diff options
author | 2017-04-04 17:59:28 +0000 | |
---|---|---|
committer | 2017-04-04 17:59:28 +0000 | |
commit | 7e5696af63de009b822c0b997ef03c388a8489a8 (patch) | |
tree | 49ad45925baaae27b233d6c18b634f70a4aa7157 /etc | |
parent | cleanup (diff) | |
parent | update (local/share/org.kde.gwenview) (diff) | |
download | firejail-7e5696af63de009b822c0b997ef03c388a8489a8.tar.gz firejail-7e5696af63de009b822c0b997ef03c388a8489a8.tar.zst firejail-7e5696af63de009b822c0b997ef03c388a8489a8.zip |
Merge pull request #1194 from SYN-cook/patch-1
various profile enhancements
Diffstat (limited to 'etc')
-rw-r--r-- | etc/disable-common.inc | 4 | ||||
-rw-r--r-- | etc/disable-programs.inc | 1 | ||||
-rw-r--r-- | etc/gwenview.profile | 1 |
3 files changed, 6 insertions, 0 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc index 451203865..e0b065c9e 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc | |||
@@ -43,6 +43,7 @@ blacklist ${HOME}/.fluxbox/startup | |||
43 | 43 | ||
44 | # KDE config | 44 | # KDE config |
45 | blacklist ${HOME}/.kde4/share/apps/konsole | 45 | blacklist ${HOME}/.kde4/share/apps/konsole |
46 | blacklist ${HOME}/.kde4/share/apps/kwin | ||
46 | blacklist ${HOME}/.kde4/share/apps/plasma | 47 | blacklist ${HOME}/.kde4/share/apps/plasma |
47 | blacklist ${HOME}/.kde4/share/apps/solid | 48 | blacklist ${HOME}/.kde4/share/apps/solid |
48 | blacklist ${HOME}/.kde4/share/config/*.notifyrc | 49 | blacklist ${HOME}/.kde4/share/config/*.notifyrc |
@@ -52,6 +53,7 @@ blacklist ${HOME}/.kde4/share/config/krunnerrc | |||
52 | blacklist ${HOME}/.kde4/share/config/plasma-desktop-appletsrc | 53 | blacklist ${HOME}/.kde4/share/config/plasma-desktop-appletsrc |
53 | blacklist ${HOME}/.kde4/share/kde4/services | 54 | blacklist ${HOME}/.kde4/share/kde4/services |
54 | blacklist ${HOME}/.kde/share/apps/konsole | 55 | blacklist ${HOME}/.kde/share/apps/konsole |
56 | blacklist ${HOME}/.kde/share/apps/kwin | ||
55 | blacklist ${HOME}/.kde/share/apps/plasma | 57 | blacklist ${HOME}/.kde/share/apps/plasma |
56 | blacklist ${HOME}/.kde/share/apps/solid | 58 | blacklist ${HOME}/.kde/share/apps/solid |
57 | blacklist ${HOME}/.kde/share/config/*.notifyrc | 59 | blacklist ${HOME}/.kde/share/config/*.notifyrc |
@@ -68,6 +70,7 @@ blacklist ${HOME}/.config/plasma-org.kde.plasma.desktop-appletsrc | |||
68 | blacklist ${HOME}/.local/share/kglobalaccel | 70 | blacklist ${HOME}/.local/share/kglobalaccel |
69 | blacklist ${HOME}/.local/share/konsole | 71 | blacklist ${HOME}/.local/share/konsole |
70 | blacklist ${HOME}/.local/share/kservices5 | 72 | blacklist ${HOME}/.local/share/kservices5 |
73 | blacklist ${HOME}/.local/share/kwin | ||
71 | blacklist ${HOME}/.local/share/plasma | 74 | blacklist ${HOME}/.local/share/plasma |
72 | blacklist ${HOME}/.local/share/solid | 75 | blacklist ${HOME}/.local/share/solid |
73 | 76 | ||
@@ -146,6 +149,7 @@ read-only ${HOME}/.logout | |||
146 | read-only ${HOME}/.pgpkey | 149 | read-only ${HOME}/.pgpkey |
147 | read-only ${HOME}/.plan | 150 | read-only ${HOME}/.plan |
148 | read-only ${HOME}/.project | 151 | read-only ${HOME}/.project |
152 | read-only ${HOME}/.pam_environment | ||
149 | 153 | ||
150 | # Initialization files that allow arbitrary command execution | 154 | # Initialization files that allow arbitrary command execution |
151 | read-only ${HOME}/.caffrc | 155 | read-only ${HOME}/.caffrc |
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 032d50b36..c5163c226 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -218,6 +218,7 @@ blacklist ${HOME}/.local/share/multimc5 | |||
218 | blacklist ${HOME}/.local/share/mupen64plus | 218 | blacklist ${HOME}/.local/share/mupen64plus |
219 | blacklist ${HOME}/.local/share/nautilus | 219 | blacklist ${HOME}/.local/share/nautilus |
220 | blacklist ${HOME}/.local/share/nemo | 220 | blacklist ${HOME}/.local/share/nemo |
221 | blacklist ${HOME}/.local/share/org.kde.gwenview | ||
221 | blacklist ${HOME}/.local/share/pix | 222 | blacklist ${HOME}/.local/share/pix |
222 | blacklist ${HOME}/.local/share/psi+ | 223 | blacklist ${HOME}/.local/share/psi+ |
223 | blacklist ${HOME}/.local/share/qpdfview | 224 | blacklist ${HOME}/.local/share/qpdfview |
diff --git a/etc/gwenview.profile b/etc/gwenview.profile index 35e39a3ce..fb844a166 100644 --- a/etc/gwenview.profile +++ b/etc/gwenview.profile | |||
@@ -9,6 +9,7 @@ noblacklist ~/.kde/share/apps/gwenview | |||
9 | noblacklist ~/.kde/share/config/gwenviewrc | 9 | noblacklist ~/.kde/share/config/gwenviewrc |
10 | noblacklist ~/.config/gwenviewrc | 10 | noblacklist ~/.config/gwenviewrc |
11 | noblacklist ~/.config/org.kde.gwenviewrc | 11 | noblacklist ~/.config/org.kde.gwenviewrc |
12 | noblacklist ~/.local/share/org.kde.gwenview | ||
12 | include /etc/firejail/disable-common.inc | 13 | include /etc/firejail/disable-common.inc |
13 | include /etc/firejail/disable-programs.inc | 14 | include /etc/firejail/disable-programs.inc |
14 | include /etc/firejail/disable-devel.inc | 15 | include /etc/firejail/disable-devel.inc |