profile | 6 | ||||
-rw-r--r-- | etc/profile-a-l/ephemeral.profile | 6 | ||||
-rw-r--r-- | etc/profile-a-l/ferdi.profile | 6 | ||||
-rw-r--r-- | etc/profile-a-l/firefox-common.profile | 6 | ||||
-rw-r--r-- | etc/profile-a-l/franz.profile | 6 | ||||
-rw-r--r-- | etc/profile-m-z/midori.profile | 6 | ||||
-rw-r--r-- | etc/profile-m-z/otter-browser.profile | 6 | ||||
-rw-r--r-- | etc/profile-m-z/rambox.profile | 6 | ||||
-rw-r--r-- | etc/profile-m-z/seamonkey.profile | 6 |
9 files changed, 27 insertions, 27 deletions
diff --git a/etc/profile-a-l/chromium-common.profile b/etc/profile-a-l/chromium-common.profile index 807aeeb07..075cac967 100644 --- a/etc/profile-a-l/chromium-common.profile +++ b/etc/profile-a-l/chromium-common.profile | |||
@@ -9,8 +9,8 @@ include chromium-common.local | |||
9 | # noexec ${HOME} breaks DRM binaries. | 9 | # noexec ${HOME} breaks DRM binaries. |
10 | ?BROWSER_ALLOW_DRM: ignore noexec ${HOME} | 10 | ?BROWSER_ALLOW_DRM: ignore noexec ${HOME} |
11 | 11 | ||
12 | noblacklist ${HOME}/.pki | ||
13 | noblacklist ${HOME}/.local/share/pki | 12 | noblacklist ${HOME}/.local/share/pki |
13 | noblacklist ${HOME}/.pki | ||
14 | noblacklist /usr/lib/chromium/chrome-sandbox | 14 | noblacklist /usr/lib/chromium/chrome-sandbox |
15 | 15 | ||
16 | # Add the next line to your chromium-common.local if you want Google Chrome/Chromium browser | 16 | # Add the next line to your chromium-common.local if you want Google Chrome/Chromium browser |
@@ -24,11 +24,11 @@ include disable-interpreters.inc | |||
24 | include disable-programs.inc | 24 | include disable-programs.inc |
25 | include disable-xdg.inc | 25 | include disable-xdg.inc |
26 | 26 | ||
27 | mkdir ${HOME}/.pki | ||
28 | mkdir ${HOME}/.local/share/pki | 27 | mkdir ${HOME}/.local/share/pki |
28 | mkdir ${HOME}/.pki | ||
29 | whitelist ${DOWNLOADS} | 29 | whitelist ${DOWNLOADS} |
30 | whitelist ${HOME}/.pki | ||
31 | whitelist ${HOME}/.local/share/pki | 30 | whitelist ${HOME}/.local/share/pki |
31 | whitelist ${HOME}/.pki | ||
32 | whitelist /usr/share/mozilla/extensions | 32 | whitelist /usr/share/mozilla/extensions |
33 | whitelist /usr/share/webext | 33 | whitelist /usr/share/webext |
34 | include whitelist-common.inc | 34 | include whitelist-common.inc |
diff --git a/etc/profile-a-l/ephemeral.profile b/etc/profile-a-l/ephemeral.profile index 131d68951..f88c64b23 100644 --- a/etc/profile-a-l/ephemeral.profile +++ b/etc/profile-a-l/ephemeral.profile | |||
@@ -9,8 +9,8 @@ include globals.local | |||
9 | # enforce private-cache | 9 | # enforce private-cache |
10 | #noblacklist ${HOME}/.cache/ephemeral | 10 | #noblacklist ${HOME}/.cache/ephemeral |
11 | 11 | ||
12 | noblacklist ${HOME}/.pki | ||
13 | noblacklist ${HOME}/.local/share/pki | 12 | noblacklist ${HOME}/.local/share/pki |
13 | noblacklist ${HOME}/.pki | ||
14 | 14 | ||
15 | # noexec ${HOME} breaks DRM binaries. | 15 | # noexec ${HOME} breaks DRM binaries. |
16 | ?BROWSER_ALLOW_DRM: ignore noexec ${HOME} | 16 | ?BROWSER_ALLOW_DRM: ignore noexec ${HOME} |
@@ -23,12 +23,12 @@ include disable-programs.inc | |||
23 | 23 | ||
24 | # enforce private-cache | 24 | # enforce private-cache |
25 | #mkdir ${HOME}/.cache/ephemeral | 25 | #mkdir ${HOME}/.cache/ephemeral |
26 | mkdir ${HOME}/.pki | ||
27 | mkdir ${HOME}/.local/share/pki | 26 | mkdir ${HOME}/.local/share/pki |
27 | mkdir ${HOME}/.pki | ||
28 | # enforce private-cache | 28 | # enforce private-cache |
29 | #whitelist ${HOME}/.cache/ephemeral | 29 | #whitelist ${HOME}/.cache/ephemeral |
30 | whitelist ${HOME}/.pki | ||
31 | whitelist ${HOME}/.local/share/pki | 30 | whitelist ${HOME}/.local/share/pki |
31 | whitelist ${HOME}/.pki | ||
32 | whitelist ${DOWNLOADS} | 32 | whitelist ${DOWNLOADS} |
33 | include whitelist-common.inc | 33 | include whitelist-common.inc |
34 | include whitelist-usr-share-common.inc | 34 | include whitelist-usr-share-common.inc |
diff --git a/etc/profile-a-l/ferdi.profile b/etc/profile-a-l/ferdi.profile index a2372ec8a..b6f69ccb9 100644 --- a/etc/profile-a-l/ferdi.profile +++ b/etc/profile-a-l/ferdi.profile | |||
@@ -9,8 +9,8 @@ ignore noexec /tmp | |||
9 | 9 | ||
10 | noblacklist ${HOME}/.cache/Ferdi | 10 | noblacklist ${HOME}/.cache/Ferdi |
11 | noblacklist ${HOME}/.config/Ferdi | 11 | noblacklist ${HOME}/.config/Ferdi |
12 | noblacklist ${HOME}/.pki | ||
13 | noblacklist ${HOME}/.local/share/pki | 12 | noblacklist ${HOME}/.local/share/pki |
13 | noblacklist ${HOME}/.pki | ||
14 | 14 | ||
15 | include disable-common.inc | 15 | include disable-common.inc |
16 | include disable-devel.inc | 16 | include disable-devel.inc |
@@ -20,13 +20,13 @@ include disable-programs.inc | |||
20 | 20 | ||
21 | mkdir ${HOME}/.cache/Ferdi | 21 | mkdir ${HOME}/.cache/Ferdi |
22 | mkdir ${HOME}/.config/Ferdi | 22 | mkdir ${HOME}/.config/Ferdi |
23 | mkdir ${HOME}/.pki | ||
24 | mkdir ${HOME}/.local/share/pki | 23 | mkdir ${HOME}/.local/share/pki |
24 | mkdir ${HOME}/.pki | ||
25 | whitelist ${DOWNLOADS} | 25 | whitelist ${DOWNLOADS} |
26 | whitelist ${HOME}/.cache/Ferdi | 26 | whitelist ${HOME}/.cache/Ferdi |
27 | whitelist ${HOME}/.config/Ferdi | 27 | whitelist ${HOME}/.config/Ferdi |
28 | whitelist ${HOME}/.pki | ||
29 | whitelist ${HOME}/.local/share/pki | 28 | whitelist ${HOME}/.local/share/pki |
29 | whitelist ${HOME}/.pki | ||
30 | include whitelist-common.inc | 30 | include whitelist-common.inc |
31 | 31 | ||
32 | caps.drop all | 32 | caps.drop all |
diff --git a/etc/profile-a-l/firefox-common.profile b/etc/profile-a-l/firefox-common.profile index e7d438b46..2fe12843e 100644 --- a/etc/profile-a-l/firefox-common.profile +++ b/etc/profile-a-l/firefox-common.profile | |||
@@ -12,8 +12,8 @@ include firefox-common.local | |||
12 | # Add the next line to your firefox-common.local to allow access to common programs/addons/plugins. | 12 | # Add the next line to your firefox-common.local to allow access to common programs/addons/plugins. |
13 | #include firefox-common-addons.profile | 13 | #include firefox-common-addons.profile |
14 | 14 | ||
15 | noblacklist ${HOME}/.pki | ||
16 | noblacklist ${HOME}/.local/share/pki | 15 | noblacklist ${HOME}/.local/share/pki |
16 | noblacklist ${HOME}/.pki | ||
17 | 17 | ||
18 | include disable-common.inc | 18 | include disable-common.inc |
19 | include disable-devel.inc | 19 | include disable-devel.inc |
@@ -22,11 +22,11 @@ include disable-interpreters.inc | |||
22 | include disable-proc.inc | 22 | include disable-proc.inc |
23 | include disable-programs.inc | 23 | include disable-programs.inc |
24 | 24 | ||
25 | mkdir ${HOME}/.pki | ||
26 | mkdir ${HOME}/.local/share/pki | 25 | mkdir ${HOME}/.local/share/pki |
26 | mkdir ${HOME}/.pki | ||
27 | whitelist ${DOWNLOADS} | 27 | whitelist ${DOWNLOADS} |
28 | whitelist ${HOME}/.pki | ||
29 | whitelist ${HOME}/.local/share/pki | 28 | whitelist ${HOME}/.local/share/pki |
29 | whitelist ${HOME}/.pki | ||
30 | include whitelist-common.inc | 30 | include whitelist-common.inc |
31 | include whitelist-run-common.inc | 31 | include whitelist-run-common.inc |
32 | include whitelist-runuser-common.inc | 32 | include whitelist-runuser-common.inc |
diff --git a/etc/profile-a-l/franz.profile b/etc/profile-a-l/franz.profile index 9b780a572..b16c90caf 100644 --- a/etc/profile-a-l/franz.profile +++ b/etc/profile-a-l/franz.profile | |||
@@ -9,8 +9,8 @@ ignore noexec /tmp | |||
9 | 9 | ||
10 | noblacklist ${HOME}/.cache/Franz | 10 | noblacklist ${HOME}/.cache/Franz |
11 | noblacklist ${HOME}/.config/Franz | 11 | noblacklist ${HOME}/.config/Franz |
12 | noblacklist ${HOME}/.pki | ||
13 | noblacklist ${HOME}/.local/share/pki | 12 | noblacklist ${HOME}/.local/share/pki |
13 | noblacklist ${HOME}/.pki | ||
14 | 14 | ||
15 | include disable-common.inc | 15 | include disable-common.inc |
16 | include disable-devel.inc | 16 | include disable-devel.inc |
@@ -20,13 +20,13 @@ include disable-programs.inc | |||
20 | 20 | ||
21 | mkdir ${HOME}/.cache/Franz | 21 | mkdir ${HOME}/.cache/Franz |
22 | mkdir ${HOME}/.config/Franz | 22 | mkdir ${HOME}/.config/Franz |
23 | mkdir ${HOME}/.pki | ||
24 | mkdir ${HOME}/.local/share/pki | 23 | mkdir ${HOME}/.local/share/pki |
24 | mkdir ${HOME}/.pki | ||
25 | whitelist ${DOWNLOADS} | 25 | whitelist ${DOWNLOADS} |
26 | whitelist ${HOME}/.cache/Franz | 26 | whitelist ${HOME}/.cache/Franz |
27 | whitelist ${HOME}/.config/Franz | 27 | whitelist ${HOME}/.config/Franz |
28 | whitelist ${HOME}/.pki | ||
29 | whitelist ${HOME}/.local/share/pki | 28 | whitelist ${HOME}/.local/share/pki |
29 | whitelist ${HOME}/.pki | ||
30 | include whitelist-common.inc | 30 | include whitelist-common.inc |
31 | 31 | ||
32 | caps.drop all | 32 | caps.drop all |
diff --git a/etc/profile-m-z/midori.profile b/etc/profile-m-z/midori.profile index 7928d124e..eb037f51b 100644 --- a/etc/profile-m-z/midori.profile +++ b/etc/profile-m-z/midori.profile | |||
@@ -12,10 +12,10 @@ include globals.local | |||
12 | noblacklist ${HOME}/.cache/midori | 12 | noblacklist ${HOME}/.cache/midori |
13 | noblacklist ${HOME}/.config/midori | 13 | noblacklist ${HOME}/.config/midori |
14 | noblacklist ${HOME}/.local/share/midori | 14 | noblacklist ${HOME}/.local/share/midori |
15 | noblacklist ${HOME}/.local/share/pki | ||
15 | # noblacklist ${HOME}/.local/share/webkit | 16 | # noblacklist ${HOME}/.local/share/webkit |
16 | # noblacklist ${HOME}/.local/share/webkitgtk | 17 | # noblacklist ${HOME}/.local/share/webkitgtk |
17 | noblacklist ${HOME}/.pki | 18 | noblacklist ${HOME}/.pki |
18 | noblacklist ${HOME}/.local/share/pki | ||
19 | 19 | ||
20 | noblacklist ${HOME}/.cache/gnome-mplayer | 20 | noblacklist ${HOME}/.cache/gnome-mplayer |
21 | noblacklist ${HOME}/.config/gnome-mplayer | 21 | noblacklist ${HOME}/.config/gnome-mplayer |
@@ -31,10 +31,10 @@ include disable-xdg.inc | |||
31 | mkdir ${HOME}/.cache/midori | 31 | mkdir ${HOME}/.cache/midori |
32 | mkdir ${HOME}/.config/midori | 32 | mkdir ${HOME}/.config/midori |
33 | mkdir ${HOME}/.local/share/midori | 33 | mkdir ${HOME}/.local/share/midori |
34 | mkdir ${HOME}/.local/share/pki | ||
34 | mkdir ${HOME}/.local/share/webkit | 35 | mkdir ${HOME}/.local/share/webkit |
35 | mkdir ${HOME}/.local/share/webkitgtk | 36 | mkdir ${HOME}/.local/share/webkitgtk |
36 | mkdir ${HOME}/.pki | 37 | mkdir ${HOME}/.pki |
37 | mkdir ${HOME}/.local/share/pki | ||
38 | whitelist ${DOWNLOADS} | 38 | whitelist ${DOWNLOADS} |
39 | whitelist ${HOME}/.cache/gnome-mplayer/plugin | 39 | whitelist ${HOME}/.cache/gnome-mplayer/plugin |
40 | whitelist ${HOME}/.cache/midori | 40 | whitelist ${HOME}/.cache/midori |
@@ -42,10 +42,10 @@ whitelist ${HOME}/.config/gnome-mplayer | |||
42 | whitelist ${HOME}/.config/midori | 42 | whitelist ${HOME}/.config/midori |
43 | whitelist ${HOME}/.lastpass | 43 | whitelist ${HOME}/.lastpass |
44 | whitelist ${HOME}/.local/share/midori | 44 | whitelist ${HOME}/.local/share/midori |
45 | whitelist ${HOME}/.local/share/pki | ||
45 | whitelist ${HOME}/.local/share/webkit | 46 | whitelist ${HOME}/.local/share/webkit |
46 | whitelist ${HOME}/.local/share/webkitgtk | 47 | whitelist ${HOME}/.local/share/webkitgtk |
47 | whitelist ${HOME}/.pki | 48 | whitelist ${HOME}/.pki |
48 | whitelist ${HOME}/.local/share/pki | ||
49 | include whitelist-common.inc | 49 | include whitelist-common.inc |
50 | include whitelist-var-common.inc | 50 | include whitelist-var-common.inc |
51 | 51 | ||
diff --git a/etc/profile-m-z/otter-browser.profile b/etc/profile-m-z/otter-browser.profile index 78f92a860..e2687bf6b 100644 --- a/etc/profile-m-z/otter-browser.profile +++ b/etc/profile-m-z/otter-browser.profile | |||
@@ -10,8 +10,8 @@ include globals.local | |||
10 | 10 | ||
11 | noblacklist ${HOME}/.cache/Otter | 11 | noblacklist ${HOME}/.cache/Otter |
12 | noblacklist ${HOME}/.config/otter | 12 | noblacklist ${HOME}/.config/otter |
13 | noblacklist ${HOME}/.pki | ||
14 | noblacklist ${HOME}/.local/share/pki | 13 | noblacklist ${HOME}/.local/share/pki |
14 | noblacklist ${HOME}/.pki | ||
15 | 15 | ||
16 | include disable-common.inc | 16 | include disable-common.inc |
17 | include disable-devel.inc | 17 | include disable-devel.inc |
@@ -22,13 +22,13 @@ include disable-xdg.inc | |||
22 | 22 | ||
23 | mkdir ${HOME}/.cache/Otter | 23 | mkdir ${HOME}/.cache/Otter |
24 | mkdir ${HOME}/.config/otter | 24 | mkdir ${HOME}/.config/otter |
25 | mkdir ${HOME}/.pki | ||
26 | mkdir ${HOME}/.local/share/pki | 25 | mkdir ${HOME}/.local/share/pki |
26 | mkdir ${HOME}/.pki | ||
27 | whitelist ${DOWNLOADS} | 27 | whitelist ${DOWNLOADS} |
28 | whitelist ${HOME}/.cache/Otter | 28 | whitelist ${HOME}/.cache/Otter |
29 | whitelist ${HOME}/.config/otter | 29 | whitelist ${HOME}/.config/otter |
30 | whitelist ${HOME}/.pki | ||
31 | whitelist ${HOME}/.local/share/pki | 30 | whitelist ${HOME}/.local/share/pki |
31 | whitelist ${HOME}/.pki | ||
32 | whitelist /usr/share/otter-browser | 32 | whitelist /usr/share/otter-browser |
33 | include whitelist-common.inc | 33 | include whitelist-common.inc |
34 | include whitelist-runuser-common.inc | 34 | include whitelist-runuser-common.inc |
diff --git a/etc/profile-m-z/rambox.profile b/etc/profile-m-z/rambox.profile index ffa2022ee..a14d7862b 100644 --- a/etc/profile-m-z/rambox.profile +++ b/etc/profile-m-z/rambox.profile | |||
@@ -7,8 +7,8 @@ include rambox.local | |||
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | noblacklist ${HOME}/.config/Rambox | 9 | noblacklist ${HOME}/.config/Rambox |
10 | noblacklist ${HOME}/.pki | ||
11 | noblacklist ${HOME}/.local/share/pki | 10 | noblacklist ${HOME}/.local/share/pki |
11 | noblacklist ${HOME}/.pki | ||
12 | 12 | ||
13 | include disable-common.inc | 13 | include disable-common.inc |
14 | include disable-devel.inc | 14 | include disable-devel.inc |
@@ -16,12 +16,12 @@ include disable-interpreters.inc | |||
16 | include disable-programs.inc | 16 | include disable-programs.inc |
17 | 17 | ||
18 | mkdir ${HOME}/.config/Rambox | 18 | mkdir ${HOME}/.config/Rambox |
19 | mkdir ${HOME}/.pki | ||
20 | mkdir ${HOME}/.local/share/pki | 19 | mkdir ${HOME}/.local/share/pki |
20 | mkdir ${HOME}/.pki | ||
21 | whitelist ${DOWNLOADS} | 21 | whitelist ${DOWNLOADS} |
22 | whitelist ${HOME}/.config/Rambox | 22 | whitelist ${HOME}/.config/Rambox |
23 | whitelist ${HOME}/.pki | ||
24 | whitelist ${HOME}/.local/share/pki | 23 | whitelist ${HOME}/.local/share/pki |
24 | whitelist ${HOME}/.pki | ||
25 | include whitelist-common.inc | 25 | include whitelist-common.inc |
26 | 26 | ||
27 | caps.drop all | 27 | caps.drop all |
diff --git a/etc/profile-m-z/seamonkey.profile b/etc/profile-m-z/seamonkey.profile index 807effbeb..e67e51620 100644 --- a/etc/profile-m-z/seamonkey.profile +++ b/etc/profile-m-z/seamonkey.profile | |||
@@ -8,8 +8,8 @@ include globals.local | |||
8 | 8 | ||
9 | noblacklist ${HOME}/.cache/mozilla | 9 | noblacklist ${HOME}/.cache/mozilla |
10 | noblacklist ${HOME}/.mozilla | 10 | noblacklist ${HOME}/.mozilla |
11 | noblacklist ${HOME}/.pki | ||
12 | noblacklist ${HOME}/.local/share/pki | 11 | noblacklist ${HOME}/.local/share/pki |
12 | noblacklist ${HOME}/.pki | ||
13 | 13 | ||
14 | include disable-common.inc | 14 | include disable-common.inc |
15 | include disable-devel.inc | 15 | include disable-devel.inc |
@@ -18,8 +18,8 @@ include disable-programs.inc | |||
18 | 18 | ||
19 | mkdir ${HOME}/.cache/mozilla | 19 | mkdir ${HOME}/.cache/mozilla |
20 | mkdir ${HOME}/.mozilla | 20 | mkdir ${HOME}/.mozilla |
21 | mkdir ${HOME}/.pki | ||
22 | mkdir ${HOME}/.local/share/pki | 21 | mkdir ${HOME}/.local/share/pki |
22 | mkdir ${HOME}/.pki | ||
23 | whitelist ${DOWNLOADS} | 23 | whitelist ${DOWNLOADS} |
24 | whitelist ${HOME}/.cache/gnome-mplayer/plugin | 24 | whitelist ${HOME}/.cache/gnome-mplayer/plugin |
25 | whitelist ${HOME}/.cache/mozilla | 25 | whitelist ${HOME}/.cache/mozilla |
@@ -28,11 +28,11 @@ whitelist ${HOME}/.config/pipelight-silverlight5.1 | |||
28 | whitelist ${HOME}/.config/pipelight-widevine | 28 | whitelist ${HOME}/.config/pipelight-widevine |
29 | whitelist ${HOME}/.keysnail.js | 29 | whitelist ${HOME}/.keysnail.js |
30 | whitelist ${HOME}/.lastpass | 30 | whitelist ${HOME}/.lastpass |
31 | whitelist ${HOME}/.local/share/pki | ||
31 | whitelist ${HOME}/.mozilla | 32 | whitelist ${HOME}/.mozilla |
32 | whitelist ${HOME}/.pentadactyl | 33 | whitelist ${HOME}/.pentadactyl |
33 | whitelist ${HOME}/.pentadactylrc | 34 | whitelist ${HOME}/.pentadactylrc |
34 | whitelist ${HOME}/.pki | 35 | whitelist ${HOME}/.pki |
35 | whitelist ${HOME}/.local/share/pki | ||
36 | whitelist ${HOME}/.vimperator | 36 | whitelist ${HOME}/.vimperator |
37 | whitelist ${HOME}/.vimperatorrc | 37 | whitelist ${HOME}/.vimperatorrc |
38 | whitelist ${HOME}/.wine-pipelight | 38 | whitelist ${HOME}/.wine-pipelight |