diff options
| author |  Davide Beatrici <git@davidebeatrici.dev> | 2020-03-24 23:09:21 +0100 |
|---|---|---|
| committer | Davide Beatrici <git@davidebeatrici.dev> | 2020-03-24 23:09:21 +0100 |
| commit | b086e9305528cd6ea89ee22b1714fd9eb4f8c801 (patch) | |
| tree | 53da7c63e8274eff8870334a8915b8dfdaaa0b14 /etc | |
| parent | Add a profile for X2GoClient (diff) | |
| download | firejail-b086e9305528cd6ea89ee22b1714fd9eb4f8c801.tar.gz firejail-b086e9305528cd6ea89ee22b1714fd9eb4f8c801.tar.zst firejail-b086e9305528cd6ea89ee22b1714fd9eb4f8c801.zip | |
steam.profile: correctly blacklist unneeded directories in user's home
"noblacklist" directives prevent following ones from blacklisting the specified directory/file.
The profile currently has a "noblacklist" directive for each directory used by Steam and/or its games, which is fine.
However, there are no directives blacklisting the user's home, thus all directories and files inside it are accessible by Steam.
This commit fixes the issue by adding "whitelist" directives, which automatically blacklist the parent directory (in this case the user's home).
"mkdir" and "mkfile" directives are added so that the directories/files are created if they don't exist.
Thanks to @SkewedZeppelin for suggesting to keep "noblacklist" and use "mkdir" and "mkfile".
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/steam.profile | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/etc/steam.profile b/etc/steam.profile index 499d21e6d..c6f0ca145 100644 --- a/etc/steam.profile +++ b/etc/steam.profile | |||
| @@ -36,6 +36,34 @@ include disable-interpreters.inc | |||
| 36 | include disable-passwdmgr.inc | 36 | include disable-passwdmgr.inc |
| 37 | include disable-programs.inc | 37 | include disable-programs.inc |
| 38 | 38 | ||
| 39 | mkdir ${HOME}/.killingfloor | ||
| 40 | mkdir ${HOME}/.local/share/3909/PapersPlease | ||
| 41 | mkdir ${HOME}/.local/share/aspyr-media | ||
| 42 | mkdir ${HOME}/.local/share/cdprojektred | ||
| 43 | mkdir ${HOME}/.local/share/feral-interactive | ||
| 44 | mkdir ${HOME}/.local/share/Steam | ||
| 45 | mkdir ${HOME}/.local/share/SuperHexagon | ||
| 46 | mkdir ${HOME}/.local/share/Terraria | ||
| 47 | mkdir ${HOME}/.local/share/vpltd | ||
| 48 | mkdir ${HOME}/.local/share/vulkan | ||
| 49 | mkdir ${HOME}/.steam | ||
| 50 | mkfile ${HOME}/.steampath | ||
| 51 | mkfile ${HOME}/.steampid | ||
| 52 | whitelist ${HOME}/.killingfloor | ||
| 53 | whitelist ${HOME}/.local/share/3909/PapersPlease | ||
| 54 | whitelist ${HOME}/.local/share/aspyr-media | ||
| 55 | whitelist ${HOME}/.local/share/cdprojektred | ||
| 56 | whitelist ${HOME}/.local/share/feral-interactive | ||
| 57 | whitelist ${HOME}/.local/share/Steam | ||
| 58 | whitelist ${HOME}/.local/share/SuperHexagon | ||
| 59 | whitelist ${HOME}/.local/share/Terraria | ||
| 60 | whitelist ${HOME}/.local/share/vpltd | ||
| 61 | whitelist ${HOME}/.local/share/vulkan | ||
| 62 | whitelist ${HOME}/.steam | ||
| 63 | whitelist ${HOME}/.steampath | ||
| 64 | whitelist ${HOME}/.steampid | ||
| 65 | whitelist ${HOME}/.steampid | ||
| 66 | include whitelist-common.inc | ||
| 39 | include whitelist-var-common.inc | 67 | include whitelist-var-common.inc |
| 40 | 68 | ||
| 41 | caps.drop all | 69 | caps.drop all |