diff options
author | 2020-12-15 19:05:26 +0000 | |
---|---|---|
committer | 2020-12-15 19:05:26 +0000 | |
commit | 3e28894e1a381cb7d3bf943189a8827c223bcb42 (patch) | |
tree | 67a78566eaf1a2de3304e2c38886beb5c636c23e /etc | |
parent | rename softmaker-common.inc to softmaker-common.profile (#3825) (diff) | |
download | firejail-3e28894e1a381cb7d3bf943189a8827c223bcb42.tar.gz firejail-3e28894e1a381cb7d3bf943189a8827c223bcb42.tar.zst firejail-3e28894e1a381cb7d3bf943189a8827c223bcb42.zip |
Runuser fixes (#3826)
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
* drop non-sensical ${RUNUSER}/wayland-* blacklisting
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-a-l/curl.profile | 1 | ||||
-rw-r--r-- | etc/profile-a-l/dig.profile | 1 | ||||
-rw-r--r-- | etc/profile-a-l/drill.profile | 1 | ||||
-rw-r--r-- | etc/profile-a-l/file.profile | 1 | ||||
-rw-r--r-- | etc/profile-a-l/gtk2-youtube-viewer.profile | 1 | ||||
-rw-r--r-- | etc/profile-a-l/gtk3-youtube-viewer.profile | 1 | ||||
-rw-r--r-- | etc/profile-a-l/highlight.profile | 1 | ||||
-rw-r--r-- | etc/profile-a-l/less.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/nslookup.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/pandoc.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/patch.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/pdftotext.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/ping.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/qrencode.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/rsync-download_only.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/shellcheck.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/strings.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/wget.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/whois.profile | 1 | ||||
-rw-r--r-- | etc/profile-m-z/youtube-dl.profile | 1 |
20 files changed, 0 insertions, 20 deletions
diff --git a/etc/profile-a-l/curl.profile b/etc/profile-a-l/curl.profile index 5a5a7496a..f8b194044 100644 --- a/etc/profile-a-l/curl.profile +++ b/etc/profile-a-l/curl.profile | |||
@@ -16,7 +16,6 @@ noblacklist ${HOME}/.curl-hsts | |||
16 | noblacklist ${HOME}/.curlrc | 16 | noblacklist ${HOME}/.curlrc |
17 | 17 | ||
18 | blacklist /tmp/.X11-unix | 18 | blacklist /tmp/.X11-unix |
19 | blacklist ${RUNUSER}/wayland-* | ||
20 | blacklist ${RUNUSER} | 19 | blacklist ${RUNUSER} |
21 | 20 | ||
22 | include disable-common.inc | 21 | include disable-common.inc |
diff --git a/etc/profile-a-l/dig.profile b/etc/profile-a-l/dig.profile index 152dfd980..80d97a31f 100644 --- a/etc/profile-a-l/dig.profile +++ b/etc/profile-a-l/dig.profile | |||
@@ -11,7 +11,6 @@ noblacklist ${HOME}/.digrc | |||
11 | noblacklist ${PATH}/dig | 11 | noblacklist ${PATH}/dig |
12 | 12 | ||
13 | blacklist /tmp/.X11-unix | 13 | blacklist /tmp/.X11-unix |
14 | blacklist ${RUNUSER}/wayland-* | ||
15 | blacklist ${RUNUSER} | 14 | blacklist ${RUNUSER} |
16 | 15 | ||
17 | include disable-common.inc | 16 | include disable-common.inc |
diff --git a/etc/profile-a-l/drill.profile b/etc/profile-a-l/drill.profile index 8c59b0cb6..07f47be5d 100644 --- a/etc/profile-a-l/drill.profile +++ b/etc/profile-a-l/drill.profile | |||
@@ -10,7 +10,6 @@ include globals.local | |||
10 | noblacklist ${PATH}/drill | 10 | noblacklist ${PATH}/drill |
11 | 11 | ||
12 | blacklist /tmp/.X11-unix | 12 | blacklist /tmp/.X11-unix |
13 | blacklist ${RUNUSER}/wayland-* | ||
14 | blacklist ${RUNUSER} | 13 | blacklist ${RUNUSER} |
15 | 14 | ||
16 | include disable-common.inc | 15 | include disable-common.inc |
diff --git a/etc/profile-a-l/file.profile b/etc/profile-a-l/file.profile index 74620d4cd..c02f9e3de 100644 --- a/etc/profile-a-l/file.profile +++ b/etc/profile-a-l/file.profile | |||
@@ -7,7 +7,6 @@ include file.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist ${RUNUSER}/wayland-* | ||
11 | blacklist ${RUNUSER} | 10 | blacklist ${RUNUSER} |
12 | 11 | ||
13 | include disable-common.inc | 12 | include disable-common.inc |
diff --git a/etc/profile-a-l/gtk2-youtube-viewer.profile b/etc/profile-a-l/gtk2-youtube-viewer.profile index dccadcf2e..787c7bd90 100644 --- a/etc/profile-a-l/gtk2-youtube-viewer.profile +++ b/etc/profile-a-l/gtk2-youtube-viewer.profile | |||
@@ -9,7 +9,6 @@ include gtk2-youtube-viewer.local | |||
9 | ignore quiet | 9 | ignore quiet |
10 | 10 | ||
11 | noblacklist /tmp/.X11-unix | 11 | noblacklist /tmp/.X11-unix |
12 | noblacklist ${RUNUSER}/wayland-* | ||
13 | noblacklist ${RUNUSER} | 12 | noblacklist ${RUNUSER} |
14 | 13 | ||
15 | include whitelist-runuser-common.inc | 14 | include whitelist-runuser-common.inc |
diff --git a/etc/profile-a-l/gtk3-youtube-viewer.profile b/etc/profile-a-l/gtk3-youtube-viewer.profile index 3d91e284d..988882622 100644 --- a/etc/profile-a-l/gtk3-youtube-viewer.profile +++ b/etc/profile-a-l/gtk3-youtube-viewer.profile | |||
@@ -9,7 +9,6 @@ include gtk3-youtube-viewer.local | |||
9 | ignore quiet | 9 | ignore quiet |
10 | 10 | ||
11 | noblacklist /tmp/.X11-unix | 11 | noblacklist /tmp/.X11-unix |
12 | noblacklist ${RUNUSER}/wayland-* | ||
13 | noblacklist ${RUNUSER} | 12 | noblacklist ${RUNUSER} |
14 | 13 | ||
15 | include whitelist-runuser-common.inc | 14 | include whitelist-runuser-common.inc |
diff --git a/etc/profile-a-l/highlight.profile b/etc/profile-a-l/highlight.profile index 0761aa2fc..c2812d7f5 100644 --- a/etc/profile-a-l/highlight.profile +++ b/etc/profile-a-l/highlight.profile | |||
@@ -6,7 +6,6 @@ include highlight.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | blacklist ${RUNUSER}/wayland-* | ||
10 | blacklist ${RUNUSER} | 9 | blacklist ${RUNUSER} |
11 | 10 | ||
12 | include disable-common.inc | 11 | include disable-common.inc |
diff --git a/etc/profile-a-l/less.profile b/etc/profile-a-l/less.profile index de6fa67d1..e1f0bc290 100644 --- a/etc/profile-a-l/less.profile +++ b/etc/profile-a-l/less.profile | |||
@@ -7,7 +7,6 @@ include less.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist ${RUNUSER}/wayland-* | ||
11 | blacklist ${RUNUSER} | 10 | blacklist ${RUNUSER} |
12 | 11 | ||
13 | noblacklist ${HOME}/.lesshst | 12 | noblacklist ${HOME}/.lesshst |
diff --git a/etc/profile-m-z/nslookup.profile b/etc/profile-m-z/nslookup.profile index a8e0ddd89..17798a6fb 100644 --- a/etc/profile-m-z/nslookup.profile +++ b/etc/profile-m-z/nslookup.profile | |||
@@ -8,7 +8,6 @@ include nslookup.local | |||
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist /tmp/.X11-unix | 10 | blacklist /tmp/.X11-unix |
11 | blacklist ${RUNUSER}/wayland-* | ||
12 | blacklist ${RUNUSER} | 11 | blacklist ${RUNUSER} |
13 | 12 | ||
14 | noblacklist ${PATH}/nslookup | 13 | noblacklist ${PATH}/nslookup |
diff --git a/etc/profile-m-z/pandoc.profile b/etc/profile-m-z/pandoc.profile index 9ee7e75b4..d2dcef0d0 100644 --- a/etc/profile-m-z/pandoc.profile +++ b/etc/profile-m-z/pandoc.profile | |||
@@ -7,7 +7,6 @@ include pandoc.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist ${RUNUSER}/wayland-* | ||
11 | blacklist ${RUNUSER} | 10 | blacklist ${RUNUSER} |
12 | 11 | ||
13 | noblacklist ${DOCUMENTS} | 12 | noblacklist ${DOCUMENTS} |
diff --git a/etc/profile-m-z/patch.profile b/etc/profile-m-z/patch.profile index 6cbaa66ad..46a84372c 100644 --- a/etc/profile-m-z/patch.profile +++ b/etc/profile-m-z/patch.profile | |||
@@ -7,7 +7,6 @@ include patch.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist ${RUNUSER}/wayland-* | ||
11 | blacklist ${RUNUSER} | 10 | blacklist ${RUNUSER} |
12 | 11 | ||
13 | noblacklist ${DOCUMENTS} | 12 | noblacklist ${DOCUMENTS} |
diff --git a/etc/profile-m-z/pdftotext.profile b/etc/profile-m-z/pdftotext.profile index 2a7d0cec1..6bbd30b22 100644 --- a/etc/profile-m-z/pdftotext.profile +++ b/etc/profile-m-z/pdftotext.profile | |||
@@ -6,7 +6,6 @@ include pdftotext.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | blacklist ${RUNUSER}/wayland-* | ||
10 | blacklist ${RUNUSER} | 9 | blacklist ${RUNUSER} |
11 | 10 | ||
12 | noblacklist ${DOCUMENTS} | 11 | noblacklist ${DOCUMENTS} |
diff --git a/etc/profile-m-z/ping.profile b/etc/profile-m-z/ping.profile index bd95cb1de..03b548ffa 100644 --- a/etc/profile-m-z/ping.profile +++ b/etc/profile-m-z/ping.profile | |||
@@ -8,7 +8,6 @@ include ping.local | |||
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist /tmp/.X11-unix | 10 | blacklist /tmp/.X11-unix |
11 | blacklist ${RUNUSER}/wayland-* | ||
12 | blacklist ${RUNUSER} | 11 | blacklist ${RUNUSER} |
13 | 12 | ||
14 | include disable-common.inc | 13 | include disable-common.inc |
diff --git a/etc/profile-m-z/qrencode.profile b/etc/profile-m-z/qrencode.profile index 5e49a342a..952e9f5f3 100644 --- a/etc/profile-m-z/qrencode.profile +++ b/etc/profile-m-z/qrencode.profile | |||
@@ -7,7 +7,6 @@ include qrencode.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist ${RUNUSER}/wayland-* | ||
11 | blacklist ${RUNUSER} | 10 | blacklist ${RUNUSER} |
12 | 11 | ||
13 | include disable-common.inc | 12 | include disable-common.inc |
diff --git a/etc/profile-m-z/rsync-download_only.profile b/etc/profile-m-z/rsync-download_only.profile index 95deed119..78159527a 100644 --- a/etc/profile-m-z/rsync-download_only.profile +++ b/etc/profile-m-z/rsync-download_only.profile | |||
@@ -13,7 +13,6 @@ include globals.local | |||
13 | # Usage: firejail --profile=rsync-download_only rsync | 13 | # Usage: firejail --profile=rsync-download_only rsync |
14 | 14 | ||
15 | blacklist /tmp/.X11-unix | 15 | blacklist /tmp/.X11-unix |
16 | blacklist ${RUNUSER}/wayland-* | ||
17 | blacklist ${RUNUSER} | 16 | blacklist ${RUNUSER} |
18 | 17 | ||
19 | include disable-common.inc | 18 | include disable-common.inc |
diff --git a/etc/profile-m-z/shellcheck.profile b/etc/profile-m-z/shellcheck.profile index c67a88161..2ae298142 100644 --- a/etc/profile-m-z/shellcheck.profile +++ b/etc/profile-m-z/shellcheck.profile | |||
@@ -7,7 +7,6 @@ include shellcheck.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist ${RUNUSER}/wayland-* | ||
11 | blacklist ${RUNUSER} | 10 | blacklist ${RUNUSER} |
12 | 11 | ||
13 | noblacklist ${DOCUMENTS} | 12 | noblacklist ${DOCUMENTS} |
diff --git a/etc/profile-m-z/strings.profile b/etc/profile-m-z/strings.profile index 09ada1e25..6a582532d 100644 --- a/etc/profile-m-z/strings.profile +++ b/etc/profile-m-z/strings.profile | |||
@@ -7,7 +7,6 @@ include strings.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist ${RUNUSER}/wayland-* | ||
11 | blacklist ${RUNUSER} | 10 | blacklist ${RUNUSER} |
12 | 11 | ||
13 | #include disable-common.inc | 12 | #include disable-common.inc |
diff --git a/etc/profile-m-z/wget.profile b/etc/profile-m-z/wget.profile index 8a64d2d73..f67d28618 100644 --- a/etc/profile-m-z/wget.profile +++ b/etc/profile-m-z/wget.profile | |||
@@ -12,7 +12,6 @@ noblacklist ${HOME}/.wget-hsts | |||
12 | noblacklist ${HOME}/.wgetrc | 12 | noblacklist ${HOME}/.wgetrc |
13 | 13 | ||
14 | blacklist /tmp/.X11-unix | 14 | blacklist /tmp/.X11-unix |
15 | blacklist ${RUNUSER}/wayland-* | ||
16 | blacklist ${RUNUSER} | 15 | blacklist ${RUNUSER} |
17 | 16 | ||
18 | include disable-common.inc | 17 | include disable-common.inc |
diff --git a/etc/profile-m-z/whois.profile b/etc/profile-m-z/whois.profile index a9cecb18d..fa7a16093 100644 --- a/etc/profile-m-z/whois.profile +++ b/etc/profile-m-z/whois.profile | |||
@@ -8,7 +8,6 @@ include whois.local | |||
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist /tmp/.X11-unix | 10 | blacklist /tmp/.X11-unix |
11 | blacklist ${RUNUSER}/wayland-* | ||
12 | blacklist ${RUNUSER} | 11 | blacklist ${RUNUSER} |
13 | 12 | ||
14 | include disable-common.inc | 13 | include disable-common.inc |
diff --git a/etc/profile-m-z/youtube-dl.profile b/etc/profile-m-z/youtube-dl.profile index d9dee6891..6ce632682 100644 --- a/etc/profile-m-z/youtube-dl.profile +++ b/etc/profile-m-z/youtube-dl.profile | |||
@@ -21,7 +21,6 @@ include allow-python2.inc | |||
21 | include allow-python3.inc | 21 | include allow-python3.inc |
22 | 22 | ||
23 | blacklist /tmp/.X11-unix | 23 | blacklist /tmp/.X11-unix |
24 | blacklist ${RUNUSER}/wayland-* | ||
25 | blacklist ${RUNUSER} | 24 | blacklist ${RUNUSER} |
26 | 25 | ||
27 | include disable-common.inc | 26 | include disable-common.inc |