aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar rusty-snake <41237666+rusty-snake@users.noreply.github.com>2021-09-11 14:38:18 +0200
committerLibravatar rusty-snake <41237666+rusty-snake@users.noreply.github.com>2021-09-11 14:38:18 +0200
commit2712dd7274a59727b3118982044c7c9426099232 (patch)
treeae7382f9382158f2f86a7831c34c4adc255915f2 /etc
parentAdd profiles for build-systems (/package-managers) (diff)
downloadfirejail-2712dd7274a59727b3118982044c7c9426099232.tar.gz
firejail-2712dd7274a59727b3118982044c7c9426099232.tar.zst
firejail-2712dd7274a59727b3118982044c7c9426099232.zip
build-systems-common: Make whitelist opt-in
Diffstat (limited to 'etc')
-rw-r--r--etc/profile-a-l/build-systems-common.profile5
-rw-r--r--etc/profile-a-l/bundle.profile5
-rw-r--r--etc/profile-a-l/cargo.profile5
-rw-r--r--etc/profile-m-z/pip.profile2
4 files changed, 9 insertions, 8 deletions
diff --git a/etc/profile-a-l/build-systems-common.profile b/etc/profile-a-l/build-systems-common.profile
index 159593eb7..1b199d612 100644
--- a/etc/profile-a-l/build-systems-common.profile
+++ b/etc/profile-a-l/build-systems-common.profile
@@ -28,9 +28,10 @@ include disable-shell.inc
28include disable-X11.inc 28include disable-X11.inc
29include disable-xdg.inc 29include disable-xdg.inc
30 30
31whitelist ${HOME}/Projects 31#whitelist ${HOME}/Projects
32#include whitelist-common.inc
33
32whitelist /usr/share/pkgconfig 34whitelist /usr/share/pkgconfig
33include whitelist-common.inc
34include whitelist-run-common.inc 35include whitelist-run-common.inc
35include whitelist-usr-share-common.inc 36include whitelist-usr-share-common.inc
36include whitelist-var-common.inc 37include whitelist-var-common.inc
diff --git a/etc/profile-a-l/bundle.profile b/etc/profile-a-l/bundle.profile
index 269bfd130..a3a3e3cde 100644
--- a/etc/profile-a-l/bundle.profile
+++ b/etc/profile-a-l/bundle.profile
@@ -12,8 +12,9 @@ noblacklist ${HOME}/.bundle
12# Allow ruby (blacklisted by disable-interpreters.inc) 12# Allow ruby (blacklisted by disable-interpreters.inc)
13include allow-ruby.inc 13include allow-ruby.inc
14 14
15mkdir ${HOME}/.bundle 15#whitelist ${HOME}/.bundle
16whitelist ${HOME}/.bundle 16#whitelist ${HOME}/.gem
17#whitelist ${HOME}/.local/share/gem
17whitelist /usr/share/gems 18whitelist /usr/share/gems
18whitelist /usr/share/ruby 19whitelist /usr/share/ruby
19whitelist /usr/share/rubygems 20whitelist /usr/share/rubygems
diff --git a/etc/profile-a-l/cargo.profile b/etc/profile-a-l/cargo.profile
index af188e7f9..4c8afd895 100644
--- a/etc/profile-a-l/cargo.profile
+++ b/etc/profile-a-l/cargo.profile
@@ -12,9 +12,8 @@ ignore read-only ${HOME}/.cargo/bin
12noblacklist ${HOME}/.cargo/credentials 12noblacklist ${HOME}/.cargo/credentials
13noblacklist ${HOME}/.cargo/credentials.toml 13noblacklist ${HOME}/.cargo/credentials.toml
14 14
15mkdir ${HOME}/.cargo 15#whitelist ${HOME}/.cargo
16whitelist ${HOME}/.cargo 16#whitelist ${HOME}/.rustup
17whitelist ${HOME}/.rustup
18 17
19#private-bin cargo,rustc 18#private-bin cargo,rustc
20private-etc alternatives,ca-certificates,crypto-policies,group,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,magic,magic.mgc,nsswitch.conf,passwd,pki,protocols,resolv.conf,rpc,services,ssl 19private-etc alternatives,ca-certificates,crypto-policies,group,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,magic,magic.mgc,nsswitch.conf,passwd,pki,protocols,resolv.conf,rpc,services,ssl
diff --git a/etc/profile-m-z/pip.profile b/etc/profile-m-z/pip.profile
index 54d95e335..1f551b718 100644
--- a/etc/profile-m-z/pip.profile
+++ b/etc/profile-m-z/pip.profile
@@ -12,7 +12,7 @@ ignore read-only ${HOME}/.local/lib
12# Allow python3 (blacklisted by disable-interpreters.inc) 12# Allow python3 (blacklisted by disable-interpreters.inc)
13include allow-python3.inc 13include allow-python3.inc
14 14
15whitelist ${HOME}/.local/lib/python* 15#whitelist ${HOME}/.local/lib/python*
16 16
17private-bin pip,pip[0-9].[0-9],pip[0-9].[0-9],python3* 17private-bin pip,pip[0-9].[0-9],pip[0-9].[0-9],python3*
18 18