diff options
Diffstat (limited to 'etc/nautilus.profile')
| -rw-r--r-- | etc/nautilus.profile | 9 |
1 files changed, 4 insertions, 5 deletions
diff --git a/etc/nautilus.profile b/etc/nautilus.profile index 350e7f9b6..2da8f32d7 100644 --- a/etc/nautilus.profile +++ b/etc/nautilus.profile | |||
| @@ -5,6 +5,9 @@ include /etc/firejail/nautilus.local | |||
| 5 | # Persistent global definitions | 5 | # Persistent global definitions |
| 6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
| 7 | 7 | ||
| 8 | # Nautilus is started by systemd on most systems. Therefore it is not firejailed by default. Since there | ||
| 9 | # is already a nautilus process running on gnome desktops firejail will have no effect. | ||
| 10 | |||
| 8 | noblacklist ~/.config/nautilus | 11 | noblacklist ~/.config/nautilus |
| 9 | noblacklist ~/.local/share/Trash | 12 | noblacklist ~/.local/share/Trash |
| 10 | noblacklist ~/.local/share/nautilus | 13 | noblacklist ~/.local/share/nautilus |
| @@ -25,12 +28,8 @@ seccomp | |||
| 25 | shell none | 28 | shell none |
| 26 | tracelog | 29 | tracelog |
| 27 | 30 | ||
| 31 | # nautilus needs to be able to start arbitrary applications so we cannot blacklist their files | ||
| 28 | # private-bin nautilus | 32 | # private-bin nautilus |
| 29 | # private-dev | 33 | # private-dev |
| 30 | # private-etc fonts | 34 | # private-etc fonts |
| 31 | # private-tmp | 35 | # private-tmp |
| 32 | |||
| 33 | # CLOBBERED COMMENTS | ||
| 34 | # Nautilus is started by systemd on most systems. Therefore it is not firejailed by default. Since there | ||
| 35 | # is already a nautilus process running on gnome desktops firejail will have no effect. | ||
| 36 | # nautilus needs to be able to start arbitrary applications so we cannot blacklist their files | ||