[PR #3493] [MERGED] Blacklist .local/share/kxmlgui5 and allow access only for applications which use it. #4778

Closed
opened 2026-05-05 10:26:25 -06:00 by gitea-mirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/3493
Author: @Kishore96in
Created: 7/5/2020
Status: Merged
Merged: 7/16/2020
Merged by: @rusty-snake

Base: masterHead: blacklist_kxmlgui


📝 Commits (6)

  • d6d6f78 blacklist .local/share/kxmlgui5
  • 6e9763a noblacklist .local/share/kxmlgui5 in the relevant KDE applications.
  • 7b0cd6e Whitelist kxmlgui file for okular.
  • dffb64c Use a glob to blacklist subfolders instead of the parent folder.
  • 0bf1a3e Make directory, not file.
  • 21dd14d noblacklist relevant subdirs for more KDE applications

📊 Changes

25 files changed (+45 additions, -0 deletions)

View changed files

📝 etc/inc/disable-programs.inc (+1 -0)
📝 etc/inc/firefox-common-addons.inc (+1 -0)
📝 etc/profile-a-l/akregator.profile (+3 -0)
📝 etc/profile-a-l/ark.profile (+1 -0)
📝 etc/profile-a-l/calligra.profile (+2 -0)
📝 etc/profile-a-l/calligraplan.profile (+2 -0)
📝 etc/profile-a-l/calligraplanwork.profile (+2 -0)
📝 etc/profile-a-l/calligrasheets.profile (+2 -0)
📝 etc/profile-a-l/calligrastage.profile (+2 -0)
📝 etc/profile-a-l/calligrawords.profile (+2 -0)
📝 etc/profile-a-l/gwenview.profile (+1 -0)
📝 etc/profile-a-l/k3b.profile (+1 -0)
📝 etc/profile-a-l/karbon.profile (+2 -0)
📝 etc/profile-a-l/kate.profile (+7 -0)
📝 etc/profile-a-l/kcalc.profile (+3 -0)
📝 etc/profile-a-l/kdenlive.profile (+1 -0)
📝 etc/profile-a-l/kget.profile (+1 -0)
📝 etc/profile-a-l/kid3.profile (+1 -0)
📝 etc/profile-a-l/kmail.profile (+2 -0)
📝 etc/profile-a-l/knotes.profile (+1 -0)

...and 5 more files

📄 Description

Multiple KDE applications store their keyboard shortcut and toolbar config in subdirectories of .local/share/kxmlgui5. This pull request blacklists these directories in disable-programs.inc, and then noblacklists them in the profiles of the applications which require access to them.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/3493 **Author:** [@Kishore96in](https://github.com/Kishore96in) **Created:** 7/5/2020 **Status:** ✅ Merged **Merged:** 7/16/2020 **Merged by:** [@rusty-snake](https://github.com/rusty-snake) **Base:** `master` ← **Head:** `blacklist_kxmlgui` --- ### 📝 Commits (6) - [`d6d6f78`](https://github.com/netblue30/firejail/commit/d6d6f78ac48e11f1fa973ea5ba0e75ac512013fb) blacklist .local/share/kxmlgui5 - [`6e9763a`](https://github.com/netblue30/firejail/commit/6e9763a961e449d47a9fc9a9353b56c7921f3b81) noblacklist .local/share/kxmlgui5 in the relevant KDE applications. - [`7b0cd6e`](https://github.com/netblue30/firejail/commit/7b0cd6ec4edad28b736eceaf49e6a86cc5c04c10) Whitelist kxmlgui file for okular. - [`dffb64c`](https://github.com/netblue30/firejail/commit/dffb64ca02b04a7c8d7b9be21beffcd2bc81cd91) Use a glob to blacklist subfolders instead of the parent folder. - [`0bf1a3e`](https://github.com/netblue30/firejail/commit/0bf1a3e38cd7ecd40e5ded4871b324f5eaa76e6b) Make directory, not file. - [`21dd14d`](https://github.com/netblue30/firejail/commit/21dd14d928515a5ae30b9cc3c8de8656ec0aedb7) noblacklist relevant subdirs for more KDE applications ### 📊 Changes **25 files changed** (+45 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `etc/inc/disable-programs.inc` (+1 -0) 📝 `etc/inc/firefox-common-addons.inc` (+1 -0) 📝 `etc/profile-a-l/akregator.profile` (+3 -0) 📝 `etc/profile-a-l/ark.profile` (+1 -0) 📝 `etc/profile-a-l/calligra.profile` (+2 -0) 📝 `etc/profile-a-l/calligraplan.profile` (+2 -0) 📝 `etc/profile-a-l/calligraplanwork.profile` (+2 -0) 📝 `etc/profile-a-l/calligrasheets.profile` (+2 -0) 📝 `etc/profile-a-l/calligrastage.profile` (+2 -0) 📝 `etc/profile-a-l/calligrawords.profile` (+2 -0) 📝 `etc/profile-a-l/gwenview.profile` (+1 -0) 📝 `etc/profile-a-l/k3b.profile` (+1 -0) 📝 `etc/profile-a-l/karbon.profile` (+2 -0) 📝 `etc/profile-a-l/kate.profile` (+7 -0) 📝 `etc/profile-a-l/kcalc.profile` (+3 -0) 📝 `etc/profile-a-l/kdenlive.profile` (+1 -0) 📝 `etc/profile-a-l/kget.profile` (+1 -0) 📝 `etc/profile-a-l/kid3.profile` (+1 -0) 📝 `etc/profile-a-l/kmail.profile` (+2 -0) 📝 `etc/profile-a-l/knotes.profile` (+1 -0) _...and 5 more files_ </details> ### 📄 Description Multiple KDE applications store their keyboard shortcut and toolbar config in subdirectories of `.local/share/kxmlgui5`. This pull request blacklists these directories in `disable-programs.inc`, and then noblacklists them in the profiles of the applications which require access to them. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
gitea-mirror 2026-05-05 10:26:25 -06:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#4778
No description provided.