diff options
author | smitsohu <smitsohu@gmail.com> | 2018-10-25 23:32:33 +0200 |
---|---|---|
committer | smitsohu <smitsohu@gmail.com> | 2018-10-25 23:32:33 +0200 |
commit | 04d9fb74001a0012cae59e223cd7d0abeb39ee17 (patch) | |
tree | f50824f65dc2470dd9b8200ee154135efb218ed0 /etc | |
parent | fix: return with euid 0 (diff) | |
download | firejail-04d9fb74001a0012cae59e223cd7d0abeb39ee17.tar.gz firejail-04d9fb74001a0012cae59e223cd7d0abeb39ee17.tar.zst firejail-04d9fb74001a0012cae59e223cd7d0abeb39ee17.zip |
cleanup
Diffstat (limited to 'etc')
-rw-r--r-- | etc/baloo_file.profile | 1 | ||||
-rw-r--r-- | etc/disable-common.inc | 4 |
2 files changed, 0 insertions, 5 deletions
diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile index 5e749cac1..307a16f9c 100644 --- a/etc/baloo_file.profile +++ b/etc/baloo_file.profile | |||
@@ -47,4 +47,3 @@ noexec /tmp | |||
47 | # Note: Baloo will not be able to update the "first run" key in its configuration files. | 47 | # Note: Baloo will not be able to update the "first run" key in its configuration files. |
48 | # read-only ${HOME} | 48 | # read-only ${HOME} |
49 | # read-write ${HOME}/.local/share | 49 | # read-write ${HOME}/.local/share |
50 | # noexec ${HOME}/.local/share | ||
diff --git a/etc/disable-common.inc b/etc/disable-common.inc index e6ba99874..b78af7917 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc | |||
@@ -266,7 +266,6 @@ read-only ${HOME}/bin | |||
266 | # The following block breaks trash functionality in file managers | 266 | # The following block breaks trash functionality in file managers |
267 | #read-only ${HOME}/.local | 267 | #read-only ${HOME}/.local |
268 | #read-write ${HOME}/.local/share | 268 | #read-write ${HOME}/.local/share |
269 | #noexec ${HOME}/.local/share | ||
270 | blacklist ${HOME}/.local/share/Trash | 269 | blacklist ${HOME}/.local/share/Trash |
271 | 270 | ||
272 | # Write-protection for desktop entries | 271 | # Write-protection for desktop entries |
@@ -401,6 +400,3 @@ blacklist /usr/share/flatpak | |||
401 | blacklist /var/lib/flatpak | 400 | blacklist /var/lib/flatpak |
402 | # most of the time bwrap is SUID binary | 401 | # most of the time bwrap is SUID binary |
403 | blacklist ${PATH}/bwrap | 402 | blacklist ${PATH}/bwrap |
404 | |||
405 | # complement noexec ${HOME} and noexec /tmp | ||
406 | noexec /tmp/.X11-unix | ||