diff --git a/etc/profile-a-l/evince.profile b/etc/profile-a-l/evince.profile index 21bf7eabf..ddddeae34 100644 --- a/etc/profile-a-l/evince.profile +++ b/etc/profile-a-l/evince.profile @@ -6,9 +6,9 @@ include evince.local # Persistent global definitions include globals.local -# WARNING: using bookmarks possibly exposes information, including file history from other programs. -# Add the next line to your evince.local if you need bookmarks support. This also needs additional dbus-user filtering (see below). -#noblacklist ${HOME}/.local/share/gvfs-metadata +# WARNING: This exposes information like file history from other programs. +# You can add a blacklist for it in your evince.local for additional hardening if you can life with some restrictions. +noblacklist ${HOME}/.local/share/gvfs-metadata noblacklist ${HOME}/.config/evince noblacklist ${DOCUMENTS} @@ -59,9 +59,8 @@ private-etc alternatives,fonts,group,ld.so.cache,ld.so.preload,machine-id,passwd private-lib evince,gcc/*/*/libgcc_s.so.*,gcc/*/*/libstdc++.so.*,gconv,gdk-pixbuf-2.*,gio,gvfs/libgvfscommon.so,libarchive.so.*,libdjvulibre.so.*,libgconf-2.so.*,libgraphite2.so.*,libpoppler-glib.so.*,librsvg-2.so.*,libspectre.so.* private-tmp -# dbus-user filtering might break two-page-view on some systems dbus-user filter -# Add the next two lines to your evince.local if you need bookmarks support. -#dbus-user.talk org.gtk.vfs.Daemon -#dbus-user.talk org.gtk.vfs.Metadata +dbus-user.talk ca.desrt.dconf +dbus-user.talk org.gtk.vfs.Daemon +dbus-user.talk org.gtk.vfs.Metadata dbus-system none