diff options
author | Kelvin M. Klann <kmk3.code@protonmail.com> | 2023-08-21 10:21:11 -0300 |
---|---|---|
committer | Kelvin M. Klann <kmk3.code@protonmail.com> | 2023-08-21 10:41:47 -0300 |
commit | 5ba5ed07640eae8f94e8bcdaff1573a5161339e3 (patch) | |
tree | 137aef9dfcdcee2ec75736687a9646c10dbc5bad /etc/firejail.config | |
parent | tests: fix error when /dev/kmsg is missing (diff) | |
download | firejail-5ba5ed07640eae8f94e8bcdaff1573a5161339e3.tar.gz firejail-5ba5ed07640eae8f94e8bcdaff1573a5161339e3.tar.zst firejail-5ba5ed07640eae8f94e8bcdaff1573a5161339e3.zip |
profiles: restore entries for ssh-related paths
This partially reverts commit d94f54736 ("disable all ssh utilities in
disable-common.inc", 2023-08-20).
Certain files in ~/.ssh are only used by sshd (not by ssh), so always
blacklist them.
Also, ssh itself does not need write access to the configuration files,
so make them read-only by default.
For details, see commit 2ec3f3a96 ("disable-common.inc: add missing
openssh paths", 2021-01-09) / PR #3885.
Cc: @netblue30
Diffstat (limited to 'etc/firejail.config')
0 files changed, 0 insertions, 0 deletions