diff options
author | 2019-07-10 15:09:05 +0000 | |
---|---|---|
committer | 2019-07-10 15:09:05 +0000 | |
commit | ef97d0c5d250362e089ed2b9d78e5575c4dd287a (patch) | |
tree | 9603a12322bde860035f6ea4a5e412b70a5e0335 /etc | |
parent | Add gdb-firejail.sh to contrib for easy debugging of firejail with gdb. (diff) | |
download | firejail-ef97d0c5d250362e089ed2b9d78e5575c4dd287a.tar.gz firejail-ef97d0c5d250362e089ed2b9d78e5575c4dd287a.tar.zst firejail-ef97d0c5d250362e089ed2b9d78e5575c4dd287a.zip |
less.profile: make ${HOME} read-only
less is usually used to view various text files including configs so blacklisting many of them in ${HOME} make it less(sic!) usable. We can make them read-only instead.
Diffstat (limited to 'etc')
-rw-r--r-- | etc/less.profile | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/less.profile b/etc/less.profile index e6366ad28..0f31d344b 100644 --- a/etc/less.profile +++ b/etc/less.profile | |||
@@ -8,13 +8,13 @@ include less.local | |||
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | noblacklist ${HOME}/.lesshst | 10 | noblacklist ${HOME}/.lesshst |
11 | read-only ${HOME} | ||
12 | read-write ${HOME}/.lesshst | ||
11 | 13 | ||
12 | include disable-common.inc | ||
13 | include disable-devel.inc | 14 | include disable-devel.inc |
14 | include disable-exec.inc | 15 | include disable-exec.inc |
15 | include disable-interpreters.inc | 16 | include disable-interpreters.inc |
16 | include disable-passwdmgr.inc | 17 | include disable-passwdmgr.inc |
17 | include disable-programs.inc | ||
18 | 18 | ||
19 | apparmor | 19 | apparmor |
20 | caps.drop all | 20 | caps.drop all |