aboutsummaryrefslogtreecommitdiffstats
path: root/etc/inc/disable-common.inc
Commit message (Collapse)AuthorAge
* disable-common.inc: blacklist ldns toolsLibravatar Kelvin M. Klann2020-12-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | drill(1) from ldns is the first tool suggested on the Arch Wiki for DNS lookup: https://wiki.archlinux.org/index.php/Domain_name_resolution#Lookup_utilities Home page: https://www.nlnetlabs.nl/projects/ldns/about/ $ pacman -Q ldns ldns 1.7.1-2 $ pacman -Qlq ldns | grep bin /usr/bin/ /usr/bin/drill /usr/bin/ldns-chaos /usr/bin/ldns-compare-zones /usr/bin/ldns-config /usr/bin/ldns-dane /usr/bin/ldns-dpa /usr/bin/ldns-gen-zone /usr/bin/ldns-key2ds /usr/bin/ldns-keyfetcher /usr/bin/ldns-keygen /usr/bin/ldns-mx /usr/bin/ldns-notify /usr/bin/ldns-nsec3-hash /usr/bin/ldns-read-zone /usr/bin/ldns-resolver /usr/bin/ldns-revoke /usr/bin/ldns-rrsig /usr/bin/ldns-signzone /usr/bin/ldns-test-edns /usr/bin/ldns-testns /usr/bin/ldns-update /usr/bin/ldns-verify-zone /usr/bin/ldns-version /usr/bin/ldns-walk /usr/bin/ldns-zcat /usr/bin/ldns-zsplit /usr/bin/ldnsd
* disable-common.inc: sort DNS / RUNUSER pathsLibravatar Kelvin M. Klann2020-12-10
|
* make ${HOME}/.local/lib read-onlyLibravatar rusty-snake2020-11-24
|
* various profilesLibravatar rusty-snake2020-11-20
| | | | | | - disable-common: read-only ${HOME}/.zfunc - fix #3761 -- w3m with w3m-img installed does not display images when on virtual console/framebuffer - yelp can be used to display manpages
* add read-only items for ksh and mkshLibravatar glitsj162020-11-14
| | | Follow-up from discussion in https://github.com/netblue30/firejail/pull/3751.
* add gvfs-metadata to disable-common.incLibravatar Tad2020-11-13
| | | | - this might need to be looked into
* update konsole/plasma blacklistLibravatar smitsohu2020-11-11
|
* profile fixesLibravatar rusty-snake2020-11-06
| | | | | | | | - update README.md and RELNOTES - add 'blacklist ${RUNUSER}/.flatpak-cache' to disable-common.inc - fix #3728, fonts in openSUSE KDE with wc / wusc - fix gnome-todo - fix xournalpp MathTeX whitelist
* allow flatpak/exports also for systemd-wide locationLibravatar rusty-snake2020-09-02
|
* Update disable-common.inc (#3499)Libravatar rusty-snake2020-07-09
| | | | | | | * Update disable-common.inc * Update disable-common.inc [skip ci]
* ${RUNUSER} blacklisting + typoLibravatar rusty-snake2020-05-27
|
* better blacklist orderingLibravatar Reiner Herrmann2020-05-16
|
* Blacklist busybox by defaultLibravatar Reiner Herrmann2020-05-16
| | | | It's a collection of many tools, that might not be allowed individually. When it's needed, it can easily be allowed again.
* various hardening (#3394)Libravatar rusty-snake2020-05-02
|
* reorganize github etc directoryLibravatar netblue302020-04-21