Skip to content

Commit

Permalink
Add '$HOME/.local/share/pki' to blacklist
Browse files Browse the repository at this point in the history 
Since nss 3.42, '$HOME/.local/share/pki' is supported dir for storing certs
https://hg.mozilla.org/projects/nss/rev/da45424cb9a0b4d8e45e5040e2e3b574d994e254
  • Loading branch information
@Vincent43
Vincent43 committed Feb 3, 2019
1 parent e5312c4 commit 63c3505
Show file tree
Hide file tree
Showing 11 changed files with 27 additions and 1 deletion.
3 changes: 3 additions & 0 deletions etc-fixes/0.9.52/firefox.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,7 @@ noblacklist ${HOME}/.local/share/okular
noblacklist ${HOME}/.local/share/qpdfview
noblacklist ${HOME}/.mozilla
noblacklist ${HOME}/.pki
noblacklist ${HOME}/.local/share/pki

include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
Expand All @@ -32,6 +33,7 @@ include /etc/firejail/disable-programs.inc
mkdir ${HOME}/.cache/mozilla/firefox
mkdir ${HOME}/.mozilla
mkdir ${HOME}/.pki
mkdir ${HOME}/.local/share/pki
whitelist ${DOWNLOADS}
whitelist ${HOME}/.cache/gnome-mplayer/plugin
whitelist ${HOME}/.cache/mozilla/firefox
Expand Down Expand Up @@ -60,6 +62,7 @@ whitelist ${HOME}/.mozilla
whitelist ${HOME}/.pentadactyl
whitelist ${HOME}/.pentadactylrc
whitelist ${HOME}/.pki
whitelist ${HOME}/.local/share/pki
whitelist ${HOME}/.vimperator
whitelist ${HOME}/.vimperatorrc
whitelist ${HOME}/.wine-pipelight
Expand Down
3 changes: 3 additions & 0 deletions etc/chromium-common.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -7,15 +7,18 @@ include chromium-common.local
#include globals.local

noblacklist ${HOME}/.pki
noblacklist ${HOME}/.local/share/pki

include disable-common.inc
include disable-devel.inc
include disable-interpreters.inc
include disable-programs.inc

mkdir ${HOME}/.pki
mkdir ${HOME}/.local/share/pki
whitelist ${DOWNLOADS}
whitelist ${HOME}/.pki
whitelist ${HOME}/.local/share/pki
include whitelist-common.inc
include whitelist-var-common.inc

Expand Down
1 change: 1 addition & 0 deletions etc/disable-common.inc
View file
Original file line number Diff line number Diff line change
Expand Up @@ -306,6 +306,7 @@ blacklist ${HOME}/.mutt
blacklist ${HOME}/.muttrc
blacklist ${HOME}/.netrc
blacklist ${HOME}/.pki
blacklist ${HOME}/.local/share/pki
blacklist ${HOME}/.smbcredentials
blacklist ${HOME}/.ssh
blacklist ${HOME}/.vaults
Expand Down
1 change: 1 addition & 0 deletions etc/evolution.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,7 @@ noblacklist ${HOME}/.config/evolution
noblacklist ${HOME}/.gnupg
noblacklist ${HOME}/.local/share/evolution
noblacklist ${HOME}/.pki
noblacklist ${HOME}/.local/share/pki

include disable-common.inc
include disable-devel.inc
Expand Down
3 changes: 3 additions & 0 deletions etc/firefox-common.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -10,15 +10,18 @@ include firefox-common.local
#include firefox-common-addons.inc

noblacklist ${HOME}/.pki
noblacklist ${HOME}/.local/share/pki

include disable-common.inc
include disable-devel.inc
include disable-interpreters.inc
include disable-programs.inc

mkdir ${HOME}/.pki
mkdir ${HOME}/.local/share/pki
whitelist ${DOWNLOADS}
whitelist ${HOME}/.pki
whitelist ${HOME}/.local/share/pki
include whitelist-common.inc
include whitelist-var-common.inc

Expand Down
3 changes: 3 additions & 0 deletions etc/franz.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@ include globals.local
noblacklist ${HOME}/.cache/Franz
noblacklist ${HOME}/.config/Franz
noblacklist ${HOME}/.pki
noblacklist ${HOME}/.local/share/pki

include disable-common.inc
include disable-devel.inc
Expand All @@ -17,10 +18,12 @@ include disable-programs.inc
mkdir ${HOME}/.cache/Franz
mkdir ${HOME}/.config/Franz
mkdir ${HOME}/.pki
mkdir ${HOME}/.local/share/pki
whitelist ${DOWNLOADS}
whitelist ${HOME}/.cache/Franz
whitelist ${HOME}/.config/Franz
whitelist ${HOME}/.pki
whitelist ${HOME}/.local/share/pki
include whitelist-common.inc

caps.drop all
Expand Down
3 changes: 2 additions & 1 deletion etc/mendeleydesktop.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,8 @@ noblacklist ${HOME}/.cache/Mendeley Ltd.
noblacklist ${HOME}/.config/Mendeley Ltd.
noblacklist ${HOME}/.local/share/Mendeley Ltd.
noblacklist ${HOME}/.local/share/data/Mendeley Ltd.
noblacklist ${HOME}/.pki/nssdb
noblacklist ${HOME}/.pki
noblacklist ${HOME}/.local/share/pki

# Allow python (blacklisted by disable-interpreters.inc)
noblacklist ${PATH}/python2*
Expand Down
3 changes: 3 additions & 0 deletions etc/midori.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ noblacklist ${HOME}/.local/share/midori
# noblacklist ${HOME}/.local/share/webkit
# noblacklist ${HOME}/.local/share/webkitgtk
noblacklist ${HOME}/.pki
noblacklist ${HOME}/.local/share/pki

include disable-common.inc
include disable-devel.inc
Expand All @@ -23,6 +24,7 @@ mkdir ${HOME}/.local/share/midori
mkdir ${HOME}/.local/share/webkit
mkdir ${HOME}/.local/share/webkitgtk
mkdir ${HOME}/.pki
mkdir ${HOME}/.local/share/pki
whitelist ${DOWNLOADS}
whitelist ${HOME}/.cache/gnome-mplayer/plugin
whitelist ${HOME}/.cache/midori
Expand All @@ -33,6 +35,7 @@ whitelist ${HOME}/.local/share/midori
whitelist ${HOME}/.local/share/webkit
whitelist ${HOME}/.local/share/webkitgtk
whitelist ${HOME}/.pki
whitelist ${HOME}/.local/share/pki
include whitelist-common.inc

caps.drop all
Expand Down
3 changes: 3 additions & 0 deletions etc/min.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -9,15 +9,18 @@ include globals.local
noblacklist ${HOME}/.config/Min

noblacklist ${HOME}/.pki
noblacklist ${HOME}/.local/share/pki

include disable-common.inc
include disable-devel.inc
include disable-interpreters.inc
include disable-programs.inc

mkdir ${HOME}/.pki
mkdir ${HOME}/.local/share/pki
whitelist ${DOWNLOADS}
whitelist ${HOME}/.pki
whitelist ${HOME}/.local/share/pki
include whitelist-common.inc
include whitelist-var-common.inc

Expand Down
3 changes: 3 additions & 0 deletions etc/rambox.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@ include globals.local

noblacklist ${HOME}/.config/Rambox
noblacklist ${HOME}/.pki
noblacklist ${HOME}/.local/share/pki

include disable-common.inc
include disable-devel.inc
Expand All @@ -15,9 +16,11 @@ include disable-programs.inc

mkdir ${HOME}/.config/Rambox
mkdir ${HOME}/.pki
mkdir ${HOME}/.local/share/pki
whitelist ${DOWNLOADS}
whitelist ${HOME}/.config/Rambox
whitelist ${HOME}/.pki
whitelist ${HOME}/.local/share/pki
include whitelist-common.inc

caps.drop all
Expand Down
2 changes: 2 additions & 0 deletions etc/seamonkey.profile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ include globals.local
noblacklist ${HOME}/.cache/mozilla
noblacklist ${HOME}/.mozilla
noblacklist ${HOME}/.pki
noblacklist ${HOME}/.local/share/pki

include disable-common.inc
include disable-devel.inc
Expand All @@ -29,6 +30,7 @@ whitelist ${HOME}/.mozilla
whitelist ${HOME}/.pentadactyl
whitelist ${HOME}/.pentadactylrc
whitelist ${HOME}/.pki
whitelist ${HOME}/.local/share/pki
whitelist ${HOME}/.vimperator
whitelist ${HOME}/.vimperatorrc
whitelist ${HOME}/.wine-pipelight
Expand Down

0 comments on commit 63c3505

Please sign in to comment.