Merge pull request #1044 from KellerFuchs/disable-path-local

Make ~/.local read-only

1 files changed, 9 insertions, 1 deletions

diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 6f21b9681..ac32f07e7 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -124,8 +124,16 @@ read-only ${HOME}/.reportbugrc
 read-only ${HOME}/.xmonad
 read-only ${HOME}/.xscreensaver
 
-# The user ~/bin directory can override commands such as ls
+# Make directories commonly found in $PATH read-only
 read-only ${HOME}/bin
+read-only ${HOME}/.gem
+read-only ${HOME}/.luarocks
+read-only ${HOME}/.npm-packages
+
+# Make the contents of ~/.local read-only,
+#  except the commonly-used ~/.local/share
+read-only  ${HOME}/.local
+read-write ${HOME}/.local/share
 
 # top secret
 blacklist ${HOME}/.ecryptfs