diff options
author | 2020-12-10 00:29:27 +0000 | |
---|---|---|
committer | 2020-12-10 00:29:27 +0000 | |
commit | b9e6cd5272aac2837f68247bf531f770ff4e954f (patch) | |
tree | bf40cd612afafddb806576d951849a53be5182aa /etc/profile-m-z | |
parent | Update yelp.profile (#3803) (diff) | |
download | firejail-b9e6cd5272aac2837f68247bf531f770ff4e954f.tar.gz firejail-b9e6cd5272aac2837f68247bf531f770ff4e954f.tar.zst firejail-b9e6cd5272aac2837f68247bf531f770ff4e954f.zip |
minor hardenings and comments
Diffstat (limited to 'etc/profile-m-z')
-rw-r--r-- | etc/profile-m-z/yelp.profile | 13 |
1 files changed, 9 insertions, 4 deletions
diff --git a/etc/profile-m-z/yelp.profile b/etc/profile-m-z/yelp.profile index c06634d4c..7727f30e3 100644 --- a/etc/profile-m-z/yelp.profile +++ b/etc/profile-m-z/yelp.profile | |||
@@ -8,7 +8,6 @@ include globals.local | |||
8 | 8 | ||
9 | noblacklist ${HOME}/.config/yelp | 9 | noblacklist ${HOME}/.config/yelp |
10 | 10 | ||
11 | noblacklist ${DOCUMENTS} | ||
12 | include disable-common.inc | 11 | include disable-common.inc |
13 | include disable-devel.inc | 12 | include disable-devel.inc |
14 | include disable-exec.inc | 13 | include disable-exec.inc |
@@ -20,7 +19,6 @@ include disable-xdg.inc | |||
20 | 19 | ||
21 | mkdir ${HOME}/.config/yelp | 20 | mkdir ${HOME}/.config/yelp |
22 | whitelist ${HOME}/.config/yelp | 21 | whitelist ${HOME}/.config/yelp |
23 | whitelist ${DOCUMENTS} | ||
24 | whitelist /usr/share/doc | 22 | whitelist /usr/share/doc |
25 | whitelist /usr/share/groff | 23 | whitelist /usr/share/groff |
26 | whitelist /usr/share/help | 24 | whitelist /usr/share/help |
@@ -35,11 +33,13 @@ include whitelist-var-common.inc | |||
35 | 33 | ||
36 | apparmor | 34 | apparmor |
37 | caps.drop all | 35 | caps.drop all |
36 | machine-id | ||
38 | net none | 37 | net none |
39 | nodvd | 38 | nodvd |
40 | nogroups | 39 | nogroups |
41 | nonewprivs | 40 | nonewprivs |
42 | noroot | 41 | noroot |
42 | nosound | ||
43 | notv | 43 | notv |
44 | nou2f | 44 | nou2f |
45 | novideo | 45 | novideo |
@@ -61,9 +61,14 @@ dbus-user.own org.gnome.Yelp | |||
61 | dbus-user.talk ca.desrt.dconf | 61 | dbus-user.talk ca.desrt.dconf |
62 | dbus-system none | 62 | dbus-system none |
63 | 63 | ||
64 | # read-only ${HOME} breaks some unnecesarry features: | 64 | # read-only ${HOME} breaks some features: |
65 | # 1. yelp --editor-mode | 65 | # 1. yelp --editor-mode |
66 | # 2. saving the window geometry | 66 | # 2. saving the window geometry |
67 | # comment the line below or put 'ignore read-only ${HOME}' into your yelp.local if you need it | 67 | # comment the line below or put 'ignore read-only ${HOME}' into your yelp.local if you need these features |
68 | read-only ${HOME} | 68 | read-only ${HOME} |
69 | read-write ${HOME}/.cache | 69 | read-write ${HOME}/.cache |
70 | # 3. printing to PDF in ${DOCUMENTS} | ||
71 | # additionally uncomment the lines below or put 'noblacklist ${DOCUMENTS}' and | ||
72 | # 'whitelist ${DOCUMENTS}' into your yelp.local if you need printing to PDF support | ||
73 | #noblacklist ${DOCUMENTS} | ||
74 | #whitelist ${DOCUMENTS} | ||