aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/deadlink.profile
diff options
context:
space:
mode:
authorLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2024-03-22 13:44:53 -0300
committerLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2024-03-24 03:42:59 -0300
commit04efbb27631e2f4abb5f1c0a915612e8cc98397c (patch)
tree3b0c5d360a796880024a1c14e251522fb36ea5d7 /etc/profile-a-l/deadlink.profile
parentsstmp.profile: sort disable includes (diff)
downloadfirejail-04efbb27631e2f4abb5f1c0a915612e8cc98397c.tar.gz
firejail-04efbb27631e2f4abb5f1c0a915612e8cc98397c.tar.zst
firejail-04efbb27631e2f4abb5f1c0a915612e8cc98397c.zip
profiles: replace x11 socket blacklist with disable-X11.inc
Replace all occurrences of `blacklist /tmp/.X11-unix` with `include disable-X11.inc`, which blacklists more X11-related files. Commands used to search and replace: $ git grep -Ilz '^blacklist /tmp/.X11-unix' -- \ etc/profile*/*.profile | xargs -0 perl -0 -pi -e '\ s/\nblacklist \/tmp\/.X11-unix\n/\n/; \ s/(\ninclude disable-xdg.inc\n)/\ninclude disable-X11.inc$1/; \ s/(\ninclude disable-[^Xx\n]+\n)(\n|# )/$1include disable-X11.inc\n$2/' Note: The following files were also edited manually: * etc/profile-a-l/erd.profile * etc/profile-a-l/links-common.profile * etc/profile-m-z/termshark.profile * etc/profile-m-z/tmux.profile * etc/profile-m-z/tshark.profile Relates to #4462 #4854.
Diffstat (limited to 'etc/profile-a-l/deadlink.profile')
-rw-r--r--etc/profile-a-l/deadlink.profile2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/profile-a-l/deadlink.profile b/etc/profile-a-l/deadlink.profile
index 2e3fe9e0c..f7535c597 100644
--- a/etc/profile-a-l/deadlink.profile
+++ b/etc/profile-a-l/deadlink.profile
@@ -6,7 +6,6 @@ include deadlink.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9blacklist /tmp/.X11-unix
10blacklist /usr/libexec 9blacklist /usr/libexec
11blacklist ${RUNUSER} 10blacklist ${RUNUSER}
12 11
@@ -23,6 +22,7 @@ include disable-interpreters.inc
23include disable-proc.inc 22include disable-proc.inc
24include disable-programs.inc 23include disable-programs.inc
25include disable-shell.inc 24include disable-shell.inc
25include disable-X11.inc
26include disable-xdg.inc 26include disable-xdg.inc
27 27
28include whitelist-run-common.inc 28include whitelist-run-common.inc