diff options
author | 2020-07-16 12:53:10 +0530 | |
---|---|---|
committer | 2020-07-16 07:23:10 +0000 | |
commit | 319f2dc8d65fe0264e4eb6006aab024751bb5bd4 (patch) | |
tree | c89ff5a1ff396550d1c7e2398d1b6e17fcbe2ff6 /etc/inc | |
parent | fix keepassxc (diff) | |
download | firejail-319f2dc8d65fe0264e4eb6006aab024751bb5bd4.tar.gz firejail-319f2dc8d65fe0264e4eb6006aab024751bb5bd4.tar.zst firejail-319f2dc8d65fe0264e4eb6006aab024751bb5bd4.zip |
Blacklist .local/share/kxmlgui5 and allow access only for applications which use it. (#3493)
* blacklist .local/share/kxmlgui5
KDE programs use this to store their toolbar config.
* noblacklist .local/share/kxmlgui5 in the relevant KDE applications.
* Whitelist kxmlgui file for okular.
* Use a glob to blacklist subfolders instead of the parent folder.
noblacklisting individual subdirectories works only if we do it this way
(tested by launching bash in the kate profile).
* Make directory, not file.
* noblacklist relevant subdirs for more KDE applications
Diffstat (limited to 'etc/inc')
-rw-r--r-- | etc/inc/disable-programs.inc | 1 | ||||
-rw-r--r-- | etc/inc/firefox-common-addons.inc | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index 482350329..9a748e2d4 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc | |||
@@ -613,6 +613,7 @@ blacklist ${HOME}/.local/share/ktorrent | |||
613 | blacklist ${HOME}/.local/share/ktorrentrc | 613 | blacklist ${HOME}/.local/share/ktorrentrc |
614 | blacklist ${HOME}/.local/share/ktouch | 614 | blacklist ${HOME}/.local/share/ktouch |
615 | blacklist ${HOME}/.local/share/kwrite | 615 | blacklist ${HOME}/.local/share/kwrite |
616 | blacklist ${HOME}/.local/share/kxmlgui5/* | ||
616 | blacklist ${HOME}/.local/share/liferea | 617 | blacklist ${HOME}/.local/share/liferea |
617 | blacklist ${HOME}/.local/share/local-mail | 618 | blacklist ${HOME}/.local/share/local-mail |
618 | blacklist ${HOME}/.local/share/lollypop | 619 | blacklist ${HOME}/.local/share/lollypop |
diff --git a/etc/inc/firefox-common-addons.inc b/etc/inc/firefox-common-addons.inc index b106cc0c0..11acb7b42 100644 --- a/etc/inc/firefox-common-addons.inc +++ b/etc/inc/firefox-common-addons.inc | |||
@@ -17,6 +17,7 @@ noblacklist ${HOME}/.kde4/share/config/kgetrc | |||
17 | noblacklist ${HOME}/.kde4/share/config/okularpartrc | 17 | noblacklist ${HOME}/.kde4/share/config/okularpartrc |
18 | noblacklist ${HOME}/.kde4/share/config/okularrc | 18 | noblacklist ${HOME}/.kde4/share/config/okularrc |
19 | noblacklist ${HOME}/.local/share/kget | 19 | noblacklist ${HOME}/.local/share/kget |
20 | noblacklist ${HOME}/.local/share/kxmlgui5/okular | ||
20 | noblacklist ${HOME}/.local/share/okular | 21 | noblacklist ${HOME}/.local/share/okular |
21 | noblacklist ${HOME}/.local/share/qpdfview | 22 | noblacklist ${HOME}/.local/share/qpdfview |
22 | 23 | ||