This file is indexed.

/etc/gnashthumbnailrc is in gnash 0.8.11~git20160608-1.3.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
###########################################################
#
# This file will be used as a config file by the gnash thumbnailer 
#
# Focus here is on security concerns: we'll forbid load of any 
# external resource, writing shared objects and using shared memory.
# 
###########################################################

# SECURITY: don't load anything !
# TODO: gui/Player still adds the input file dir to sandboxes,
# we should forbid that too !
set localSandboxPath /dev/null
set whitelist /dev/null

# SECURITY: don't write SharedObjects
set SOLReadOnly true

# SECURITY: disable local connection
set LocalConnection off

# SECURITY: disable extensions
set enableExtensions off