From 6e44b5dde497ff369f1a8d2cc3ef1569127f5fd1 Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Sat, 5 Oct 2019 19:24:37 +0000 Subject: whitelist-usr-share-common.inc (#2972) * Work on whitelist-usr-share-common * sorting; add Modules + QT/KDE stuff * add wusc.inc to more profiles [needs testing] * update * gitg, firefox, evince * /usr/share/{p11-kit,pixmaps,pki,qt5,tcl8.6,terminfo} * more profiles * remove wusc.inc from feedreader Even with 'whitelist /usr/share/*', feedreader trys to dereference a NULL pointer. * more profiles * whitelist /usr/share breaks wget even with whitelist /usr/share/* * extend wusc.inc * update * Add alsa,crypto-policies and zoneinfo * readd wusc.inc to wget and feedreader * update * testing results: Debian Buster with KDE * more KDE stuff * fix tb --- etc/ghostwriter.profile | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'etc/ghostwriter.profile') diff --git a/etc/ghostwriter.profile b/etc/ghostwriter.profile index b09d28b21..8a9ccabc2 100644 --- a/etc/ghostwriter.profile +++ b/etc/ghostwriter.profile @@ -19,6 +19,13 @@ include disable-passwdmgr.inc include disable-programs.inc include disable-xdg.inc +whitelist /usr/share/ghostwriter +whitelist /usr/share/mozilla-dicts +whitelist /usr/share/texlive +whitelist /usr/share/pandoc +whitelist /usr/share/pandoc-* +include whitelist-usr-share-common.inc + apparmor caps.drop all machine-id -- cgit v1.2.3-54-g00ecf