diff options
| author |  Kishore96in <kishore96@gmail.com> | 2020-07-16 12:53:10 +0530 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2020-07-16 07:23:10 +0000 |
| commit | 319f2dc8d65fe0264e4eb6006aab024751bb5bd4 (patch) | |
| tree | c89ff5a1ff396550d1c7e2398d1b6e17fcbe2ff6 /etc/profile-a-l/calligrawords.profile | |
| parent | fix keepassxc (diff) | |
| download | firejail-319f2dc8d65fe0264e4eb6006aab024751bb5bd4.tar.gz firejail-319f2dc8d65fe0264e4eb6006aab024751bb5bd4.tar.zst firejail-319f2dc8d65fe0264e4eb6006aab024751bb5bd4.zip | |
Blacklist .local/share/kxmlgui5 and allow access only for applications which use it. (#3493)
* blacklist .local/share/kxmlgui5
KDE programs use this to store their toolbar config.
* noblacklist .local/share/kxmlgui5 in the relevant KDE applications.
* Whitelist kxmlgui file for okular.
* Use a glob to blacklist subfolders instead of the parent folder.
noblacklisting individual subdirectories works only if we do it this way
(tested by launching bash in the kate profile).
* Make directory, not file.
* noblacklist relevant subdirs for more KDE applications
Diffstat (limited to 'etc/profile-a-l/calligrawords.profile')
| -rw-r--r-- | etc/profile-a-l/calligrawords.profile | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/profile-a-l/calligrawords.profile b/etc/profile-a-l/calligrawords.profile index 7804a3b97..5985b4250 100644 --- a/etc/profile-a-l/calligrawords.profile +++ b/etc/profile-a-l/calligrawords.profile | |||
| @@ -1,5 +1,7 @@ | |||
| 1 | # Firejail profile alias for calligra | 1 | # Firejail profile alias for calligra |
| 2 | # This file is overwritten after every install/update | 2 | # This file is overwritten after every install/update |
| 3 | 3 | ||
| 4 | noblacklist ${HOME}/.local/share/kxmlgui5/calligrawords | ||
| 5 | |||
| 4 | # Redirect | 6 | # Redirect |
| 5 | include calligra.profile | 7 | include calligra.profile |