aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/agetpkg.profile
diff options
context:
space:
mode:
authorLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2024-03-22 13:44:53 -0300
committerLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2024-03-24 03:42:59 -0300
commit04efbb27631e2f4abb5f1c0a915612e8cc98397c (patch)
tree3b0c5d360a796880024a1c14e251522fb36ea5d7 /etc/profile-a-l/agetpkg.profile
parentsstmp.profile: sort disable includes (diff)
downloadfirejail-04efbb27631e2f4abb5f1c0a915612e8cc98397c.tar.gz
firejail-04efbb27631e2f4abb5f1c0a915612e8cc98397c.tar.zst
firejail-04efbb27631e2f4abb5f1c0a915612e8cc98397c.zip
profiles: replace x11 socket blacklist with disable-X11.inc
Replace all occurrences of `blacklist /tmp/.X11-unix` with `include disable-X11.inc`, which blacklists more X11-related files. Commands used to search and replace: $ git grep -Ilz '^blacklist /tmp/.X11-unix' -- \ etc/profile*/*.profile | xargs -0 perl -0 -pi -e '\ s/\nblacklist \/tmp\/.X11-unix\n/\n/; \ s/(\ninclude disable-xdg.inc\n)/\ninclude disable-X11.inc$1/; \ s/(\ninclude disable-[^Xx\n]+\n)(\n|# )/$1include disable-X11.inc\n$2/' Note: The following files were also edited manually: * etc/profile-a-l/erd.profile * etc/profile-a-l/links-common.profile * etc/profile-m-z/termshark.profile * etc/profile-m-z/tmux.profile * etc/profile-m-z/tshark.profile Relates to #4462 #4854.
Diffstat (limited to 'etc/profile-a-l/agetpkg.profile')
-rw-r--r--etc/profile-a-l/agetpkg.profile2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/profile-a-l/agetpkg.profile b/etc/profile-a-l/agetpkg.profile
index 9ebbf1cb0..e455a17db 100644
--- a/etc/profile-a-l/agetpkg.profile
+++ b/etc/profile-a-l/agetpkg.profile
@@ -7,7 +7,6 @@ include agetpkg.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist /tmp/.X11-unix
11blacklist ${RUNUSER}/wayland-* 10blacklist ${RUNUSER}/wayland-*
12 11
13# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
@@ -20,6 +19,7 @@ include disable-exec.inc
20include disable-interpreters.inc 19include disable-interpreters.inc
21include disable-programs.inc 20include disable-programs.inc
22include disable-shell.inc 21include disable-shell.inc
22include disable-X11.inc
23include disable-xdg.inc 23include disable-xdg.inc
24 24
25whitelist ${DOWNLOADS} 25whitelist ${DOWNLOADS}