aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar smitsohu <smitsohu@gmail.com>2021-10-23 16:45:12 +0200
committerLibravatar smitsohu <smitsohu@gmail.com>2021-10-23 16:45:12 +0200
commitb143fd26eb47de1b0745cf0c11d8ab14a4b4235e (patch)
tree7de013b8691f69a6d23691fdb823241de6087b2b /etc
parentpromote /run/udev/data to wrc (diff)
downloadfirejail-b143fd26eb47de1b0745cf0c11d8ab14a4b4235e.tar.gz
firejail-b143fd26eb47de1b0745cf0c11d8ab14a4b4235e.tar.zst
firejail-b143fd26eb47de1b0745cf0c11d8ab14a4b4235e.zip
add wrc to several profiles
Diffstat (limited to 'etc')
-rw-r--r--etc/profile-a-l/akonadi_control.profile1
-rw-r--r--etc/profile-a-l/akregator.profile1
-rw-r--r--etc/profile-a-l/ark.profile1
-rw-r--r--etc/profile-a-l/audacious.profile1
-rw-r--r--etc/profile-a-l/baloo_file.profile1
-rw-r--r--etc/profile-a-l/dragon.profile1
-rw-r--r--etc/profile-a-l/falkon.profile1
-rw-r--r--etc/profile-a-l/gimp.profile1
-rw-r--r--etc/profile-a-l/gwenview.profile1
-rw-r--r--etc/profile-a-l/inkscape.profile1
-rw-r--r--etc/profile-a-l/kaffeine.profile1
-rw-r--r--etc/profile-a-l/kate.profile1
-rw-r--r--etc/profile-a-l/kcalc.profile1
-rw-r--r--etc/profile-a-l/kdiff3.profile2
-rw-r--r--etc/profile-a-l/kget.profile1
-rw-r--r--etc/profile-a-l/kmail.profile1
-rw-r--r--etc/profile-a-l/konversation.profile1
-rw-r--r--etc/profile-a-l/ktorrent.profile1
-rw-r--r--etc/profile-a-l/kwin_x11.profile1
-rw-r--r--etc/profile-a-l/kwrite.profile1
-rw-r--r--etc/profile-a-l/libreoffice.profile1
-rw-r--r--etc/profile-m-z/okular.profile1
22 files changed, 23 insertions, 0 deletions
diff --git a/etc/profile-a-l/akonadi_control.profile b/etc/profile-a-l/akonadi_control.profile
index 168e81985..f3fb678d1 100644
--- a/etc/profile-a-l/akonadi_control.profile
+++ b/etc/profile-a-l/akonadi_control.profile
@@ -27,6 +27,7 @@ include disable-exec.inc
27include disable-interpreters.inc 27include disable-interpreters.inc
28include disable-programs.inc 28include disable-programs.inc
29 29
30include whitelist-run-common.inc
30include whitelist-var-common.inc 31include whitelist-var-common.inc
31 32
32# disabled options below are not compatible with the apparmor profile for mysqld-akonadi. 33# disabled options below are not compatible with the apparmor profile for mysqld-akonadi.
diff --git a/etc/profile-a-l/akregator.profile b/etc/profile-a-l/akregator.profile
index d1e7df37b..39008d67a 100644
--- a/etc/profile-a-l/akregator.profile
+++ b/etc/profile-a-l/akregator.profile
@@ -25,6 +25,7 @@ whitelist ${HOME}/.local/share/akregator
25whitelist ${HOME}/.local/share/kssl 25whitelist ${HOME}/.local/share/kssl
26whitelist ${HOME}/.local/share/kxmlgui5/akregator 26whitelist ${HOME}/.local/share/kxmlgui5/akregator
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-run-common.inc
28include whitelist-var-common.inc 29include whitelist-var-common.inc
29 30
30caps.drop all 31caps.drop all
diff --git a/etc/profile-a-l/ark.profile b/etc/profile-a-l/ark.profile
index 45071dc62..a26592f3a 100644
--- a/etc/profile-a-l/ark.profile
+++ b/etc/profile-a-l/ark.profile
@@ -16,6 +16,7 @@ include disable-interpreters.inc
16include disable-programs.inc 16include disable-programs.inc
17 17
18whitelist /usr/share/ark 18whitelist /usr/share/ark
19include whitelist-run-common.inc
19include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
20include whitelist-var-common.inc 21include whitelist-var-common.inc
21 22
diff --git a/etc/profile-a-l/audacious.profile b/etc/profile-a-l/audacious.profile
index d71370b7e..e9ecdd72e 100644
--- a/etc/profile-a-l/audacious.profile
+++ b/etc/profile-a-l/audacious.profile
@@ -17,6 +17,7 @@ include disable-interpreters.inc
17include disable-programs.inc 17include disable-programs.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20include whitelist-run-common.inc
20include whitelist-var-common.inc 21include whitelist-var-common.inc
21 22
22apparmor 23apparmor
diff --git a/etc/profile-a-l/baloo_file.profile b/etc/profile-a-l/baloo_file.profile
index 252016bec..55d2453d8 100644
--- a/etc/profile-a-l/baloo_file.profile
+++ b/etc/profile-a-l/baloo_file.profile
@@ -25,6 +25,7 @@ include disable-exec.inc
25include disable-interpreters.inc 25include disable-interpreters.inc
26include disable-programs.inc 26include disable-programs.inc
27 27
28include whitelist-run-common.inc
28include whitelist-var-common.inc 29include whitelist-var-common.inc
29 30
30apparmor 31apparmor
diff --git a/etc/profile-a-l/dragon.profile b/etc/profile-a-l/dragon.profile
index 26243ab4e..d5591adfb 100644
--- a/etc/profile-a-l/dragon.profile
+++ b/etc/profile-a-l/dragon.profile
@@ -19,6 +19,7 @@ include disable-shell.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21whitelist /usr/share/dragonplayer 21whitelist /usr/share/dragonplayer
22include whitelist-run-common.inc
22include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 24include whitelist-var-common.inc
24 25
diff --git a/etc/profile-a-l/falkon.profile b/etc/profile-a-l/falkon.profile
index 62ea449a6..03d6b30a1 100644
--- a/etc/profile-a-l/falkon.profile
+++ b/etc/profile-a-l/falkon.profile
@@ -23,6 +23,7 @@ whitelist ${HOME}/.cache/falkon
23whitelist ${HOME}/.config/falkon 23whitelist ${HOME}/.config/falkon
24whitelist /usr/share/falkon 24whitelist /usr/share/falkon
25include whitelist-common.inc 25include whitelist-common.inc
26include whitelist-run-common.inc
26include whitelist-runuser-common.inc 27include whitelist-runuser-common.inc
27include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
28include whitelist-var-common.inc 29include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gimp.profile b/etc/profile-a-l/gimp.profile
index df9c2ac7a..28070cb9c 100644
--- a/etc/profile-a-l/gimp.profile
+++ b/etc/profile-a-l/gimp.profile
@@ -39,6 +39,7 @@ whitelist /usr/share/gegl-0.4
39whitelist /usr/share/gimp 39whitelist /usr/share/gimp
40whitelist /usr/share/mypaint-data 40whitelist /usr/share/mypaint-data
41whitelist /usr/share/lensfun 41whitelist /usr/share/lensfun
42include whitelist-run-common.inc
42include whitelist-usr-share-common.inc 43include whitelist-usr-share-common.inc
43include whitelist-var-common.inc 44include whitelist-var-common.inc
44 45
diff --git a/etc/profile-a-l/gwenview.profile b/etc/profile-a-l/gwenview.profile
index 8becf6d84..d98d341ae 100644
--- a/etc/profile-a-l/gwenview.profile
+++ b/etc/profile-a-l/gwenview.profile
@@ -25,6 +25,7 @@ include disable-interpreters.inc
25include disable-programs.inc 25include disable-programs.inc
26include disable-shell.inc 26include disable-shell.inc
27 27
28include whitelist-run-common.inc
28include whitelist-var-common.inc 29include whitelist-var-common.inc
29 30
30apparmor 31apparmor
diff --git a/etc/profile-a-l/inkscape.profile b/etc/profile-a-l/inkscape.profile
index e0015e69a..016a4d6c8 100644
--- a/etc/profile-a-l/inkscape.profile
+++ b/etc/profile-a-l/inkscape.profile
@@ -29,6 +29,7 @@ include disable-programs.inc
29include disable-xdg.inc 29include disable-xdg.inc
30 30
31whitelist /usr/share/inkscape 31whitelist /usr/share/inkscape
32include whitelist-run-common.inc
32include whitelist-usr-share-common.inc 33include whitelist-usr-share-common.inc
33include whitelist-var-common.inc 34include whitelist-var-common.inc
34 35
diff --git a/etc/profile-a-l/kaffeine.profile b/etc/profile-a-l/kaffeine.profile
index 8799a6f24..e74c57546 100644
--- a/etc/profile-a-l/kaffeine.profile
+++ b/etc/profile-a-l/kaffeine.profile
@@ -22,6 +22,7 @@ include disable-interpreters.inc
22include disable-programs.inc 22include disable-programs.inc
23include disable-xdg.inc 23include disable-xdg.inc
24 24
25include whitelist-run-common.inc
25include whitelist-var-common.inc 26include whitelist-var-common.inc
26 27
27caps.drop all 28caps.drop all
diff --git a/etc/profile-a-l/kate.profile b/etc/profile-a-l/kate.profile
index d8b2dddb1..8c340d536 100644
--- a/etc/profile-a-l/kate.profile
+++ b/etc/profile-a-l/kate.profile
@@ -29,6 +29,7 @@ include disable-exec.inc
29# include disable-interpreters.inc 29# include disable-interpreters.inc
30include disable-programs.inc 30include disable-programs.inc
31 31
32include whitelist-run-common.inc
32include whitelist-var-common.inc 33include whitelist-var-common.inc
33 34
34# apparmor 35# apparmor
diff --git a/etc/profile-a-l/kcalc.profile b/etc/profile-a-l/kcalc.profile
index c551dbdbe..06978cbf1 100644
--- a/etc/profile-a-l/kcalc.profile
+++ b/etc/profile-a-l/kcalc.profile
@@ -28,6 +28,7 @@ whitelist /usr/share/config.kcfg/kcalc.kcfg
28whitelist /usr/share/kcalc 28whitelist /usr/share/kcalc
29whitelist /usr/share/kconf_update/kcalcrc.upd 29whitelist /usr/share/kconf_update/kcalcrc.upd
30include whitelist-common.inc 30include whitelist-common.inc
31include whitelist-run-common.inc
31include whitelist-runuser-common.inc 32include whitelist-runuser-common.inc
32include whitelist-usr-share-common.inc 33include whitelist-usr-share-common.inc
33include whitelist-var-common.inc 34include whitelist-var-common.inc
diff --git a/etc/profile-a-l/kdiff3.profile b/etc/profile-a-l/kdiff3.profile
index fa50b0a20..df7ee31dc 100644
--- a/etc/profile-a-l/kdiff3.profile
+++ b/etc/profile-a-l/kdiff3.profile
@@ -23,6 +23,8 @@ include disable-interpreters.inc
23include disable-shell.inc 23include disable-shell.inc
24include disable-xdg.inc 24include disable-xdg.inc
25 25
26# Add the next line to your kdiff3.local if you don't need to compare files in /run.
27#include whitelist-run-common.inc
26include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
27# Add the next line to your kdiff3.local if you don't need to compare files in /usr/share. 29# Add the next line to your kdiff3.local if you don't need to compare files in /usr/share.
28#include whitelist-usr-share-common.inc 30#include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/kget.profile b/etc/profile-a-l/kget.profile
index ec315b431..9b6646725 100644
--- a/etc/profile-a-l/kget.profile
+++ b/etc/profile-a-l/kget.profile
@@ -20,6 +20,7 @@ include disable-exec.inc
20include disable-interpreters.inc 20include disable-interpreters.inc
21include disable-programs.inc 21include disable-programs.inc
22 22
23include whitelist-run-common.inc
23include whitelist-var-common.inc 24include whitelist-var-common.inc
24 25
25caps.drop all 26caps.drop all
diff --git a/etc/profile-a-l/kmail.profile b/etc/profile-a-l/kmail.profile
index 2c645677c..0796e6876 100644
--- a/etc/profile-a-l/kmail.profile
+++ b/etc/profile-a-l/kmail.profile
@@ -37,6 +37,7 @@ include disable-exec.inc
37include disable-interpreters.inc 37include disable-interpreters.inc
38include disable-programs.inc 38include disable-programs.inc
39 39
40include whitelist-run-common.inc
40include whitelist-var-common.inc 41include whitelist-var-common.inc
41 42
42# apparmor 43# apparmor
diff --git a/etc/profile-a-l/konversation.profile b/etc/profile-a-l/konversation.profile
index 723fef0d2..1121dc8a5 100644
--- a/etc/profile-a-l/konversation.profile
+++ b/etc/profile-a-l/konversation.profile
@@ -20,6 +20,7 @@ include disable-programs.inc
20include disable-shell.inc 20include disable-shell.inc
21include disable-xdg.inc 21include disable-xdg.inc
22 22
23include whitelist-run-common.inc
23include whitelist-var-common.inc 24include whitelist-var-common.inc
24 25
25caps.drop all 26caps.drop all
diff --git a/etc/profile-a-l/ktorrent.profile b/etc/profile-a-l/ktorrent.profile
index 9d8aa1bd7..6e3b0c875 100644
--- a/etc/profile-a-l/ktorrent.profile
+++ b/etc/profile-a-l/ktorrent.profile
@@ -37,6 +37,7 @@ whitelist ${HOME}/.kde4/share/config/ktorrentrc
37whitelist ${HOME}/.local/share/ktorrent 37whitelist ${HOME}/.local/share/ktorrent
38whitelist ${HOME}/.local/share/kxmlgui5/ktorrent 38whitelist ${HOME}/.local/share/kxmlgui5/ktorrent
39include whitelist-common.inc 39include whitelist-common.inc
40include whitelist-run-common.inc
40include whitelist-var-common.inc 41include whitelist-var-common.inc
41 42
42caps.drop all 43caps.drop all
diff --git a/etc/profile-a-l/kwin_x11.profile b/etc/profile-a-l/kwin_x11.profile
index 32e9870e5..0b8763c29 100644
--- a/etc/profile-a-l/kwin_x11.profile
+++ b/etc/profile-a-l/kwin_x11.profile
@@ -21,6 +21,7 @@ include disable-programs.inc
21include disable-shell.inc 21include disable-shell.inc
22include disable-xdg.inc 22include disable-xdg.inc
23 23
24include whitelist-run-common.inc
24include whitelist-var-common.inc 25include whitelist-var-common.inc
25 26
26caps.drop all 27caps.drop all
diff --git a/etc/profile-a-l/kwrite.profile b/etc/profile-a-l/kwrite.profile
index cd5ce7034..aff6f3181 100644
--- a/etc/profile-a-l/kwrite.profile
+++ b/etc/profile-a-l/kwrite.profile
@@ -24,6 +24,7 @@ include disable-programs.inc
24include disable-shell.inc 24include disable-shell.inc
25include disable-xdg.inc 25include disable-xdg.inc
26 26
27include whitelist-run-common.inc
27include whitelist-var-common.inc 28include whitelist-var-common.inc
28 29
29apparmor 30apparmor
diff --git a/etc/profile-a-l/libreoffice.profile b/etc/profile-a-l/libreoffice.profile
index 328307705..12ff79748 100644
--- a/etc/profile-a-l/libreoffice.profile
+++ b/etc/profile-a-l/libreoffice.profile
@@ -21,6 +21,7 @@ include disable-devel.inc
21include disable-exec.inc 21include disable-exec.inc
22include disable-programs.inc 22include disable-programs.inc
23 23
24include whitelist-run-common.inc
24include whitelist-var-common.inc 25include whitelist-var-common.inc
25 26
26# Debian 10/Ubuntu 18.04 come with their own apparmor profile, but it is not in enforce mode. 27# Debian 10/Ubuntu 18.04 come with their own apparmor profile, but it is not in enforce mode.
diff --git a/etc/profile-m-z/okular.profile b/etc/profile-m-z/okular.profile
index 0a200b46e..fb28ad89f 100644
--- a/etc/profile-m-z/okular.profile
+++ b/etc/profile-m-z/okular.profile
@@ -36,6 +36,7 @@ whitelist /usr/share/kconf_update/okular.upd
36whitelist /usr/share/kxmlgui5/okular 36whitelist /usr/share/kxmlgui5/okular
37whitelist /usr/share/okular 37whitelist /usr/share/okular
38whitelist /usr/share/poppler 38whitelist /usr/share/poppler
39include whitelist-run-common.inc
39include whitelist-runuser-common.inc 40include whitelist-runuser-common.inc
40include whitelist-usr-share-common.inc 41include whitelist-usr-share-common.inc
41include whitelist-var-common.inc 42include whitelist-var-common.inc