diff options
| author |  Kelvin M. Klann <kmk3.code@protonmail.com> | 2024-03-27 12:13:21 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2024-03-27 12:13:21 +0000 |
| commit | 0d8fb3d1b41f7c403c0061efda4be35e7ad70344 (patch) | |
| tree | cb67019a07fd6f68909e49c6880ad4703d7aa08b /etc/profile-m-z/makepkg.profile | |
| parent | RELNOTES: add many profile items (diff) | |
| download | firejail-0d8fb3d1b41f7c403c0061efda4be35e7ad70344.tar.gz firejail-0d8fb3d1b41f7c403c0061efda4be35e7ad70344.tar.zst firejail-0d8fb3d1b41f7c403c0061efda4be35e7ad70344.zip | |
profiles: sort blacklist sections (#6289)
See etc/templates/profile.template.
This is a follow-up to #6286.
Diffstat (limited to 'etc/profile-m-z/makepkg.profile')
| -rw-r--r-- | etc/profile-m-z/makepkg.profile | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/etc/profile-m-z/makepkg.profile b/etc/profile-m-z/makepkg.profile index 3bda47fad..a8dd3988b 100644 --- a/etc/profile-m-z/makepkg.profile +++ b/etc/profile-m-z/makepkg.profile | |||
| @@ -20,11 +20,11 @@ blacklist ${RUNUSER}/wayland-* | |||
| 20 | noblacklist ${HOME}/.gnupg | 20 | noblacklist ${HOME}/.gnupg |
| 21 | read-only ${HOME}/.gnupg/trustdb.gpg | 21 | read-only ${HOME}/.gnupg/trustdb.gpg |
| 22 | read-only ${HOME}/.gnupg/pubring.kbx | 22 | read-only ${HOME}/.gnupg/pubring.kbx |
| 23 | blacklist ${HOME}/.gnupg/random_seed | ||
| 24 | blacklist ${HOME}/.gnupg/pubring.kbx~ | ||
| 25 | blacklist ${HOME}/.gnupg/private-keys-v1.d | ||
| 26 | blacklist ${HOME}/.gnupg/crls.d | 23 | blacklist ${HOME}/.gnupg/crls.d |
| 27 | blacklist ${HOME}/.gnupg/openpgp-revocs.d | 24 | blacklist ${HOME}/.gnupg/openpgp-revocs.d |
| 25 | blacklist ${HOME}/.gnupg/private-keys-v1.d | ||
| 26 | blacklist ${HOME}/.gnupg/pubring.kbx~ | ||
| 27 | blacklist ${HOME}/.gnupg/random_seed | ||
| 28 | 28 | ||
| 29 | # Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only. | 29 | # Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only. |
| 30 | noblacklist /var/lib/pacman | 30 | noblacklist /var/lib/pacman |