Merge branch 'master' of https://github.com/netblue30/firejail

1 files changed, 9 insertions, 1 deletions

diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index e542e3ebb..6a3586e81 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -129,8 +129,16 @@ read-only ${HOME}/.reportbugrc
 read-only ${HOME}/.xmonad
 read-only ${HOME}/.xscreensaver
 
-# The user ~/bin directory can override commands such as ls
+# Make directories commonly found in $PATH read-only
 read-only ${HOME}/bin
+read-only ${HOME}/.gem
+read-only ${HOME}/.luarocks
+read-only ${HOME}/.npm-packages
+
+# Make the contents of ~/.local read-only,
+#  except the commonly-used ~/.local/share
+read-only  ${HOME}/.local
+read-write ${HOME}/.local/share
 
 # top secret
 blacklist ${HOME}/.ecryptfs