diff options
author | 2019-08-01 21:34:29 +0200 | |
---|---|---|
committer | 2019-08-01 21:34:29 +0200 | |
commit | 2bbb8f38b31e35ac282224aea92bb076518b94d6 (patch) | |
tree | c256b79f7e6cee37b10142247db409af0999c404 | |
parent | tune pam-tmpdir file permissions (diff) | |
download | firejail-2bbb8f38b31e35ac282224aea92bb076518b94d6.tar.gz firejail-2bbb8f38b31e35ac282224aea92bb076518b94d6.tar.zst firejail-2bbb8f38b31e35ac282224aea92bb076518b94d6.zip |
misc profile fixes (Debian 10 related)
-rw-r--r-- | etc/akonadi_control.profile | 3 | ||||
-rw-r--r-- | etc/kwin_x11.profile | 3 |
2 files changed, 5 insertions, 1 deletions
diff --git a/etc/akonadi_control.profile b/etc/akonadi_control.profile index 1c16f940e..904c784c6 100644 --- a/etc/akonadi_control.profile +++ b/etc/akonadi_control.profile | |||
@@ -17,6 +17,7 @@ noblacklist ${HOME}/.local/share/apps/korganizer | |||
17 | noblacklist ${HOME}/.local/share/contacts | 17 | noblacklist ${HOME}/.local/share/contacts |
18 | noblacklist ${HOME}/.local/share/local-mail | 18 | noblacklist ${HOME}/.local/share/local-mail |
19 | noblacklist ${HOME}/.local/share/notes | 19 | noblacklist ${HOME}/.local/share/notes |
20 | noblacklist /sbin | ||
20 | noblacklist /tmp/akonadi-* | 21 | noblacklist /tmp/akonadi-* |
21 | noblacklist /usr/sbin | 22 | noblacklist /usr/sbin |
22 | 23 | ||
@@ -45,7 +46,7 @@ nosound | |||
45 | notv | 46 | notv |
46 | nou2f | 47 | nou2f |
47 | novideo | 48 | novideo |
48 | # protocol unix,inet,inet6 | 49 | # protocol unix,inet,inet6,netlink |
49 | # seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice | 50 | # seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice |
50 | tracelog | 51 | tracelog |
51 | 52 | ||
diff --git a/etc/kwin_x11.profile b/etc/kwin_x11.profile index ee07636d3..d512dd100 100644 --- a/etc/kwin_x11.profile +++ b/etc/kwin_x11.profile | |||
@@ -5,6 +5,9 @@ include kwin_x11.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include globals.local | 6 | include globals.local |
7 | 7 | ||
8 | # fix automatical kwin_x11 sandboxing: | ||
9 | # echo KDEWM=kwin_x11 >> ~/.pam_environment | ||
10 | |||
8 | noblacklist ${HOME}/.cache/kwin | 11 | noblacklist ${HOME}/.cache/kwin |
9 | noblacklist ${HOME}/.config/kwinrc | 12 | noblacklist ${HOME}/.config/kwinrc |
10 | noblacklist ${HOME}/.config/kwinrulesrc | 13 | noblacklist ${HOME}/.config/kwinrulesrc |