aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar smitsohu <smitsohu@gmail.com>2018-10-25 23:32:33 +0200
committerLibravatar smitsohu <smitsohu@gmail.com>2018-10-25 23:32:33 +0200
commit04d9fb74001a0012cae59e223cd7d0abeb39ee17 (patch)
treef50824f65dc2470dd9b8200ee154135efb218ed0 /etc
parentfix: return with euid 0 (diff)
downloadfirejail-04d9fb74001a0012cae59e223cd7d0abeb39ee17.tar.gz
firejail-04d9fb74001a0012cae59e223cd7d0abeb39ee17.tar.zst
firejail-04d9fb74001a0012cae59e223cd7d0abeb39ee17.zip
cleanup
Diffstat (limited to 'etc')
-rw-r--r--etc/baloo_file.profile1
-rw-r--r--etc/disable-common.inc4
2 files changed, 0 insertions, 5 deletions
diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile
index 5e749cac1..307a16f9c 100644
--- a/etc/baloo_file.profile
+++ b/etc/baloo_file.profile
@@ -47,4 +47,3 @@ noexec /tmp
47# Note: Baloo will not be able to update the "first run" key in its configuration files. 47# Note: Baloo will not be able to update the "first run" key in its configuration files.
48# read-only ${HOME} 48# read-only ${HOME}
49# read-write ${HOME}/.local/share 49# read-write ${HOME}/.local/share
50# noexec ${HOME}/.local/share
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index e6ba99874..b78af7917 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -266,7 +266,6 @@ read-only ${HOME}/bin
266# The following block breaks trash functionality in file managers 266# The following block breaks trash functionality in file managers
267#read-only ${HOME}/.local 267#read-only ${HOME}/.local
268#read-write ${HOME}/.local/share 268#read-write ${HOME}/.local/share
269#noexec ${HOME}/.local/share
270blacklist ${HOME}/.local/share/Trash 269blacklist ${HOME}/.local/share/Trash
271 270
272# Write-protection for desktop entries 271# Write-protection for desktop entries
@@ -401,6 +400,3 @@ blacklist /usr/share/flatpak
401blacklist /var/lib/flatpak 400blacklist /var/lib/flatpak
402# most of the time bwrap is SUID binary 401# most of the time bwrap is SUID binary
403blacklist ${PATH}/bwrap 402blacklist ${PATH}/bwrap
404
405# complement noexec ${HOME} and noexec /tmp
406noexec /tmp/.X11-unix