restrict more KDE files (#1181)

* update noblacklist

* blacklist local plasma overrides, plasmoids

* add more KDE configuration (kdeglobals, plasmoids)

* kdeglobals now in disable-common.inc

3 files changed, 13 insertions, 4 deletions

diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 45541906a..0ada3314f 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -45,24 +45,33 @@ blacklist ${HOME}/.fluxbox/startup
 # blacklist ${HOME}/.xpra - this will kill --x11=xpra cmdline option for all programs
 
 # KDE config
-blacklist ${HOME}/.kde4/share/apps/solid
 blacklist ${HOME}/.kde4/share/apps/konsole
+blacklist ${HOME}/.kde4/share/apps/plasma
+blacklist ${HOME}/.kde4/share/apps/solid
 blacklist ${HOME}/.kde4/share/config/*.notifyrc
+read-only ${HOME}/.kde4/share/config/kdeglobals
 blacklist ${HOME}/.kde4/share/config/khotkeysrc
 blacklist ${HOME}/.kde4/share/config/krunnerrc
+blacklist ${HOME}/.kde4/share/config/plasma-desktop-appletsrc
 blacklist ${HOME}/.kde4/share/kde4/services
-blacklist ${HOME}/.kde/share/apps/solid
 blacklist ${HOME}/.kde/share/apps/konsole
+blacklist ${HOME}/.kde/share/apps/plasma
+blacklist ${HOME}/.kde/share/apps/solid
 blacklist ${HOME}/.kde/share/config/*.notifyrc
+read-only ${HOME}/.kde/share/config/kdeglobals
 blacklist ${HOME}/.kde/share/config/khotkeysrc
 blacklist ${HOME}/.kde/share/config/krunnerrc
+blacklist ${HOME}/.kde/share/config/plasma-desktop-appletsrc
 blacklist ${HOME}/.kde/share/kde4/services
 blacklist ${HOME}/.config/*.notifyrc
+read-only ${HOME}/.config/kdeglobals
 blacklist ${HOME}/.config/khotkeysrc
 blacklist ${HOME}/.config/krunnerrc
+blacklist ${HOME}/.config/plasma-org.kde.plasma.desktop-appletsrc
 blacklist ${HOME}/.local/share/kglobalaccel
 blacklist ${HOME}/.local/share/konsole
 blacklist ${HOME}/.local/share/kservices5
+blacklist ${HOME}/.local/share/plasma
 blacklist ${HOME}/.local/share/solid
 
 # VirtualBox
diff --git a/etc/gwenview.profile b/etc/gwenview.profile
index b8067866c..35e39a3ce 100644
--- a/etc/gwenview.profile
+++ b/etc/gwenview.profile
@@ -3,6 +3,8 @@
 include /etc/firejail/gwenview.local
 
 # KDE gwenview profile
+noblacklist ~/.kde4/share/apps/gwenview
+noblacklist ~/.kde4/share/config/gwenviewrc
 noblacklist ~/.kde/share/apps/gwenview
 noblacklist ~/.kde/share/config/gwenviewrc
 noblacklist ~/.config/gwenviewrc
diff --git a/etc/okular.profile b/etc/okular.profile
index 07819068e..b4ee3ad32 100644
--- a/etc/okular.profile
+++ b/etc/okular.profile
@@ -6,11 +6,9 @@ include /etc/firejail/okular.local
 noblacklist ~/.kde4/share/apps/okular
 noblacklist ~/.kde4/share/config/okularrc
 noblacklist ~/.kde4/share/config/okularpartrc
-read-only   ~/.kde4/share/config/kdeglobals
 noblacklist ~/.kde/share/apps/okular
 noblacklist ~/.kde/share/config/okularrc
 noblacklist ~/.kde/share/config/okularpartrc
-read-only   ~/.kde/share/config/kdeglobals
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-programs.inc
 include /etc/firejail/disable-devel.inc