aboutsummaryrefslogtreecommitdiffstats
path: root/etc/dolphin.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/dolphin.profile')
-rw-r--r--etc/dolphin.profile24
1 files changed, 11 insertions, 13 deletions
diff --git a/etc/dolphin.profile b/etc/dolphin.profile
index aac358d38..93acbd09e 100644
--- a/etc/dolphin.profile
+++ b/etc/dolphin.profile
@@ -1,34 +1,32 @@
1# Persistent global definitions go here 1# Firejail profile for dolphin
2include /etc/firejail/globals.local 2# This file is overwritten after every install/update
3 3# Persistent local customizations
4# This file is overwritten during software install.
5# Persistent customizations should go in a .local file.
6include /etc/firejail/dolphin.local 4include /etc/firejail/dolphin.local
7 5# Persistent global definitions
8# dolphin profile 6include /etc/firejail/globals.local
9 7
10# warning: firejail is currently not effectively constraining dolphin since used services are started by kdeinit5 8# warning: firejail is currently not effectively constraining dolphin since used services are started by kdeinit5
11 9
10noblacklist ${HOME}/.local/share/Trash
12noblacklist ~/.config/dolphinrc 11noblacklist ~/.config/dolphinrc
13noblacklist ~/.local/share/dolphin 12noblacklist ~/.local/share/dolphin
14noblacklist ${HOME}/.local/share/Trash
15 13
16include /etc/firejail/disable-common.inc 14include /etc/firejail/disable-common.inc
17# dolphin needs to be able to start arbitrary applications so we cannot blacklist their files
18#include /etc/firejail/disable-programs.inc
19include /etc/firejail/disable-devel.inc 15include /etc/firejail/disable-devel.inc
20include /etc/firejail/disable-passwdmgr.inc 16include /etc/firejail/disable-passwdmgr.inc
17# include /etc/firejail/disable-programs.inc
21 18
22caps.drop all 19caps.drop all
23netfilter 20netfilter
24nogroups 21nogroups
25nonewprivs 22nonewprivs
26noroot 23noroot
27shell none
28seccomp
29protocol unix 24protocol unix
25seccomp
26shell none
30 27
28# dolphin needs to be able to start arbitrary applications so we cannot blacklist their files
31# private-bin 29# private-bin
32# private-dev 30# private-dev
33# private-tmp
34# private-etc 31# private-etc
32# private-tmp