From 0f65e7fa6ace3757624b08a553515ddf9f7c5269 Mon Sep 17 00:00:00 2001
From: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
Date: Mon, 18 Jan 2021 18:26:27 +0100
Subject: harden and fix cheese.profile

hardening: wusc + wruc
fix: settings was immutable
---
 etc/profile-a-l/cheese.profile | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'etc/profile-a-l/cheese.profile')

diff --git a/etc/profile-a-l/cheese.profile b/etc/profile-a-l/cheese.profile
index 337117c4a..aca1f5876 100644
--- a/etc/profile-a-l/cheese.profile
+++ b/etc/profile-a-l/cheese.profile
@@ -19,7 +19,10 @@ include disable-xdg.inc
 
 whitelist ${VIDEOS}
 whitelist ${PICTURES}
+whitelist /usr/share/gnome-video-effects
 include whitelist-common.inc
+include whitelist-runuser-common.inc
+include whitelist-usr-share-common.inc
 include whitelist-var-common.inc
 
 apparmor
@@ -43,5 +46,6 @@ private-cache
 private-etc alternatives,clutter-1.0,dconf,drirc,fonts,gtk-3.0
 private-tmp
 
-dbus-user none
+dbus-user filter
+dbus-user.talk ca.desrt.dconf
 dbus-system none
-- 
cgit v1.2.3-70-g09d2