From 826bbf14599f8bf04c4a0452d734cbc596e35a4e Mon Sep 17 00:00:00 2001 From: netblue30 Date: Mon, 16 Oct 2017 21:12:55 -0400 Subject: commented out private-etc in firefox profile, fixed whitelisting problems for /srv directory --- etc/firefox.profile | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'etc/firefox.profile') diff --git a/etc/firefox.profile b/etc/firefox.profile index 80cdb6ab0..551e1aa90 100644 --- a/etc/firefox.profile +++ b/etc/firefox.profile @@ -76,7 +76,10 @@ tracelog # firefox requires a shell to launch on Arch. We can possibly remove sh though. # private-bin firefox,which,sh,dbus-launch,dbus-send,env,sh,bash private-dev -private-etc iceweasel,ca-certificates,ssl,machine-id,dconf,selinux,passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,xdg,gtk-2.0,gtk-3.0,X11,pango,fonts,firefox,mime.types,mailcap,asound.conf,pulse + +# private-etc below works fine on most distributions. There are some problems on CentOS. +# private-etc iceweasel,ca-certificates,ssl,machine-id,dconf,selinux,passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,xdg,gtk-2.0,gtk-3.0,X11,pango,fonts,firefox,mime.types,mailcap,asound.conf,pulse + private-tmp noexec ${HOME} -- cgit v1.2.3-54-g00ecf