diff options
| author |  glitsj16 <glitsj16@users.noreply.github.com> | 2021-05-02 14:23:41 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2021-05-02 14:23:41 +0000 |
| commit | 6a13ff2321f48df89251a7726c7f6ba06aecaa0f (patch) | |
| tree | b91748bdfb11748b1a41e5ceb067f6950e1cbee0 /etc | |
| parent | add comment to firefox.profile (#4232) (diff) | |
| download | firejail-6a13ff2321f48df89251a7726c7f6ba06aecaa0f.tar.gz firejail-6a13ff2321f48df89251a7726c7f6ba06aecaa0f.tar.zst firejail-6a13ff2321f48df89251a7726c7f6ba06aecaa0f.zip | |
harden audio-recorder (#4233)
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/profile-a-l/audio-recorder.profile | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/etc/profile-a-l/audio-recorder.profile b/etc/profile-a-l/audio-recorder.profile index b2ed3b030..2c7fdc812 100644 --- a/etc/profile-a-l/audio-recorder.profile +++ b/etc/profile-a-l/audio-recorder.profile | |||
| @@ -20,6 +20,7 @@ include disable-xdg.inc | |||
| 20 | whitelist ${MUSIC} | 20 | whitelist ${MUSIC} |
| 21 | whitelist ${DOWNLOADS} | 21 | whitelist ${DOWNLOADS} |
| 22 | whitelist /usr/share/audio-recorder | 22 | whitelist /usr/share/audio-recorder |
| 23 | whitelist /usr/share/gstreamer-1.0 | ||
| 23 | include whitelist-common.inc | 24 | include whitelist-common.inc |
| 24 | include whitelist-usr-share-common.inc | 25 | include whitelist-usr-share-common.inc |
| 25 | include whitelist-var-common.inc | 26 | include whitelist-var-common.inc |
| @@ -44,7 +45,11 @@ tracelog | |||
| 44 | disable-mnt | 45 | disable-mnt |
| 45 | # private-bin audio-recorder | 46 | # private-bin audio-recorder |
| 46 | private-cache | 47 | private-cache |
| 47 | private-etc alternatives,fonts | 48 | private-etc alternatives,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload |
| 48 | private-tmp | 49 | private-tmp |
| 49 | 50 | ||
| 51 | dbus-user filter | ||
| 52 | dbus-user.talk ca.desrt.dconf | ||
| 53 | dbus-system none | ||
| 54 | |||
| 50 | # memory-deny-write-execute - breaks on Arch | 55 | # memory-deny-write-execute - breaks on Arch |