diff options
author | 2018-01-30 22:37:44 +0100 | |
---|---|---|
committer | 2018-01-30 22:37:44 +0100 | |
commit | ad4dff87b669919a4283145861ed4f60dbd2f321 (patch) | |
tree | 0fa1896313f199256053a104b29187f8c9144299 | |
parent | Add basic contributing info. Still need to add for pull requests, etc. (diff) | |
download | firejail-ad4dff87b669919a4283145861ed4f60dbd2f321.tar.gz firejail-ad4dff87b669919a4283145861ed4f60dbd2f321.tar.zst firejail-ad4dff87b669919a4283145861ed4f60dbd2f321.zip |
harden KDE
-rw-r--r-- | etc/disable-common.inc | 1 | ||||
-rw-r--r-- | etc/disable-programs.inc | 5 | ||||
-rw-r--r-- | etc/kwin_x11.profile | 1 |
3 files changed, 7 insertions, 0 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc index 91c554f2e..1dd500c12 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc | |||
@@ -74,6 +74,7 @@ blacklist ${HOME}/.local/share/konsole | |||
74 | blacklist ${HOME}/.local/share/kwin | 74 | blacklist ${HOME}/.local/share/kwin |
75 | blacklist ${HOME}/.local/share/plasma | 75 | blacklist ${HOME}/.local/share/plasma |
76 | blacklist ${HOME}/.local/share/solid | 76 | blacklist ${HOME}/.local/share/solid |
77 | read-only ${HOME}/.cache/ksycoca5_* | ||
77 | read-only ${HOME}/.config/kdeglobals | 78 | read-only ${HOME}/.config/kdeglobals |
78 | read-only ${HOME}/.config/kioslaverc | 79 | read-only ${HOME}/.config/kioslaverc |
79 | read-only ${HOME}/.kde/share/config/kdeglobals | 80 | read-only ${HOME}/.kde/share/config/kdeglobals |
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 4d9c4d85f..5a75974ac 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -490,6 +490,10 @@ blacklist ${HOME}/.cache/icedove | |||
490 | blacklist ${HOME}/.cache/INRIA/Natron | 490 | blacklist ${HOME}/.cache/INRIA/Natron |
491 | blacklist ${HOME}/.cache/inox | 491 | blacklist ${HOME}/.cache/inox |
492 | blacklist ${HOME}/.cache/iridium | 492 | blacklist ${HOME}/.cache/iridium |
493 | blacklist ${HOME}/.cache/kscreenlocker_greet | ||
494 | blacklist ${HOME}/.cache/ksmserver-logout-greeter | ||
495 | blacklist ${HOME}/.cache/ksplashqml | ||
496 | blacklist ${HOME}/.cache/kwin | ||
493 | blacklist ${HOME}/.cache/libgweather | 497 | blacklist ${HOME}/.cache/libgweather |
494 | blacklist ${HOME}/.cache/liferea | 498 | blacklist ${HOME}/.cache/liferea |
495 | blacklist ${HOME}/.cache/midori | 499 | blacklist ${HOME}/.cache/midori |
@@ -503,6 +507,7 @@ blacklist ${HOME}/.cache/opera-beta | |||
503 | blacklist ${HOME}/.cache/org.gnome.Books | 507 | blacklist ${HOME}/.cache/org.gnome.Books |
504 | blacklist ${HOME}/.cache/pdfmod | 508 | blacklist ${HOME}/.cache/pdfmod |
505 | blacklist ${HOME}/.cache/peek | 509 | blacklist ${HOME}/.cache/peek |
510 | blacklist ${HOME}/.cache/plasmashell | ||
506 | blacklist ${HOME}/.cache/qBittorrent | 511 | blacklist ${HOME}/.cache/qBittorrent |
507 | blacklist ${HOME}/.cache/qupzilla | 512 | blacklist ${HOME}/.cache/qupzilla |
508 | blacklist ${HOME}/.cache/qutebrowser | 513 | blacklist ${HOME}/.cache/qutebrowser |
diff --git a/etc/kwin_x11.profile b/etc/kwin_x11.profile index 91bb62efc..92d2e38ae 100644 --- a/etc/kwin_x11.profile +++ b/etc/kwin_x11.profile | |||
@@ -5,6 +5,7 @@ include /etc/firejail/kwin_x11.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
7 | 7 | ||
8 | noblacklist ${HOME}/.cache/kwin | ||
8 | noblacklist ${HOME}/.config/kwinrc | 9 | noblacklist ${HOME}/.config/kwinrc |
9 | noblacklist ${HOME}/.config/kwinrulesrc | 10 | noblacklist ${HOME}/.config/kwinrulesrc |
10 | noblacklist ${HOME}/.local/share/kwin | 11 | noblacklist ${HOME}/.local/share/kwin |