diff options
| author |  smitsohu <smitsohu@gmail.com> | 2018-02-06 21:38:10 +0100 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2018-02-06 21:38:10 +0100 |
| commit | 22d7d86c0f9fa2b64ef8f10cfa458f7eeaafe64a (patch) | |
| tree | aea67c89991c399255906357db6aced50e36c74c /etc/disable-common.inc | |
| parent | enable private-etc for gwenview (diff) | |
| download | firejail-22d7d86c0f9fa2b64ef8f10cfa458f7eeaafe64a.tar.gz firejail-22d7d86c0f9fa2b64ef8f10cfa458f7eeaafe64a.tar.zst firejail-22d7d86c0f9fa2b64ef8f10cfa458f7eeaafe64a.zip | |
further harden KDE
and whitelist some kio settings, because we don't know if slave processes will run inside or outside the sandbox.
also prevents weird bugs that depend on sequence in which applications were started.
Diffstat (limited to 'etc/disable-common.inc')
| -rw-r--r-- | etc/disable-common.inc | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc index cd79f43ab..ec700e24e 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc | |||
| @@ -80,11 +80,15 @@ blacklist ${HOME}/.local/share/plasma | |||
| 80 | blacklist ${HOME}/.local/share/solid | 80 | blacklist ${HOME}/.local/share/solid |
| 81 | read-only ${HOME}/.cache/ksycoca5_* | 81 | read-only ${HOME}/.cache/ksycoca5_* |
| 82 | read-only ${HOME}/.config/kdeglobals | 82 | read-only ${HOME}/.config/kdeglobals |
| 83 | read-only ${HOME}/.config/kio_httprc | ||
| 84 | read-only ${HOME}/.config/kiorc | ||
| 83 | read-only ${HOME}/.config/kioslaverc | 85 | read-only ${HOME}/.config/kioslaverc |
| 84 | read-only ${HOME}/.kde/share/config/kdeglobals | 86 | read-only ${HOME}/.kde/share/config/kdeglobals |
| 87 | read-only ${HOME}/.kde/share/config/kio_httprc | ||
| 85 | read-only ${HOME}/.kde/share/config/kioslaverc | 88 | read-only ${HOME}/.kde/share/config/kioslaverc |
| 86 | read-only ${HOME}/.kde/share/kde4/services | 89 | read-only ${HOME}/.kde/share/kde4/services |
| 87 | read-only ${HOME}/.kde4/share/config/kdeglobals | 90 | read-only ${HOME}/.kde4/share/config/kdeglobals |
| 91 | read-only ${HOME}/.kde4/share/config/kio_httprc | ||
| 88 | read-only ${HOME}/.kde4/share/config/kioslaverc | 92 | read-only ${HOME}/.kde4/share/config/kioslaverc |
| 89 | read-only ${HOME}/.kde4/share/kde4/services | 93 | read-only ${HOME}/.kde4/share/kde4/services |
| 90 | read-only ${HOME}/.local/share/kservices5 | 94 | read-only ${HOME}/.local/share/kservices5 |