diff options
author | 2019-02-25 05:29:59 +0000 | |
---|---|---|
committer | 2019-02-25 05:29:59 +0000 | |
commit | 7b32cb8d2082a87852930c8b9ef6aa175c42d7c9 (patch) | |
tree | 1f8a7ae5c4664b0b54c935136a1f31e72b62072e /etc | |
parent | Harden gpicview.profile (#2470) (diff) | |
download | firejail-7b32cb8d2082a87852930c8b9ef6aa175c42d7c9.tar.gz firejail-7b32cb8d2082a87852930c8b9ef6aa175c42d7c9.tar.zst firejail-7b32cb8d2082a87852930c8b9ef6aa175c42d7c9.zip |
Fix inkscape.profile (#2473)
Diffstat (limited to 'etc')
-rw-r--r-- | etc/inkscape.profile | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/etc/inkscape.profile b/etc/inkscape.profile index c1463fb47..ba0a2c9f9 100644 --- a/etc/inkscape.profile +++ b/etc/inkscape.profile | |||
@@ -12,6 +12,12 @@ noblacklist ${HOME}/.inkscape | |||
12 | noblacklist ${DOCUMENTS} | 12 | noblacklist ${DOCUMENTS} |
13 | noblacklist ${PICTURES} | 13 | noblacklist ${PICTURES} |
14 | 14 | ||
15 | # Allow python (blacklisted by disable-interpreters.inc) | ||
16 | noblacklist ${PATH}/python2* | ||
17 | noblacklist ${PATH}/python3* | ||
18 | noblacklist /usr/lib/python2* | ||
19 | noblacklist /usr/lib/python3* | ||
20 | |||
15 | include disable-common.inc | 21 | include disable-common.inc |
16 | include disable-devel.inc | 22 | include disable-devel.inc |
17 | include disable-interpreters.inc | 23 | include disable-interpreters.inc |
@@ -39,10 +45,10 @@ protocol unix | |||
39 | seccomp | 45 | seccomp |
40 | shell none | 46 | shell none |
41 | 47 | ||
42 | # private-bin inkscape,potrace - problems on Debian stretch | 48 | # private-bin inkscape,potrace,python* - problems on Debian stretch |
43 | private-dev | 49 | private-dev |
44 | private-tmp | 50 | private-tmp |
45 | 51 | ||
46 | memory-deny-write-execute | 52 | # memory-deny-write-execute |
47 | noexec ${HOME} | 53 | noexec ${HOME} |
48 | noexec /tmp | 54 | noexec /tmp |