aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--etc/disable-common.inc4
-rw-r--r--etc/disable-programs.inc3
-rw-r--r--etc/gwenview.profile2
-rw-r--r--etc/konversation.profile3
-rw-r--r--etc/skanlite.profile2
5 files changed, 10 insertions, 4 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index e23cc8906..53f449115 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -18,8 +18,7 @@ blacklist ${HOME}/.config/autostart
18blacklist ${HOME}/.config/autostart-scripts 18blacklist ${HOME}/.config/autostart-scripts
19blacklist ${HOME}/.config/lxsession/LXDE/autostart 19blacklist ${HOME}/.config/lxsession/LXDE/autostart
20blacklist ${HOME}/.config/openbox 20blacklist ${HOME}/.config/openbox
21blacklist ${HOME}/.config/plasma-workspace/env 21blacklist ${HOME}/.config/plasma-workspace
22blacklist ${HOME}/.config/plasma-workspace/shutdown
23blacklist ${HOME}/.config/startupconfig 22blacklist ${HOME}/.config/startupconfig
24blacklist ${HOME}/.fluxbox/startup 23blacklist ${HOME}/.fluxbox/startup
25blacklist ${HOME}/.gnomerc 24blacklist ${HOME}/.gnomerc
@@ -256,6 +255,7 @@ blacklist ${HOME}/.netrc
256blacklist ${HOME}/.pki 255blacklist ${HOME}/.pki
257blacklist ${HOME}/.smbcredentials 256blacklist ${HOME}/.smbcredentials
258blacklist ${HOME}/.ssh 257blacklist ${HOME}/.ssh
258blacklist ${HOME}/.vaults
259blacklist /etc/group+ 259blacklist /etc/group+
260blacklist /etc/group- 260blacklist /etc/group-
261blacklist /etc/gshadow 261blacklist /etc/gshadow
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 6f982f539..d7a6d58ec 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -134,6 +134,7 @@ blacklist ${HOME}/.config/kritarc
134blacklist ${HOME}/.config/kwriterc 134blacklist ${HOME}/.config/kwriterc
135blacklist ${HOME}/.config/kdeconnect 135blacklist ${HOME}/.config/kdeconnect
136blacklist ${HOME}/.config/knotesrc 136blacklist ${HOME}/.config/knotesrc
137blacklist ${HOME}/.config/konversationrc
137blacklist ${HOME}/.config/ktorrentrc 138blacklist ${HOME}/.config/ktorrentrc
138blacklist ${HOME}/.config/leafpad 139blacklist ${HOME}/.config/leafpad
139blacklist ${HOME}/.config/libreoffice 140blacklist ${HOME}/.config/libreoffice
@@ -270,6 +271,7 @@ blacklist ${HOME}/.kde/share/config/khtmlrc
270blacklist ${HOME}/.kde/share/config/konq_history 271blacklist ${HOME}/.kde/share/config/konq_history
271blacklist ${HOME}/.kde/share/config/konqsidebartngrc 272blacklist ${HOME}/.kde/share/config/konqsidebartngrc
272blacklist ${HOME}/.kde/share/config/konquerorrc 273blacklist ${HOME}/.kde/share/config/konquerorrc
274blacklist ${HOME}/.kde/share/config/konversationrc
273blacklist ${HOME}/.kde/share/config/kopeterc 275blacklist ${HOME}/.kde/share/config/kopeterc
274blacklist ${HOME}/.kde/share/config/ktorrentrc 276blacklist ${HOME}/.kde/share/config/ktorrentrc
275blacklist ${HOME}/.kde/share/config/okularpartrc 277blacklist ${HOME}/.kde/share/config/okularpartrc
@@ -295,6 +297,7 @@ blacklist ${HOME}/.kde4/share/config/khtmlrc
295blacklist ${HOME}/.kde4/share/config/konq_history 297blacklist ${HOME}/.kde4/share/config/konq_history
296blacklist ${HOME}/.kde4/share/config/konqsidebartngrc 298blacklist ${HOME}/.kde4/share/config/konqsidebartngrc
297blacklist ${HOME}/.kde4/share/config/konquerorrc 299blacklist ${HOME}/.kde4/share/config/konquerorrc
300blacklist ${HOME}/.kde4/share/config/konversationrc
298blacklist ${HOME}/.kde4/share/config/kopeterc 301blacklist ${HOME}/.kde4/share/config/kopeterc
299blacklist ${HOME}/.kde4/share/config/ktorrentrc 302blacklist ${HOME}/.kde4/share/config/ktorrentrc
300blacklist ${HOME}/.kde4/share/config/okularpartrc 303blacklist ${HOME}/.kde4/share/config/okularpartrc
diff --git a/etc/gwenview.profile b/etc/gwenview.profile
index efaf94f4c..8ad3ac5f3 100644
--- a/etc/gwenview.profile
+++ b/etc/gwenview.profile
@@ -37,7 +37,7 @@ seccomp
37shell none 37shell none
38tracelog 38tracelog
39 39
40private-bin gwenview,gimp*,kbuildsycoca4 40private-bin gwenview,gimp*,kbuildsycoca4,kdeinit4
41private-dev 41private-dev
42# private-etc X11 42# private-etc X11
43 43
diff --git a/etc/konversation.profile b/etc/konversation.profile
index 7d09857ba..db91940e2 100644
--- a/etc/konversation.profile
+++ b/etc/konversation.profile
@@ -5,6 +5,9 @@ include /etc/firejail/konversation.local
5# Persistent global definitions 5# Persistent global definitions
6include /etc/firejail/globals.local 6include /etc/firejail/globals.local
7 7
8noblacklist ${HOME}/.config/konversationrc
9noblacklist ${HOME}/.kde/share/config/konversationrc
10noblacklist ${HOME}/.kde4/share/config/konversationrc
8 11
9include /etc/firejail/disable-common.inc 12include /etc/firejail/disable-common.inc
10include /etc/firejail/disable-devel.inc 13include /etc/firejail/disable-devel.inc
diff --git a/etc/skanlite.profile b/etc/skanlite.profile
index 61627f5d8..f1a64093a 100644
--- a/etc/skanlite.profile
+++ b/etc/skanlite.profile
@@ -27,7 +27,7 @@ protocol unix,netlink
27seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice 27seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
28shell none 28shell none
29 29
30# private-bin skanlite,kbuildsycoca4 30# private-bin skanlite,kbuildsycoca4,kdeinit4
31# private-dev 31# private-dev
32# private-etc 32# private-etc
33# private-tmp 33# private-tmp