diff options
author | smitsohu <smitsohu@gmail.com> | 2018-12-07 16:29:06 +0100 |
---|---|---|
committer | smitsohu <smitsohu@gmail.com> | 2018-12-07 16:29:06 +0100 |
commit | c083a7b737050c532977b46fac6400f1dbc24ff6 (patch) | |
tree | 3f9438ec7985b5191da4ca47fb0b9e4822cf249f /etc/firefox-common.profile | |
parent | add HAS_NODBUS conditional, ${RUNUSER} makro (diff) | |
download | firejail-c083a7b737050c532977b46fac6400f1dbc24ff6.tar.gz firejail-c083a7b737050c532977b46fac6400f1dbc24ff6.tar.zst firejail-c083a7b737050c532977b46fac6400f1dbc24ff6.zip |
improve sandboxing of KDE apps: set KDE_FORK_SLAVES, blacklist slave-sockets
setting the KDE_FORK_SLAVES environment variable removes all inconsistencies
that arise from slaves running outside the sandbox or in a different sandbox;
it also makes it slightly more difficult to abuse KIO in general and helps to
mitigate security problems due to thumbnailing, which now always happens inside
the same sandbox. The trade-off is more concurrently running slave processes.
closes #2285
Diffstat (limited to 'etc/firefox-common.profile')
0 files changed, 0 insertions, 0 deletions