diff options
author | 2021-05-17 09:02:02 +0200 | |
---|---|---|
committer | 2021-05-17 09:02:02 +0200 | |
commit | 9efbfee6a82eaacb435227fb01e7f77eb599c87f (patch) | |
tree | b2058e9624eb0dd76f1331b574d7a845dd087cbd /etc | |
parent | Add cargo.profile (diff) | |
download | firejail-9efbfee6a82eaacb435227fb01e7f77eb599c87f.tar.gz firejail-9efbfee6a82eaacb435227fb01e7f77eb599c87f.tar.zst firejail-9efbfee6a82eaacb435227fb01e7f77eb599c87f.zip |
Harden cargo.profile
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-a-l/cargo.profile | 12 |
1 files changed, 2 insertions, 10 deletions
diff --git a/etc/profile-a-l/cargo.profile b/etc/profile-a-l/cargo.profile index 2e00061d9..043fd6718 100644 --- a/etc/profile-a-l/cargo.profile +++ b/etc/profile-a-l/cargo.profile | |||
@@ -19,16 +19,6 @@ noblacklist ${HOME}/.cargo/credentials.toml | |||
19 | # Allows files commonly used by IDEs | 19 | # Allows files commonly used by IDEs |
20 | include allow-common-devel.inc | 20 | include allow-common-devel.inc |
21 | 21 | ||
22 | # Allow lua (blacklisted by disable-interpreters.inc) | ||
23 | #include allow-lua.inc | ||
24 | |||
25 | # Allow perl (blacklisted by disable-interpreters.inc) | ||
26 | #include allow-perl.inc | ||
27 | |||
28 | # Allow python (blacklisted by disable-interpreters.inc) | ||
29 | #include allow-python2.inc | ||
30 | #include allow-python3.inc | ||
31 | |||
32 | # Allow ssh (blacklisted by disable-common.inc) | 22 | # Allow ssh (blacklisted by disable-common.inc) |
33 | #include allow-ssh.inc | 23 | #include allow-ssh.inc |
34 | 24 | ||
@@ -72,9 +62,11 @@ disable-mnt | |||
72 | #private-bin cargo,rustc | 62 | #private-bin cargo,rustc |
73 | private-cache | 63 | private-cache |
74 | private-dev | 64 | private-dev |
65 | private-etc alternatives,ca-certificates,crypto-policies,group,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,magic,magic.mgc,nsswitch.conf,passwd,pki,protocols,resolv.conf,rpc,services,ssl | ||
75 | private-tmp | 66 | private-tmp |
76 | 67 | ||
77 | dbus-user none | 68 | dbus-user none |
78 | dbus-system none | 69 | dbus-system none |
79 | 70 | ||
71 | memory-deny-write-execute | ||
80 | read-write ${HOME}/.cargo/bin | 72 | read-write ${HOME}/.cargo/bin |