From 3848b98961614e1776b29ecfb76ef4c750b6b25f Mon Sep 17 00:00:00 2001 From: Fred Barclay Date: Tue, 7 Apr 2020 16:14:25 -0500 Subject: Replace `nodbus` with dbus-* filters See - 07fac581f6b9b5ed068f4c54a9521b51826375c5 for new dbus filters - https://github.com/netblue30/firejail/pull/3326#issuecomment-610423183 Except for ocenaudio, access/restrictions on dbus options should be unchanged Ocenaudio profile: dbus filters were sandboxed (initially `nodbus` was enabled) since comments indicated blocking dbus meant preferences were broken --- etc/gnome-calculator.profile | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'etc/gnome-calculator.profile') diff --git a/etc/gnome-calculator.profile b/etc/gnome-calculator.profile index 627ae368a..a18a123d3 100644 --- a/etc/gnome-calculator.profile +++ b/etc/gnome-calculator.profile @@ -27,7 +27,6 @@ machine-id # net none netfilter no3d -# nodbus - makes settings immutable nodvd nogroups nonewprivs @@ -47,4 +46,8 @@ private-dev #private-lib gdk-pixbuf-2.*,gio,girepository-1.*,gvfs,libgconf-2.so.*,libgnutls.so.*,libproxy.so.*,librsvg-2.so.*,libxml2.so.* private-tmp +# makes settings immutable +# dbus-user none +# dbus-system none + # memory-deny-write-execute -- cgit v1.2.3-70-g09d2