aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/tar.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-m-z/tar.profile')
-rw-r--r--etc/profile-m-z/tar.profile38
1 files changed, 2 insertions, 36 deletions
diff --git a/etc/profile-m-z/tar.profile b/etc/profile-m-z/tar.profile
index 3a7405305..2ddc82dbb 100644
--- a/etc/profile-m-z/tar.profile
+++ b/etc/profile-m-z/tar.profile
@@ -7,49 +7,15 @@ include tar.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER}/wayland-*
11
12# Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only. 10# Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only.
13noblacklist /var/lib/pacman 11noblacklist /var/lib/pacman
14 12
15include disable-common.inc 13ignore include disable-shell.inc
16include disable-devel.inc 14include archiver-common.inc
17include disable-exec.inc
18include disable-interpreters.inc
19include disable-passwdmgr.inc
20include disable-programs.inc
21
22apparmor
23caps.drop all
24hostname tar
25ipc-namespace
26machine-id
27net none
28no3d
29nodvd
30nogroups
31nonewprivs
32#noroot
33nosound
34notv
35nou2f
36novideo
37protocol unix
38seccomp
39shell none
40tracelog
41x11 none
42 15
43# support compressed archives 16# support compressed archives
44private-bin awk,bash,bzip2,compress,firejail,grep,gtar,gzip,lbzip2,lzip,lzma,lzop,sh,tar,xz 17private-bin awk,bash,bzip2,compress,firejail,grep,gtar,gzip,lbzip2,lzip,lzma,lzop,sh,tar,xz
45private-cache
46private-dev
47private-etc alternatives,group,localtime,login.defs,passwd 18private-etc alternatives,group,localtime,login.defs,passwd
48private-lib libfakeroot 19private-lib libfakeroot
49# Debian based distributions need this for 'dpkg --unpack' (incl. synaptic) 20# Debian based distributions need this for 'dpkg --unpack' (incl. synaptic)
50writable-var 21writable-var
51
52dbus-user none
53dbus-system none
54
55memory-deny-write-execute