diff options
| author | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2020-03-14 23:55:30 -0700 |
|---|---|---|
| committer | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2020-03-14 23:55:30 -0700 |
| commit | 176dae16c44794f30cb347dfd84fe84bcc5c9708 (patch) | |
| tree | 3c3b092e9446c01e5613c7596e5fa89277cb1385 /profiles/konqueror.profile | |
| download | firejail-profiles-176dae16c44794f30cb347dfd84fe84bcc5c9708.tar.xz | |
Initial commit
Diffstat (limited to 'profiles/konqueror.profile')
| -rw-r--r-- | profiles/konqueror.profile | 72 |
1 files changed, 72 insertions, 0 deletions
diff --git a/profiles/konqueror.profile b/profiles/konqueror.profile new file mode 100644 index 0000000..5739120 --- /dev/null +++ b/profiles/konqueror.profile @@ -0,0 +1,72 @@ +# This file is overwritten after every install/update +# Persistent local customizations +include konqueror.local +# Persistent global definitions +include globals.local + +#noblacklist ${HOME}/.cache/konqueror +#noblacklist ${HOME}/.cache/kget +noblacklist ${HOME}/.config/konquerorrc +noblacklist ${HOME}/.config/konq_history +noblacklist ${HOME}/.config/kcmshell5rc +noblacklist ${HOME}/.config/kgetrc +noblacklist ${HOME}/.config/kget_bittorrentfactory.rc +noblacklist ${HOME}/.config/kget_metalinkfactory.rc +noblacklist ${HOME}/.config/kget_multisegkiofactory.rc +noblacklist ${HOME}/.local/share/konqueror +noblacklist ${HOME}/.local/share/kget + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +# whitelisting breaks writing to konquerorrc +whitelist ${DOWNLOADS} +#whitelist ${HOME}/build/expansion +# # Workaround for failing to write to konquerorrc +whitelist ${HOME}/.config +whitelist ${HOME}/.config/konquerorrc +whitelist ${HOME}/.config/konq_history +whitelist ${HOME}/.config/kgetrc +whitelist ${HOME}/.config/kget_bittorrentfactory.rc +whitelist ${HOME}/.config/kget_metalinkfactory.rc +whitelist ${HOME}/.config/kget_multisegkiofactory.rc +whitelist ${HOME}/.local/share/konqueror +whitelist ${HOME}/.local/share/kget +include whitelist-common.inc + +caps.drop all +# # alsa audio will work with ipc-namespace, +# # but it hogs the alsa device from other applications +ignore ipc-namespace +ignore machine-id +netfilter +ignore no3d +ignore nodbus +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +protocol unix,inet,inet6,netlink +# # seccomp breaks integrated file manager on kde applications +# # due to syscall name_to_handle_at +seccomp !name_to_handle_at +shell none +tracelog + +disable-mnt +private-bin konqueror,bash,kget,kcmshell5,dbus-launch +private-cache +private-dev +private-etc asound.conf,ca-certificates,group,machine-id,passwd,resolv.conf,ssl +# private-tmp breaks kget integration +# private-tmp +ignore private-tmp + +ignore memory-deny-write-execute |