diff options
author | 2020-02-09 17:06:30 +0100 | |
---|---|---|
committer | 2020-02-09 17:06:30 +0100 | |
commit | 9d95b75892ab8e7937490835f97f76010f954221 (patch) | |
tree | f912d704fbdfae1737dc15b055f0e28d25b8cb08 /etc/baloo_file.profile | |
parent | harden wine (diff) | |
download | firejail-9d95b75892ab8e7937490835f97f76010f954221.tar.gz firejail-9d95b75892ab8e7937490835f97f76010f954221.tar.zst firejail-9d95b75892ab8e7937490835f97f76010f954221.zip |
improve baloo hardening suggestion
Diffstat (limited to 'etc/baloo_file.profile')
-rw-r--r-- | etc/baloo_file.profile | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile index 3cc377397..785e37a16 100644 --- a/etc/baloo_file.profile +++ b/etc/baloo_file.profile | |||
@@ -5,10 +5,12 @@ include baloo_file.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include globals.local | 6 | include globals.local |
7 | 7 | ||
8 | # Make home directory read-only and allow writing only to ${HOME}/.local/share | 8 | # Make home directory read-only and allow writing only to ${HOME}/.local/share/baloo |
9 | # Note: Baloo will not be able to update the "first run" key in its configuration files. | 9 | # Note: Baloo will not be able to update the "first run" key in its configuration files. |
10 | # mkdir ${HOME}/.local/share/baloo | ||
10 | # read-only ${HOME} | 11 | # read-only ${HOME} |
11 | # read-write ${HOME}/.local/share | 12 | # read-write ${HOME}/.local/share/baloo |
13 | # ignore read-write | ||
12 | 14 | ||
13 | noblacklist ${HOME}/.config/baloofilerc | 15 | noblacklist ${HOME}/.config/baloofilerc |
14 | noblacklist ${HOME}/.kde/share/config/baloofilerc | 16 | noblacklist ${HOME}/.kde/share/config/baloofilerc |