diff options
Diffstat (limited to 'etc')
-rw-r--r-- | etc/disable-programs.inc | 6 | ||||
-rw-r--r-- | etc/dolphin.profile | 3 | ||||
-rw-r--r-- | etc/firefox-common-addons.inc | 4 | ||||
-rw-r--r-- | etc/kget.profile | 2 | ||||
-rw-r--r-- | etc/okular.profile | 1 | ||||
-rw-r--r-- | etc/scribus.profile | 1 |
6 files changed, 16 insertions, 1 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index ce531af32..8e72dc47e 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -136,6 +136,7 @@ blacklist ${HOME}/.config/kateschemarc | |||
136 | blacklist ${HOME}/.config/katesyntaxhighlightingrc | 136 | blacklist ${HOME}/.config/katesyntaxhighlightingrc |
137 | blacklist ${HOME}/.config/katevirc | 137 | blacklist ${HOME}/.config/katevirc |
138 | blacklist ${HOME}/.config/kdenliverc | 138 | blacklist ${HOME}/.config/kdenliverc |
139 | blacklist ${HOME}/.config/kgetrc | ||
139 | blacklist ${HOME}/.config/klipperrc | 140 | blacklist ${HOME}/.config/klipperrc |
140 | blacklist ${HOME}/.config/kritarc | 141 | blacklist ${HOME}/.config/kritarc |
141 | blacklist ${HOME}/.config/kwriterc | 142 | blacklist ${HOME}/.config/kwriterc |
@@ -367,6 +368,7 @@ blacklist ${HOME}/.local/share/gwenview | |||
367 | blacklist ${HOME}/.local/share/kaffeine | 368 | blacklist ${HOME}/.local/share/kaffeine |
368 | blacklist ${HOME}/.local/share/kate | 369 | blacklist ${HOME}/.local/share/kate |
369 | blacklist ${HOME}/.local/share/kdenlive | 370 | blacklist ${HOME}/.local/share/kdenlive |
371 | blacklist ${HOME}/.local/share/kget | ||
370 | blacklist ${HOME}/.local/share/krita | 372 | blacklist ${HOME}/.local/share/krita |
371 | blacklist ${HOME}/.local/share/ktorrentrc | 373 | blacklist ${HOME}/.local/share/ktorrentrc |
372 | blacklist ${HOME}/.local/share/ktorrent | 374 | blacklist ${HOME}/.local/share/ktorrent |
@@ -493,6 +495,7 @@ blacklist ${HOME}/.cache/chromium-dev | |||
493 | blacklist ${HOME}/.cache/cliqz | 495 | blacklist ${HOME}/.cache/cliqz |
494 | blacklist ${HOME}/.cache/darktable | 496 | blacklist ${HOME}/.cache/darktable |
495 | blacklist ${HOME}/.cache/discover | 497 | blacklist ${HOME}/.cache/discover |
498 | blacklist ${HOME}/.cache/dolphin | ||
496 | blacklist ${HOME}/.cache/epiphany | 499 | blacklist ${HOME}/.cache/epiphany |
497 | blacklist ${HOME}/.cache/evolution | 500 | blacklist ${HOME}/.cache/evolution |
498 | blacklist ${HOME}/.cache/fossamail | 501 | blacklist ${HOME}/.cache/fossamail |
@@ -507,6 +510,7 @@ blacklist ${HOME}/.cache/INRIA/Natron | |||
507 | blacklist ${HOME}/.cache/inox | 510 | blacklist ${HOME}/.cache/inox |
508 | blacklist ${HOME}/.cache/iridium | 511 | blacklist ${HOME}/.cache/iridium |
509 | blacklist ${HOME}/.cache/kdenlive | 512 | blacklist ${HOME}/.cache/kdenlive |
513 | blacklist ${HOME}/.cache/kinfocenter | ||
510 | blacklist ${HOME}/.cache/krunner | 514 | blacklist ${HOME}/.cache/krunner |
511 | blacklist ${HOME}/.cache/kscreenlocker_greet | 515 | blacklist ${HOME}/.cache/kscreenlocker_greet |
512 | blacklist ${HOME}/.cache/ksmserver-logout-greeter | 516 | blacklist ${HOME}/.cache/ksmserver-logout-greeter |
@@ -520,6 +524,7 @@ blacklist ${HOME}/.cache/mozilla | |||
520 | blacklist ${HOME}/.cache/mutt | 524 | blacklist ${HOME}/.cache/mutt |
521 | blacklist ${HOME}/.cache/nheko/nheko | 525 | blacklist ${HOME}/.cache/nheko/nheko |
522 | blacklist ${HOME}/.cache/netsurf | 526 | blacklist ${HOME}/.cache/netsurf |
527 | blacklist ${HOME}/.cache/okular | ||
523 | blacklist ${HOME}/.cache/opera | 528 | blacklist ${HOME}/.cache/opera |
524 | blacklist ${HOME}/.cache/opera-beta | 529 | blacklist ${HOME}/.cache/opera-beta |
525 | blacklist ${HOME}/.cache/org.gnome.Books | 530 | blacklist ${HOME}/.cache/org.gnome.Books |
@@ -532,6 +537,7 @@ blacklist ${HOME}/.cache/qutebrowser | |||
532 | blacklist ${HOME}/.cache/simple-scan | 537 | blacklist ${HOME}/.cache/simple-scan |
533 | blacklist ${HOME}/.cache/slimjet | 538 | blacklist ${HOME}/.cache/slimjet |
534 | blacklist ${HOME}/.cache/spotify | 539 | blacklist ${HOME}/.cache/spotify |
540 | blacklist ${HOME}/.cache/systemsettings | ||
535 | blacklist ${HOME}/.cache/telepathy | 541 | blacklist ${HOME}/.cache/telepathy |
536 | blacklist ${HOME}/.cache/thunderbird | 542 | blacklist ${HOME}/.cache/thunderbird |
537 | blacklist ${HOME}/.cache/torbrowser | 543 | blacklist ${HOME}/.cache/torbrowser |
diff --git a/etc/dolphin.profile b/etc/dolphin.profile index c1604826e..ce167b7a7 100644 --- a/etc/dolphin.profile +++ b/etc/dolphin.profile | |||
@@ -8,7 +8,8 @@ include /etc/firejail/globals.local | |||
8 | # warning: firejail is currently not effectively constraining dolphin since used services are started by kdeinit5 | 8 | # warning: firejail is currently not effectively constraining dolphin since used services are started by kdeinit5 |
9 | 9 | ||
10 | noblacklist ${HOME}/.local/share/Trash | 10 | noblacklist ${HOME}/.local/share/Trash |
11 | # noblacklist ${HOME}/.config/dolphinrc - diable-programs.inc is disabled, see below | 11 | # noblacklist ${HOME}/.cache/dolphin - disable-programs.inc is disabled, see below |
12 | # noblacklist ${HOME}/.config/dolphinrc | ||
12 | # noblacklist ${HOME}/.local/share/dolphin | 13 | # noblacklist ${HOME}/.local/share/dolphin |
13 | 14 | ||
14 | include /etc/firejail/disable-common.inc | 15 | include /etc/firejail/disable-common.inc |
diff --git a/etc/firefox-common-addons.inc b/etc/firefox-common-addons.inc index b480aae18..b237c3c05 100644 --- a/etc/firefox-common-addons.inc +++ b/etc/firefox-common-addons.inc | |||
@@ -2,6 +2,7 @@ | |||
2 | # Persistent customizations should go in a .local file. | 2 | # Persistent customizations should go in a .local file. |
3 | include /etc/firejail/firefox-common-addons.local | 3 | include /etc/firejail/firefox-common-addons.local |
4 | 4 | ||
5 | noblacklist ${HOME}/.config/kgetrc | ||
5 | noblacklist ${HOME}/.config/okularpartrc | 6 | noblacklist ${HOME}/.config/okularpartrc |
6 | noblacklist ${HOME}/.config/okularrc | 7 | noblacklist ${HOME}/.config/okularrc |
7 | noblacklist ${HOME}/.config/qpdfview | 8 | noblacklist ${HOME}/.config/qpdfview |
@@ -16,11 +17,13 @@ noblacklist ${HOME}/.kde4/share/config/kgetrc | |||
16 | noblacklist ${HOME}/.kde4/share/config/okularpartrc | 17 | noblacklist ${HOME}/.kde4/share/config/okularpartrc |
17 | noblacklist ${HOME}/.kde4/share/config/okularrc | 18 | noblacklist ${HOME}/.kde4/share/config/okularrc |
18 | # noblacklist ${HOME}/.local/share/gnome-shell/extensions | 19 | # noblacklist ${HOME}/.local/share/gnome-shell/extensions |
20 | noblacklist ${HOME}/.local/share/kget | ||
19 | noblacklist ${HOME}/.local/share/okular | 21 | noblacklist ${HOME}/.local/share/okular |
20 | noblacklist ${HOME}/.local/share/qpdfview | 22 | noblacklist ${HOME}/.local/share/qpdfview |
21 | 23 | ||
22 | whitelist ${HOME}/.cache/gnome-mplayer/plugin | 24 | whitelist ${HOME}/.cache/gnome-mplayer/plugin |
23 | whitelist ${HOME}/.config/gnome-mplayer | 25 | whitelist ${HOME}/.config/gnome-mplayer |
26 | whitelist ${HOME}/.config/kgetrc | ||
24 | whitelist ${HOME}/.config/okularpartrc | 27 | whitelist ${HOME}/.config/okularpartrc |
25 | whitelist ${HOME}/.config/okularrc | 28 | whitelist ${HOME}/.config/okularrc |
26 | whitelist ${HOME}/.config/pipelight-silverlight5.1 | 29 | whitelist ${HOME}/.config/pipelight-silverlight5.1 |
@@ -39,6 +42,7 @@ whitelist ${HOME}/.kde4/share/config/okularrc | |||
39 | whitelist ${HOME}/.keysnail.js | 42 | whitelist ${HOME}/.keysnail.js |
40 | whitelist ${HOME}/.lastpass | 43 | whitelist ${HOME}/.lastpass |
41 | whitelist ${HOME}/.local/share/gnome-shell/extensions | 44 | whitelist ${HOME}/.local/share/gnome-shell/extensions |
45 | whitelist ${HOME}/.local/share/kget | ||
42 | whitelist ${HOME}/.local/share/okular | 46 | whitelist ${HOME}/.local/share/okular |
43 | whitelist ${HOME}/.local/share/qpdfview | 47 | whitelist ${HOME}/.local/share/qpdfview |
44 | whitelist ${HOME}/.pentadactyl | 48 | whitelist ${HOME}/.pentadactyl |
diff --git a/etc/kget.profile b/etc/kget.profile index 25c66e044..c4e073c2b 100644 --- a/etc/kget.profile +++ b/etc/kget.profile | |||
@@ -5,10 +5,12 @@ include /etc/firejail/kget.local | |||
5 | # Persistent global definitions | 5 | # Persistent global definitions |
6 | include /etc/firejail/globals.local | 6 | include /etc/firejail/globals.local |
7 | 7 | ||
8 | noblacklist ${HOME}/.config/kgetrc | ||
8 | noblacklist ${HOME}/.kde/share/apps/kget | 9 | noblacklist ${HOME}/.kde/share/apps/kget |
9 | noblacklist ${HOME}/.kde/share/config/kgetrc | 10 | noblacklist ${HOME}/.kde/share/config/kgetrc |
10 | noblacklist ${HOME}/.kde4/share/apps/kget | 11 | noblacklist ${HOME}/.kde4/share/apps/kget |
11 | noblacklist ${HOME}/.kde4/share/config/kgetrc | 12 | noblacklist ${HOME}/.kde4/share/config/kgetrc |
13 | noblacklist ${HOME}/.local/share/kget | ||
12 | 14 | ||
13 | include /etc/firejail/disable-common.inc | 15 | include /etc/firejail/disable-common.inc |
14 | include /etc/firejail/disable-devel.inc | 16 | include /etc/firejail/disable-devel.inc |
diff --git a/etc/okular.profile b/etc/okular.profile index da82d2622..d98d4792f 100644 --- a/etc/okular.profile +++ b/etc/okular.profile | |||
@@ -7,6 +7,7 @@ include /etc/firejail/globals.local | |||
7 | 7 | ||
8 | # blacklist /run/user/*/bus | 8 | # blacklist /run/user/*/bus |
9 | 9 | ||
10 | noblacklist ${HOME}/.cache/okular | ||
10 | noblacklist ${HOME}/.config/okularpartrc | 11 | noblacklist ${HOME}/.config/okularpartrc |
11 | noblacklist ${HOME}/.config/okularrc | 12 | noblacklist ${HOME}/.config/okularrc |
12 | noblacklist ${HOME}/.kde/share/apps/okular | 13 | noblacklist ${HOME}/.kde/share/apps/okular |
diff --git a/etc/scribus.profile b/etc/scribus.profile index 001b91387..8ce63fbf0 100644 --- a/etc/scribus.profile +++ b/etc/scribus.profile | |||
@@ -8,6 +8,7 @@ include /etc/firejail/globals.local | |||
8 | blacklist /run/user/*/bus | 8 | blacklist /run/user/*/bus |
9 | 9 | ||
10 | # Support for PDF readers comes with Scribus 1.5 and higher | 10 | # Support for PDF readers comes with Scribus 1.5 and higher |
11 | noblacklist ${HOME}/.cache/okular | ||
11 | noblacklist ${HOME}/.config/okularpartrc | 12 | noblacklist ${HOME}/.config/okularpartrc |
12 | noblacklist ${HOME}/.config/okularrc | 13 | noblacklist ${HOME}/.config/okularrc |
13 | noblacklist ${HOME}/.config/scribus | 14 | noblacklist ${HOME}/.config/scribus |