aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar SYN-cook <syncookongit@gmail.com>2017-05-11 02:46:41 +0200
committerLibravatar GitHub <noreply@github.com>2017-05-11 02:46:41 +0200
commit07080ba365988e6bfd8a0067aa73bfb1ab25469d (patch)
treed3a3a94fed57a66a3716abe3bbc398a0ff02d6b1 /etc
parentfix noexec on .config/pulse (diff)
downloadfirejail-07080ba365988e6bfd8a0067aa73bfb1ab25469d.tar.gz
firejail-07080ba365988e6bfd8a0067aa73bfb1ab25469d.tar.zst
firejail-07080ba365988e6bfd8a0067aa73bfb1ab25469d.zip
layout
Diffstat (limited to 'etc')
-rw-r--r--etc/disable-common.inc9
1 files changed, 3 insertions, 6 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 7ed99799d..96a92cd15 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -181,17 +181,14 @@ read-only ${HOME}/.gem
181read-only ${HOME}/.luarocks 181read-only ${HOME}/.luarocks
182read-only ${HOME}/.npm-packages 182read-only ${HOME}/.npm-packages
183 183
184###########################
185# The following block breaks trash functionality in file managers 184# The following block breaks trash functionality in file managers
186##########################
187# Make the contents of ~/.local read-only,
188# except the commonly-used ~/.local/share,
189# but including ~/.local/share/applications
190#read-only ${HOME}/.local 185#read-only ${HOME}/.local
191#read-write ${HOME}/.local/share 186#read-write ${HOME}/.local/share
192#noexec ${HOME}/.local/share 187#noexec ${HOME}/.local/share
188blacklist ${HOME}/.local/share/Trash
189
190# Write-protection for desktop entries
193read-only ${HOME}/.local/share/applications 191read-only ${HOME}/.local/share/applications
194blacklist ${HOME}/.local/share/Trash
195 192
196# top secret 193# top secret
197blacklist ${HOME}/.ecryptfs 194blacklist ${HOME}/.ecryptfs