diff options
author | netblue30 <netblue30@protonmail.com> | 2023-01-28 11:49:28 -0500 |
---|---|---|
committer | netblue30 <netblue30@protonmail.com> | 2023-01-28 11:49:28 -0500 |
commit | 34d004892fe00fd2009263b3682fd7a1f2c8edad (patch) | |
tree | 3eb5076a2e9bc6045436a3c84f0b54ec413d8970 /etc | |
parent | Update SECURITY.md (diff) | |
download | firejail-34d004892fe00fd2009263b3682fd7a1f2c8edad.tar.gz firejail-34d004892fe00fd2009263b3682fd7a1f2c8edad.tar.zst firejail-34d004892fe00fd2009263b3682fd7a1f2c8edad.zip |
private-etc: corss-distro test for curl, gimp, inkscape, firefox, warzone2100
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-a-l/curl.profile | 1 | ||||
-rw-r--r-- | etc/profile-a-l/firefox-common.profile | 1 | ||||
-rw-r--r-- | etc/profile-a-l/gimp.profile | 1 | ||||
-rw-r--r-- | etc/profile-a-l/inkscape.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/warzone2100.profile | 1 |
5 files changed, 5 insertions, 0 deletions
diff --git a/etc/profile-a-l/curl.profile b/etc/profile-a-l/curl.profile index 3e5878574..88b29cfbd 100644 --- a/etc/profile-a-l/curl.profile +++ b/etc/profile-a-l/curl.profile | |||
@@ -54,6 +54,7 @@ tracelog | |||
54 | private-cache | 54 | private-cache |
55 | private-dev | 55 | private-dev |
56 | # private-etc alternatives,ca-certificates,crypto-policies,pki,resolv.conf,ssl | 56 | # private-etc alternatives,ca-certificates,crypto-policies,pki,resolv.conf,ssl |
57 | private-etc TLS-CA | ||
57 | private-tmp | 58 | private-tmp |
58 | 59 | ||
59 | dbus-user none | 60 | dbus-user none |
diff --git a/etc/profile-a-l/firefox-common.profile b/etc/profile-a-l/firefox-common.profile index 60d64736e..c1a8c9e28 100644 --- a/etc/profile-a-l/firefox-common.profile +++ b/etc/profile-a-l/firefox-common.profile | |||
@@ -60,6 +60,7 @@ disable-mnt | |||
60 | # private-etc below works fine on most distributions. There are some problems on CentOS. | 60 | # private-etc below works fine on most distributions. There are some problems on CentOS. |
61 | # Add it to your firefox-common.local if you want to enable it. | 61 | # Add it to your firefox-common.local if you want to enable it. |
62 | #private-etc alternatives,asound.conf,ca-certificates,crypto-policies,dconf,fonts,group,gtk-2.0,gtk-3.0,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,machine-id,mailcap,mime.types,nsswitch.conf,pango,passwd,pki,pulse,resolv.conf,selinux,ssl,X11,xdg | 62 | #private-etc alternatives,asound.conf,ca-certificates,crypto-policies,dconf,fonts,group,gtk-2.0,gtk-3.0,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,localtime,machine-id,mailcap,mime.types,nsswitch.conf,pango,passwd,pki,pulse,resolv.conf,selinux,ssl,X11,xdg |
63 | private-etc GUI,NETWORK,TLS-CA,os-release,mime.types,mailcap | ||
63 | private-tmp | 64 | private-tmp |
64 | 65 | ||
65 | blacklist ${PATH}/curl | 66 | blacklist ${PATH}/curl |
diff --git a/etc/profile-a-l/gimp.profile b/etc/profile-a-l/gimp.profile index 083b85a91..9635bb6e3 100644 --- a/etc/profile-a-l/gimp.profile +++ b/etc/profile-a-l/gimp.profile | |||
@@ -59,6 +59,7 @@ seccomp !mbind | |||
59 | tracelog | 59 | tracelog |
60 | 60 | ||
61 | private-dev | 61 | private-dev |
62 | private-etc GUI,gcrypt,python* | ||
62 | private-tmp | 63 | private-tmp |
63 | 64 | ||
64 | dbus-user none | 65 | dbus-user none |
diff --git a/etc/profile-a-l/inkscape.profile b/etc/profile-a-l/inkscape.profile index 1034c225f..c32536929 100644 --- a/etc/profile-a-l/inkscape.profile +++ b/etc/profile-a-l/inkscape.profile | |||
@@ -54,6 +54,7 @@ tracelog | |||
54 | # private-bin inkscape,potrace,python* - problems on Debian stretch | 54 | # private-bin inkscape,potrace,python* - problems on Debian stretch |
55 | private-cache | 55 | private-cache |
56 | private-dev | 56 | private-dev |
57 | private-etc inkscape: GUI,ImageMagick*,python* | ||
57 | private-tmp | 58 | private-tmp |
58 | 59 | ||
59 | dbus-user none | 60 | dbus-user none |
diff --git a/etc/profile-m-z/warzone2100.profile b/etc/profile-m-z/warzone2100.profile index 50c776412..d5a853fcd 100644 --- a/etc/profile-m-z/warzone2100.profile +++ b/etc/profile-m-z/warzone2100.profile | |||
@@ -46,6 +46,7 @@ tracelog | |||
46 | disable-mnt | 46 | disable-mnt |
47 | private-bin bash,dash,sh,warzone2100,which | 47 | private-bin bash,dash,sh,warzone2100,which |
48 | private-dev | 48 | private-dev |
49 | private-etc GUI,GAMES | ||
49 | private-tmp | 50 | private-tmp |
50 | 51 | ||
51 | restrict-namespaces | 52 | restrict-namespaces |