aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/hasher-common.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-a-l/hasher-common.profile')
-rw-r--r--etc/profile-a-l/hasher-common.profile23
1 files changed, 11 insertions, 12 deletions
diff --git a/etc/profile-a-l/hasher-common.profile b/etc/profile-a-l/hasher-common.profile
index 2f684349d..1633cc3ee 100644
--- a/etc/profile-a-l/hasher-common.profile
+++ b/etc/profile-a-l/hasher-common.profile
@@ -6,24 +6,23 @@ include hasher-common.local
6 6
7blacklist ${RUNUSER} 7blacklist ${RUNUSER}
8 8
9# WARNING: 9# Comment/uncomment the relevant include file(s) in your hasher-common.local
10# Users can (un)restrict file access for **all** hashers by commenting/uncommenting the needed 10# to (un)restrict file access for **all** hashers. Another option is to do this **per hasher**
11# include file(s) here or by putting those into hasher-common.local. 11# in the relevant <hasher>.local. Beware that things tend to break when overtightening
12# Another option is to do this **per hasher** in the relevant <hasher>.local. 12# profiles. For example, because you only need to hash/check files in ${DOWNLOADS},
13# Just beware that things tend to break when overtightening profiles. For example, because you only 13# other applications may need access to ${HOME}/.local/share.
14# need to hash/check files in ${DOWNLOADS}, other applications may need access to ${HOME}/.local/share. 14
15 15# Add the next line to your hasher-common.local if you don't need to hash files in disable-common.inc.
16# Uncomment the next line (or put it into your hasher-common.local) if you don't need to hash files in disable-common.inc.
17#include disable-common.inc 16#include disable-common.inc
18include disable-devel.inc 17include disable-devel.inc
19include disable-exec.inc 18include disable-exec.inc
20include disable-interpreters.inc 19include disable-interpreters.inc
21include disable-passwdmgr.inc 20include disable-passwdmgr.inc
22# Uncomment the next line (or put it into your hasher-common.local) if you don't need to hash files in disable-programs.inc. 21# Add the next line to your hasher-common.local if you don't need to hash files in disable-programs.inc.
23#include disable-programs.inc 22#include disable-programs.inc
24include disable-shell.inc 23include disable-shell.inc
25include disable-write-mnt.inc 24include disable-write-mnt.inc
26# Uncomment the next line (or put it into your hasher-common.local) if you don't need to hash files in disable-xdg.inc. 25# Add the next line to your hasher-common.local if you don't need to hash files in disable-xdg.inc.
27#include disable-xdg.inc 26#include disable-xdg.inc
28 27
29apparmor 28apparmor
@@ -47,10 +46,10 @@ shell none
47tracelog 46tracelog
48x11 none 47x11 none
49 48
50# Uncomment the next line (or put it into your hasher-common.local) if you don't need to hash files in /tmp. 49# Add the next line to your hasher-common.local if you don't need to hash files in ~/.cache.
51#private-cache 50#private-cache
52private-dev 51private-dev
53# Uncomment the next line (or put it into your hasher-common.local) if you don't need to hash files in /tmp. 52# Add the next line to your hasher-common.local if you don't need to hash files in /tmp.
54#private-tmp 53#private-tmp
55 54
56dbus-user none 55dbus-user none