From 67204bb5a0178d4c5b770014157b61683e82e445 Mon Sep 17 00:00:00 2001
From: Simon Rettberg
Date: Thu, 28 Mar 2024 15:25:49 +0100
Subject: [lightdm-greeter-bwlp] Add generic blacklist for browser-login

This is trying to prevent the simplest escape routes to get to the open
web - namely, the "try to get to google" game, from where you can get
anywhere.
---
 .../data/etc/lightdm/greeter-url-blacklist.txt     | 58 ++++++++++++++++++++++
 .../10-weblogin-blacklist.conf                     |  2 +
 2 files changed, 60 insertions(+)
 create mode 100644 core/modules/lightdm-greeter-bwlp/data/etc/lightdm/greeter-url-blacklist.txt
 create mode 100644 core/modules/lightdm-greeter-bwlp/data/etc/lightdm/qt-lightdm-greeter.conf.d/10-weblogin-blacklist.conf

(limited to 'core')

diff --git a/core/modules/lightdm-greeter-bwlp/data/etc/lightdm/greeter-url-blacklist.txt b/core/modules/lightdm-greeter-bwlp/data/etc/lightdm/greeter-url-blacklist.txt
new file mode 100644
index 00000000..46bef8a3
--- /dev/null
+++ b/core/modules/lightdm-greeter-bwlp/data/etc/lightdm/greeter-url-blacklist.txt
@@ -0,0 +1,58 @@
+https://baidu.com/**
+https://*.baidu.com/**
+https://bing.com/**
+https://*.bing.com/**
+https://brave.com/**
+https://*.brave.com/**
+https://duckduckgo.com/**
+https://*.duckduckgo.com/**
+https://ecosia.org/**
+https://*.ecosia.org/**
+https://facebook.com/**
+https://*.facebook.com/**
+https://google.*/**
+https://*.google.*/**
+https://instagram.com/**
+https://*.instagram.com/**
+https://tiktok.com/**
+https://*.tiktok.com/**
+https://whatsapp.com/**
+https://*.whatsapp.com/**
+https://yahoo.*/**
+https://*.yahoo.*/**
+https://yandex.ru/**
+https://*.yandex.ru/**
+https://youtube.com/**
+https://*.youtube.com/**
+https://vimeo.com/**
+https://*.vimeo.com/**
+https://msn.com/**
+https://*.msn.com/**
+https://reddit.com/**
+https://*.reddit.com/**
+https://twitter.com/**
+https://*.twitter.com/**
+https://wikipedia.org/**
+https://*.wikipedia.org/**
+https://amazon.*/**
+https://*.amazon.*/**
+https://bilibili.com/**
+https://*.bilibili.com/**
+https://naver.com/**
+https://*.naver.com/**
+https://mail.ru/**
+https://*.mail.ru/**
+https://discord.com/**
+https://*.discord.com/**
+https://twitch.tv/**
+https://*.twitch.tv/**
+https://quora.com/**
+https://*.quora.com/**
+https://sharepoint.com/**
+https://*.sharepoint.com/**
+https://qq.com/**
+https://*.qq.com/**
+https://zoom.us/**
+https://*.zoom.us/**
+https://linkedin.com/**
+https://*.linkedin.com/**
diff --git a/core/modules/lightdm-greeter-bwlp/data/etc/lightdm/qt-lightdm-greeter.conf.d/10-weblogin-blacklist.conf b/core/modules/lightdm-greeter-bwlp/data/etc/lightdm/qt-lightdm-greeter.conf.d/10-weblogin-blacklist.conf
new file mode 100644
index 00000000..0821e6ba
--- /dev/null
+++ b/core/modules/lightdm-greeter-bwlp/data/etc/lightdm/qt-lightdm-greeter.conf.d/10-weblogin-blacklist.conf
@@ -0,0 +1,2 @@
+[General]
+shib-url-blacklist = /etc/lightdm/greeter-url-blacklist.txt
-- 
cgit v1.2.3-55-g7522