diff options
author | 2017-07-27 07:35:10 -0500 | |
---|---|---|
committer | 2017-07-27 07:35:10 -0500 | |
commit | 07877370edc2831c4fc50cd9982cb98ccd0656b9 (patch) | |
tree | b7795708516121a1b880c1021c06a28dceefb858 | |
parent | Updates after merges (diff) | |
download | firejail-07877370edc2831c4fc50cd9982cb98ccd0656b9.tar.gz firejail-07877370edc2831c4fc50cd9982cb98ccd0656b9.tar.zst firejail-07877370edc2831c4fc50cd9982cb98ccd0656b9.zip |
Allow eom and xviewer to write to user's trash
-rw-r--r-- | etc/eom.profile | 5 | ||||
-rw-r--r-- | etc/xviewer.profile | 4 |
2 files changed, 9 insertions, 0 deletions
diff --git a/etc/eom.profile b/etc/eom.profile index b5eedd989..28cb525c1 100644 --- a/etc/eom.profile +++ b/etc/eom.profile | |||
@@ -7,7 +7,9 @@ include /etc/firejail/eom.local | |||
7 | 7 | ||
8 | # Firejail profile for Eye of Mate (eom) | 8 | # Firejail profile for Eye of Mate (eom) |
9 | noblacklist ~/.config/mate/eom | 9 | noblacklist ~/.config/mate/eom |
10 | noblacklist ~/.Steam | ||
10 | noblacklist ~/.steam | 11 | noblacklist ~/.steam |
12 | noblacklist ~/.local/share/Trash | ||
11 | 13 | ||
12 | include /etc/firejail/disable-common.inc | 14 | include /etc/firejail/disable-common.inc |
13 | include /etc/firejail/disable-programs.inc | 15 | include /etc/firejail/disable-programs.inc |
@@ -28,3 +30,6 @@ tracelog | |||
28 | private-bin eom | 30 | private-bin eom |
29 | private-dev | 31 | private-dev |
30 | private-tmp | 32 | private-tmp |
33 | |||
34 | noexec ${HOME} | ||
35 | noexec /tmp | ||
diff --git a/etc/xviewer.profile b/etc/xviewer.profile index 4d0834189..906bcb814 100644 --- a/etc/xviewer.profile +++ b/etc/xviewer.profile | |||
@@ -9,6 +9,7 @@ include /etc/firejail/xviewer.local | |||
9 | noblacklist ~/.config/xviewer | 9 | noblacklist ~/.config/xviewer |
10 | noblacklist ~/.Steam | 10 | noblacklist ~/.Steam |
11 | noblacklist ~/.steam | 11 | noblacklist ~/.steam |
12 | noblacklist ~/.local/share/Trash | ||
12 | 13 | ||
13 | include /etc/firejail/disable-common.inc | 14 | include /etc/firejail/disable-common.inc |
14 | include /etc/firejail/disable-programs.inc | 15 | include /etc/firejail/disable-programs.inc |
@@ -28,3 +29,6 @@ tracelog | |||
28 | private-dev | 29 | private-dev |
29 | private-bin xviewer | 30 | private-bin xviewer |
30 | private-tmp | 31 | private-tmp |
32 | |||
33 | noexec ${HOME} | ||
34 | noexec /tmp | ||