/etc/gnashthumbnailrc is in gnash 0.8.11~git20160109-1build1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 | ###########################################################
#
# This file will be used as a config file by the gnash thumbnailer
#
# Focus here is on security concerns: we'll forbid load of any
# external resource, writing shared objects and using shared memory.
#
###########################################################
# SECURITY: don't load anything !
# TODO: gui/Player still adds the input file dir to sandboxes,
# we should forbid that too !
set localSandboxPath /dev/null
set whitelist /dev/null
# SECURITY: don't write SharedObjects
set SOLReadOnly true
# SECURITY: disable local connection
set LocalConnection off
# SECURITY: disable extensions
set enableExtensions off
|