diff options
| author |  SYN-cook <syncookongit@gmail.com> | 2017-05-02 16:39:13 +0200 |
|---|---|---|
| committer |  Fred Barclay <Fred-Barclay@users.noreply.github.com> | 2017-05-02 09:39:13 -0500 |
| commit | 444e153aab9830247c74f20247868612b5fbce7b (patch) | |
| tree | 3543cd7915935216f59016c1ad3a523a8cc493dd /etc/caja.profile | |
| parent | adding knotes profile (diff) | |
| download | firejail-444e153aab9830247c74f20247868612b5fbce7b.tar.gz firejail-444e153aab9830247c74f20247868612b5fbce7b.tar.zst firejail-444e153aab9830247c74f20247868612b5fbce7b.zip | |
blacklist file-manager python scripts (#1260)
* blacklist python scripts in caja
~/.local/share/caja is not used by Caja, so it can be removed
* blacklist python scripts in nautilus
* blacklist python scripts in nemo
* permit access to Trash
* blacklist file-manager python bindings
Diffstat (limited to 'etc/caja.profile')
| -rw-r--r-- | etc/caja.profile | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/caja.profile b/etc/caja.profile index 8994f39fd..aa8bee538 100644 --- a/etc/caja.profile +++ b/etc/caja.profile | |||
| @@ -8,8 +8,8 @@ include /etc/firejail/caja.local | |||
| 8 | # is already a caja process running on MATE desktops firejail will have no effect. | 8 | # is already a caja process running on MATE desktops firejail will have no effect. |
| 9 | 9 | ||
| 10 | noblacklist ~/.config/caja | 10 | noblacklist ~/.config/caja |
| 11 | noblacklist ~/.local/share/caja | 11 | noblacklist ~/.local/share/caja-python |
| 12 | noblacklist ${HOME}/.local/share/Trash | 12 | noblacklist ~/.local/share/Trash |
| 13 | 13 | ||
| 14 | include /etc/firejail/disable-common.inc | 14 | include /etc/firejail/disable-common.inc |
| 15 | # caja needs to be able to start arbitrary applications so we cannot blacklist their files | 15 | # caja needs to be able to start arbitrary applications so we cannot blacklist their files |