diff options
author | netblue30 <netblue30@yahoo.com> | 2017-01-20 09:08:31 -0500 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2017-01-20 09:08:31 -0500 |
commit | c857b88af37e122327cddf3b715b0cf031cb1edb (patch) | |
tree | 8d824983e503e394401772cbfa54de2bbe4743f1 /etc/disable-common.inc | |
parent | profile fixes (diff) | |
parent | Merge pull request #1044 from KellerFuchs/disable-path-local (diff) | |
download | firejail-c857b88af37e122327cddf3b715b0cf031cb1edb.tar.gz firejail-c857b88af37e122327cddf3b715b0cf031cb1edb.tar.zst firejail-c857b88af37e122327cddf3b715b0cf031cb1edb.zip |
Merge branch 'master' of https://github.com/netblue30/firejail
Diffstat (limited to 'etc/disable-common.inc')
-rw-r--r-- | etc/disable-common.inc | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc index e542e3ebb..6a3586e81 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc | |||
@@ -129,8 +129,16 @@ read-only ${HOME}/.reportbugrc | |||
129 | read-only ${HOME}/.xmonad | 129 | read-only ${HOME}/.xmonad |
130 | read-only ${HOME}/.xscreensaver | 130 | read-only ${HOME}/.xscreensaver |
131 | 131 | ||
132 | # The user ~/bin directory can override commands such as ls | 132 | # Make directories commonly found in $PATH read-only |
133 | read-only ${HOME}/bin | 133 | read-only ${HOME}/bin |
134 | read-only ${HOME}/.gem | ||
135 | read-only ${HOME}/.luarocks | ||
136 | read-only ${HOME}/.npm-packages | ||
137 | |||
138 | # Make the contents of ~/.local read-only, | ||
139 | # except the commonly-used ~/.local/share | ||
140 | read-only ${HOME}/.local | ||
141 | read-write ${HOME}/.local/share | ||
134 | 142 | ||
135 | # top secret | 143 | # top secret |
136 | blacklist ${HOME}/.ecryptfs | 144 | blacklist ${HOME}/.ecryptfs |