Merge pull request #4740 from WhyNotHugo/whitelist-ro

Implement a `whitelist-ro` command
netblue30 · Dec 28, 2021 · ff094c1 · ff094c1
2 parents 106440f + 92f438c
commit ff094c1
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/src/firejail/profile.c b/src/firejail/profile.c
@@ -1752,6 +1752,18 @@ void profile_read(const char *fname) {
  continue;
  }
 
+ if (strncmp(ptr, "whitelist-ro ", 13) == 0) {
+ char *whitelist, *readonly;
+ if (asprintf(&whitelist, "whitelist %s", ptr + 13) == -1)
+ errExit("asprintf");
+ profile_add(whitelist);
+ if (asprintf(&readonly, "read-only %s", ptr + 13) == -1)
+ errExit("asprintf");
+ profile_add(readonly);
+ free(ptr);
+ continue;
+ }
+
  // process quiet
  // todo: a quiet in the profile file cannot be disabled by --ignore on command line
  if (strcmp(ptr, "quiet") == 0) {