aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/makepkg.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-m-z/makepkg.profile')
-rw-r--r--etc/profile-m-z/makepkg.profile18
1 files changed, 9 insertions, 9 deletions
diff --git a/etc/profile-m-z/makepkg.profile b/etc/profile-m-z/makepkg.profile
index a7c486c9f..513fcae55 100644
--- a/etc/profile-m-z/makepkg.profile
+++ b/etc/profile-m-z/makepkg.profile
@@ -6,8 +6,8 @@ include makepkg.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9deny /tmp/.X11-unix 9blacklist /tmp/.X11-unix
10deny ${RUNUSER}/wayland-* 10blacklist ${RUNUSER}/wayland-*
11 11
12# Note: see this Arch forum discussion https://bbs.archlinux.org/viewtopic.php?pid=1743138 12# Note: see this Arch forum discussion https://bbs.archlinux.org/viewtopic.php?pid=1743138
13# for potential issues and their solutions when Firejailing makepkg 13# for potential issues and their solutions when Firejailing makepkg
@@ -17,18 +17,18 @@ deny ${RUNUSER}/wayland-*
17# whitelist ${HOME}/.gnupg 17# whitelist ${HOME}/.gnupg
18 18
19# Enable severely restricted access to ${HOME}/.gnupg 19# Enable severely restricted access to ${HOME}/.gnupg
20nodeny ${HOME}/.gnupg 20noblacklist ${HOME}/.gnupg
21read-only ${HOME}/.gnupg/gpg.conf 21read-only ${HOME}/.gnupg/gpg.conf
22read-only ${HOME}/.gnupg/trustdb.gpg 22read-only ${HOME}/.gnupg/trustdb.gpg
23read-only ${HOME}/.gnupg/pubring.kbx 23read-only ${HOME}/.gnupg/pubring.kbx
24deny ${HOME}/.gnupg/random_seed 24blacklist ${HOME}/.gnupg/random_seed
25deny ${HOME}/.gnupg/pubring.kbx~ 25blacklist ${HOME}/.gnupg/pubring.kbx~
26deny ${HOME}/.gnupg/private-keys-v1.d 26blacklist ${HOME}/.gnupg/private-keys-v1.d
27deny ${HOME}/.gnupg/crls.d 27blacklist ${HOME}/.gnupg/crls.d
28deny ${HOME}/.gnupg/openpgp-revocs.d 28blacklist ${HOME}/.gnupg/openpgp-revocs.d
29 29
30# Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only. 30# Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only.
31nodeny /var/lib/pacman 31noblacklist /var/lib/pacman
32 32
33include disable-common.inc 33include disable-common.inc
34include disable-exec.inc 34include disable-exec.inc