diff options
| author |  rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-03-19 15:32:57 +0100 |
|---|---|---|
| committer | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-03-19 15:32:57 +0100 |
| commit | f38c6802638bef80932048534b867cfe1f9922e7 (patch) | |
| tree | dff41502f0fc1eb3b262e6c26091daa985cf5bb8 | |
| parent | Update README.md & RELONTS; Fix manpage HAVE_NETWORK (diff) | |
| download | firejail-f38c6802638bef80932048534b867cfe1f9922e7.tar.gz firejail-f38c6802638bef80932048534b867cfe1f9922e7.tar.zst firejail-f38c6802638bef80932048534b867cfe1f9922e7.zip | |
man.progile: readonly instead of whitelist
| -rw-r--r-- | etc/profile-m-z/man.profile | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/etc/profile-m-z/man.profile b/etc/profile-m-z/man.profile index 965750bf0..678bb0b8a 100644 --- a/etc/profile-m-z/man.profile +++ b/etc/profile-m-z/man.profile | |||
| @@ -19,16 +19,16 @@ include disable-passwdmgr.inc | |||
| 19 | include disable-programs.inc | 19 | include disable-programs.inc |
| 20 | include disable-xdg.inc | 20 | include disable-xdg.inc |
| 21 | 21 | ||
| 22 | mkdir ${HOME}/.local/share/man | 22 | #mkdir ${HOME}/.local/share/man |
| 23 | whitelist ${HOME}/.local/share/man | 23 | #whitelist ${HOME}/.local/share/man |
| 24 | whitelist ${HOME}/.manpath | 24 | #whitelist ${HOME}/.manpath |
| 25 | whitelist /usr/share/groff | 25 | whitelist /usr/share/groff |
| 26 | whitelist /usr/share/info | 26 | whitelist /usr/share/info |
| 27 | whitelist /usr/share/lintian | 27 | whitelist /usr/share/lintian |
| 28 | whitelist /usr/share/locale | 28 | whitelist /usr/share/locale |
| 29 | whitelist /usr/share/man | 29 | whitelist /usr/share/man |
| 30 | whitelist /var/cache/man | 30 | whitelist /var/cache/man |
| 31 | include whitelist-common.inc | 31 | #include whitelist-common.inc |
| 32 | include whitelist-runuser-common.inc | 32 | include whitelist-runuser-common.inc |
| 33 | include whitelist-usr-share-common.inc | 33 | include whitelist-usr-share-common.inc |
| 34 | include whitelist-var-common.inc | 34 | include whitelist-var-common.inc |
| @@ -58,9 +58,11 @@ disable-mnt | |||
| 58 | private-cache | 58 | private-cache |
| 59 | private-dev | 59 | private-dev |
| 60 | private-etc alternatives,fonts,groff,locale,locale.alias,locale.conf,man_db.conf,manpath.config,selinux,sysless,xdg | 60 | private-etc alternatives,fonts,groff,locale,locale.alias,locale.conf,man_db.conf,manpath.config,selinux,sysless,xdg |
| 61 | private-tmp | 61 | #private-tmp |
| 62 | 62 | ||
| 63 | dbus-user none | 63 | dbus-user none |
| 64 | dbus-system none | 64 | dbus-system none |
| 65 | 65 | ||
| 66 | memory-deny-write-execute | 66 | memory-deny-write-execute |
| 67 | read-only ${HOME} | ||
| 68 | read-only /tmp | ||