diff options
author | 2021-01-06 19:08:22 +0000 | |
---|---|---|
committer | 2021-01-06 19:08:22 +0000 | |
commit | aa2c9ade1a37f0a1ad1d107b082d1a895d8dcad3 (patch) | |
tree | ff5cc971e04c4f03683b8ab32854de7a6945b095 /etc | |
parent | mount private-lib directories read-only (diff) | |
download | firejail-aa2c9ade1a37f0a1ad1d107b082d1a895d8dcad3.tar.gz firejail-aa2c9ade1a37f0a1ad1d107b082d1a895d8dcad3.tar.zst firejail-aa2c9ade1a37f0a1ad1d107b082d1a895d8dcad3.zip |
harden liferea (#3873)
* harden liferea
* dbus fixes
On closer investigation it seems wiser to tighten D-Bus filtering as Liferea implements stuff via plugins that are disabled by default.
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-a-l/liferea.profile | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/etc/profile-a-l/liferea.profile b/etc/profile-a-l/liferea.profile index 7cfd4fc10..a122e9bbc 100644 --- a/etc/profile-a-l/liferea.profile +++ b/etc/profile-a-l/liferea.profile | |||
@@ -42,7 +42,7 @@ noroot | |||
42 | # nosound | 42 | # nosound |
43 | notv | 43 | notv |
44 | nou2f | 44 | nou2f |
45 | # novideo | 45 | novideo |
46 | protocol unix,inet,inet6 | 46 | protocol unix,inet,inet6 |
47 | seccomp | 47 | seccomp |
48 | shell none | 48 | shell none |
@@ -51,3 +51,12 @@ tracelog | |||
51 | disable-mnt | 51 | disable-mnt |
52 | private-dev | 52 | private-dev |
53 | private-tmp | 53 | private-tmp |
54 | |||
55 | dbus-user filter | ||
56 | dbus-user.own net.sourceforge.liferea | ||
57 | dbus-user.talk ca.desrt.dconf | ||
58 | # Uncomment the below if you use the 'Popup Notifications' plugin or add 'dbus-user.talk org.freedesktop.Notifications' to your liferea.local | ||
59 | #dbus-user.talk org.freedesktop.Notifications | ||
60 | # Uncomment the below if you use the 'Libsecret Support' plugin or add 'dbus-user.talk org.freedesktop.secrets' to your liferea.local | ||
61 | #dbus-user.talk org.freedesktop.secrets | ||
62 | dbus-system none | ||