diff options
Diffstat (limited to 'etc/okular.profile')
-rw-r--r-- | etc/okular.profile | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/etc/okular.profile b/etc/okular.profile index 53148add5..89f76cda1 100644 --- a/etc/okular.profile +++ b/etc/okular.profile | |||
@@ -5,6 +5,8 @@ include /etc/firejail/okular.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
7 | 7 | ||
8 | # blacklist /run/user/*/bus | ||
9 | |||
8 | noblacklist ~/.config/okularpartrc | 10 | noblacklist ~/.config/okularpartrc |
9 | noblacklist ~/.config/okularrc | 11 | noblacklist ~/.config/okularrc |
10 | noblacklist ~/.kde/share/apps/okular | 12 | noblacklist ~/.kde/share/apps/okular |
@@ -23,6 +25,7 @@ include /etc/firejail/disable-programs.inc | |||
23 | include /etc/firejail/whitelist-var-common.inc | 25 | include /etc/firejail/whitelist-var-common.inc |
24 | 26 | ||
25 | caps.drop all | 27 | caps.drop all |
28 | # net none | ||
26 | netfilter | 29 | netfilter |
27 | nodvd | 30 | nodvd |
28 | nogroups | 31 | nogroups |
@@ -36,9 +39,9 @@ seccomp | |||
36 | shell none | 39 | shell none |
37 | tracelog | 40 | tracelog |
38 | 41 | ||
39 | # private-bin okular,kbuildsycoca4,kdeinit4,lpr | 42 | private-bin okular,kbuildsycoca4,kdeinit4,lpr |
40 | private-dev | 43 | private-dev |
41 | # private-etc fonts,X11 | 44 | private-etc cups,fonts |
42 | # private-tmp - on KDE we need access to the real /tmp for data exchange with thunderbird | 45 | # private-tmp - on KDE we need access to the real /tmp for data exchange with thunderbird |
43 | 46 | ||
44 | # memory-deny-write-execute | 47 | # memory-deny-write-execute |