diff options
Diffstat (limited to 'etc/disable-common.inc')
-rw-r--r-- | etc/disable-common.inc | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc index 0ada3314f..451203865 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc | |||
@@ -6,11 +6,8 @@ include /etc/firejail/disable-common.local | |||
6 | blacklist-nolog ${HOME}/.history | 6 | blacklist-nolog ${HOME}/.history |
7 | blacklist-nolog ${HOME}/.*_history | 7 | blacklist-nolog ${HOME}/.*_history |
8 | blacklist-nolog ${HOME}/.bash_history | 8 | blacklist-nolog ${HOME}/.bash_history |
9 | blacklist ${HOME}/.local/share/systemd | ||
10 | blacklist ${HOME}/.config/systemd | ||
11 | blacklist-nolog ${HOME}/.adobe | 9 | blacklist-nolog ${HOME}/.adobe |
12 | blacklist-nolog ${HOME}/.macromedia | 10 | blacklist-nolog ${HOME}/.macromedia |
13 | read-only ${HOME}/.local/share/applications | ||
14 | 11 | ||
15 | # X11 session autostart | 12 | # X11 session autostart |
16 | blacklist ${HOME}/.xinitrc | 13 | blacklist ${HOME}/.xinitrc |
@@ -74,6 +71,10 @@ blacklist ${HOME}/.local/share/kservices5 | |||
74 | blacklist ${HOME}/.local/share/plasma | 71 | blacklist ${HOME}/.local/share/plasma |
75 | blacklist ${HOME}/.local/share/solid | 72 | blacklist ${HOME}/.local/share/solid |
76 | 73 | ||
74 | # systemd | ||
75 | blacklist ${HOME}/.local/share/systemd | ||
76 | blacklist ${HOME}/.config/systemd | ||
77 | |||
77 | # VirtualBox | 78 | # VirtualBox |
78 | blacklist ${HOME}/.VirtualBox | 79 | blacklist ${HOME}/.VirtualBox |
79 | blacklist ${HOME}/VirtualBox VMs | 80 | blacklist ${HOME}/VirtualBox VMs |
@@ -177,9 +178,11 @@ read-only ${HOME}/.luarocks | |||
177 | read-only ${HOME}/.npm-packages | 178 | read-only ${HOME}/.npm-packages |
178 | 179 | ||
179 | # Make the contents of ~/.local read-only, | 180 | # Make the contents of ~/.local read-only, |
180 | # except the commonly-used ~/.local/share | 181 | # except the commonly-used ~/.local/share, |
182 | # but including ~/.local/share/applications | ||
181 | read-only ${HOME}/.local | 183 | read-only ${HOME}/.local |
182 | read-write ${HOME}/.local/share | 184 | read-write ${HOME}/.local/share |
185 | read-only ${HOME}/.local/share/applications | ||
183 | 186 | ||
184 | # top secret | 187 | # top secret |
185 | blacklist ${HOME}/.ecryptfs | 188 | blacklist ${HOME}/.ecryptfs |