From 507007e77fcde79a9f9d93f32c11f835c13bc696 Mon Sep 17 00:00:00 2001 From: Alexander GQ Gerasiov Date: Sun, 17 Dec 2017 15:16:06 +0300 Subject: disable-common.inc: Blacklist .homesick homesick is dotfiles manager. It keeps dotfiles (e.g. .bashrc) in repository under ~/.homesick and puts symlinks into home directory. --- etc/disable-common.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/etc/disable-common.inc b/etc/disable-common.inc index 2e35f24ed..3344c3a1f 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc @@ -218,6 +218,7 @@ read-only ${HOME}/_exrc read-only ${HOME}/_gvimrc read-only ${HOME}/_vimrc read-only ${HOME}/dotfiles +read-only ${HOME}/.homesick # Make directories commonly found in $PATH read-only read-only ${HOME}/.gem -- cgit v1.2.3-54-g00ecf From bb34541f8eb0386465727911a6e693dae450057b Mon Sep 17 00:00:00 2001 From: Alexander GQ Gerasiov Date: Sun, 17 Dec 2017 15:20:02 +0300 Subject: Add new path for TelegramDesktop files. Latest versions of TelegramDesktop supports both old (~/.TelegramDesktop) and new (~/.local/share/TelegramDesktop) location of sensitive data files. --- etc/disable-programs.inc | 1 + etc/telegram.profile | 1 + 2 files changed, 2 insertions(+) diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index fdd2c8a3c..baa9e40de 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -318,6 +318,7 @@ blacklist ${HOME}/.local/share/QuiteRss blacklist ${HOME}/.local/share/Ricochet blacklist ${HOME}/.local/share/Steam blacklist ${HOME}/.local/share/SuperHexagon +blacklist ${HOME}/.local/share/TelegramDesktop blacklist ${HOME}/.local/share/Terraria blacklist ${HOME}/.local/share/TpLogger blacklist ${HOME}/.local/share/akregator diff --git a/etc/telegram.profile b/etc/telegram.profile index e3ccaf1a0..ba5512ed3 100644 --- a/etc/telegram.profile +++ b/etc/telegram.profile @@ -6,6 +6,7 @@ include /etc/firejail/telegram.local include /etc/firejail/globals.local noblacklist ${HOME}/.TelegramDesktop +noblacklist ${HOME}/.local/share/TelegramDesktop include /etc/firejail/disable-common.inc include /etc/firejail/disable-devel.inc -- cgit v1.2.3-54-g00ecf