aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar smitsohu <smitsohu@gmail.com>2018-12-11 00:25:23 +0100
committerLibravatar smitsohu <smitsohu@gmail.com>2018-12-11 00:25:23 +0100
commit6e8ece1f52a1abba5020b6f8d51e7a33dfa3e4b6 (patch)
treedd2713737f55b709f1c4bd9be9c015bb36e11496
parentMerge pull request #2294 from rusty-snake/add-thunderbird-wayland (diff)
downloadfirejail-6e8ece1f52a1abba5020b6f8d51e7a33dfa3e4b6.tar.gz
firejail-6e8ece1f52a1abba5020b6f8d51e7a33dfa3e4b6.tar.zst
firejail-6e8ece1f52a1abba5020b6f8d51e7a33dfa3e4b6.zip
profile enhancements: blacklist kdesu daemon socket, rework c083a7b737050c532977b46fac6400f1dbc24ff6
-rw-r--r--etc/disable-common.inc10
-rw-r--r--etc/dolphin.profile1
2 files changed, 5 insertions, 6 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 481717d24..f7efc1dba 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -119,13 +119,11 @@ read-only ${HOME}/.local/share/kservices5
119read-only ${HOME}/.local/share/kssl 119read-only ${HOME}/.local/share/kssl
120 120
121# KDE sockets 121# KDE sockets
122blacklist ${RUNUSER}/kdeinit5__*
123blacklist ${RUNUSER}/*.slave-socket 122blacklist ${RUNUSER}/*.slave-socket
124# decide heuristically if the kdeinit4 socket can be blacklisted 123blacklist ${RUNUSER}/kdeinit5__*
125?HAS_NODBUS: blacklist ${RUNUSER}/ksocket-*/kdeinit4__* 124blacklist ${RUNUSER}/kdesud_*
126blacklist ${RUNUSER}/ksocket-*/*.slave-socket 125?HAS_NODBUS: blacklist ${RUNUSER}/ksocket-*
127?HAS_NODBUS: blacklist /tmp/ksocket-*/kdeinit4__* 126?HAS_NODBUS: blacklist /tmp/ksocket-*
128blacklist /tmp/ksocket-*/*.slave-socket
129 127
130# gnome 128# gnome
131# contains extensions, last used times of applications, and notifications 129# contains extensions, last used times of applications, and notifications
diff --git a/etc/dolphin.profile b/etc/dolphin.profile
index c899ffec9..fbf8014ad 100644
--- a/etc/dolphin.profile
+++ b/etc/dolphin.profile
@@ -19,6 +19,7 @@ include disable-passwdmgr.inc
19# include disable-programs.inc 19# include disable-programs.inc
20 20
21caps.drop all 21caps.drop all
22# net none
22netfilter 23netfilter
23nodvd 24nodvd
24nogroups 25nogroups