diff options
author | Kishore96in <kishore96@gmail.com> | 2020-07-16 12:53:10 +0530 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-07-16 07:23:10 +0000 |
commit | 319f2dc8d65fe0264e4eb6006aab024751bb5bd4 (patch) | |
tree | c89ff5a1ff396550d1c7e2398d1b6e17fcbe2ff6 /etc/profile-a-l/ktorrent.profile | |
parent | fix keepassxc (diff) | |
download | firejail-319f2dc8d65fe0264e4eb6006aab024751bb5bd4.tar.gz firejail-319f2dc8d65fe0264e4eb6006aab024751bb5bd4.tar.zst firejail-319f2dc8d65fe0264e4eb6006aab024751bb5bd4.zip |
Blacklist .local/share/kxmlgui5 and allow access only for applications which use it. (#3493)
* blacklist .local/share/kxmlgui5
KDE programs use this to store their toolbar config.
* noblacklist .local/share/kxmlgui5 in the relevant KDE applications.
* Whitelist kxmlgui file for okular.
* Use a glob to blacklist subfolders instead of the parent folder.
noblacklisting individual subdirectories works only if we do it this way
(tested by launching bash in the kate profile).
* Make directory, not file.
* noblacklist relevant subdirs for more KDE applications
Diffstat (limited to 'etc/profile-a-l/ktorrent.profile')
-rw-r--r-- | etc/profile-a-l/ktorrent.profile | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/profile-a-l/ktorrent.profile b/etc/profile-a-l/ktorrent.profile index 1919d73bc..b55e00f22 100644 --- a/etc/profile-a-l/ktorrent.profile +++ b/etc/profile-a-l/ktorrent.profile | |||
@@ -12,6 +12,7 @@ noblacklist ${HOME}/.kde/share/config/ktorrentrc | |||
12 | noblacklist ${HOME}/.kde4/share/apps/ktorrent | 12 | noblacklist ${HOME}/.kde4/share/apps/ktorrent |
13 | noblacklist ${HOME}/.kde4/share/config/ktorrentrc | 13 | noblacklist ${HOME}/.kde4/share/config/ktorrentrc |
14 | noblacklist ${HOME}/.local/share/ktorrent | 14 | noblacklist ${HOME}/.local/share/ktorrent |
15 | noblacklist ${HOME}/.local/share/kxmlgui5/ktorrent | ||
15 | 16 | ||
16 | include disable-common.inc | 17 | include disable-common.inc |
17 | include disable-devel.inc | 18 | include disable-devel.inc |
@@ -24,6 +25,7 @@ include disable-shell.inc | |||
24 | mkdir ${HOME}/.kde/share/apps/ktorrent | 25 | mkdir ${HOME}/.kde/share/apps/ktorrent |
25 | mkdir ${HOME}/.kde4/share/apps/ktorrent | 26 | mkdir ${HOME}/.kde4/share/apps/ktorrent |
26 | mkdir ${HOME}/.local/share/ktorrent | 27 | mkdir ${HOME}/.local/share/ktorrent |
28 | mkdir ${HOME}/.local/share/kxmlgui5/ktorrent | ||
27 | mkfile ${HOME}/.config/ktorrentrc | 29 | mkfile ${HOME}/.config/ktorrentrc |
28 | mkfile ${HOME}/.kde/share/config/ktorrentrc | 30 | mkfile ${HOME}/.kde/share/config/ktorrentrc |
29 | mkfile ${HOME}/.kde4/share/config/ktorrentrc | 31 | mkfile ${HOME}/.kde4/share/config/ktorrentrc |
@@ -34,6 +36,7 @@ whitelist ${HOME}/.kde/share/config/ktorrentrc | |||
34 | whitelist ${HOME}/.kde4/share/apps/ktorrent | 36 | whitelist ${HOME}/.kde4/share/apps/ktorrent |
35 | whitelist ${HOME}/.kde4/share/config/ktorrentrc | 37 | whitelist ${HOME}/.kde4/share/config/ktorrentrc |
36 | whitelist ${HOME}/.local/share/ktorrent | 38 | whitelist ${HOME}/.local/share/ktorrent |
39 | whitelist ${HOME}/.local/share/kxmlgui5/ktorrent | ||
37 | include whitelist-common.inc | 40 | include whitelist-common.inc |
38 | include whitelist-var-common.inc | 41 | include whitelist-var-common.inc |
39 | 42 | ||