diff options
author | 2020-12-10 10:42:18 -0300 | |
---|---|---|
committer | 2020-12-10 22:40:21 -0300 | |
commit | 9e291a15dd64dde0b105c6006938e98a7d41b354 (patch) | |
tree | 5415305a7a2df75505247bae09e21f9f152af030 /etc | |
parent | disable-common.inc: sort DNS / RUNUSER paths (diff) | |
download | firejail-9e291a15dd64dde0b105c6006938e98a7d41b354.tar.gz firejail-9e291a15dd64dde0b105c6006938e98a7d41b354.tar.zst firejail-9e291a15dd64dde0b105c6006938e98a7d41b354.zip |
disable-common.inc: blacklist ldns tools
drill(1) from ldns is the first tool suggested on the Arch Wiki for DNS
lookup:
https://wiki.archlinux.org/index.php/Domain_name_resolution#Lookup_utilities
Home page: https://www.nlnetlabs.nl/projects/ldns/about/
$ pacman -Q ldns
ldns 1.7.1-2
$ pacman -Qlq ldns | grep bin
/usr/bin/
/usr/bin/drill
/usr/bin/ldns-chaos
/usr/bin/ldns-compare-zones
/usr/bin/ldns-config
/usr/bin/ldns-dane
/usr/bin/ldns-dpa
/usr/bin/ldns-gen-zone
/usr/bin/ldns-key2ds
/usr/bin/ldns-keyfetcher
/usr/bin/ldns-keygen
/usr/bin/ldns-mx
/usr/bin/ldns-notify
/usr/bin/ldns-nsec3-hash
/usr/bin/ldns-read-zone
/usr/bin/ldns-resolver
/usr/bin/ldns-revoke
/usr/bin/ldns-rrsig
/usr/bin/ldns-signzone
/usr/bin/ldns-test-edns
/usr/bin/ldns-testns
/usr/bin/ldns-update
/usr/bin/ldns-verify-zone
/usr/bin/ldns-version
/usr/bin/ldns-walk
/usr/bin/ldns-zcat
/usr/bin/ldns-zsplit
/usr/bin/ldnsd
Diffstat (limited to 'etc')
-rw-r--r-- | etc/inc/disable-common.inc | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc index 0f708ae29..2b56bb5be 100644 --- a/etc/inc/disable-common.inc +++ b/etc/inc/disable-common.inc | |||
@@ -518,10 +518,13 @@ blacklist ${PATH}/dig | |||
518 | blacklist ${PATH}/dlint | 518 | blacklist ${PATH}/dlint |
519 | blacklist ${PATH}/dns2tcp | 519 | blacklist ${PATH}/dns2tcp |
520 | blacklist ${PATH}/dnswalk | 520 | blacklist ${PATH}/dnswalk |
521 | blacklist ${PATH}/drill | ||
521 | blacklist ${PATH}/host | 522 | blacklist ${PATH}/host |
522 | blacklist ${PATH}/iodine | 523 | blacklist ${PATH}/iodine |
523 | blacklist ${PATH}/kdig | 524 | blacklist ${PATH}/kdig |
524 | blacklist ${PATH}/knsupdate | 525 | blacklist ${PATH}/knsupdate |
526 | blacklist ${PATH}/ldns-* | ||
527 | blacklist ${PATH}/ldnsd | ||
525 | blacklist ${PATH}/nslookup | 528 | blacklist ${PATH}/nslookup |
526 | blacklist ${PATH}/resolvectl | 529 | blacklist ${PATH}/resolvectl |
527 | 530 | ||