aboutsummaryrefslogtreecommitdiffstats
path: root/etc/baloo_file.profile
diff options
context:
space:
mode:
authorLibravatar smitsohu <smitsohu@gmail.com>2018-11-04 19:22:15 +0100
committerLibravatar smitsohu <smitsohu@gmail.com>2018-11-04 19:22:15 +0100
commitd69e0cf1b35cac9185081bd6d95d82024868ae76 (patch)
tree4927745c1ae749b9b544137c7306a7457c2cecf3 /etc/baloo_file.profile
parentrecursive remounts: add fallback for old kernels, some improvements (diff)
downloadfirejail-d69e0cf1b35cac9185081bd6d95d82024868ae76.tar.gz
firejail-d69e0cf1b35cac9185081bd6d95d82024868ae76.tar.zst
firejail-d69e0cf1b35cac9185081bd6d95d82024868ae76.zip
profile fixes for recursive read-write mounts
read-write and read-only are applied in sequence, don't override read-only restrictions in ~/.local/share issue #2200
Diffstat (limited to 'etc/baloo_file.profile')
-rw-r--r--etc/baloo_file.profile10
1 files changed, 5 insertions, 5 deletions
diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile
index 307a16f9c..e094945b7 100644
--- a/etc/baloo_file.profile
+++ b/etc/baloo_file.profile
@@ -5,6 +5,11 @@ include baloo_file.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8# Make home directory read-only and allow writing only to ${HOME}/.local/share
9# Note: Baloo will not be able to update the "first run" key in its configuration files.
10# read-only ${HOME}
11# read-write ${HOME}/.local/share
12
8noblacklist ${HOME}/.config/baloofilerc 13noblacklist ${HOME}/.config/baloofilerc
9noblacklist ${HOME}/.kde/share/config/baloofilerc 14noblacklist ${HOME}/.kde/share/config/baloofilerc
10noblacklist ${HOME}/.kde/share/config/baloorc 15noblacklist ${HOME}/.kde/share/config/baloorc
@@ -42,8 +47,3 @@ private-tmp
42 47
43noexec ${HOME} 48noexec ${HOME}
44noexec /tmp 49noexec /tmp
45
46# Make home directory read-only and allow writing only to ${HOME}/.local/share
47# Note: Baloo will not be able to update the "first run" key in its configuration files.
48# read-only ${HOME}
49# read-write ${HOME}/.local/share