aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/rsync-download_only.profile
diff options
context:
space:
mode:
authorLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2024-03-24 06:50:30 +0000
committerLibravatar GitHub <noreply@github.com>2024-03-24 06:50:30 +0000
commiteaee3367d26059cc6d1adcd239cfdbba091ce73e (patch)
tree329ff4e2d3039ff65389f4225dbd8714ab867114 /etc/profile-m-z/rsync-download_only.profile
parentprofiles: deny access to ~/.config/autostart (#6257) (diff)
parentprofiles: replace x11 socket blacklist with disable-X11.inc (diff)
downloadfirejail-eaee3367d26059cc6d1adcd239cfdbba091ce73e.tar.gz
firejail-eaee3367d26059cc6d1adcd239cfdbba091ce73e.tar.zst
firejail-eaee3367d26059cc6d1adcd239cfdbba091ce73e.zip
Merge pull request #6286 from kmk3/x11-none-improvements
profiles: replace x11 socket blacklist with disable-X11.inc
Diffstat (limited to 'etc/profile-m-z/rsync-download_only.profile')
-rw-r--r--etc/profile-m-z/rsync-download_only.profile2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/profile-m-z/rsync-download_only.profile b/etc/profile-m-z/rsync-download_only.profile
index ce90012e3..52ccb4309 100644
--- a/etc/profile-m-z/rsync-download_only.profile
+++ b/etc/profile-m-z/rsync-download_only.profile
@@ -11,7 +11,6 @@ include globals.local
11# not as a daemon (rsync --daemon) nor to create backups. 11# not as a daemon (rsync --daemon) nor to create backups.
12# Usage: firejail --profile=rsync-download_only rsync 12# Usage: firejail --profile=rsync-download_only rsync
13 13
14blacklist /tmp/.X11-unix
15blacklist ${RUNUSER} 14blacklist ${RUNUSER}
16 15
17include disable-common.inc 16include disable-common.inc
@@ -20,6 +19,7 @@ include disable-exec.inc
20include disable-interpreters.inc 19include disable-interpreters.inc
21include disable-programs.inc 20include disable-programs.inc
22include disable-shell.inc 21include disable-shell.inc
22include disable-X11.inc
23include disable-xdg.inc 23include disable-xdg.inc
24 24
25# Add the next line to your rsync-download_only.local to enable extra hardening. 25# Add the next line to your rsync-download_only.local to enable extra hardening.