aboutsummaryrefslogtreecommitdiffstats
path: root/etc/dolphin.profile
diff options
context:
space:
mode:
authorLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
committerLibravatar Tad <tad@spotco.us>2017-08-07 01:22:08 -0400
commit9e3ba319be6b9546d7e8f450ca419ee2f3f4040b (patch)
tree0aebe82de78a61877c267f4dcb2ebcc13a2e37c9 /etc/dolphin.profile
parentvarious profile fixes (#1433) (diff)
downloadfirejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.gz
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.tar.zst
firejail-9e3ba319be6b9546d7e8f450ca419ee2f3f4040b.zip
Unify all profiles
Diffstat (limited to 'etc/dolphin.profile')
-rw-r--r--etc/dolphin.profile29
1 files changed, 14 insertions, 15 deletions
diff --git a/etc/dolphin.profile b/etc/dolphin.profile
index aac358d38..5760f6811 100644
--- a/etc/dolphin.profile
+++ b/etc/dolphin.profile
@@ -1,34 +1,33 @@
1# Persistent global definitions go here 1# Firejail profile for dolphin
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/dolphin.local 4include /etc/firejail/dolphin.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7 7
8# dolphin profile 8noblacklist ${HOME}/.local/share/Trash
9
10# warning: firejail is currently not effectively constraining dolphin since used services are started by kdeinit5
11
12noblacklist ~/.config/dolphinrc 9noblacklist ~/.config/dolphinrc
13noblacklist ~/.local/share/dolphin 10noblacklist ~/.local/share/dolphin
14noblacklist ${HOME}/.local/share/Trash
15 11
16include /etc/firejail/disable-common.inc 12include /etc/firejail/disable-common.inc
17# dolphin needs to be able to start arbitrary applications so we cannot blacklist their files
18#include /etc/firejail/disable-programs.inc
19include /etc/firejail/disable-devel.inc 13include /etc/firejail/disable-devel.inc
20include /etc/firejail/disable-passwdmgr.inc 14include /etc/firejail/disable-passwdmgr.inc
15# include /etc/firejail/disable-programs.inc
21 16
22caps.drop all 17caps.drop all
23netfilter 18netfilter
24nogroups 19nogroups
25nonewprivs 20nonewprivs
26noroot 21noroot
27shell none
28seccomp
29protocol unix 22protocol unix
23seccomp
24shell none
30 25
31# private-bin 26# private-bin
32# private-dev 27# private-dev
33# private-tmp
34# private-etc 28# private-etc
29# private-tmp
30
31# CLOBBERED COMMENTS
32# dolphin needs to be able to start arbitrary applications so we cannot blacklist their files
33# warning: firejail is currently not effectively constraining dolphin since used services are started by kdeinit5