From fc44a9a9e94aa83f5a919c17252de0a5c454088f Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Sun, 6 Oct 2019 00:37:09 +0200 Subject: Wusc fixes (#2992) * Add wusc to eom * Fix wusc in firefox Without access to /usr/share/ca-certificates all HTTPS traffic gets the FF dialog 'Warning: Potential Security Risk Ahead'. Probably needed in thunderbird profile too (untested). * Fix wusc ordering in meld Just an alphabetical ordering nitpick. --- etc/eom.profile | 3 +++ etc/firefox.profile | 1 + etc/meld.profile | 6 +++--- 3 files changed, 7 insertions(+), 3 deletions(-) (limited to 'etc') diff --git a/etc/eom.profile b/etc/eom.profile index 437326d38..18b978543 100644 --- a/etc/eom.profile +++ b/etc/eom.profile @@ -8,6 +8,9 @@ include globals.local noblacklist ${HOME}/.config/mate/eom +whitelist /usr/share/eom +include whitelist-usr-share-common.inc + # private-bin, private-etc and private-lib break 'Open With' / 'Open in file manager' # comment those if you need that functionality # or put 'ignore private-bin', 'ignore private-etc' and 'ignore private-lib' in your eom.local diff --git a/etc/firefox.profile b/etc/firefox.profile index b05321ece..81db1db9b 100644 --- a/etc/firefox.profile +++ b/etc/firefox.profile @@ -14,6 +14,7 @@ mkdir ${HOME}/.mozilla whitelist ${HOME}/.cache/mozilla/firefox whitelist ${HOME}/.mozilla +whitelist /usr/share/ca-certificates whitelist /usr/share/mozilla include whitelist-usr-share-common.inc diff --git a/etc/meld.profile b/etc/meld.profile index 8e3668d57..22ec2b999 100644 --- a/etc/meld.profile +++ b/etc/meld.profile @@ -34,13 +34,13 @@ include disable-passwdmgr.inc # Uncomment the next line (or put it into your meld.local) if you don't need to compare files in disable-programs.inc. #include disable-programs.inc -# Uncomment the next line (or put it into your meld.local) if you don't need to compare files in /var. -#include whitelist-var-common.inc - # Uncomment the next lines (or put it into your meld.local) if you don't need to compare files in /usr/share. #whitelist /usr/share/meld #include whitelist-usr-share-common.inc +# Uncomment the next line (or put it into your meld.local) if you don't need to compare files in /var. +#include whitelist-var-common.inc + apparmor caps.drop all ipc-namespace -- cgit v1.2.3-54-g00ecf