From 0ea4ed8408f6fc506f9e4bef0f9e94fe14ea8d9c Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Sat, 16 Mar 2019 17:49:01 +0000 Subject: Seahorse revisited (#2600) * Refactor seahorse into a whitelist profile * Refactor seahorse-tool as a whitelist profile * Create seahorse-daemon.profile * Add seahorse-daemon to firecfg * Drop blacklist /tmp/.X11-unix from seahorse.profile Thanks to @rusty-snake for pointing out blacklisting /tmp/.X11-unix is ridiculous for GUI's. * Add non-GUI option to seahorse-daemon --- etc/seahorse-tool.profile | 13 ++----------- 1 file changed, 2 insertions(+), 11 deletions(-) (limited to 'etc/seahorse-tool.profile') diff --git a/etc/seahorse-tool.profile b/etc/seahorse-tool.profile index 2e792c8e0..96f365a4b 100644 --- a/etc/seahorse-tool.profile +++ b/etc/seahorse-tool.profile @@ -7,20 +7,11 @@ include seahorse-tool.local # added by included profile #include globals.local -# dconf -noblacklist ${HOME}/.config/dconf +noblacklist ${DOWNLOADS} -include disable-exec.inc -include disable-xdg.inc -include whitelist-var-common.inc - -apparmor -ipc-namespace - -disable-mnt private-tmp memory-deny-write-execute # Redirect -include gpg.profile +include seahorse.profile -- cgit v1.2.3-54-g00ecf