From a954cb2162995d6d2530d0f5a45c2c19454dac25 Mon Sep 17 00:00:00 2001 From: rusty-snake <41237666+rusty-snake@users.noreply.github.com> Date: Fri, 3 Apr 2020 17:51:17 +0200 Subject: allow using wruc on any program @glitsj16 thanks for the pointer that we now have whitelist globbing --- RELNOTES | 1 + etc/whitelist-runuser-common.inc | 1 + 2 files changed, 2 insertions(+) diff --git a/RELNOTES b/RELNOTES index b982202d6..247a3ebe6 100644 --- a/RELNOTES +++ b/RELNOTES @@ -4,6 +4,7 @@ firejail (0.9.63) baseline; urgency=low * SELinux labeling support * 32-bit seccomp filter * restrict ${RUNUSER} in serveral profiles + * whitelist globbing * new condition: HAS_NOSOUND * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl diff --git a/etc/whitelist-runuser-common.inc b/etc/whitelist-runuser-common.inc index de59d03d3..9ffd3d5be 100644 --- a/etc/whitelist-runuser-common.inc +++ b/etc/whitelist-runuser-common.inc @@ -6,5 +6,6 @@ include whitelist-runuser-common.local whitelist ${RUNUSER}/bus whitelist ${RUNUSER}/dconf whitelist ${RUNUSER}/gdm/Xauthority +whitelist ${RUNUSER}/.mutter-Xwaylandauth.* whitelist ${RUNUSER}/pulse/native whitelist ${RUNUSER}/wayland-0 -- cgit v1.2.3-54-g00ecf