diff options
author | 2024-03-24 06:50:30 +0000 | |
---|---|---|
committer | 2024-03-24 06:50:30 +0000 | |
commit | eaee3367d26059cc6d1adcd239cfdbba091ce73e (patch) | |
tree | 329ff4e2d3039ff65389f4225dbd8714ab867114 /etc/profile-m-z/rsync-download_only.profile | |
parent | profiles: deny access to ~/.config/autostart (#6257) (diff) | |
parent | profiles: replace x11 socket blacklist with disable-X11.inc (diff) | |
download | firejail-eaee3367d26059cc6d1adcd239cfdbba091ce73e.tar.gz firejail-eaee3367d26059cc6d1adcd239cfdbba091ce73e.tar.zst firejail-eaee3367d26059cc6d1adcd239cfdbba091ce73e.zip |
Merge pull request #6286 from kmk3/x11-none-improvements
profiles: replace x11 socket blacklist with disable-X11.inc
Diffstat (limited to 'etc/profile-m-z/rsync-download_only.profile')
-rw-r--r-- | etc/profile-m-z/rsync-download_only.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/profile-m-z/rsync-download_only.profile b/etc/profile-m-z/rsync-download_only.profile index ce90012e3..52ccb4309 100644 --- a/etc/profile-m-z/rsync-download_only.profile +++ b/etc/profile-m-z/rsync-download_only.profile | |||
@@ -11,7 +11,6 @@ include globals.local | |||
11 | # not as a daemon (rsync --daemon) nor to create backups. | 11 | # not as a daemon (rsync --daemon) nor to create backups. |
12 | # Usage: firejail --profile=rsync-download_only rsync | 12 | # Usage: firejail --profile=rsync-download_only rsync |
13 | 13 | ||
14 | blacklist /tmp/.X11-unix | ||
15 | blacklist ${RUNUSER} | 14 | blacklist ${RUNUSER} |
16 | 15 | ||
17 | include disable-common.inc | 16 | include disable-common.inc |
@@ -20,6 +19,7 @@ include disable-exec.inc | |||
20 | include disable-interpreters.inc | 19 | include disable-interpreters.inc |
21 | include disable-programs.inc | 20 | include disable-programs.inc |
22 | include disable-shell.inc | 21 | include disable-shell.inc |
22 | include disable-X11.inc | ||
23 | include disable-xdg.inc | 23 | include disable-xdg.inc |
24 | 24 | ||
25 | # Add the next line to your rsync-download_only.local to enable extra hardening. | 25 | # Add the next line to your rsync-download_only.local to enable extra hardening. |