diff options
author | 2018-02-08 18:40:35 +0100 | |
---|---|---|
committer | 2018-02-08 18:40:35 +0100 | |
commit | a77cd8d18e5e8cb7ae18606cf48019fcd38f7b3b (patch) | |
tree | 054b9c8a531caec6492bb9bcf40cd6c7c41d18ae | |
parent | keep menu definitions read-only (diff) | |
download | firejail-a77cd8d18e5e8cb7ae18606cf48019fcd38f7b3b.tar.gz firejail-a77cd8d18e5e8cb7ae18606cf48019fcd38f7b3b.tar.zst firejail-a77cd8d18e5e8cb7ae18606cf48019fcd38f7b3b.zip |
restrict kssl
-rw-r--r-- | etc/akregator.profile | 1 | ||||
-rw-r--r-- | etc/disable-common.inc | 4 | ||||
-rw-r--r-- | etc/whitelist-common.inc | 3 |
3 files changed, 8 insertions, 0 deletions
diff --git a/etc/akregator.profile b/etc/akregator.profile index f2e5ea341..2c49ef9f0 100644 --- a/etc/akregator.profile +++ b/etc/akregator.profile | |||
@@ -17,6 +17,7 @@ mkfile ${HOME}/.config/akregatorrc | |||
17 | mkdir ${HOME}/.local/share/akregator | 17 | mkdir ${HOME}/.local/share/akregator |
18 | whitelist ${HOME}/.config/akregatorrc | 18 | whitelist ${HOME}/.config/akregatorrc |
19 | whitelist ${HOME}/.local/share/akregator | 19 | whitelist ${HOME}/.local/share/akregator |
20 | whitelist ${HOME}/.local/share/kssl | ||
20 | include /etc/firejail/whitelist-common.inc | 21 | include /etc/firejail/whitelist-common.inc |
21 | 22 | ||
22 | include /etc/firejail/whitelist-var-common.inc | 23 | include /etc/firejail/whitelist-var-common.inc |
diff --git a/etc/disable-common.inc b/etc/disable-common.inc index 522a14aad..996b505bc 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc | |||
@@ -83,15 +83,19 @@ read-only ${HOME}/.config/kdeglobals | |||
83 | read-only ${HOME}/.config/kio_httprc | 83 | read-only ${HOME}/.config/kio_httprc |
84 | read-only ${HOME}/.config/kiorc | 84 | read-only ${HOME}/.config/kiorc |
85 | read-only ${HOME}/.config/kioslaverc | 85 | read-only ${HOME}/.config/kioslaverc |
86 | read-only ${HOME}/.config/ksslcablacklist | ||
86 | read-only ${HOME}/.kde/share/config/kdeglobals | 87 | read-only ${HOME}/.kde/share/config/kdeglobals |
87 | read-only ${HOME}/.kde/share/config/kio_httprc | 88 | read-only ${HOME}/.kde/share/config/kio_httprc |
88 | read-only ${HOME}/.kde/share/config/kioslaverc | 89 | read-only ${HOME}/.kde/share/config/kioslaverc |
90 | read-only ${HOME}/.kde/share/config/ksslcablacklist | ||
89 | read-only ${HOME}/.kde/share/kde4/services | 91 | read-only ${HOME}/.kde/share/kde4/services |
90 | read-only ${HOME}/.kde4/share/config/kdeglobals | 92 | read-only ${HOME}/.kde4/share/config/kdeglobals |
91 | read-only ${HOME}/.kde4/share/config/kio_httprc | 93 | read-only ${HOME}/.kde4/share/config/kio_httprc |
92 | read-only ${HOME}/.kde4/share/config/kioslaverc | 94 | read-only ${HOME}/.kde4/share/config/kioslaverc |
95 | read-only ${HOME}/.kde4/share/config/ksslcablacklist | ||
93 | read-only ${HOME}/.kde4/share/kde4/services | 96 | read-only ${HOME}/.kde4/share/kde4/services |
94 | read-only ${HOME}/.local/share/kservices5 | 97 | read-only ${HOME}/.local/share/kservices5 |
98 | read-only ${HOME}/.local/share/kssl | ||
95 | 99 | ||
96 | # kdeinit socket | 100 | # kdeinit socket |
97 | blacklist /run/user/*/kdeinit5__* | 101 | blacklist /run/user/*/kdeinit5__* |
diff --git a/etc/whitelist-common.inc b/etc/whitelist-common.inc index 97846b4a3..c664d5a53 100644 --- a/etc/whitelist-common.inc +++ b/etc/whitelist-common.inc | |||
@@ -57,15 +57,18 @@ whitelist ${HOME}/.config/Trolltech.conf | |||
57 | whitelist ${HOME}/.config/kdeglobals | 57 | whitelist ${HOME}/.config/kdeglobals |
58 | whitelist ${HOME}/.config/kio_httprc | 58 | whitelist ${HOME}/.config/kio_httprc |
59 | whitelist ${HOME}/.config/kioslaverc | 59 | whitelist ${HOME}/.config/kioslaverc |
60 | whitelist ${HOME}/.config/ksslcablacklist | ||
60 | whitelist ${HOME}/.config/qt5ct | 61 | whitelist ${HOME}/.config/qt5ct |
61 | whitelist ${HOME}/.kde/share/config/kdeglobals | 62 | whitelist ${HOME}/.kde/share/config/kdeglobals |
62 | whitelist ${HOME}/.kde/share/config/kio_httprc | 63 | whitelist ${HOME}/.kde/share/config/kio_httprc |
63 | whitelist ${HOME}/.kde/share/config/kioslaverc | 64 | whitelist ${HOME}/.kde/share/config/kioslaverc |
65 | whitelist ${HOME}/.kde/share/config/ksslcablacklist | ||
64 | whitelist ${HOME}/.kde/share/config/oxygenrc | 66 | whitelist ${HOME}/.kde/share/config/oxygenrc |
65 | whitelist ${HOME}/.kde/share/icons | 67 | whitelist ${HOME}/.kde/share/icons |
66 | whitelist ${HOME}/.kde4/share/config/kdeglobals | 68 | whitelist ${HOME}/.kde4/share/config/kdeglobals |
67 | whitelist ${HOME}/.kde4/share/config/kio_httprc | 69 | whitelist ${HOME}/.kde4/share/config/kio_httprc |
68 | whitelist ${HOME}/.kde4/share/config/kioslaverc | 70 | whitelist ${HOME}/.kde4/share/config/kioslaverc |
71 | whitelist ${HOME}/.kde4/share/config/ksslcablacklist | ||
69 | whitelist ${HOME}/.kde4/share/config/oxygenrc | 72 | whitelist ${HOME}/.kde4/share/config/oxygenrc |
70 | whitelist ${HOME}/.kde4/share/icons | 73 | whitelist ${HOME}/.kde4/share/icons |
71 | whitelist ${HOME}/.local/share/qt5ct | 74 | whitelist ${HOME}/.local/share/qt5ct |