From 3497195d44f96c0ea241138d8176bf0253409af5 Mon Sep 17 00:00:00 2001 From: smitsohu Date: Fri, 15 Sep 2017 16:13:04 +0200 Subject: little KDE app enhancements --- etc/ark.profile | 3 +++ etc/gwenview.profile | 1 + etc/konversation.profile | 4 ++++ etc/ktorrent.profile | 5 +++-- etc/okular.profile | 1 + 5 files changed, 12 insertions(+), 2 deletions(-) diff --git a/etc/ark.profile b/etc/ark.profile index 2ed25a4e6..38bd5246e 100644 --- a/etc/ark.profile +++ b/etc/ark.profile @@ -29,3 +29,6 @@ shell none private-dev # private-etc private-tmp + +noexec ${HOME} +noexec /tmp diff --git a/etc/gwenview.profile b/etc/gwenview.profile index 745468912..7f1577afe 100644 --- a/etc/gwenview.profile +++ b/etc/gwenview.profile @@ -35,5 +35,6 @@ private-bin gwenview,kbuildsycoca4,gimp,gimp-2.8 private-dev # private-etc X11 +# memory-deny-write-execute noexec ${HOME} noexec /tmp diff --git a/etc/konversation.profile b/etc/konversation.profile index 1a08c3d83..8ffc43487 100644 --- a/etc/konversation.profile +++ b/etc/konversation.profile @@ -25,3 +25,7 @@ tracelog private-dev private-tmp + +# memory-deny-write-execute +noexec ${HOME} +noexec /tmp diff --git a/etc/ktorrent.profile b/etc/ktorrent.profile index c5b887118..c0b37df3c 100644 --- a/etc/ktorrent.profile +++ b/etc/ktorrent.profile @@ -18,11 +18,11 @@ include /etc/firejail/disable-passwdmgr.inc include /etc/firejail/disable-programs.inc mkdir ~/.kde/share/apps/ktorrent -mkdir ~/.kde/share/config/ktorrentrc mkdir ~/.kde4/share/apps/ktorrent -mkdir ~/.kde4/share/config/ktorrentrc mkdir ~/.local/share/ktorrent mkfile ~/.config/ktorrentrc +mkfile ~/.kde/share/config/ktorrentrc +mkfile ~/.kde4/share/config/ktorrentrc whitelist ${DOWNLOADS} whitelist ~/.config/ktorrentrc whitelist ~/.kde/share/apps/ktorrent @@ -49,5 +49,6 @@ shell none private-dev private-tmp +# memory-deny-write-execute noexec ${HOME} noexec /tmp diff --git a/etc/okular.profile b/etc/okular.profile index d03891ebe..5a704ad26 100644 --- a/etc/okular.profile +++ b/etc/okular.profile @@ -39,5 +39,6 @@ private-dev # private-etc fonts,X11 private-tmp +# memory-deny-write-execute noexec ${HOME} noexec /tmp -- cgit v1.2.3-54-g00ecf