diff options
| author |  smitsohu <smitsohu@gmail.com> | 2017-08-08 21:31:50 +0200 |
|---|---|---|
| committer |  Fred Barclay <Fred-Barclay@users.noreply.github.com> | 2017-08-08 14:31:50 -0500 |
| commit | 40a51e179d90f54a20c539567adeed1ea0b94d78 (patch) | |
| tree | 48f41f500a4a4cbdd1744365919dd0c2dc99931a /etc/baloo_file.profile | |
| parent | Merges (diff) | |
| download | firejail-40a51e179d90f54a20c539567adeed1ea0b94d78.tar.gz firejail-40a51e179d90f54a20c539567adeed1ea0b94d78.tar.zst firejail-40a51e179d90f54a20c539567adeed1ea0b94d78.zip | |
various little profile fixes and enhancements (#1442)
* add novideo
* add novideo
* add novideo
* put noexec last
* blacklist Clementine configuration and database
* blacklist Clementine configuration and database
* add novideo
* add novideo, permit access to ~/.java
* add novideo
* spoof machine-id
* mimeapps.list is already in whitelist-common.inc
* ~/.local/share/applications is already read-only
see disable-common.inc
* mimeapps.list is already in whitelist-common.inc
* ~/.local/share/applications is already read-only
see disable-common.inc
* drop machine-id option
private-etc hides it anyway
Diffstat (limited to 'etc/baloo_file.profile')
| -rw-r--r-- | etc/baloo_file.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile index 9c2909b0f..66c552dd6 100644 --- a/etc/baloo_file.profile +++ b/etc/baloo_file.profile | |||
| @@ -36,6 +36,6 @@ noexec /tmp | |||
| 36 | 36 | ||
| 37 | # Make home directory read-only and allow writing only to ~/.local/share | 37 | # Make home directory read-only and allow writing only to ~/.local/share |
| 38 | # Note: Baloo will not be able to update the "first run" key in its configuration files. | 38 | # Note: Baloo will not be able to update the "first run" key in its configuration files. |
| 39 | # noexec ${HOME}/.local/share | ||
| 40 | # read-only ${HOME} | 39 | # read-only ${HOME} |
| 41 | # read-write ${HOME}/.local/share | 40 | # read-write ${HOME}/.local/share |
| 41 | # noexec ${HOME}/.local/share | ||