From 8410cd8b2c8bd3c5e683ef4ed95e8c7120045867 Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Thu, 1 Aug 2019 11:04:49 +0200 Subject: some profile fixups - add a private-bin to firefox for fedora (still need testing) - add a temporary workaround for #2877 ghostwriter sience this break export and preview with pandoc - remove 'name slack' from slack.profile sience this is the only profile with name --- etc/firefox.profile | 2 ++ etc/ghostwriter.profile | 3 ++- etc/slack.profile | 1 - 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/etc/firefox.profile b/etc/firefox.profile index 84c647cb9..ad275bab6 100644 --- a/etc/firefox.profile +++ b/etc/firefox.profile @@ -16,6 +16,8 @@ whitelist ${HOME}/.mozilla # firefox requires a shell to launch on Arch. #private-bin bash,dbus-launch,dbus-send,env,firefox,sh,which +# Fedora use shell scripts to launch firefox, at least this is required +#private-bin bash,firefox,basename,uname,false,pidof,cat,rm,rmdir,mkdir,sed,ln,true,dirname,which,awk,env # private-etc must first be enabled in firefox-common.profile #private-etc firefox diff --git a/etc/ghostwriter.profile b/etc/ghostwriter.profile index 1fb2d8f58..a068f85c9 100644 --- a/etc/ghostwriter.profile +++ b/etc/ghostwriter.profile @@ -39,5 +39,6 @@ shell none #private-bin ghostwriter,pandoc private-cache private-dev -private-etc alternatives,ca-certificates,crypto-policies,dbus-1,dconf,fonts,gconf,groups,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,login.defs,machine-id,mime.types,nsswitch.conf,pango,passwd,pki,protocols,resolv.conf,rpc,services,ssl,Trolltech.conf,X11,xdg +# passwd,login.defs,firejail are a temporary workaround for #2877 and can be removed once it is fixed +private-etc alternatives,ca-certificates,crypto-policies,dbus-1,dconf,fonts,gconf,groups,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,machine-id,mime.types,nsswitch.conf,pango,pki,protocols,resolv.conf,rpc,services,ssl,Trolltech.conf,X11,xdg,firejail private-tmp diff --git a/etc/slack.profile b/etc/slack.profile index 5c10ef0ba..f9ad7c190 100644 --- a/etc/slack.profile +++ b/etc/slack.profile @@ -20,7 +20,6 @@ include whitelist-common.inc include whitelist-var-common.inc caps.drop all -name slack netfilter nodvd nogroups -- cgit v1.2.3-70-g09d2