From 526426530915249741e14b8b1ac333872b158e57 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Sat, 23 Jan 2021 20:13:28 +0000 Subject: refactor google-earth{-pro} (#3915) * refactor google-earth{-pro} blacklisting * fix google-earth-pro.profile I've included all binaries found in the Arch Linux AUR package to private-bin. But I also added a note on ignoring private-bin because I'm not sure what google-earth is doing on other distro's. * unbreak google-earth.profile Not sure why we need grep, ls and sed in private-bin exactly but keeping them around wouldn't hurt too much I guess. --- etc/inc/disable-programs.inc | 5 +---- etc/profile-a-l/google-earth-pro.profile | 11 +++++++++-- etc/profile-a-l/google-earth.profile | 15 +++------------ 3 files changed, 13 insertions(+), 18 deletions(-) (limited to 'etc') diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index 8b81927e3..1d1de6044 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -469,10 +469,7 @@ blacklist ${HOME}/.gimp* blacklist ${HOME}/.gist blacklist ${HOME}/.gitconfig blacklist ${HOME}/.gnome/gnome-schedule -blacklist ${HOME}/.googleearth/Cache -blacklist ${HOME}/.googleearth/Temp -blacklist ${HOME}/.googleearth/myplaces.backup.kml -blacklist ${HOME}/.googleearth/myplaces.kml +blacklist ${HOME}/.googleearth blacklist ${HOME}/.gradle blacklist ${HOME}/.gramps blacklist ${HOME}/.guayadeque diff --git a/etc/profile-a-l/google-earth-pro.profile b/etc/profile-a-l/google-earth-pro.profile index c1f919769..a0e4f6d86 100644 --- a/etc/profile-a-l/google-earth-pro.profile +++ b/etc/profile-a-l/google-earth-pro.profile @@ -1,7 +1,14 @@ -# Firejail profile alias for google-earth +# Firejail profile for google-earth-pro # This file is overwritten after every install/update +# Persistent local customizations +include google-earth-pro.local +# Persistent global definitions +# added by included profile +#include globals.local -private-bin google-earth-pro +# If you see errors about missing commands, uncomment the below or put 'ignore private-bin' into your google-earth-pro.local +#ignore private-bin +private-bin google-earth-pro,googleearth,googleearth-bin,gpsbabel,readlink,repair_tool,which,xdg-mime,xdg-settings # Redirect include google-earth.profile diff --git a/etc/profile-a-l/google-earth.profile b/etc/profile-a-l/google-earth.profile index a331ef8d2..12b1cbafd 100644 --- a/etc/profile-a-l/google-earth.profile +++ b/etc/profile-a-l/google-earth.profile @@ -6,10 +6,7 @@ include google-earth.local include globals.local noblacklist ${HOME}/.config/Google -noblacklist ${HOME}/.googleearth/Cache -noblacklist ${HOME}/.googleearth/Temp -noblacklist ${HOME}/.googleearth/myplaces.backup.kml -noblacklist ${HOME}/.googleearth/myplaces.kml +noblacklist ${HOME}/.googleearth include disable-common.inc include disable-devel.inc @@ -19,15 +16,9 @@ include disable-passwdmgr.inc include disable-programs.inc mkdir ${HOME}/.config/Google -mkdir ${HOME}/.googleearth/Cache -mkdir ${HOME}/.googleearth/Temp -mkfile ${HOME}/.googleearth/myplaces.backup.kml -mkfile ${HOME}/.googleearth/myplaces.kml +mkdir ${HOME}/.googleearth whitelist ${HOME}/.config/Google -whitelist ${HOME}/.googleearth/Cache -whitelist ${HOME}/.googleearth/Temp -whitelist ${HOME}/.googleearth/myplaces.backup.kml -whitelist ${HOME}/.googleearth/myplaces.kml +whitelist ${HOME}/.googleearth include whitelist-common.inc caps.drop all -- cgit v1.2.3-70-g09d2