aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2020-01-17 17:07:19 +0100
committerLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2020-01-18 11:20:32 +0100
commita3cc09e5d96beb53dd13d48a9202bae97fb474aa (patch)
treeacac9767a7bd58c3ef9cafe4f59bb1a6c0688ecc /etc
parent'blacklist /tmp/.X11-unix' is implied by x11 none (diff)
downloadfirejail-a3cc09e5d96beb53dd13d48a9202bae97fb474aa.tar.gz
firejail-a3cc09e5d96beb53dd13d48a9202bae97fb474aa.tar.zst
firejail-a3cc09e5d96beb53dd13d48a9202bae97fb474aa.zip
add 'blacklist ${RUNUSER}/wayland-*' to all profi…
…les with 'blacklist /tmp/.X11-unix'
Diffstat (limited to 'etc')
-rw-r--r--etc/aria2c.profile1
-rw-r--r--etc/artha.profile1
-rw-r--r--etc/dnsmasq.profile1
-rw-r--r--etc/elinks.profile1
-rw-r--r--etc/gconf-editor.profile1
-rw-r--r--etc/gist.profile1
-rw-r--r--etc/git.profile1
-rw-r--r--etc/gpg-agent.profile1
-rw-r--r--etc/gpg.profile1
-rw-r--r--etc/links.profile1
-rw-r--r--etc/lynx.profile1
-rw-r--r--etc/mutt.profile1
-rw-r--r--etc/rsync-download_only.profile1
-rw-r--r--etc/seahorse.profile1
-rw-r--r--etc/server.profile1
-rw-r--r--etc/signal-cli.profile1
-rw-r--r--etc/ssh-agent.profile1
-rw-r--r--etc/tracker.profile1
-rw-r--r--etc/unbound.profile1
-rw-r--r--etc/w3m.profile1
-rw-r--r--etc/wget.profile1
-rw-r--r--etc/whois.profile1
-rw-r--r--etc/youtube-dl.profile1
23 files changed, 23 insertions, 0 deletions
diff --git a/etc/aria2c.profile b/etc/aria2c.profile
index f46202ac8..7819300af 100644
--- a/etc/aria2c.profile
+++ b/etc/aria2c.profile
@@ -11,6 +11,7 @@ noblacklist ${HOME}/.config/aria2
11noblacklist ${HOME}/.netrc 11noblacklist ${HOME}/.netrc
12 12
13blacklist /tmp/.X11-unix 13blacklist /tmp/.X11-unix
14blacklist ${RUNUSER}/wayland-*
14 15
15include disable-common.inc 16include disable-common.inc
16include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/artha.profile b/etc/artha.profile
index 31f8887c4..aaaede7ee 100644
--- a/etc/artha.profile
+++ b/etc/artha.profile
@@ -11,6 +11,7 @@ noblacklist ${HOME}/.config/artha.log
11noblacklist ${HOME}/.config/enchant 11noblacklist ${HOME}/.config/enchant
12 12
13blacklist /tmp/.X11-unix 13blacklist /tmp/.X11-unix
14blacklist ${RUNUSER}/wayland-*
14 15
15include disable-common.inc 16include disable-common.inc
16include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/dnsmasq.profile b/etc/dnsmasq.profile
index dfb1b61c1..6db71bd49 100644
--- a/etc/dnsmasq.profile
+++ b/etc/dnsmasq.profile
@@ -11,6 +11,7 @@ noblacklist /sbin
11noblacklist /usr/sbin 11noblacklist /usr/sbin
12 12
13blacklist /tmp/.X11-unix 13blacklist /tmp/.X11-unix
14blacklist ${RUNUSER}/wayland-*
14 15
15include disable-common.inc 16include disable-common.inc
16include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/elinks.profile b/etc/elinks.profile
index 94f4179c7..82d1ba528 100644
--- a/etc/elinks.profile
+++ b/etc/elinks.profile
@@ -9,6 +9,7 @@ include globals.local
9noblacklist ${HOME}/.elinks 9noblacklist ${HOME}/.elinks
10 10
11blacklist /tmp/.X11-unix 11blacklist /tmp/.X11-unix
12blacklist ${RUNUSER}/wayland-*
12 13
13include disable-common.inc 14include disable-common.inc
14include disable-devel.inc 15include disable-devel.inc
diff --git a/etc/gconf-editor.profile b/etc/gconf-editor.profile
index a2c441a20..7325bfb4c 100644
--- a/etc/gconf-editor.profile
+++ b/etc/gconf-editor.profile
@@ -8,6 +8,7 @@ include gconf-editor.local
8#include globals.local 8#include globals.local
9 9
10blacklist /tmp/.X11-unix 10blacklist /tmp/.X11-unix
11blacklist ${RUNUSER}/wayland-*
11 12
12ignore net none 13ignore net none
13ignore x11 none 14ignore x11 none
diff --git a/etc/gist.profile b/etc/gist.profile
index 7413238c8..59fcb2775 100644
--- a/etc/gist.profile
+++ b/etc/gist.profile
@@ -8,6 +8,7 @@ include gist.local
8include globals.local 8include globals.local
9 9
10blacklist /tmp/.X11-unix 10blacklist /tmp/.X11-unix
11blacklist ${RUNUSER}/wayland-*
11 12
12noblacklist ${HOME}/.gist 13noblacklist ${HOME}/.gist
13 14
diff --git a/etc/git.profile b/etc/git.profile
index dbaaefcc4..da55f8744 100644
--- a/etc/git.profile
+++ b/etc/git.profile
@@ -20,6 +20,7 @@ noblacklist ${HOME}/.vim
20noblacklist ${HOME}/.viminfo 20noblacklist ${HOME}/.viminfo
21 21
22blacklist /tmp/.X11-unix 22blacklist /tmp/.X11-unix
23blacklist ${RUNUSER}/wayland-*
23 24
24include disable-common.inc 25include disable-common.inc
25include disable-exec.inc 26include disable-exec.inc
diff --git a/etc/gpg-agent.profile b/etc/gpg-agent.profile
index c11773147..2710ac88e 100644
--- a/etc/gpg-agent.profile
+++ b/etc/gpg-agent.profile
@@ -10,6 +10,7 @@ include globals.local
10noblacklist ${HOME}/.gnupg 10noblacklist ${HOME}/.gnupg
11 11
12blacklist /tmp/.X11-unix 12blacklist /tmp/.X11-unix
13blacklist ${RUNUSER}/wayland-*
13 14
14include disable-common.inc 15include disable-common.inc
15include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/gpg.profile b/etc/gpg.profile
index 5eb18a0bc..a60d42cf8 100644
--- a/etc/gpg.profile
+++ b/etc/gpg.profile
@@ -10,6 +10,7 @@ include globals.local
10noblacklist ${HOME}/.gnupg 10noblacklist ${HOME}/.gnupg
11 11
12blacklist /tmp/.X11-unix 12blacklist /tmp/.X11-unix
13blacklist ${RUNUSER}/wayland-*
13 14
14include disable-common.inc 15include disable-common.inc
15include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/links.profile b/etc/links.profile
index bd0b0cc92..a31001c87 100644
--- a/etc/links.profile
+++ b/etc/links.profile
@@ -9,6 +9,7 @@ include globals.local
9noblacklist ${HOME}/.links 9noblacklist ${HOME}/.links
10 10
11blacklist /tmp/.X11-unix 11blacklist /tmp/.X11-unix
12blacklist ${RUNUSER}/wayland-*
12 13
13include disable-common.inc 14include disable-common.inc
14include disable-devel.inc 15include disable-devel.inc
diff --git a/etc/lynx.profile b/etc/lynx.profile
index 063285316..fb6fe94ec 100644
--- a/etc/lynx.profile
+++ b/etc/lynx.profile
@@ -7,6 +7,7 @@ include lynx.local
7include globals.local 7include globals.local
8 8
9blacklist /tmp/.X11-unix 9blacklist /tmp/.X11-unix
10blacklist ${RUNUSER}/wayland-*
10 11
11include disable-common.inc 12include disable-common.inc
12include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/mutt.profile b/etc/mutt.profile
index 92babd50f..1fc412955 100644
--- a/etc/mutt.profile
+++ b/etc/mutt.profile
@@ -32,6 +32,7 @@ noblacklist ${HOME}/postponed
32noblacklist ${HOME}/sent 32noblacklist ${HOME}/sent
33 33
34blacklist /tmp/.X11-unix 34blacklist /tmp/.X11-unix
35blacklist ${RUNUSER}/wayland-*
35 36
36include disable-common.inc 37include disable-common.inc
37include disable-devel.inc 38include disable-devel.inc
diff --git a/etc/rsync-download_only.profile b/etc/rsync-download_only.profile
index bda3bca92..84147f0a5 100644
--- a/etc/rsync-download_only.profile
+++ b/etc/rsync-download_only.profile
@@ -13,6 +13,7 @@ include globals.local
13# Usage: firejail --profile=rsync-download_only rsync 13# Usage: firejail --profile=rsync-download_only rsync
14 14
15blacklist /tmp/.X11-unix 15blacklist /tmp/.X11-unix
16blacklist ${RUNUSER}/wayland-*
16 17
17include disable-common.inc 18include disable-common.inc
18include disable-devel.inc 19include disable-devel.inc
diff --git a/etc/seahorse.profile b/etc/seahorse.profile
index 5a742d05f..0470dc286 100644
--- a/etc/seahorse.profile
+++ b/etc/seahorse.profile
@@ -7,6 +7,7 @@ include seahorse.local
7include globals.local 7include globals.local
8 8
9blacklist /tmp/.X11-unix 9blacklist /tmp/.X11-unix
10blacklist ${RUNUSER}/wayland-*
10 11
11noblacklist ${HOME}/.gnupg 12noblacklist ${HOME}/.gnupg
12noblacklist ${HOME}/.ssh 13noblacklist ${HOME}/.ssh
diff --git a/etc/server.profile b/etc/server.profile
index 6e077ff84..ce318a828 100644
--- a/etc/server.profile
+++ b/etc/server.profile
@@ -14,6 +14,7 @@ noblacklist /usr/sbin
14# noblacklist /var/opt 14# noblacklist /var/opt
15 15
16blacklist /tmp/.X11-unix 16blacklist /tmp/.X11-unix
17blacklist ${RUNUSER}/wayland-*
17 18
18include disable-common.inc 19include disable-common.inc
19# include disable-devel.inc 20# include disable-devel.inc
diff --git a/etc/signal-cli.profile b/etc/signal-cli.profile
index bb1bf732d..6a2f5c434 100644
--- a/etc/signal-cli.profile
+++ b/etc/signal-cli.profile
@@ -7,6 +7,7 @@ include signal-cli.local
7include globals.local 7include globals.local
8 8
9blacklist /tmp/.X11-unix 9blacklist /tmp/.X11-unix
10blacklist ${RUNUSER}/wayland-*
10 11
11noblacklist ${HOME}/.local/share/signal-cli 12noblacklist ${HOME}/.local/share/signal-cli
12 13
diff --git a/etc/ssh-agent.profile b/etc/ssh-agent.profile
index 8e355a176..cf509852a 100644
--- a/etc/ssh-agent.profile
+++ b/etc/ssh-agent.profile
@@ -11,6 +11,7 @@ noblacklist /tmp/ssh-*
11noblacklist ${HOME}/.ssh 11noblacklist ${HOME}/.ssh
12 12
13blacklist /tmp/.X11-unix 13blacklist /tmp/.X11-unix
14blacklist ${RUNUSER}/wayland-*
14 15
15include disable-common.inc 16include disable-common.inc
16include disable-passwdmgr.inc 17include disable-passwdmgr.inc
diff --git a/etc/tracker.profile b/etc/tracker.profile
index 6e107d99e..d47185b1d 100644
--- a/etc/tracker.profile
+++ b/etc/tracker.profile
@@ -9,6 +9,7 @@ include globals.local
9# Tracker is started by systemd on most systems. Therefore it is not firejailed by default 9# Tracker is started by systemd on most systems. Therefore it is not firejailed by default
10 10
11blacklist /tmp/.X11-unix 11blacklist /tmp/.X11-unix
12blacklist ${RUNUSER}/wayland-*
12 13
13include disable-common.inc 14include disable-common.inc
14include disable-devel.inc 15include disable-devel.inc
diff --git a/etc/unbound.profile b/etc/unbound.profile
index 67448d766..36533a762 100644
--- a/etc/unbound.profile
+++ b/etc/unbound.profile
@@ -10,6 +10,7 @@ noblacklist /sbin
10noblacklist /usr/sbin 10noblacklist /usr/sbin
11 11
12blacklist /tmp/.X11-unix 12blacklist /tmp/.X11-unix
13blacklist ${RUNUSER}/wayland-*
13 14
14include disable-common.inc 15include disable-common.inc
15include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/w3m.profile b/etc/w3m.profile
index 76531d315..97465baa1 100644
--- a/etc/w3m.profile
+++ b/etc/w3m.profile
@@ -9,6 +9,7 @@ include globals.local
9noblacklist ${HOME}/.w3m 9noblacklist ${HOME}/.w3m
10 10
11blacklist /tmp/.X11-unix 11blacklist /tmp/.X11-unix
12blacklist ${RUNUSER}/wayland-*
12 13
13include allow-perl.inc 14include allow-perl.inc
14 15
diff --git a/etc/wget.profile b/etc/wget.profile
index c1f7dfc3f..401926e2d 100644
--- a/etc/wget.profile
+++ b/etc/wget.profile
@@ -12,6 +12,7 @@ noblacklist ${HOME}/.wget-hsts
12noblacklist ${HOME}/.wgetrc 12noblacklist ${HOME}/.wgetrc
13 13
14blacklist /tmp/.X11-unix 14blacklist /tmp/.X11-unix
15blacklist ${RUNUSER}/wayland-*
15 16
16include disable-common.inc 17include disable-common.inc
17include disable-devel.inc 18include disable-devel.inc
diff --git a/etc/whois.profile b/etc/whois.profile
index bd0870bea..7f48afd36 100644
--- a/etc/whois.profile
+++ b/etc/whois.profile
@@ -8,6 +8,7 @@ include whois.local
8include globals.local 8include globals.local
9 9
10blacklist /tmp/.X11-unix 10blacklist /tmp/.X11-unix
11blacklist ${RUNUSER}/wayland-*
11 12
12include disable-common.inc 13include disable-common.inc
13include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/youtube-dl.profile b/etc/youtube-dl.profile
index 5fa72c9dc..19effef47 100644
--- a/etc/youtube-dl.profile
+++ b/etc/youtube-dl.profile
@@ -21,6 +21,7 @@ include allow-python2.inc
21include allow-python3.inc 21include allow-python3.inc
22 22
23blacklist /tmp/.X11-unix 23blacklist /tmp/.X11-unix
24blacklist ${RUNUSER}/wayland-*
24 25
25include disable-common.inc 26include disable-common.inc
26include disable-devel.inc 27include disable-devel.inc