disable-common.inc: make ~/.config/nano read-only

Similarly to the existing ~/.nanorc entry.

Taken from nano.profile.

2 files changed, 2 insertions, 0 deletions

diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc
index 1e84370a4..03daaa9a6 100644
--- a/etc/inc/disable-common.inc
+++ b/etc/inc/disable-common.inc
@@ -327,6 +327,7 @@ read-only ${HOME}/.ssh/config.d
 # Initialization files that allow arbitrary command execution
 read-only ${HOME}/.caffrc
 read-only ${HOME}/.cargo/env
+read-only ${HOME}/.config/nano
 read-only ${HOME}/.config/nvim
 read-only ${HOME}/.config/pkcs11
 read-only ${HOME}/.dotfiles
diff --git a/etc/profile-m-z/nano.profile b/etc/profile-m-z/nano.profile
index 0814742c1..74403c335 100644
--- a/etc/profile-m-z/nano.profile
+++ b/etc/profile-m-z/nano.profile
@@ -56,5 +56,6 @@ dbus-user none
 dbus-system none
 
 memory-deny-write-execute
+read-write ${HOME}/.config/nano
 read-write ${HOME}/.nanorc
 restrict-namespaces