diff options
author | Kelvin M. Klann <kmk3.code@protonmail.com> | 2021-02-06 23:49:26 -0300 |
---|---|---|
committer | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-02-08 19:22:57 +0000 |
commit | 3d0f6668bfcc5175ad8460e40ddd7fe137bd8509 (patch) | |
tree | fd756e4ed32af755d43863facaf04847a7526c40 /etc | |
parent | archivers: move archiver-common.inc include to the bottom (diff) | |
download | firejail-3d0f6668bfcc5175ad8460e40ddd7fe137bd8509.tar.gz firejail-3d0f6668bfcc5175ad8460e40ddd7fe137bd8509.tar.zst firejail-3d0f6668bfcc5175ad8460e40ddd7fe137bd8509.zip |
archivers: wrap comments
Diffstat (limited to 'etc')
-rw-r--r-- | etc/inc/archiver-common.inc | 22 | ||||
-rw-r--r-- | etc/profile-a-l/gzip.profile | 3 | ||||
-rw-r--r-- | etc/profile-m-z/tar.profile | 3 |
3 files changed, 17 insertions, 11 deletions
diff --git a/etc/inc/archiver-common.inc b/etc/inc/archiver-common.inc index 9812e3ebb..74b0b6ef6 100644 --- a/etc/inc/archiver-common.inc +++ b/etc/inc/archiver-common.inc | |||
@@ -6,20 +6,24 @@ include archiver-common.local | |||
6 | 6 | ||
7 | blacklist ${RUNUSER} | 7 | blacklist ${RUNUSER} |
8 | 8 | ||
9 | # WARNING: | 9 | # WARNING: Users can (un)restrict file access for **all** archivers by |
10 | # Users can (un)restrict file access for **all** archivers by commenting/uncommenting the needed | 10 | # commenting/uncommenting the needed include file(s) here or by putting those |
11 | # include file(s) here or by putting those into archiver-common.local. | 11 | # into archiver-common.local. |
12 | # Another option is to do this **per archiver** in the relevant <archiver>.local. | 12 | # |
13 | # Just beware that things tend to break when overtightening profiles. For example, because you only | 13 | # Another option is to do this **per archiver** in the relevant |
14 | # need to (un)compress files in ${DOWNLOADS}, other applications may need access to ${HOME}/.local/share. | 14 | # <archiver>.local. Just beware that things tend to break when overtightening |
15 | 15 | # profiles. For example, because you only need to (un)compress files in | |
16 | # Uncomment the next line (or put it into your archiver-common.local) if you don't need to compress files in disable-common.inc. | 16 | # ${DOWNLOADS}, other applications may need access to ${HOME}/.local/share. |
17 | |||
18 | # Uncomment the next line (or put it into your archiver-common.local) if you | ||
19 | # don't need to compress files in disable-common.inc. | ||
17 | #include disable-common.inc | 20 | #include disable-common.inc |
18 | include disable-devel.inc | 21 | include disable-devel.inc |
19 | include disable-exec.inc | 22 | include disable-exec.inc |
20 | include disable-interpreters.inc | 23 | include disable-interpreters.inc |
21 | include disable-passwdmgr.inc | 24 | include disable-passwdmgr.inc |
22 | # Uncomment the next line (or put it into your archiver-common.local) if you don't need to compress files in disable-programs.inc. | 25 | # Uncomment the next line (or put it into your archiver-common.local) if you |
26 | # don't need to compress files in disable-programs.inc. | ||
23 | #include disable-programs.inc | 27 | #include disable-programs.inc |
24 | include disable-shell.inc | 28 | include disable-shell.inc |
25 | 29 | ||
diff --git a/etc/profile-a-l/gzip.profile b/etc/profile-a-l/gzip.profile index 895231aee..035c6459c 100644 --- a/etc/profile-a-l/gzip.profile +++ b/etc/profile-a-l/gzip.profile | |||
@@ -7,7 +7,8 @@ include gzip.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | # Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only. | 10 | # Arch Linux (based distributions) need access to /var/lib/pacman. As we drop |
11 | # all capabilities this is automatically read-only. | ||
11 | noblacklist /var/lib/pacman | 12 | noblacklist /var/lib/pacman |
12 | 13 | ||
13 | # Redirect | 14 | # Redirect |
diff --git a/etc/profile-m-z/tar.profile b/etc/profile-m-z/tar.profile index 1c3612326..9d7a23d43 100644 --- a/etc/profile-m-z/tar.profile +++ b/etc/profile-m-z/tar.profile | |||
@@ -10,7 +10,8 @@ include globals.local | |||
10 | # Included in archiver-common.inc | 10 | # Included in archiver-common.inc |
11 | ignore include disable-shell.inc | 11 | ignore include disable-shell.inc |
12 | 12 | ||
13 | # Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only. | 13 | # Arch Linux (based distributions) need access to /var/lib/pacman. As we drop |
14 | # all capabilities this is automatically read-only. | ||
14 | noblacklist /var/lib/pacman | 15 | noblacklist /var/lib/pacman |
15 | 16 | ||
16 | private-etc alternatives,group,localtime,login.defs,passwd | 17 | private-etc alternatives,group,localtime,login.defs,passwd |