aboutsummaryrefslogtreecommitdiffstats
path: root/etc/inc
diff options
context:
space:
mode:
authorLibravatar Kishore96in <kishore96@gmail.com>2020-07-16 12:53:10 +0530
committerLibravatar GitHub <noreply@github.com>2020-07-16 07:23:10 +0000
commit319f2dc8d65fe0264e4eb6006aab024751bb5bd4 (patch)
treec89ff5a1ff396550d1c7e2398d1b6e17fcbe2ff6 /etc/inc
parentfix keepassxc (diff)
downloadfirejail-319f2dc8d65fe0264e4eb6006aab024751bb5bd4.tar.gz
firejail-319f2dc8d65fe0264e4eb6006aab024751bb5bd4.tar.zst
firejail-319f2dc8d65fe0264e4eb6006aab024751bb5bd4.zip
Blacklist .local/share/kxmlgui5 and allow access only for applications which use it. (#3493)
* blacklist .local/share/kxmlgui5 KDE programs use this to store their toolbar config. * noblacklist .local/share/kxmlgui5 in the relevant KDE applications. * Whitelist kxmlgui file for okular. * Use a glob to blacklist subfolders instead of the parent folder. noblacklisting individual subdirectories works only if we do it this way (tested by launching bash in the kate profile). * Make directory, not file. * noblacklist relevant subdirs for more KDE applications
Diffstat (limited to 'etc/inc')
-rw-r--r--etc/inc/disable-programs.inc1
-rw-r--r--etc/inc/firefox-common-addons.inc1
2 files changed, 2 insertions, 0 deletions
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc
index 482350329..9a748e2d4 100644
--- a/etc/inc/disable-programs.inc
+++ b/etc/inc/disable-programs.inc
@@ -613,6 +613,7 @@ blacklist ${HOME}/.local/share/ktorrent
613blacklist ${HOME}/.local/share/ktorrentrc 613blacklist ${HOME}/.local/share/ktorrentrc
614blacklist ${HOME}/.local/share/ktouch 614blacklist ${HOME}/.local/share/ktouch
615blacklist ${HOME}/.local/share/kwrite 615blacklist ${HOME}/.local/share/kwrite
616blacklist ${HOME}/.local/share/kxmlgui5/*
616blacklist ${HOME}/.local/share/liferea 617blacklist ${HOME}/.local/share/liferea
617blacklist ${HOME}/.local/share/local-mail 618blacklist ${HOME}/.local/share/local-mail
618blacklist ${HOME}/.local/share/lollypop 619blacklist ${HOME}/.local/share/lollypop
diff --git a/etc/inc/firefox-common-addons.inc b/etc/inc/firefox-common-addons.inc
index b106cc0c0..11acb7b42 100644
--- a/etc/inc/firefox-common-addons.inc
+++ b/etc/inc/firefox-common-addons.inc
@@ -17,6 +17,7 @@ noblacklist ${HOME}/.kde4/share/config/kgetrc
17noblacklist ${HOME}/.kde4/share/config/okularpartrc 17noblacklist ${HOME}/.kde4/share/config/okularpartrc
18noblacklist ${HOME}/.kde4/share/config/okularrc 18noblacklist ${HOME}/.kde4/share/config/okularrc
19noblacklist ${HOME}/.local/share/kget 19noblacklist ${HOME}/.local/share/kget
20noblacklist ${HOME}/.local/share/kxmlgui5/okular
20noblacklist ${HOME}/.local/share/okular 21noblacklist ${HOME}/.local/share/okular
21noblacklist ${HOME}/.local/share/qpdfview 22noblacklist ${HOME}/.local/share/qpdfview
22 23