From 49e763ef0f9d6fd3eb80fbee3afc94ebfc731502 Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Thu, 19 Mar 2020 19:14:24 +0100 Subject: harden baobab and gitg --- etc/baobab.profile | 1 + etc/gitg.profile | 8 ++++++++ 2 files changed, 9 insertions(+) diff --git a/etc/baobab.profile b/etc/baobab.profile index 18c862a4d..d87de9d66 100644 --- a/etc/baobab.profile +++ b/etc/baobab.profile @@ -29,6 +29,7 @@ novideo protocol unix seccomp shell none +tracelog private-bin baobab private-dev diff --git a/etc/gitg.profile b/etc/gitg.profile index 56f8e136f..3c6f9d72f 100644 --- a/etc/gitg.profile +++ b/etc/gitg.profile @@ -19,6 +19,14 @@ include disable-interpreters.inc include disable-passwdmgr.inc include disable-programs.inc +#whitelist ${HOME}/YOUR_GIT_PROJECTS_DIRECTORY +#whitelist ${HOME}/.config/git +#whitelist ${HOME}/.gitconfig +#whitelist ${HOME}/.git-credentials +#whitelist ${HOME}/.local/share/gitg +#whitelist ${HOME}/.ssh +#include whitelist-common.inc + whitelist /usr/share/gitg include whitelist-usr-share-common.inc include whitelist-var-common.inc -- cgit v1.2.3-54-g00ecf