diff options
| author |  smitsohu <smitsohu@gmail.com> | 2018-12-07 22:36:18 +0100 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2018-12-07 22:36:18 +0100 |
| commit | b1cb91ca86f175387564b6db3f93d7cdc07e0467 (patch) | |
| tree | 5df73a2ee8f995f01cc6fd8952853bafdd09e72c | |
| parent | improve sandboxing of KDE apps: set KDE_FORK_SLAVES, blacklist slave-sockets (diff) | |
| download | firejail-b1cb91ca86f175387564b6db3f93d7cdc07e0467.tar.gz firejail-b1cb91ca86f175387564b6db3f93d7cdc07e0467.tar.zst firejail-b1cb91ca86f175387564b6db3f93d7cdc07e0467.zip | |
update dolphin profile
services previously started by kdeinit now run inside the sandbox due to KDE_FORK_SLAVES being set
| -rw-r--r-- | etc/dolphin.profile | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/etc/dolphin.profile b/etc/dolphin.profile index 936876ddf..c899ffec9 100644 --- a/etc/dolphin.profile +++ b/etc/dolphin.profile | |||
| @@ -6,8 +6,6 @@ include dolphin.local | |||
| 6 | # Persistent global definitions | 6 | # Persistent global definitions |
| 7 | include globals.local | 7 | include globals.local |
| 8 | 8 | ||
| 9 | # warning: firejail is currently not effectively constraining dolphin since used services are started by kdeinit5 | ||
| 10 | |||
| 11 | noblacklist ${HOME}/.local/share/Trash | 9 | noblacklist ${HOME}/.local/share/Trash |
| 12 | # noblacklist ${HOME}/.cache/dolphin - disable-programs.inc is disabled, see below | 10 | # noblacklist ${HOME}/.cache/dolphin - disable-programs.inc is disabled, see below |
| 13 | # noblacklist ${HOME}/.config/dolphinrc | 11 | # noblacklist ${HOME}/.config/dolphinrc |
| @@ -32,7 +30,7 @@ protocol unix | |||
| 32 | seccomp | 30 | seccomp |
| 33 | shell none | 31 | shell none |
| 34 | 32 | ||
| 35 | # private-dev | 33 | private-dev |
| 36 | # private-tmp | 34 | # private-tmp |
| 37 | 35 | ||
| 38 | join-or-start dolphin | 36 | join-or-start dolphin |