diff options
author | 2021-07-28 14:12:41 -0500 | |
---|---|---|
committer | 2021-07-28 14:12:41 -0500 | |
commit | 2e4d52ec60a677586decc62b0d1bc26757a2856a (patch) | |
tree | d4e5a82023667b31326fdc510e77490ccfd271d7 /etc | |
parent | Merge pull request #4412 from netblue30/Neo00001-patch-1 (diff) | |
download | firejail-2e4d52ec60a677586decc62b0d1bc26757a2856a.tar.gz firejail-2e4d52ec60a677586decc62b0d1bc26757a2856a.tar.zst firejail-2e4d52ec60a677586decc62b0d1bc26757a2856a.zip |
Revert allow/deny additional files
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-a-l/lifeograph.profile | 8 | ||||
-rw-r--r-- | etc/profile-m-z/io.github.lainsce.Notejot.profile | 10 | ||||
-rw-r--r-- | etc/profile-m-z/rednotebook.profile | 26 | ||||
-rw-r--r-- | etc/profile-m-z/zim.profile | 32 |
4 files changed, 38 insertions, 38 deletions
diff --git a/etc/profile-a-l/lifeograph.profile b/etc/profile-a-l/lifeograph.profile index b9ed0de8e..84bef0a08 100644 --- a/etc/profile-a-l/lifeograph.profile +++ b/etc/profile-a-l/lifeograph.profile | |||
@@ -6,9 +6,9 @@ include lifeograph.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | nodeny ${DOCUMENTS} | 9 | noblacklist ${DOCUMENTS} |
10 | 10 | ||
11 | deny /usr/libexec | 11 | blacklist /usr/libexec |
12 | 12 | ||
13 | include disable-common.inc | 13 | include disable-common.inc |
14 | include disable-devel.inc | 14 | include disable-devel.inc |
@@ -19,8 +19,8 @@ include disable-programs.inc | |||
19 | include disable-shell.inc | 19 | include disable-shell.inc |
20 | include disable-xdg.inc | 20 | include disable-xdg.inc |
21 | 21 | ||
22 | allow ${DOCUMENTS} | 22 | whitelist ${DOCUMENTS} |
23 | allow /usr/share/lifeograph | 23 | whitelist /usr/share/lifeograph |
24 | include whitelist-common.inc | 24 | include whitelist-common.inc |
25 | include whitelist-runuser-common.inc | 25 | include whitelist-runuser-common.inc |
26 | include whitelist-usr-share-common.inc | 26 | include whitelist-usr-share-common.inc |
diff --git a/etc/profile-m-z/io.github.lainsce.Notejot.profile b/etc/profile-m-z/io.github.lainsce.Notejot.profile index a8029db72..afd5d44a4 100644 --- a/etc/profile-m-z/io.github.lainsce.Notejot.profile +++ b/etc/profile-m-z/io.github.lainsce.Notejot.profile | |||
@@ -6,8 +6,8 @@ include io.github.lainsce.Notejot.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | nodeny ${HOME}/.cache/io.github.lainsce.Notejot | 9 | noblacklist ${HOME}/.cache/io.github.lainsce.Notejot |
10 | nodeny ${HOME}/.local/share/io.github.lainsce.Notejot | 10 | noblacklist ${HOME}/.local/share/io.github.lainsce.Notejot |
11 | 11 | ||
12 | include disable-common.inc | 12 | include disable-common.inc |
13 | include disable-devel.inc | 13 | include disable-devel.inc |
@@ -20,9 +20,9 @@ include disable-xdg.inc | |||
20 | 20 | ||
21 | mkdir ${HOME}/.cache/io.github.lainsce.Notejot | 21 | mkdir ${HOME}/.cache/io.github.lainsce.Notejot |
22 | mkdir ${HOME}/.local/share/io.github.lainsce.Notejot | 22 | mkdir ${HOME}/.local/share/io.github.lainsce.Notejot |
23 | allow ${HOME}/.cache/io.github.lainsce.Notejot | 23 | whitelist ${HOME}/.cache/io.github.lainsce.Notejot |
24 | allow ${HOME}/.local/share/io.github.lainsce.Notejot | 24 | whitelist ${HOME}/.local/share/io.github.lainsce.Notejot |
25 | allow /usr/libexec/webkit2gtk-4.0 | 25 | whitelist /usr/libexec/webkit2gtk-4.0 |
26 | include whitelist-common.inc | 26 | include whitelist-common.inc |
27 | include whitelist-runuser-common.inc | 27 | include whitelist-runuser-common.inc |
28 | include whitelist-usr-share-common.inc | 28 | include whitelist-usr-share-common.inc |
diff --git a/etc/profile-m-z/rednotebook.profile b/etc/profile-m-z/rednotebook.profile index 67281c518..7ccd60951 100644 --- a/etc/profile-m-z/rednotebook.profile +++ b/etc/profile-m-z/rednotebook.profile | |||
@@ -6,11 +6,11 @@ include rednotebook.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | nodeny ${HOME}/.cache/rednotebook | 9 | noblacklist ${HOME}/.cache/rednotebook |
10 | nodeny ${HOME}/.rednotebook | 10 | noblacklist ${HOME}/.rednotebook |
11 | 11 | ||
12 | # Allow python (blacklisted by disable-interpreters.inc) | 12 | # whitelist python (blacklisted by disable-interpreters.inc) |
13 | include allow-python3.inc | 13 | include whitelist-python3.inc |
14 | 14 | ||
15 | include disable-common.inc | 15 | include disable-common.inc |
16 | include disable-devel.inc | 16 | include disable-devel.inc |
@@ -22,15 +22,15 @@ include disable-shell.inc | |||
22 | 22 | ||
23 | mkdir ${HOME}/.cache/rednotebook | 23 | mkdir ${HOME}/.cache/rednotebook |
24 | mkdir ${HOME}/.rednotebook | 24 | mkdir ${HOME}/.rednotebook |
25 | allow ${HOME}/.cache/rednotebook | 25 | whitelist ${HOME}/.cache/rednotebook |
26 | allow ${HOME}/.rednotebook | 26 | whitelist ${HOME}/.rednotebook |
27 | allow ${DESKTOP} | 27 | whitelist ${DESKTOP} |
28 | allow ${DOCUMENTS} | 28 | whitelist ${DOCUMENTS} |
29 | allow ${DOWNLOADS} | 29 | whitelist ${DOWNLOADS} |
30 | allow ${MUSIC} | 30 | whitelist ${MUSIC} |
31 | allow ${PICTURES} | 31 | whitelist ${PICTURES} |
32 | allow ${VIDEOS} | 32 | whitelist ${VIDEOS} |
33 | allow /usr/libexec/webkit2gtk-4.0 | 33 | whitelist /usr/libexec/webkit2gtk-4.0 |
34 | include whitelist-common.inc | 34 | include whitelist-common.inc |
35 | include whitelist-runuser-common.inc | 35 | include whitelist-runuser-common.inc |
36 | include whitelist-usr-share-common.inc | 36 | include whitelist-usr-share-common.inc |
diff --git a/etc/profile-m-z/zim.profile b/etc/profile-m-z/zim.profile index 5ae9cddb3..05975779c 100644 --- a/etc/profile-m-z/zim.profile +++ b/etc/profile-m-z/zim.profile | |||
@@ -6,14 +6,14 @@ include zim.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | nodeny ${HOME}/.cache/zim | 9 | noblacklist ${HOME}/.cache/zim |
10 | nodeny ${HOME}/.config/zim | 10 | noblacklist ${HOME}/.config/zim |
11 | 11 | ||
12 | # Allow python (blacklisted by disable-interpreters.inc) | 12 | # whitelist python (blacklisted by disable-interpreters.inc) |
13 | include allow-python2.inc | 13 | include whitelist-python2.inc |
14 | include allow-python3.inc | 14 | include whitelist-python3.inc |
15 | 15 | ||
16 | deny /usr/libexec | 16 | blacklist /usr/libexec |
17 | 17 | ||
18 | include disable-common.inc | 18 | include disable-common.inc |
19 | include disable-devel.inc | 19 | include disable-devel.inc |
@@ -26,16 +26,16 @@ include disable-shell.inc | |||
26 | mkdir ${HOME}/.cache/zim | 26 | mkdir ${HOME}/.cache/zim |
27 | mkdir ${HOME}/.config/zim | 27 | mkdir ${HOME}/.config/zim |
28 | mkdir ${HOME}/Notebooks | 28 | mkdir ${HOME}/Notebooks |
29 | allow ${HOME}/.cache/zim | 29 | whitelist ${HOME}/.cache/zim |
30 | allow ${HOME}/.config/zim | 30 | whitelist ${HOME}/.config/zim |
31 | allow ${HOME}/Notebooks | 31 | whitelist ${HOME}/Notebooks |
32 | allow ${DESKTOP} | 32 | whitelist ${DESKTOP} |
33 | allow ${DOCUMENTS} | 33 | whitelist ${DOCUMENTS} |
34 | allow ${DOWNLOADS} | 34 | whitelist ${DOWNLOADS} |
35 | allow ${MUSIC} | 35 | whitelist ${MUSIC} |
36 | allow ${PICTURES} | 36 | whitelist ${PICTURES} |
37 | allow ${VIDEOS} | 37 | whitelist ${VIDEOS} |
38 | allow /usr/share/zim | 38 | whitelist /usr/share/zim |
39 | include whitelist-common.inc | 39 | include whitelist-common.inc |
40 | include whitelist-runuser-common.inc | 40 | include whitelist-runuser-common.inc |
41 | include whitelist-usr-share-common.inc | 41 | include whitelist-usr-share-common.inc |