aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2022-03-23 12:31:05 -0300
committerLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2022-03-24 14:47:12 -0300
commit2dc957d1c576cc335218d143622780837eeccce0 (patch)
tree21a51caaed5a731a8c52230cdd3d6fc80c08a953 /etc
parentRELNOTES: add gcov dummy functions bugfix and docs (diff)
downloadfirejail-2dc957d1c576cc335218d143622780837eeccce0.tar.gz
firejail-2dc957d1c576cc335218d143622780837eeccce0.tar.zst
firejail-2dc957d1c576cc335218d143622780837eeccce0.zip
disable-common.inc: make ~/Applications dir read-only
This directory is monitored by both appimaged[1] and AppImageLauncher[2]. Also, when opening an AppImage with AppImageLauncher, it may prompt the user to move the AppImage to ~/Applications. [1] https://github.com/AppImage/appimaged/blob/2323f1825ed6abe19f2d3791d81307449692be03/README.md#monitored-directories [2] https://github.com/TheAssassin/AppImageLauncher/wiki/Configuration
Diffstat (limited to 'etc')
-rw-r--r--etc/inc/disable-common.inc3
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc
index 080a7f3a1..a2f4ebf2a 100644
--- a/etc/inc/disable-common.inc
+++ b/etc/inc/disable-common.inc
@@ -370,6 +370,9 @@ read-only ${HOME}/.nvm
370read-only ${HOME}/.rustup 370read-only ${HOME}/.rustup
371read-only ${HOME}/bin 371read-only ${HOME}/bin
372 372
373# Write-protection for portable apps
374read-only ${HOME}/Applications # used for storing AppImages
375
373# Write-protection for desktop entries 376# Write-protection for desktop entries
374read-only ${HOME}/.config/menus 377read-only ${HOME}/.config/menus
375read-only ${HOME}/.gnome/apps 378read-only ${HOME}/.gnome/apps