diff options
author | 2021-03-19 15:32:57 +0100 | |
---|---|---|
committer | 2021-03-19 15:32:57 +0100 | |
commit | f38c6802638bef80932048534b867cfe1f9922e7 (patch) | |
tree | dff41502f0fc1eb3b262e6c26091daa985cf5bb8 /etc/profile-m-z | |
parent | Update README.md & RELONTS; Fix manpage HAVE_NETWORK (diff) | |
download | firejail-f38c6802638bef80932048534b867cfe1f9922e7.tar.gz firejail-f38c6802638bef80932048534b867cfe1f9922e7.tar.zst firejail-f38c6802638bef80932048534b867cfe1f9922e7.zip |
man.progile: readonly instead of whitelist
Diffstat (limited to 'etc/profile-m-z')
-rw-r--r-- | etc/profile-m-z/man.profile | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/etc/profile-m-z/man.profile b/etc/profile-m-z/man.profile index 965750bf0..678bb0b8a 100644 --- a/etc/profile-m-z/man.profile +++ b/etc/profile-m-z/man.profile | |||
@@ -19,16 +19,16 @@ include disable-passwdmgr.inc | |||
19 | include disable-programs.inc | 19 | include disable-programs.inc |
20 | include disable-xdg.inc | 20 | include disable-xdg.inc |
21 | 21 | ||
22 | mkdir ${HOME}/.local/share/man | 22 | #mkdir ${HOME}/.local/share/man |
23 | whitelist ${HOME}/.local/share/man | 23 | #whitelist ${HOME}/.local/share/man |
24 | whitelist ${HOME}/.manpath | 24 | #whitelist ${HOME}/.manpath |
25 | whitelist /usr/share/groff | 25 | whitelist /usr/share/groff |
26 | whitelist /usr/share/info | 26 | whitelist /usr/share/info |
27 | whitelist /usr/share/lintian | 27 | whitelist /usr/share/lintian |
28 | whitelist /usr/share/locale | 28 | whitelist /usr/share/locale |
29 | whitelist /usr/share/man | 29 | whitelist /usr/share/man |
30 | whitelist /var/cache/man | 30 | whitelist /var/cache/man |
31 | include whitelist-common.inc | 31 | #include whitelist-common.inc |
32 | include whitelist-runuser-common.inc | 32 | include whitelist-runuser-common.inc |
33 | include whitelist-usr-share-common.inc | 33 | include whitelist-usr-share-common.inc |
34 | include whitelist-var-common.inc | 34 | include whitelist-var-common.inc |
@@ -58,9 +58,11 @@ disable-mnt | |||
58 | private-cache | 58 | private-cache |
59 | private-dev | 59 | private-dev |
60 | private-etc alternatives,fonts,groff,locale,locale.alias,locale.conf,man_db.conf,manpath.config,selinux,sysless,xdg | 60 | private-etc alternatives,fonts,groff,locale,locale.alias,locale.conf,man_db.conf,manpath.config,selinux,sysless,xdg |
61 | private-tmp | 61 | #private-tmp |
62 | 62 | ||
63 | dbus-user none | 63 | dbus-user none |
64 | dbus-system none | 64 | dbus-system none |
65 | 65 | ||
66 | memory-deny-write-execute | 66 | memory-deny-write-execute |
67 | read-only ${HOME} | ||
68 | read-only /tmp | ||