aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar smitsohu <smitsohu@gmail.com>2018-02-13 20:34:13 +0100
committerLibravatar smitsohu <smitsohu@gmail.com>2018-02-13 20:34:13 +0100
commit6a630d1394eabea9a27ef7c730dfad53c5d88a9f (patch)
tree15b8f2771c2ee838dca5381e2617ec2220bd129a /etc
parentMerge pull request #1774 from SkewedZeppelin/1773 (diff)
downloadfirejail-6a630d1394eabea9a27ef7c730dfad53c5d88a9f.tar.gz
firejail-6a630d1394eabea9a27ef7c730dfad53c5d88a9f.tar.zst
firejail-6a630d1394eabea9a27ef7c730dfad53c5d88a9f.zip
update more application blacklists
Diffstat (limited to 'etc')
-rw-r--r--etc/disable-programs.inc6
-rw-r--r--etc/dolphin.profile3
-rw-r--r--etc/firefox-common-addons.inc4
-rw-r--r--etc/kget.profile2
-rw-r--r--etc/okular.profile1
-rw-r--r--etc/scribus.profile1
6 files changed, 16 insertions, 1 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index ce531af32..8e72dc47e 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -136,6 +136,7 @@ blacklist ${HOME}/.config/kateschemarc
136blacklist ${HOME}/.config/katesyntaxhighlightingrc 136blacklist ${HOME}/.config/katesyntaxhighlightingrc
137blacklist ${HOME}/.config/katevirc 137blacklist ${HOME}/.config/katevirc
138blacklist ${HOME}/.config/kdenliverc 138blacklist ${HOME}/.config/kdenliverc
139blacklist ${HOME}/.config/kgetrc
139blacklist ${HOME}/.config/klipperrc 140blacklist ${HOME}/.config/klipperrc
140blacklist ${HOME}/.config/kritarc 141blacklist ${HOME}/.config/kritarc
141blacklist ${HOME}/.config/kwriterc 142blacklist ${HOME}/.config/kwriterc
@@ -367,6 +368,7 @@ blacklist ${HOME}/.local/share/gwenview
367blacklist ${HOME}/.local/share/kaffeine 368blacklist ${HOME}/.local/share/kaffeine
368blacklist ${HOME}/.local/share/kate 369blacklist ${HOME}/.local/share/kate
369blacklist ${HOME}/.local/share/kdenlive 370blacklist ${HOME}/.local/share/kdenlive
371blacklist ${HOME}/.local/share/kget
370blacklist ${HOME}/.local/share/krita 372blacklist ${HOME}/.local/share/krita
371blacklist ${HOME}/.local/share/ktorrentrc 373blacklist ${HOME}/.local/share/ktorrentrc
372blacklist ${HOME}/.local/share/ktorrent 374blacklist ${HOME}/.local/share/ktorrent
@@ -493,6 +495,7 @@ blacklist ${HOME}/.cache/chromium-dev
493blacklist ${HOME}/.cache/cliqz 495blacklist ${HOME}/.cache/cliqz
494blacklist ${HOME}/.cache/darktable 496blacklist ${HOME}/.cache/darktable
495blacklist ${HOME}/.cache/discover 497blacklist ${HOME}/.cache/discover
498blacklist ${HOME}/.cache/dolphin
496blacklist ${HOME}/.cache/epiphany 499blacklist ${HOME}/.cache/epiphany
497blacklist ${HOME}/.cache/evolution 500blacklist ${HOME}/.cache/evolution
498blacklist ${HOME}/.cache/fossamail 501blacklist ${HOME}/.cache/fossamail
@@ -507,6 +510,7 @@ blacklist ${HOME}/.cache/INRIA/Natron
507blacklist ${HOME}/.cache/inox 510blacklist ${HOME}/.cache/inox
508blacklist ${HOME}/.cache/iridium 511blacklist ${HOME}/.cache/iridium
509blacklist ${HOME}/.cache/kdenlive 512blacklist ${HOME}/.cache/kdenlive
513blacklist ${HOME}/.cache/kinfocenter
510blacklist ${HOME}/.cache/krunner 514blacklist ${HOME}/.cache/krunner
511blacklist ${HOME}/.cache/kscreenlocker_greet 515blacklist ${HOME}/.cache/kscreenlocker_greet
512blacklist ${HOME}/.cache/ksmserver-logout-greeter 516blacklist ${HOME}/.cache/ksmserver-logout-greeter
@@ -520,6 +524,7 @@ blacklist ${HOME}/.cache/mozilla
520blacklist ${HOME}/.cache/mutt 524blacklist ${HOME}/.cache/mutt
521blacklist ${HOME}/.cache/nheko/nheko 525blacklist ${HOME}/.cache/nheko/nheko
522blacklist ${HOME}/.cache/netsurf 526blacklist ${HOME}/.cache/netsurf
527blacklist ${HOME}/.cache/okular
523blacklist ${HOME}/.cache/opera 528blacklist ${HOME}/.cache/opera
524blacklist ${HOME}/.cache/opera-beta 529blacklist ${HOME}/.cache/opera-beta
525blacklist ${HOME}/.cache/org.gnome.Books 530blacklist ${HOME}/.cache/org.gnome.Books
@@ -532,6 +537,7 @@ blacklist ${HOME}/.cache/qutebrowser
532blacklist ${HOME}/.cache/simple-scan 537blacklist ${HOME}/.cache/simple-scan
533blacklist ${HOME}/.cache/slimjet 538blacklist ${HOME}/.cache/slimjet
534blacklist ${HOME}/.cache/spotify 539blacklist ${HOME}/.cache/spotify
540blacklist ${HOME}/.cache/systemsettings
535blacklist ${HOME}/.cache/telepathy 541blacklist ${HOME}/.cache/telepathy
536blacklist ${HOME}/.cache/thunderbird 542blacklist ${HOME}/.cache/thunderbird
537blacklist ${HOME}/.cache/torbrowser 543blacklist ${HOME}/.cache/torbrowser
diff --git a/etc/dolphin.profile b/etc/dolphin.profile
index c1604826e..ce167b7a7 100644
--- a/etc/dolphin.profile
+++ b/etc/dolphin.profile
@@ -8,7 +8,8 @@ include /etc/firejail/globals.local
8# warning: firejail is currently not effectively constraining dolphin since used services are started by kdeinit5 8# warning: firejail is currently not effectively constraining dolphin since used services are started by kdeinit5
9 9
10noblacklist ${HOME}/.local/share/Trash 10noblacklist ${HOME}/.local/share/Trash
11# noblacklist ${HOME}/.config/dolphinrc - diable-programs.inc is disabled, see below 11# noblacklist ${HOME}/.cache/dolphin - disable-programs.inc is disabled, see below
12# noblacklist ${HOME}/.config/dolphinrc
12# noblacklist ${HOME}/.local/share/dolphin 13# noblacklist ${HOME}/.local/share/dolphin
13 14
14include /etc/firejail/disable-common.inc 15include /etc/firejail/disable-common.inc
diff --git a/etc/firefox-common-addons.inc b/etc/firefox-common-addons.inc
index b480aae18..b237c3c05 100644
--- a/etc/firefox-common-addons.inc
+++ b/etc/firefox-common-addons.inc
@@ -2,6 +2,7 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include /etc/firejail/firefox-common-addons.local 3include /etc/firejail/firefox-common-addons.local
4 4
5noblacklist ${HOME}/.config/kgetrc
5noblacklist ${HOME}/.config/okularpartrc 6noblacklist ${HOME}/.config/okularpartrc
6noblacklist ${HOME}/.config/okularrc 7noblacklist ${HOME}/.config/okularrc
7noblacklist ${HOME}/.config/qpdfview 8noblacklist ${HOME}/.config/qpdfview
@@ -16,11 +17,13 @@ noblacklist ${HOME}/.kde4/share/config/kgetrc
16noblacklist ${HOME}/.kde4/share/config/okularpartrc 17noblacklist ${HOME}/.kde4/share/config/okularpartrc
17noblacklist ${HOME}/.kde4/share/config/okularrc 18noblacklist ${HOME}/.kde4/share/config/okularrc
18# noblacklist ${HOME}/.local/share/gnome-shell/extensions 19# noblacklist ${HOME}/.local/share/gnome-shell/extensions
20noblacklist ${HOME}/.local/share/kget
19noblacklist ${HOME}/.local/share/okular 21noblacklist ${HOME}/.local/share/okular
20noblacklist ${HOME}/.local/share/qpdfview 22noblacklist ${HOME}/.local/share/qpdfview
21 23
22whitelist ${HOME}/.cache/gnome-mplayer/plugin 24whitelist ${HOME}/.cache/gnome-mplayer/plugin
23whitelist ${HOME}/.config/gnome-mplayer 25whitelist ${HOME}/.config/gnome-mplayer
26whitelist ${HOME}/.config/kgetrc
24whitelist ${HOME}/.config/okularpartrc 27whitelist ${HOME}/.config/okularpartrc
25whitelist ${HOME}/.config/okularrc 28whitelist ${HOME}/.config/okularrc
26whitelist ${HOME}/.config/pipelight-silverlight5.1 29whitelist ${HOME}/.config/pipelight-silverlight5.1
@@ -39,6 +42,7 @@ whitelist ${HOME}/.kde4/share/config/okularrc
39whitelist ${HOME}/.keysnail.js 42whitelist ${HOME}/.keysnail.js
40whitelist ${HOME}/.lastpass 43whitelist ${HOME}/.lastpass
41whitelist ${HOME}/.local/share/gnome-shell/extensions 44whitelist ${HOME}/.local/share/gnome-shell/extensions
45whitelist ${HOME}/.local/share/kget
42whitelist ${HOME}/.local/share/okular 46whitelist ${HOME}/.local/share/okular
43whitelist ${HOME}/.local/share/qpdfview 47whitelist ${HOME}/.local/share/qpdfview
44whitelist ${HOME}/.pentadactyl 48whitelist ${HOME}/.pentadactyl
diff --git a/etc/kget.profile b/etc/kget.profile
index 25c66e044..c4e073c2b 100644
--- a/etc/kget.profile
+++ b/etc/kget.profile
@@ -5,10 +5,12 @@ include /etc/firejail/kget.local
5# Persistent global definitions 5# Persistent global definitions
6include /etc/firejail/globals.local 6include /etc/firejail/globals.local
7 7
8noblacklist ${HOME}/.config/kgetrc
8noblacklist ${HOME}/.kde/share/apps/kget 9noblacklist ${HOME}/.kde/share/apps/kget
9noblacklist ${HOME}/.kde/share/config/kgetrc 10noblacklist ${HOME}/.kde/share/config/kgetrc
10noblacklist ${HOME}/.kde4/share/apps/kget 11noblacklist ${HOME}/.kde4/share/apps/kget
11noblacklist ${HOME}/.kde4/share/config/kgetrc 12noblacklist ${HOME}/.kde4/share/config/kgetrc
13noblacklist ${HOME}/.local/share/kget
12 14
13include /etc/firejail/disable-common.inc 15include /etc/firejail/disable-common.inc
14include /etc/firejail/disable-devel.inc 16include /etc/firejail/disable-devel.inc
diff --git a/etc/okular.profile b/etc/okular.profile
index da82d2622..d98d4792f 100644
--- a/etc/okular.profile
+++ b/etc/okular.profile
@@ -7,6 +7,7 @@ include /etc/firejail/globals.local
7 7
8# blacklist /run/user/*/bus 8# blacklist /run/user/*/bus
9 9
10noblacklist ${HOME}/.cache/okular
10noblacklist ${HOME}/.config/okularpartrc 11noblacklist ${HOME}/.config/okularpartrc
11noblacklist ${HOME}/.config/okularrc 12noblacklist ${HOME}/.config/okularrc
12noblacklist ${HOME}/.kde/share/apps/okular 13noblacklist ${HOME}/.kde/share/apps/okular
diff --git a/etc/scribus.profile b/etc/scribus.profile
index 001b91387..8ce63fbf0 100644
--- a/etc/scribus.profile
+++ b/etc/scribus.profile
@@ -8,6 +8,7 @@ include /etc/firejail/globals.local
8blacklist /run/user/*/bus 8blacklist /run/user/*/bus
9 9
10# Support for PDF readers comes with Scribus 1.5 and higher 10# Support for PDF readers comes with Scribus 1.5 and higher
11noblacklist ${HOME}/.cache/okular
11noblacklist ${HOME}/.config/okularpartrc 12noblacklist ${HOME}/.config/okularpartrc
12noblacklist ${HOME}/.config/okularrc 13noblacklist ${HOME}/.config/okularrc
13noblacklist ${HOME}/.config/scribus 14noblacklist ${HOME}/.config/scribus
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-18 23:27:24 +0000