diff options
| author |  smitsohu <smitsohu@gmail.com> | 2020-02-09 17:06:30 +0100 |
|---|---|---|
| committer | smitsohu <smitsohu@gmail.com> | 2020-02-09 17:06:30 +0100 |
| commit | 9d95b75892ab8e7937490835f97f76010f954221 (patch) | |
| tree | f912d704fbdfae1737dc15b055f0e28d25b8cb08 /etc | |
| parent | harden wine (diff) | |
| download | firejail-9d95b75892ab8e7937490835f97f76010f954221.tar.gz firejail-9d95b75892ab8e7937490835f97f76010f954221.tar.zst firejail-9d95b75892ab8e7937490835f97f76010f954221.zip | |
improve baloo hardening suggestion
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/baloo_file.profile | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile index 3cc377397..785e37a16 100644 --- a/etc/baloo_file.profile +++ b/etc/baloo_file.profile | |||
| @@ -5,10 +5,12 @@ include baloo_file.local | |||
| 5 | # Persistent global definitions | 5 | # Persistent global definitions |
| 6 | include globals.local | 6 | include globals.local |
| 7 | 7 | ||
| 8 | # Make home directory read-only and allow writing only to ${HOME}/.local/share | 8 | # Make home directory read-only and allow writing only to ${HOME}/.local/share/baloo |
| 9 | # Note: Baloo will not be able to update the "first run" key in its configuration files. | 9 | # Note: Baloo will not be able to update the "first run" key in its configuration files. |
| 10 | # mkdir ${HOME}/.local/share/baloo | ||
| 10 | # read-only ${HOME} | 11 | # read-only ${HOME} |
| 11 | # read-write ${HOME}/.local/share | 12 | # read-write ${HOME}/.local/share/baloo |
| 13 | # ignore read-write | ||
| 12 | 14 | ||
| 13 | noblacklist ${HOME}/.config/baloofilerc | 15 | noblacklist ${HOME}/.config/baloofilerc |
| 14 | noblacklist ${HOME}/.kde/share/config/baloofilerc | 16 | noblacklist ${HOME}/.kde/share/config/baloofilerc |