summaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar Fred Barclay <Fred-Barclay@users.noreply.github.com>2017-04-04 17:59:28 +0000
committerLibravatar GitHub <noreply@github.com>2017-04-04 17:59:28 +0000
commit7e5696af63de009b822c0b997ef03c388a8489a8 (patch)
tree49ad45925baaae27b233d6c18b634f70a4aa7157 /etc
parentcleanup (diff)
parentupdate (local/share/org.kde.gwenview) (diff)
downloadfirejail-7e5696af63de009b822c0b997ef03c388a8489a8.tar.gz
firejail-7e5696af63de009b822c0b997ef03c388a8489a8.tar.zst
firejail-7e5696af63de009b822c0b997ef03c388a8489a8.zip
Merge pull request #1194 from SYN-cook/patch-1
various profile enhancements
Diffstat (limited to 'etc')
-rw-r--r--etc/disable-common.inc4
-rw-r--r--etc/disable-programs.inc1
-rw-r--r--etc/gwenview.profile1
3 files changed, 6 insertions, 0 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 451203865..e0b065c9e 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -43,6 +43,7 @@ blacklist ${HOME}/.fluxbox/startup
43 43
44# KDE config 44# KDE config
45blacklist ${HOME}/.kde4/share/apps/konsole 45blacklist ${HOME}/.kde4/share/apps/konsole
46blacklist ${HOME}/.kde4/share/apps/kwin
46blacklist ${HOME}/.kde4/share/apps/plasma 47blacklist ${HOME}/.kde4/share/apps/plasma
47blacklist ${HOME}/.kde4/share/apps/solid 48blacklist ${HOME}/.kde4/share/apps/solid
48blacklist ${HOME}/.kde4/share/config/*.notifyrc 49blacklist ${HOME}/.kde4/share/config/*.notifyrc
@@ -52,6 +53,7 @@ blacklist ${HOME}/.kde4/share/config/krunnerrc
52blacklist ${HOME}/.kde4/share/config/plasma-desktop-appletsrc 53blacklist ${HOME}/.kde4/share/config/plasma-desktop-appletsrc
53blacklist ${HOME}/.kde4/share/kde4/services 54blacklist ${HOME}/.kde4/share/kde4/services
54blacklist ${HOME}/.kde/share/apps/konsole 55blacklist ${HOME}/.kde/share/apps/konsole
56blacklist ${HOME}/.kde/share/apps/kwin
55blacklist ${HOME}/.kde/share/apps/plasma 57blacklist ${HOME}/.kde/share/apps/plasma
56blacklist ${HOME}/.kde/share/apps/solid 58blacklist ${HOME}/.kde/share/apps/solid
57blacklist ${HOME}/.kde/share/config/*.notifyrc 59blacklist ${HOME}/.kde/share/config/*.notifyrc
@@ -68,6 +70,7 @@ blacklist ${HOME}/.config/plasma-org.kde.plasma.desktop-appletsrc
68blacklist ${HOME}/.local/share/kglobalaccel 70blacklist ${HOME}/.local/share/kglobalaccel
69blacklist ${HOME}/.local/share/konsole 71blacklist ${HOME}/.local/share/konsole
70blacklist ${HOME}/.local/share/kservices5 72blacklist ${HOME}/.local/share/kservices5
73blacklist ${HOME}/.local/share/kwin
71blacklist ${HOME}/.local/share/plasma 74blacklist ${HOME}/.local/share/plasma
72blacklist ${HOME}/.local/share/solid 75blacklist ${HOME}/.local/share/solid
73 76
@@ -146,6 +149,7 @@ read-only ${HOME}/.logout
146read-only ${HOME}/.pgpkey 149read-only ${HOME}/.pgpkey
147read-only ${HOME}/.plan 150read-only ${HOME}/.plan
148read-only ${HOME}/.project 151read-only ${HOME}/.project
152read-only ${HOME}/.pam_environment
149 153
150# Initialization files that allow arbitrary command execution 154# Initialization files that allow arbitrary command execution
151read-only ${HOME}/.caffrc 155read-only ${HOME}/.caffrc
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 032d50b36..c5163c226 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -218,6 +218,7 @@ blacklist ${HOME}/.local/share/multimc5
218blacklist ${HOME}/.local/share/mupen64plus 218blacklist ${HOME}/.local/share/mupen64plus
219blacklist ${HOME}/.local/share/nautilus 219blacklist ${HOME}/.local/share/nautilus
220blacklist ${HOME}/.local/share/nemo 220blacklist ${HOME}/.local/share/nemo
221blacklist ${HOME}/.local/share/org.kde.gwenview
221blacklist ${HOME}/.local/share/pix 222blacklist ${HOME}/.local/share/pix
222blacklist ${HOME}/.local/share/psi+ 223blacklist ${HOME}/.local/share/psi+
223blacklist ${HOME}/.local/share/qpdfview 224blacklist ${HOME}/.local/share/qpdfview
diff --git a/etc/gwenview.profile b/etc/gwenview.profile
index 35e39a3ce..fb844a166 100644
--- a/etc/gwenview.profile
+++ b/etc/gwenview.profile
@@ -9,6 +9,7 @@ noblacklist ~/.kde/share/apps/gwenview
9noblacklist ~/.kde/share/config/gwenviewrc 9noblacklist ~/.kde/share/config/gwenviewrc
10noblacklist ~/.config/gwenviewrc 10noblacklist ~/.config/gwenviewrc
11noblacklist ~/.config/org.kde.gwenviewrc 11noblacklist ~/.config/org.kde.gwenviewrc
12noblacklist ~/.local/share/org.kde.gwenview
12include /etc/firejail/disable-common.inc 13include /etc/firejail/disable-common.inc
13include /etc/firejail/disable-programs.inc 14include /etc/firejail/disable-programs.inc
14include /etc/firejail/disable-devel.inc 15include /etc/firejail/disable-devel.inc