diff options
author | 2018-12-07 22:36:18 +0100 | |
---|---|---|
committer | 2018-12-07 22:36:18 +0100 | |
commit | b1cb91ca86f175387564b6db3f93d7cdc07e0467 (patch) | |
tree | 5df73a2ee8f995f01cc6fd8952853bafdd09e72c /etc | |
parent | improve sandboxing of KDE apps: set KDE_FORK_SLAVES, blacklist slave-sockets (diff) | |
download | firejail-b1cb91ca86f175387564b6db3f93d7cdc07e0467.tar.gz firejail-b1cb91ca86f175387564b6db3f93d7cdc07e0467.tar.zst firejail-b1cb91ca86f175387564b6db3f93d7cdc07e0467.zip |
update dolphin profile
services previously started by kdeinit now run inside the sandbox due to KDE_FORK_SLAVES being set
Diffstat (limited to 'etc')
-rw-r--r-- | etc/dolphin.profile | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/etc/dolphin.profile b/etc/dolphin.profile index 936876ddf..c899ffec9 100644 --- a/etc/dolphin.profile +++ b/etc/dolphin.profile | |||
@@ -6,8 +6,6 @@ include dolphin.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | # warning: firejail is currently not effectively constraining dolphin since used services are started by kdeinit5 | ||
10 | |||
11 | noblacklist ${HOME}/.local/share/Trash | 9 | noblacklist ${HOME}/.local/share/Trash |
12 | # noblacklist ${HOME}/.cache/dolphin - disable-programs.inc is disabled, see below | 10 | # noblacklist ${HOME}/.cache/dolphin - disable-programs.inc is disabled, see below |
13 | # noblacklist ${HOME}/.config/dolphinrc | 11 | # noblacklist ${HOME}/.config/dolphinrc |
@@ -32,7 +30,7 @@ protocol unix | |||
32 | seccomp | 30 | seccomp |
33 | shell none | 31 | shell none |
34 | 32 | ||
35 | # private-dev | 33 | private-dev |
36 | # private-tmp | 34 | # private-tmp |
37 | 35 | ||
38 | join-or-start dolphin | 36 | join-or-start dolphin |