diff options
| author |  Vincent43 <31109921+Vincent43@users.noreply.github.com> | 2019-07-10 15:09:05 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2019-07-10 15:09:05 +0000 |
| commit | ef97d0c5d250362e089ed2b9d78e5575c4dd287a (patch) | |
| tree | 9603a12322bde860035f6ea4a5e412b70a5e0335 /etc/less.profile | |
| parent | Add gdb-firejail.sh to contrib for easy debugging of firejail with gdb. (diff) | |
| download | firejail-ef97d0c5d250362e089ed2b9d78e5575c4dd287a.tar.gz firejail-ef97d0c5d250362e089ed2b9d78e5575c4dd287a.tar.zst firejail-ef97d0c5d250362e089ed2b9d78e5575c4dd287a.zip | |
less.profile: make ${HOME} read-only
less is usually used to view various text files including configs so blacklisting many of them in ${HOME} make it less(sic!) usable. We can make them read-only instead.
Diffstat (limited to 'etc/less.profile')
| -rw-r--r-- | etc/less.profile | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/less.profile b/etc/less.profile index e6366ad28..0f31d344b 100644 --- a/etc/less.profile +++ b/etc/less.profile | |||
| @@ -8,13 +8,13 @@ include less.local | |||
| 8 | include globals.local | 8 | include globals.local |
| 9 | 9 | ||
| 10 | noblacklist ${HOME}/.lesshst | 10 | noblacklist ${HOME}/.lesshst |
| 11 | read-only ${HOME} | ||
| 12 | read-write ${HOME}/.lesshst | ||
| 11 | 13 | ||
| 12 | include disable-common.inc | ||
| 13 | include disable-devel.inc | 14 | include disable-devel.inc |
| 14 | include disable-exec.inc | 15 | include disable-exec.inc |
| 15 | include disable-interpreters.inc | 16 | include disable-interpreters.inc |
| 16 | include disable-passwdmgr.inc | 17 | include disable-passwdmgr.inc |
| 17 | include disable-programs.inc | ||
| 18 | 18 | ||
| 19 | apparmor | 19 | apparmor |
| 20 | caps.drop all | 20 | caps.drop all |