From 3848b98961614e1776b29ecfb76ef4c750b6b25f Mon Sep 17 00:00:00 2001 From: Fred Barclay Date: Tue, 7 Apr 2020 16:14:25 -0500 Subject: Replace `nodbus` with dbus-* filters See - 07fac581f6b9b5ed068f4c54a9521b51826375c5 for new dbus filters - https://github.com/netblue30/firejail/pull/3326#issuecomment-610423183 Except for ocenaudio, access/restrictions on dbus options should be unchanged Ocenaudio profile: dbus filters were sandboxed (initially `nodbus` was enabled) since comments indicated blocking dbus meant preferences were broken --- etc/gfeeds.profile | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'etc/gfeeds.profile') diff --git a/etc/gfeeds.profile b/etc/gfeeds.profile index 7de762e0d..e7913f5e4 100644 --- a/etc/gfeeds.profile +++ b/etc/gfeeds.profile @@ -38,7 +38,6 @@ caps.drop all machine-id netfilter no3d -#nodbus nodvd nogroups nonewprivs @@ -58,3 +57,6 @@ private-bin gfeeds,python3* private-dev private-etc alternatives,ca-certificates,crypto-policies,dbus-1,dconf,fonts,gconf,group,gtk-3.0,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,machine-id,mime.types,nsswitch.conf,pango,passwd,pki,protocols,resolv.conf,rpc,services,ssl,X11,xdg private-tmp + +# dbus-user none +# dbus-system none -- cgit v1.2.3-70-g09d2