From 3848b98961614e1776b29ecfb76ef4c750b6b25f Mon Sep 17 00:00:00 2001 From: Fred Barclay Date: Tue, 7 Apr 2020 16:14:25 -0500 Subject: Replace `nodbus` with dbus-* filters See - 07fac581f6b9b5ed068f4c54a9521b51826375c5 for new dbus filters - https://github.com/netblue30/firejail/pull/3326#issuecomment-610423183 Except for ocenaudio, access/restrictions on dbus options should be unchanged Ocenaudio profile: dbus filters were sandboxed (initially `nodbus` was enabled) since comments indicated blocking dbus meant preferences were broken --- etc/sysprof-cli.profile | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'etc/sysprof-cli.profile') diff --git a/etc/sysprof-cli.profile b/etc/sysprof-cli.profile index 935c7e9ca..8f4de130b 100644 --- a/etc/sysprof-cli.profile +++ b/etc/sysprof-cli.profile @@ -7,12 +7,13 @@ include sysprof-cli.local # added by included profile #include globals.local -nodbus - # There is no GUI help menu to break in the CLI version private-bin sysprof-cli private-lib +dbus-user none +dbus-system none + memory-deny-write-execute # Redirect -- cgit v1.2.3-54-g00ecf