aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2020-06-18 20:08:59 +0000
committerLibravatar GitHub <noreply@github.com>2020-06-18 20:08:59 +0000
commit45df1d6441727b457679bd6ad1ea49a3bcf795a2 (patch)
tree326129d3ef15bb94b15844af47e23c27c0b0f8f1 /etc/profile-m-z
parentclean private-bin in gummi.profile (diff)
downloadfirejail-45df1d6441727b457679bd6ad1ea49a3bcf795a2.tar.gz
firejail-45df1d6441727b457679bd6ad1ea49a3bcf795a2.tar.zst
firejail-45df1d6441727b457679bd6ad1ea49a3bcf795a2.zip
harden totem.profile
Totem saves screenshots of video to ${PICTURES}. Also adding tracelog to slightly harden things a bit.
Diffstat (limited to 'etc/profile-m-z')
-rw-r--r--etc/profile-m-z/totem.profile3
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/profile-m-z/totem.profile b/etc/profile-m-z/totem.profile
index 9a2634d8d..b8f4ca765 100644
--- a/etc/profile-m-z/totem.profile
+++ b/etc/profile-m-z/totem.profile
@@ -8,12 +8,14 @@ include globals.local
8 8
9# Allow lua (required for youtube video) 9# Allow lua (required for youtube video)
10include allow-lua.inc 10include allow-lua.inc
11
11# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
12include allow-python3.inc 13include allow-python3.inc
13 14
14noblacklist ${HOME}/.config/totem 15noblacklist ${HOME}/.config/totem
15noblacklist ${HOME}/.local/share/totem 16noblacklist ${HOME}/.local/share/totem
16noblacklist ${MUSIC} 17noblacklist ${MUSIC}
18noblacklist ${PICTURES}
17noblacklist ${VIDEOS} 19noblacklist ${VIDEOS}
18 20
19include disable-common.inc 21include disable-common.inc
@@ -37,6 +39,7 @@ nou2f
37protocol unix,inet,inet6 39protocol unix,inet,inet6
38seccomp 40seccomp
39shell none 41shell none
42tracelog
40 43
41private-bin totem 44private-bin totem
42# totem needs access to ~/.cache/tracker or it exits 45# totem needs access to ~/.cache/tracker or it exits