From 8d0bde2b85542e1f3385a104ac105d2ed8e795e1 Mon Sep 17 00:00:00 2001 From: Tad Date: Tue, 8 Aug 2017 19:45:44 -0400 Subject: Harden 17 profiles using private-bin --- etc/chromium.profile | 1 + 1 file changed, 1 insertion(+) (limited to 'etc/chromium.profile') diff --git a/etc/chromium.profile b/etc/chromium.profile index 7637b8ea5..3ccc8e4cb 100644 --- a/etc/chromium.profile +++ b/etc/chromium.profile @@ -31,6 +31,7 @@ nogroups notv shell none +# private-bin chromium,chromium-browser,chromedriver private-dev # private-tmp - problems with multiple browser sessions -- cgit v1.2.3-54-g00ecf From be6a0765d131c3408c783895d4776b562ea2c5e0 Mon Sep 17 00:00:00 2001 From: Tad Date: Tue, 8 Aug 2017 20:04:12 -0400 Subject: Chrom* on Arch Linux no longer uses a perl script --- etc/chromium.profile | 3 +-- etc/flashpeak-slimjet.profile | 3 +-- etc/google-chrome-beta.profile | 3 +-- etc/google-chrome-unstable.profile | 3 +-- etc/google-chrome.profile | 3 +-- 5 files changed, 5 insertions(+), 10 deletions(-) (limited to 'etc/chromium.profile') diff --git a/etc/chromium.profile b/etc/chromium.profile index 3ccc8e4cb..e28606054 100644 --- a/etc/chromium.profile +++ b/etc/chromium.profile @@ -11,8 +11,7 @@ noblacklist ~/.config/chromium-flags.conf noblacklist ~/.pki include /etc/firejail/disable-common.inc -# chromium is distributed with a perl script on Arch -# include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-devel.inc include /etc/firejail/disable-programs.inc mkdir ~/.cache/chromium diff --git a/etc/flashpeak-slimjet.profile b/etc/flashpeak-slimjet.profile index a661c179a..1a4c8dea6 100644 --- a/etc/flashpeak-slimjet.profile +++ b/etc/flashpeak-slimjet.profile @@ -15,8 +15,7 @@ noblacklist ~/.config/slimjet noblacklist ~/.pki include /etc/firejail/disable-common.inc -# chromium is distributed with a perl script on Arch -# include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-devel.inc include /etc/firejail/disable-programs.inc mkdir ~/.cache/slimjet diff --git a/etc/google-chrome-beta.profile b/etc/google-chrome-beta.profile index 9c8574d3f..031a43504 100644 --- a/etc/google-chrome-beta.profile +++ b/etc/google-chrome-beta.profile @@ -10,8 +10,7 @@ noblacklist ~/.config/google-chrome-beta noblacklist ~/.pki include /etc/firejail/disable-common.inc -# chromium is distributed with a perl script on Arch -# include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-devel.inc include /etc/firejail/disable-programs.inc mkdir ~/.cache/google-chrome-beta diff --git a/etc/google-chrome-unstable.profile b/etc/google-chrome-unstable.profile index b7ed33703..4dcdef578 100644 --- a/etc/google-chrome-unstable.profile +++ b/etc/google-chrome-unstable.profile @@ -10,8 +10,7 @@ noblacklist ~/.config/google-chrome-unstable noblacklist ~/.pki include /etc/firejail/disable-common.inc -# chromium is distributed with a perl script on Arch -# include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-devel.inc include /etc/firejail/disable-programs.inc mkdir ~/.cache/google-chrome-unstable diff --git a/etc/google-chrome.profile b/etc/google-chrome.profile index 6a3c54468..2caa3c4ec 100644 --- a/etc/google-chrome.profile +++ b/etc/google-chrome.profile @@ -10,8 +10,7 @@ noblacklist ~/.config/google-chrome noblacklist ~/.pki include /etc/firejail/disable-common.inc -# chromium is distributed with a perl script on Arch -# include /etc/firejail/disable-devel.inc +include /etc/firejail/disable-devel.inc include /etc/firejail/disable-programs.inc mkdir ~/.cache/google-chrome -- cgit v1.2.3-54-g00ecf