harden KDE

3 files changed, 7 insertions, 0 deletions

diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 91c554f2e..1dd500c12 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -74,6 +74,7 @@ blacklist ${HOME}/.local/share/konsole
 blacklist ${HOME}/.local/share/kwin
 blacklist ${HOME}/.local/share/plasma
 blacklist ${HOME}/.local/share/solid
+read-only ${HOME}/.cache/ksycoca5_*
 read-only ${HOME}/.config/kdeglobals
 read-only ${HOME}/.config/kioslaverc
 read-only ${HOME}/.kde/share/config/kdeglobals
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 4d9c4d85f..5a75974ac 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -490,6 +490,10 @@ blacklist ${HOME}/.cache/icedove
 blacklist ${HOME}/.cache/INRIA/Natron
 blacklist ${HOME}/.cache/inox
 blacklist ${HOME}/.cache/iridium
+blacklist ${HOME}/.cache/kscreenlocker_greet
+blacklist ${HOME}/.cache/ksmserver-logout-greeter
+blacklist ${HOME}/.cache/ksplashqml
+blacklist ${HOME}/.cache/kwin
 blacklist ${HOME}/.cache/libgweather
 blacklist ${HOME}/.cache/liferea
 blacklist ${HOME}/.cache/midori
@@ -503,6 +507,7 @@ blacklist ${HOME}/.cache/opera-beta
 blacklist ${HOME}/.cache/org.gnome.Books
 blacklist ${HOME}/.cache/pdfmod
 blacklist ${HOME}/.cache/peek
+blacklist ${HOME}/.cache/plasmashell
 blacklist ${HOME}/.cache/qBittorrent
 blacklist ${HOME}/.cache/qupzilla
 blacklist ${HOME}/.cache/qutebrowser
diff --git a/etc/kwin_x11.profile b/etc/kwin_x11.profile
index 91bb62efc..92d2e38ae 100644
--- a/etc/kwin_x11.profile
+++ b/etc/kwin_x11.profile
@@ -5,6 +5,7 @@ include /etc/firejail/kwin_x11.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
+noblacklist ${HOME}/.cache/kwin
 noblacklist ${HOME}/.config/kwinrc
 noblacklist ${HOME}/.config/kwinrulesrc
 noblacklist ${HOME}/.local/share/kwin