diff options
author | Kelvin M. Klann <kmk3.code@protonmail.com> | 2024-03-22 13:44:53 -0300 |
---|---|---|
committer | Kelvin M. Klann <kmk3.code@protonmail.com> | 2024-03-24 03:42:59 -0300 |
commit | 04efbb27631e2f4abb5f1c0a915612e8cc98397c (patch) | |
tree | 3b0c5d360a796880024a1c14e251522fb36ea5d7 /etc/profile-a-l/curl.profile | |
parent | sstmp.profile: sort disable includes (diff) | |
download | firejail-04efbb27631e2f4abb5f1c0a915612e8cc98397c.tar.gz firejail-04efbb27631e2f4abb5f1c0a915612e8cc98397c.tar.zst firejail-04efbb27631e2f4abb5f1c0a915612e8cc98397c.zip |
profiles: replace x11 socket blacklist with disable-X11.inc
Replace all occurrences of `blacklist /tmp/.X11-unix` with
`include disable-X11.inc`, which blacklists more X11-related files.
Commands used to search and replace:
$ git grep -Ilz '^blacklist /tmp/.X11-unix' -- \
etc/profile*/*.profile | xargs -0 perl -0 -pi -e '\
s/\nblacklist \/tmp\/.X11-unix\n/\n/; \
s/(\ninclude disable-xdg.inc\n)/\ninclude disable-X11.inc$1/; \
s/(\ninclude disable-[^Xx\n]+\n)(\n|# )/$1include disable-X11.inc\n$2/'
Note: The following files were also edited manually:
* etc/profile-a-l/erd.profile
* etc/profile-a-l/links-common.profile
* etc/profile-m-z/termshark.profile
* etc/profile-m-z/tmux.profile
* etc/profile-m-z/tshark.profile
Relates to #4462 #4854.
Diffstat (limited to 'etc/profile-a-l/curl.profile')
-rw-r--r-- | etc/profile-a-l/curl.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/profile-a-l/curl.profile b/etc/profile-a-l/curl.profile index 417abcc91..1d9ec5fa4 100644 --- a/etc/profile-a-l/curl.profile +++ b/etc/profile-a-l/curl.profile | |||
@@ -16,7 +16,6 @@ noblacklist ${HOME}/.config/curlrc # since curl 7.73.0 | |||
16 | noblacklist ${HOME}/.curl-hsts | 16 | noblacklist ${HOME}/.curl-hsts |
17 | noblacklist ${HOME}/.curlrc | 17 | noblacklist ${HOME}/.curlrc |
18 | 18 | ||
19 | blacklist /tmp/.X11-unix | ||
20 | blacklist ${RUNUSER} | 19 | blacklist ${RUNUSER} |
21 | 20 | ||
22 | # If you use nvm, add the below lines to your curl.local | 21 | # If you use nvm, add the below lines to your curl.local |
@@ -26,6 +25,7 @@ blacklist ${RUNUSER} | |||
26 | include disable-common.inc | 25 | include disable-common.inc |
27 | include disable-exec.inc | 26 | include disable-exec.inc |
28 | include disable-programs.inc | 27 | include disable-programs.inc |
28 | include disable-X11.inc | ||
29 | # Depending on workflow you can add 'include disable-xdg.inc' to your curl.local. | 29 | # Depending on workflow you can add 'include disable-xdg.inc' to your curl.local. |
30 | #include disable-xdg.inc | 30 | #include disable-xdg.inc |
31 | 31 | ||