From d1336c9927d7f88fc939c2b7a319655cdd898240 Mon Sep 17 00:00:00 2001 From: "Kelvin M. Klann" Date: Thu, 24 Mar 2022 14:47:17 -0300 Subject: disable-programs.inc: blacklist ~/Applications dir It is used for storing AppImages. Note that even when blacklisting a directory, it is possible to execute an AppImage from it. For example, the following works: firejail --noprofile --blacklist='${HOME}/Applications' --appimage \ ~/Applications/foo.AppImage While the resulting process does not appear to have access to the blacklisted directory. --- etc/inc/disable-programs.inc | 1 + 1 file changed, 1 insertion(+) (limited to 'etc/inc/disable-programs.inc') diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index efe1b2572..558ae2446 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -1144,6 +1144,7 @@ blacklist ${HOME}/.yarn-config blacklist ${HOME}/.yarncache blacklist ${HOME}/.yarnrc blacklist ${HOME}/.zoom +blacklist ${HOME}/Applications # used for storing AppImages blacklist ${HOME}/Arduino blacklist ${HOME}/Monero/wallets blacklist ${HOME}/Nextcloud -- cgit v1.2.3-70-g09d2