From fccd220bbe044fbaf24e069fb4b8d8a877f5b00d Mon Sep 17 00:00:00 2001 From: Gaming4JC Date: Fri, 23 Oct 2015 20:13:47 -0400 Subject: update firejail with hardening patches --- pcr/firejail/001-disable-secret.inc-more-security.patch | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 pcr/firejail/001-disable-secret.inc-more-security.patch (limited to 'pcr/firejail/001-disable-secret.inc-more-security.patch') diff --git a/pcr/firejail/001-disable-secret.inc-more-security.patch b/pcr/firejail/001-disable-secret.inc-more-security.patch new file mode 100644 index 000000000..da84ffb68 --- /dev/null +++ b/pcr/firejail/001-disable-secret.inc-more-security.patch @@ -0,0 +1,10 @@ +*** disable-secret.inc 2015-09-24 07:10:07.000000000 -0400 +--- disable-secret.inc.patched 2015-10-23 19:35:33.106100952 -0400 +*************** +*** 6,8 **** +--- 6,10 ---- + blacklist ${HOME}/kde/share/apps/kwallet + blacklist ${HOME}/.gnupg + blacklist ${HOME}/.local/share/recently-used.xbel ++ blacklist ${HOME}/*.kdb ++ blacklist ${HOME}/*.key -- cgit v1.2.3-2-g168b