From 81c50814dd5a9a2e8aa5100bb7305649fa5b698f Mon Sep 17 00:00:00 2001 From: SYN-cook Date: Fri, 31 Mar 2017 05:06:50 +0200 Subject: restrict more KDE files (#1181) * update noblacklist * blacklist local plasma overrides, plasmoids * add more KDE configuration (kdeglobals, plasmoids) * kdeglobals now in disable-common.inc --- etc/disable-common.inc | 13 +++++++++++-- etc/gwenview.profile | 2 ++ etc/okular.profile | 2 -- 3 files changed, 13 insertions(+), 4 deletions(-) (limited to 'etc') diff --git a/etc/disable-common.inc b/etc/disable-common.inc index 45541906a..0ada3314f 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc @@ -45,24 +45,33 @@ blacklist ${HOME}/.fluxbox/startup # blacklist ${HOME}/.xpra - this will kill --x11=xpra cmdline option for all programs # KDE config -blacklist ${HOME}/.kde4/share/apps/solid blacklist ${HOME}/.kde4/share/apps/konsole +blacklist ${HOME}/.kde4/share/apps/plasma +blacklist ${HOME}/.kde4/share/apps/solid blacklist ${HOME}/.kde4/share/config/*.notifyrc +read-only ${HOME}/.kde4/share/config/kdeglobals blacklist ${HOME}/.kde4/share/config/khotkeysrc blacklist ${HOME}/.kde4/share/config/krunnerrc +blacklist ${HOME}/.kde4/share/config/plasma-desktop-appletsrc blacklist ${HOME}/.kde4/share/kde4/services -blacklist ${HOME}/.kde/share/apps/solid blacklist ${HOME}/.kde/share/apps/konsole +blacklist ${HOME}/.kde/share/apps/plasma +blacklist ${HOME}/.kde/share/apps/solid blacklist ${HOME}/.kde/share/config/*.notifyrc +read-only ${HOME}/.kde/share/config/kdeglobals blacklist ${HOME}/.kde/share/config/khotkeysrc blacklist ${HOME}/.kde/share/config/krunnerrc +blacklist ${HOME}/.kde/share/config/plasma-desktop-appletsrc blacklist ${HOME}/.kde/share/kde4/services blacklist ${HOME}/.config/*.notifyrc +read-only ${HOME}/.config/kdeglobals blacklist ${HOME}/.config/khotkeysrc blacklist ${HOME}/.config/krunnerrc +blacklist ${HOME}/.config/plasma-org.kde.plasma.desktop-appletsrc blacklist ${HOME}/.local/share/kglobalaccel blacklist ${HOME}/.local/share/konsole blacklist ${HOME}/.local/share/kservices5 +blacklist ${HOME}/.local/share/plasma blacklist ${HOME}/.local/share/solid # VirtualBox diff --git a/etc/gwenview.profile b/etc/gwenview.profile index b8067866c..35e39a3ce 100644 --- a/etc/gwenview.profile +++ b/etc/gwenview.profile @@ -3,6 +3,8 @@ include /etc/firejail/gwenview.local # KDE gwenview profile +noblacklist ~/.kde4/share/apps/gwenview +noblacklist ~/.kde4/share/config/gwenviewrc noblacklist ~/.kde/share/apps/gwenview noblacklist ~/.kde/share/config/gwenviewrc noblacklist ~/.config/gwenviewrc diff --git a/etc/okular.profile b/etc/okular.profile index 07819068e..b4ee3ad32 100644 --- a/etc/okular.profile +++ b/etc/okular.profile @@ -6,11 +6,9 @@ include /etc/firejail/okular.local noblacklist ~/.kde4/share/apps/okular noblacklist ~/.kde4/share/config/okularrc noblacklist ~/.kde4/share/config/okularpartrc -read-only ~/.kde4/share/config/kdeglobals noblacklist ~/.kde/share/apps/okular noblacklist ~/.kde/share/config/okularrc noblacklist ~/.kde/share/config/okularpartrc -read-only ~/.kde/share/config/kdeglobals include /etc/firejail/disable-common.inc include /etc/firejail/disable-programs.inc include /etc/firejail/disable-devel.inc -- cgit v1.2.3-54-g00ecf