summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--etc/baloo_file.profile6
1 files changed, 5 insertions, 1 deletions
diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile
index 1acb5def2..6696cbad2 100644
--- a/etc/baloo_file.profile
+++ b/etc/baloo_file.profile
@@ -20,9 +20,13 @@ nonewprivs
20noroot 20noroot
21nosound 21nosound
22protocol unix 22protocol unix
23# Baloo makes ioprio_set system calls, which are blacklisted by default. 23# Baloo makes ioprio_set system calls, which are blacklisted by default.
24# That's why we need to disable seccomp 24# That's why we need to disable seccomp
25#seccomp 25#seccomp
26# The Baloo file daemon can be isolated from X11. If there is an X11
27# abstract Unix socket, it must be disabled first by passing "-nolisten local"
28# to the X server. See the Firejail manual for further instructions
29#x11 none
26 30
27private-dev 31private-dev
28private-tmp 32private-tmp