diff options
author | 2017-09-15 16:13:04 +0200 | |
---|---|---|
committer | 2017-09-15 16:13:04 +0200 | |
commit | 3497195d44f96c0ea241138d8176bf0253409af5 (patch) | |
tree | e5250910f77a86cf6873bd646933195a96c06806 | |
parent | update whitelist-common.inc (diff) | |
download | firejail-3497195d44f96c0ea241138d8176bf0253409af5.tar.gz firejail-3497195d44f96c0ea241138d8176bf0253409af5.tar.zst firejail-3497195d44f96c0ea241138d8176bf0253409af5.zip |
little KDE app enhancements
-rw-r--r-- | etc/ark.profile | 3 | ||||
-rw-r--r-- | etc/gwenview.profile | 1 | ||||
-rw-r--r-- | etc/konversation.profile | 4 | ||||
-rw-r--r-- | etc/ktorrent.profile | 5 | ||||
-rw-r--r-- | etc/okular.profile | 1 |
5 files changed, 12 insertions, 2 deletions
diff --git a/etc/ark.profile b/etc/ark.profile index 2ed25a4e6..38bd5246e 100644 --- a/etc/ark.profile +++ b/etc/ark.profile | |||
@@ -29,3 +29,6 @@ shell none | |||
29 | private-dev | 29 | private-dev |
30 | # private-etc | 30 | # private-etc |
31 | private-tmp | 31 | private-tmp |
32 | |||
33 | noexec ${HOME} | ||
34 | noexec /tmp | ||
diff --git a/etc/gwenview.profile b/etc/gwenview.profile index 745468912..7f1577afe 100644 --- a/etc/gwenview.profile +++ b/etc/gwenview.profile | |||
@@ -35,5 +35,6 @@ private-bin gwenview,kbuildsycoca4,gimp,gimp-2.8 | |||
35 | private-dev | 35 | private-dev |
36 | # private-etc X11 | 36 | # private-etc X11 |
37 | 37 | ||
38 | # memory-deny-write-execute | ||
38 | noexec ${HOME} | 39 | noexec ${HOME} |
39 | noexec /tmp | 40 | noexec /tmp |
diff --git a/etc/konversation.profile b/etc/konversation.profile index 1a08c3d83..8ffc43487 100644 --- a/etc/konversation.profile +++ b/etc/konversation.profile | |||
@@ -25,3 +25,7 @@ tracelog | |||
25 | 25 | ||
26 | private-dev | 26 | private-dev |
27 | private-tmp | 27 | private-tmp |
28 | |||
29 | # memory-deny-write-execute | ||
30 | noexec ${HOME} | ||
31 | noexec /tmp | ||
diff --git a/etc/ktorrent.profile b/etc/ktorrent.profile index c5b887118..c0b37df3c 100644 --- a/etc/ktorrent.profile +++ b/etc/ktorrent.profile | |||
@@ -18,11 +18,11 @@ include /etc/firejail/disable-passwdmgr.inc | |||
18 | include /etc/firejail/disable-programs.inc | 18 | include /etc/firejail/disable-programs.inc |
19 | 19 | ||
20 | mkdir ~/.kde/share/apps/ktorrent | 20 | mkdir ~/.kde/share/apps/ktorrent |
21 | mkdir ~/.kde/share/config/ktorrentrc | ||
22 | mkdir ~/.kde4/share/apps/ktorrent | 21 | mkdir ~/.kde4/share/apps/ktorrent |
23 | mkdir ~/.kde4/share/config/ktorrentrc | ||
24 | mkdir ~/.local/share/ktorrent | 22 | mkdir ~/.local/share/ktorrent |
25 | mkfile ~/.config/ktorrentrc | 23 | mkfile ~/.config/ktorrentrc |
24 | mkfile ~/.kde/share/config/ktorrentrc | ||
25 | mkfile ~/.kde4/share/config/ktorrentrc | ||
26 | whitelist ${DOWNLOADS} | 26 | whitelist ${DOWNLOADS} |
27 | whitelist ~/.config/ktorrentrc | 27 | whitelist ~/.config/ktorrentrc |
28 | whitelist ~/.kde/share/apps/ktorrent | 28 | whitelist ~/.kde/share/apps/ktorrent |
@@ -49,5 +49,6 @@ shell none | |||
49 | private-dev | 49 | private-dev |
50 | private-tmp | 50 | private-tmp |
51 | 51 | ||
52 | # memory-deny-write-execute | ||
52 | noexec ${HOME} | 53 | noexec ${HOME} |
53 | noexec /tmp | 54 | noexec /tmp |
diff --git a/etc/okular.profile b/etc/okular.profile index d03891ebe..5a704ad26 100644 --- a/etc/okular.profile +++ b/etc/okular.profile | |||
@@ -39,5 +39,6 @@ private-dev | |||
39 | # private-etc fonts,X11 | 39 | # private-etc fonts,X11 |
40 | private-tmp | 40 | private-tmp |
41 | 41 | ||
42 | # memory-deny-write-execute | ||
42 | noexec ${HOME} | 43 | noexec ${HOME} |
43 | noexec /tmp | 44 | noexec /tmp |