From 7c8b3d1bd8f8ed5d32a744bf3bbaf49f9477ad0a Mon Sep 17 00:00:00 2001 From: SYN-cook Date: Fri, 5 May 2017 22:21:31 +0200 Subject: harden baloo_file but loosen write-protections in commented section. due to KDE creating write-lock files, stricter settings for ~/.local/share don't work --- etc/baloo_file.profile | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) (limited to 'etc') diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile index bf0e924d8..d306a1b45 100644 --- a/etc/baloo_file.profile +++ b/etc/baloo_file.profile @@ -28,9 +28,11 @@ x11 xorg private-dev private-tmp -# Make home directory read-only and allow writing only to Baloo's database. -# Note: Baloo will not be able to update the first run key in its configuration files. -# Older versions will issue a warning message. +noexec ${HOME} +noexec /tmp + +# Make home directory read-only and allow writing only to ~/.local/share +# Note: Baloo will not be able to update the "first run" key in its configuration files. #read-only ${HOME} -#read-write ${HOME}/.local/share/baloo -#read-write ${HOME}/.local/share/akonadi/search_db +#read-write ${HOME}/.local/share +#noexec ${HOME}/.local/share -- cgit v1.2.3-54-g00ecf