From 98e81eab8fc3ae39a2563f3431f402c0a63d8616 Mon Sep 17 00:00:00 2001 From: "Kelvin M. Klann" Date: Sun, 14 Jul 2024 01:24:45 -0300 Subject: [PATCH] profiles: browsers: sort blacklist entries See etc/templates/profile.template. Added on commit f3d126bf1 ("disable curl and wget in browsers based on firefox and chromium", 2021-12-18). Relates to #4852. --- etc/profile-a-l/chromium-common.profile | 8 ++++---- etc/profile-a-l/firefox-common.profile | 8 ++++---- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/etc/profile-a-l/chromium-common.profile b/etc/profile-a-l/chromium-common.profile index 37bfa0bfea8..3397cc20d97 100644 --- a/etc/profile-a-l/chromium-common.profile +++ b/etc/profile-a-l/chromium-common.profile @@ -17,6 +17,10 @@ noblacklist /usr/lib/chromium/chrome-sandbox # to have access to Gnome extensions (extensions.gnome.org) via browser connector #include allow-python3.inc +blacklist ${PATH}/curl +blacklist ${PATH}/wget +blacklist ${PATH}/wget2 + mkdir ${HOME}/.local/share/pki mkdir ${HOME}/.pki whitelist ${HOME}/.local/share/pki @@ -35,10 +39,6 @@ include whitelist-run-common.inc ?BROWSER_DISABLE_U2F: private-dev #private-tmp # issues when using multiple browser sessions -blacklist ${PATH}/curl -blacklist ${PATH}/wget -blacklist ${PATH}/wget2 - # This prevents access to passwords saved in GNOME Keyring and KWallet, also # breaks Gnome connector. #dbus-user none diff --git a/etc/profile-a-l/firefox-common.profile b/etc/profile-a-l/firefox-common.profile index 9c8601e7bc5..b3e38698f31 100644 --- a/etc/profile-a-l/firefox-common.profile +++ b/etc/profile-a-l/firefox-common.profile @@ -17,6 +17,10 @@ include firefox-common.local noblacklist ${HOME}/.local/share/pki noblacklist ${HOME}/.pki +blacklist ${PATH}/curl +blacklist ${PATH}/wget +blacklist ${PATH}/wget2 + include disable-common.inc include disable-devel.inc include disable-exec.inc @@ -66,10 +70,6 @@ disable-mnt private-etc @tls-ca,@x11,mailcap,mime.types,os-release private-tmp -blacklist ${PATH}/curl -blacklist ${PATH}/wget -blacklist ${PATH}/wget2 - # 'dbus-user none' breaks various desktop integration features like global menus, native notifications, # Gnome connector, KDE connect and power management on KDE Plasma. dbus-user none