diff options
| author |  rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2020-06-04 11:55:32 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2020-06-04 11:55:32 +0000 |
| commit | 2c914c7d25698140feec0fb7920de7fa887390d5 (patch) | |
| tree | ee02e88b23169a7019027338e5b287516e5b4a69 /etc/inc | |
| parent | fixup! rework make realinstall and uninstall (#3435) (diff) | |
| download | firejail-2c914c7d25698140feec0fb7920de7fa887390d5.tar.gz firejail-2c914c7d25698140feec0fb7920de7fa887390d5.tar.zst firejail-2c914c7d25698140feec0fb7920de7fa887390d5.zip | |
disable-shell.inc (#3411)
* disable-shell.inc
* add disable-shell.inc to all profiles with a …
… private-bin line without bash/sh except profiles with redirect
profiles.
* add it to some more profiles
* exclude aria2c.profile
Diffstat (limited to 'etc/inc')
| -rw-r--r-- | etc/inc/disable-shell.inc | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/etc/inc/disable-shell.inc b/etc/inc/disable-shell.inc new file mode 100644 index 000000000..fda528eb6 --- /dev/null +++ b/etc/inc/disable-shell.inc | |||
| @@ -0,0 +1,13 @@ | |||
| 1 | # This file is overwritten during software install. | ||
| 2 | # Persistent customizations should go in a .local file. | ||
| 3 | include disable-shell.local | ||
| 4 | |||
| 5 | blacklist ${PATH}/bash | ||
| 6 | blacklist ${PATH}/csh | ||
| 7 | blacklist ${PATH}/dash | ||
| 8 | blacklist ${PATH}/fish | ||
| 9 | blacklist ${PATH}/ksh | ||
| 10 | blacklist ${PATH}/sh | ||
| 11 | blacklist ${PATH}/tclsh | ||
| 12 | blacklist ${PATH}/tcsh | ||
| 13 | blacklist ${PATH}/zsh | ||