diff options
Diffstat (limited to 'etc/profile-m-z')
-rw-r--r-- | etc/profile-m-z/makepkg.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/mimetype.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/mocp.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/mutt.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/neomutt.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/nslookup.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/rsync-download_only.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/rtv.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/server.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/signal-cli.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/ssh-agent.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/statusof.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/termshark.profile | 3 | ||||
-rw-r--r-- | etc/profile-m-z/tin.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/tmux.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/tracker.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/tshark.profile | 3 | ||||
-rw-r--r-- | etc/profile-m-z/tvnamer.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/unbound.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/w3m.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/wget.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/whois.profile | 2 | ||||
-rw-r--r-- | etc/profile-m-z/yt-dlp.profile | 2 |
23 files changed, 25 insertions, 23 deletions
diff --git a/etc/profile-m-z/makepkg.profile b/etc/profile-m-z/makepkg.profile index 49e84dedb..3bda47fad 100644 --- a/etc/profile-m-z/makepkg.profile +++ b/etc/profile-m-z/makepkg.profile | |||
@@ -7,7 +7,6 @@ include makepkg.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist /tmp/.X11-unix | ||
11 | blacklist ${RUNUSER}/wayland-* | 10 | blacklist ${RUNUSER}/wayland-* |
12 | 11 | ||
13 | # Note: see this Arch forum discussion https://bbs.archlinux.org/viewtopic.php?pid=1743138 | 12 | # Note: see this Arch forum discussion https://bbs.archlinux.org/viewtopic.php?pid=1743138 |
@@ -33,6 +32,7 @@ noblacklist /var/lib/pacman | |||
33 | include disable-common.inc | 32 | include disable-common.inc |
34 | include disable-exec.inc | 33 | include disable-exec.inc |
35 | include disable-programs.inc | 34 | include disable-programs.inc |
35 | include disable-X11.inc | ||
36 | 36 | ||
37 | caps.drop all | 37 | caps.drop all |
38 | ipc-namespace | 38 | ipc-namespace |
diff --git a/etc/profile-m-z/mimetype.profile b/etc/profile-m-z/mimetype.profile index 9902da882..4b62624bb 100644 --- a/etc/profile-m-z/mimetype.profile +++ b/etc/profile-m-z/mimetype.profile | |||
@@ -7,11 +7,11 @@ include mimetype.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist /tmp/.X11-unix | ||
11 | blacklist ${RUNUSER}/wayland-* | 10 | blacklist ${RUNUSER}/wayland-* |
12 | 11 | ||
13 | include disable-exec.inc | 12 | include disable-exec.inc |
14 | include disable-proc.inc | 13 | include disable-proc.inc |
14 | include disable-X11.inc | ||
15 | 15 | ||
16 | apparmor | 16 | apparmor |
17 | caps.drop all | 17 | caps.drop all |
diff --git a/etc/profile-m-z/mocp.profile b/etc/profile-m-z/mocp.profile index 0a5e4255a..d80e263b6 100644 --- a/etc/profile-m-z/mocp.profile +++ b/etc/profile-m-z/mocp.profile | |||
@@ -10,7 +10,6 @@ include globals.local | |||
10 | noblacklist ${HOME}/.moc | 10 | noblacklist ${HOME}/.moc |
11 | noblacklist ${MUSIC} | 11 | noblacklist ${MUSIC} |
12 | 12 | ||
13 | blacklist /tmp/.X11-unix | ||
14 | blacklist ${RUNUSER}/wayland-* | 13 | blacklist ${RUNUSER}/wayland-* |
15 | 14 | ||
16 | include disable-common.inc | 15 | include disable-common.inc |
@@ -19,6 +18,7 @@ include disable-exec.inc | |||
19 | include disable-interpreters.inc | 18 | include disable-interpreters.inc |
20 | include disable-proc.inc | 19 | include disable-proc.inc |
21 | include disable-programs.inc | 20 | include disable-programs.inc |
21 | include disable-X11.inc | ||
22 | include disable-xdg.inc | 22 | include disable-xdg.inc |
23 | 23 | ||
24 | mkdir ${HOME}/.moc | 24 | mkdir ${HOME}/.moc |
diff --git a/etc/profile-m-z/mutt.profile b/etc/profile-m-z/mutt.profile index 097ce6e83..447301d46 100644 --- a/etc/profile-m-z/mutt.profile +++ b/etc/profile-m-z/mutt.profile | |||
@@ -38,7 +38,6 @@ noblacklist ${HOME}/postponed | |||
38 | noblacklist ${HOME}/sent | 38 | noblacklist ${HOME}/sent |
39 | noblacklist /etc/msmtprc | 39 | noblacklist /etc/msmtprc |
40 | 40 | ||
41 | blacklist /tmp/.X11-unix | ||
42 | blacklist ${RUNUSER}/wayland-* | 41 | blacklist ${RUNUSER}/wayland-* |
43 | 42 | ||
44 | # Add the next lines to your mutt.local for oauth.py,S/MIME support. | 43 | # Add the next lines to your mutt.local for oauth.py,S/MIME support. |
@@ -51,6 +50,7 @@ include disable-devel.inc | |||
51 | include disable-exec.inc | 50 | include disable-exec.inc |
52 | include disable-interpreters.inc | 51 | include disable-interpreters.inc |
53 | include disable-programs.inc | 52 | include disable-programs.inc |
53 | include disable-X11.inc | ||
54 | include disable-xdg.inc | 54 | include disable-xdg.inc |
55 | 55 | ||
56 | mkdir ${HOME}/.Mail | 56 | mkdir ${HOME}/.Mail |
diff --git a/etc/profile-m-z/neomutt.profile b/etc/profile-m-z/neomutt.profile index 51e2e43bf..22720422b 100644 --- a/etc/profile-m-z/neomutt.profile +++ b/etc/profile-m-z/neomutt.profile | |||
@@ -39,7 +39,6 @@ noblacklist /etc/msmtprc | |||
39 | noblacklist /var/mail | 39 | noblacklist /var/mail |
40 | noblacklist /var/spool/mail | 40 | noblacklist /var/spool/mail |
41 | 41 | ||
42 | blacklist /tmp/.X11-unix | ||
43 | blacklist ${RUNUSER}/wayland-* | 42 | blacklist ${RUNUSER}/wayland-* |
44 | 43 | ||
45 | include allow-lua.inc | 44 | include allow-lua.inc |
@@ -49,6 +48,7 @@ include disable-devel.inc | |||
49 | include disable-exec.inc | 48 | include disable-exec.inc |
50 | include disable-interpreters.inc | 49 | include disable-interpreters.inc |
51 | include disable-programs.inc | 50 | include disable-programs.inc |
51 | include disable-X11.inc | ||
52 | include disable-xdg.inc | 52 | include disable-xdg.inc |
53 | 53 | ||
54 | mkdir ${HOME}/.Mail | 54 | mkdir ${HOME}/.Mail |
diff --git a/etc/profile-m-z/nslookup.profile b/etc/profile-m-z/nslookup.profile index dcd76f2ad..aae506b0b 100644 --- a/etc/profile-m-z/nslookup.profile +++ b/etc/profile-m-z/nslookup.profile | |||
@@ -7,7 +7,6 @@ include nslookup.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist /tmp/.X11-unix | ||
11 | blacklist ${RUNUSER} | 10 | blacklist ${RUNUSER} |
12 | 11 | ||
13 | noblacklist ${PATH}/nslookup | 12 | noblacklist ${PATH}/nslookup |
@@ -17,6 +16,7 @@ include disable-devel.inc | |||
17 | include disable-exec.inc | 16 | include disable-exec.inc |
18 | include disable-interpreters.inc | 17 | include disable-interpreters.inc |
19 | include disable-programs.inc | 18 | include disable-programs.inc |
19 | include disable-X11.inc | ||
20 | include disable-xdg.inc | 20 | include disable-xdg.inc |
21 | 21 | ||
22 | whitelist ${HOME}/.nslookuprc | 22 | whitelist ${HOME}/.nslookuprc |
diff --git a/etc/profile-m-z/rsync-download_only.profile b/etc/profile-m-z/rsync-download_only.profile index ce90012e3..52ccb4309 100644 --- a/etc/profile-m-z/rsync-download_only.profile +++ b/etc/profile-m-z/rsync-download_only.profile | |||
@@ -11,7 +11,6 @@ include globals.local | |||
11 | # not as a daemon (rsync --daemon) nor to create backups. | 11 | # not as a daemon (rsync --daemon) nor to create backups. |
12 | # Usage: firejail --profile=rsync-download_only rsync | 12 | # Usage: firejail --profile=rsync-download_only rsync |
13 | 13 | ||
14 | blacklist /tmp/.X11-unix | ||
15 | blacklist ${RUNUSER} | 14 | blacklist ${RUNUSER} |
16 | 15 | ||
17 | include disable-common.inc | 16 | include disable-common.inc |
@@ -20,6 +19,7 @@ include disable-exec.inc | |||
20 | include disable-interpreters.inc | 19 | include disable-interpreters.inc |
21 | include disable-programs.inc | 20 | include disable-programs.inc |
22 | include disable-shell.inc | 21 | include disable-shell.inc |
22 | include disable-X11.inc | ||
23 | include disable-xdg.inc | 23 | include disable-xdg.inc |
24 | 24 | ||
25 | # Add the next line to your rsync-download_only.local to enable extra hardening. | 25 | # Add the next line to your rsync-download_only.local to enable extra hardening. |
diff --git a/etc/profile-m-z/rtv.profile b/etc/profile-m-z/rtv.profile index 0d57e6916..e719b0d0d 100644 --- a/etc/profile-m-z/rtv.profile +++ b/etc/profile-m-z/rtv.profile | |||
@@ -6,7 +6,6 @@ include rtv.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | blacklist /tmp/.X11-unix | ||
10 | blacklist ${RUNUSER}/wayland-* | 9 | blacklist ${RUNUSER}/wayland-* |
11 | 10 | ||
12 | noblacklist ${HOME}/.config/rtv | 11 | noblacklist ${HOME}/.config/rtv |
@@ -28,6 +27,7 @@ include disable-devel.inc | |||
28 | include disable-exec.inc | 27 | include disable-exec.inc |
29 | include disable-interpreters.inc | 28 | include disable-interpreters.inc |
30 | include disable-programs.inc | 29 | include disable-programs.inc |
30 | include disable-X11.inc | ||
31 | include disable-xdg.inc | 31 | include disable-xdg.inc |
32 | 32 | ||
33 | mkdir ${HOME}/.config/rtv | 33 | mkdir ${HOME}/.config/rtv |
diff --git a/etc/profile-m-z/server.profile b/etc/profile-m-z/server.profile index 74587c992..a77cf7e0b 100644 --- a/etc/profile-m-z/server.profile +++ b/etc/profile-m-z/server.profile | |||
@@ -36,7 +36,6 @@ noblacklist /usr/sbin | |||
36 | noblacklist /etc/init.d | 36 | noblacklist /etc/init.d |
37 | #noblacklist /var/opt | 37 | #noblacklist /var/opt |
38 | 38 | ||
39 | blacklist /tmp/.X11-unix | ||
40 | blacklist ${RUNUSER}/wayland-* | 39 | blacklist ${RUNUSER}/wayland-* |
41 | 40 | ||
42 | include disable-common.inc | 41 | include disable-common.inc |
@@ -45,6 +44,7 @@ include disable-common.inc | |||
45 | #include disable-interpreters.inc | 44 | #include disable-interpreters.inc |
46 | include disable-programs.inc | 45 | include disable-programs.inc |
47 | include disable-write-mnt.inc | 46 | include disable-write-mnt.inc |
47 | include disable-X11.inc | ||
48 | include disable-xdg.inc | 48 | include disable-xdg.inc |
49 | 49 | ||
50 | #include whitelist-runuser-common.inc | 50 | #include whitelist-runuser-common.inc |
diff --git a/etc/profile-m-z/signal-cli.profile b/etc/profile-m-z/signal-cli.profile index d881db714..979d71b33 100644 --- a/etc/profile-m-z/signal-cli.profile +++ b/etc/profile-m-z/signal-cli.profile | |||
@@ -6,7 +6,6 @@ include signal-cli.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | blacklist /tmp/.X11-unix | ||
10 | blacklist ${RUNUSER}/wayland-* | 9 | blacklist ${RUNUSER}/wayland-* |
11 | 10 | ||
12 | noblacklist ${HOME}/.local/share/signal-cli | 11 | noblacklist ${HOME}/.local/share/signal-cli |
@@ -18,6 +17,7 @@ include disable-devel.inc | |||
18 | include disable-exec.inc | 17 | include disable-exec.inc |
19 | include disable-interpreters.inc | 18 | include disable-interpreters.inc |
20 | include disable-programs.inc | 19 | include disable-programs.inc |
20 | include disable-X11.inc | ||
21 | include disable-xdg.inc | 21 | include disable-xdg.inc |
22 | 22 | ||
23 | mkdir ${HOME}/.local/share/signal-cli | 23 | mkdir ${HOME}/.local/share/signal-cli |
diff --git a/etc/profile-m-z/ssh-agent.profile b/etc/profile-m-z/ssh-agent.profile index 76755def4..6630244be 100644 --- a/etc/profile-m-z/ssh-agent.profile +++ b/etc/profile-m-z/ssh-agent.profile | |||
@@ -9,11 +9,11 @@ include globals.local | |||
9 | # Allow ssh (blacklisted by disable-common.inc) | 9 | # Allow ssh (blacklisted by disable-common.inc) |
10 | include allow-ssh.inc | 10 | include allow-ssh.inc |
11 | 11 | ||
12 | blacklist /tmp/.X11-unix | ||
13 | blacklist ${RUNUSER}/wayland-* | 12 | blacklist ${RUNUSER}/wayland-* |
14 | 13 | ||
15 | include disable-common.inc | 14 | include disable-common.inc |
16 | include disable-programs.inc | 15 | include disable-programs.inc |
16 | include disable-X11.inc | ||
17 | 17 | ||
18 | include whitelist-usr-share-common.inc | 18 | include whitelist-usr-share-common.inc |
19 | 19 | ||
diff --git a/etc/profile-m-z/statusof.profile b/etc/profile-m-z/statusof.profile index 7463b90f5..25c8df680 100644 --- a/etc/profile-m-z/statusof.profile +++ b/etc/profile-m-z/statusof.profile | |||
@@ -7,7 +7,6 @@ include statusof.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist /tmp/.X11-unix | ||
11 | blacklist /usr/libexec | 10 | blacklist /usr/libexec |
12 | blacklist ${RUNUSER} | 11 | blacklist ${RUNUSER} |
13 | 12 | ||
@@ -21,6 +20,7 @@ include disable-interpreters.inc | |||
21 | include disable-proc.inc | 20 | include disable-proc.inc |
22 | include disable-programs.inc | 21 | include disable-programs.inc |
23 | include disable-shell.inc | 22 | include disable-shell.inc |
23 | include disable-X11.inc | ||
24 | include disable-xdg.inc | 24 | include disable-xdg.inc |
25 | 25 | ||
26 | include whitelist-common.inc | 26 | include whitelist-common.inc |
diff --git a/etc/profile-m-z/termshark.profile b/etc/profile-m-z/termshark.profile index 630d5dda6..bdee14e64 100644 --- a/etc/profile-m-z/termshark.profile +++ b/etc/profile-m-z/termshark.profile | |||
@@ -8,8 +8,9 @@ include termshark.local | |||
8 | # added by included profile | 8 | # added by included profile |
9 | #include globals.local | 9 | #include globals.local |
10 | 10 | ||
11 | blacklist /tmp/.X11-unix | ||
12 | blacklist ${RUNUSER} | 11 | blacklist ${RUNUSER} |
13 | 12 | ||
13 | include disable-X11.inc | ||
14 | |||
14 | # Redirect | 15 | # Redirect |
15 | include wireshark.profile | 16 | include wireshark.profile |
diff --git a/etc/profile-m-z/tin.profile b/etc/profile-m-z/tin.profile index 35ff14e88..7c1d534e9 100644 --- a/etc/profile-m-z/tin.profile +++ b/etc/profile-m-z/tin.profile | |||
@@ -9,7 +9,6 @@ include globals.local | |||
9 | noblacklist ${HOME}/.newsrc | 9 | noblacklist ${HOME}/.newsrc |
10 | noblacklist ${HOME}/.tin | 10 | noblacklist ${HOME}/.tin |
11 | 11 | ||
12 | blacklist /tmp/.X11-unix | ||
13 | blacklist ${RUNUSER} | 12 | blacklist ${RUNUSER} |
14 | blacklist /usr/libexec | 13 | blacklist /usr/libexec |
15 | 14 | ||
@@ -19,6 +18,7 @@ include disable-exec.inc | |||
19 | include disable-interpreters.inc | 18 | include disable-interpreters.inc |
20 | include disable-programs.inc | 19 | include disable-programs.inc |
21 | include disable-shell.inc | 20 | include disable-shell.inc |
21 | include disable-X11.inc | ||
22 | include disable-xdg.inc | 22 | include disable-xdg.inc |
23 | 23 | ||
24 | mkdir ${HOME}/.tin | 24 | mkdir ${HOME}/.tin |
diff --git a/etc/profile-m-z/tmux.profile b/etc/profile-m-z/tmux.profile index ddd2aa85f..55d84a618 100644 --- a/etc/profile-m-z/tmux.profile +++ b/etc/profile-m-z/tmux.profile | |||
@@ -7,7 +7,6 @@ include tmux.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist /tmp/.X11-unix | ||
11 | blacklist ${RUNUSER} | 10 | blacklist ${RUNUSER} |
12 | 11 | ||
13 | noblacklist /tmp/tmux-* | 12 | noblacklist /tmp/tmux-* |
@@ -16,6 +15,7 @@ noblacklist /tmp/tmux-* | |||
16 | #include disable-devel.inc | 15 | #include disable-devel.inc |
17 | #include disable-exec.inc | 16 | #include disable-exec.inc |
18 | #include disable-programs.inc | 17 | #include disable-programs.inc |
18 | include disable-X11.inc | ||
19 | 19 | ||
20 | caps.drop all | 20 | caps.drop all |
21 | ipc-namespace | 21 | ipc-namespace |
diff --git a/etc/profile-m-z/tracker.profile b/etc/profile-m-z/tracker.profile index c46b00fc9..8a3464496 100644 --- a/etc/profile-m-z/tracker.profile +++ b/etc/profile-m-z/tracker.profile | |||
@@ -8,7 +8,6 @@ include globals.local | |||
8 | 8 | ||
9 | # Tracker is started by systemd on most systems. Therefore it is not firejailed by default | 9 | # Tracker is started by systemd on most systems. Therefore it is not firejailed by default |
10 | 10 | ||
11 | blacklist /tmp/.X11-unix | ||
12 | blacklist ${RUNUSER}/wayland-* | 11 | blacklist ${RUNUSER}/wayland-* |
13 | 12 | ||
14 | include disable-common.inc | 13 | include disable-common.inc |
@@ -16,6 +15,7 @@ include disable-devel.inc | |||
16 | include disable-interpreters.inc | 15 | include disable-interpreters.inc |
17 | include disable-programs.inc | 16 | include disable-programs.inc |
18 | include disable-shell.inc | 17 | include disable-shell.inc |
18 | include disable-X11.inc | ||
19 | 19 | ||
20 | include whitelist-runuser-common.inc | 20 | include whitelist-runuser-common.inc |
21 | 21 | ||
diff --git a/etc/profile-m-z/tshark.profile b/etc/profile-m-z/tshark.profile index f2273e6a7..fab45a334 100644 --- a/etc/profile-m-z/tshark.profile +++ b/etc/profile-m-z/tshark.profile | |||
@@ -7,8 +7,9 @@ include tshark.local | |||
7 | # added by included profile | 7 | # added by included profile |
8 | #include globals.local | 8 | #include globals.local |
9 | 9 | ||
10 | blacklist /tmp/.X11-unix | ||
11 | blacklist ${RUNUSER} | 10 | blacklist ${RUNUSER} |
12 | 11 | ||
12 | include disable-X11.inc | ||
13 | |||
13 | # Redirect | 14 | # Redirect |
14 | include wireshark.profile | 15 | include wireshark.profile |
diff --git a/etc/profile-m-z/tvnamer.profile b/etc/profile-m-z/tvnamer.profile index ccfd07e40..24439672a 100644 --- a/etc/profile-m-z/tvnamer.profile +++ b/etc/profile-m-z/tvnamer.profile | |||
@@ -6,7 +6,6 @@ include tvnamer.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | blacklist /tmp/.X11-unix | ||
10 | blacklist /usr/libexec | 9 | blacklist /usr/libexec |
11 | blacklist ${RUNUSER} | 10 | blacklist ${RUNUSER} |
12 | 11 | ||
@@ -24,6 +23,7 @@ include disable-interpreters.inc | |||
24 | include disable-programs.inc | 23 | include disable-programs.inc |
25 | include disable-proc.inc | 24 | include disable-proc.inc |
26 | include disable-shell.inc | 25 | include disable-shell.inc |
26 | include disable-X11.inc | ||
27 | include disable-xdg.inc | 27 | include disable-xdg.inc |
28 | 28 | ||
29 | mkdir ${HOME}/.config/tvnamer | 29 | mkdir ${HOME}/.config/tvnamer |
diff --git a/etc/profile-m-z/unbound.profile b/etc/profile-m-z/unbound.profile index 63d84688c..dfce92e2d 100644 --- a/etc/profile-m-z/unbound.profile +++ b/etc/profile-m-z/unbound.profile | |||
@@ -9,7 +9,6 @@ include globals.local | |||
9 | noblacklist /sbin | 9 | noblacklist /sbin |
10 | noblacklist /usr/sbin | 10 | noblacklist /usr/sbin |
11 | 11 | ||
12 | blacklist /tmp/.X11-unix | ||
13 | blacklist ${RUNUSER} | 12 | blacklist ${RUNUSER} |
14 | 13 | ||
15 | include disable-common.inc | 14 | include disable-common.inc |
@@ -17,6 +16,7 @@ include disable-devel.inc | |||
17 | include disable-exec.inc | 16 | include disable-exec.inc |
18 | include disable-interpreters.inc | 17 | include disable-interpreters.inc |
19 | include disable-programs.inc | 18 | include disable-programs.inc |
19 | include disable-X11.inc | ||
20 | include disable-xdg.inc | 20 | include disable-xdg.inc |
21 | 21 | ||
22 | whitelist /usr/share/dns | 22 | whitelist /usr/share/dns |
diff --git a/etc/profile-m-z/w3m.profile b/etc/profile-m-z/w3m.profile index edc08ca44..4e2f1bb3e 100644 --- a/etc/profile-m-z/w3m.profile +++ b/etc/profile-m-z/w3m.profile | |||
@@ -14,7 +14,6 @@ include globals.local | |||
14 | 14 | ||
15 | noblacklist ${HOME}/.w3m | 15 | noblacklist ${HOME}/.w3m |
16 | 16 | ||
17 | blacklist /tmp/.X11-unix | ||
18 | blacklist ${RUNUSER}/wayland-* | 17 | blacklist ${RUNUSER}/wayland-* |
19 | 18 | ||
20 | # Allow /bin/sh (blacklisted by disable-shell.inc) | 19 | # Allow /bin/sh (blacklisted by disable-shell.inc) |
@@ -29,6 +28,7 @@ include disable-exec.inc | |||
29 | include disable-interpreters.inc | 28 | include disable-interpreters.inc |
30 | include disable-programs.inc | 29 | include disable-programs.inc |
31 | include disable-shell.inc | 30 | include disable-shell.inc |
31 | include disable-X11.inc | ||
32 | include disable-xdg.inc | 32 | include disable-xdg.inc |
33 | 33 | ||
34 | mkdir ${HOME}/.w3m | 34 | mkdir ${HOME}/.w3m |
diff --git a/etc/profile-m-z/wget.profile b/etc/profile-m-z/wget.profile index 5e1823593..90a1d3d7a 100644 --- a/etc/profile-m-z/wget.profile +++ b/etc/profile-m-z/wget.profile | |||
@@ -15,7 +15,6 @@ noblacklist ${HOME}/.wgetrc | |||
15 | #ignore read-only ${HOME}/.nvm | 15 | #ignore read-only ${HOME}/.nvm |
16 | #noblacklist ${HOME}/.nvm | 16 | #noblacklist ${HOME}/.nvm |
17 | 17 | ||
18 | blacklist /tmp/.X11-unix | ||
19 | blacklist ${RUNUSER} | 18 | blacklist ${RUNUSER} |
20 | 19 | ||
21 | include disable-common.inc | 20 | include disable-common.inc |
@@ -24,6 +23,7 @@ include disable-exec.inc | |||
24 | include disable-interpreters.inc | 23 | include disable-interpreters.inc |
25 | include disable-programs.inc | 24 | include disable-programs.inc |
26 | include disable-shell.inc | 25 | include disable-shell.inc |
26 | include disable-X11.inc | ||
27 | # Depending on workflow you can add the next line to your wget.local. | 27 | # Depending on workflow you can add the next line to your wget.local. |
28 | #include disable-xdg.inc | 28 | #include disable-xdg.inc |
29 | 29 | ||
diff --git a/etc/profile-m-z/whois.profile b/etc/profile-m-z/whois.profile index 8265e1ff8..e7f66cf76 100644 --- a/etc/profile-m-z/whois.profile +++ b/etc/profile-m-z/whois.profile | |||
@@ -7,7 +7,6 @@ include whois.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | blacklist /tmp/.X11-unix | ||
11 | blacklist ${RUNUSER} | 10 | blacklist ${RUNUSER} |
12 | 11 | ||
13 | include disable-common.inc | 12 | include disable-common.inc |
@@ -15,6 +14,7 @@ include disable-devel.inc | |||
15 | include disable-exec.inc | 14 | include disable-exec.inc |
16 | include disable-interpreters.inc | 15 | include disable-interpreters.inc |
17 | include disable-programs.inc | 16 | include disable-programs.inc |
17 | include disable-X11.inc | ||
18 | include disable-xdg.inc | 18 | include disable-xdg.inc |
19 | 19 | ||
20 | include whitelist-usr-share-common.inc | 20 | include whitelist-usr-share-common.inc |
diff --git a/etc/profile-m-z/yt-dlp.profile b/etc/profile-m-z/yt-dlp.profile index 97f9e620a..6dd9d03a3 100644 --- a/etc/profile-m-z/yt-dlp.profile +++ b/etc/profile-m-z/yt-dlp.profile | |||
@@ -29,7 +29,6 @@ noblacklist ${VIDEOS} | |||
29 | # Allow python (blacklisted by disable-interpreters.inc) | 29 | # Allow python (blacklisted by disable-interpreters.inc) |
30 | include allow-python3.inc | 30 | include allow-python3.inc |
31 | 31 | ||
32 | blacklist /tmp/.X11-unix | ||
33 | blacklist ${RUNUSER} | 32 | blacklist ${RUNUSER} |
34 | 33 | ||
35 | include disable-common.inc | 34 | include disable-common.inc |
@@ -38,6 +37,7 @@ include disable-exec.inc | |||
38 | include disable-interpreters.inc | 37 | include disable-interpreters.inc |
39 | include disable-programs.inc | 38 | include disable-programs.inc |
40 | include disable-shell.inc | 39 | include disable-shell.inc |
40 | include disable-X11.inc | ||
41 | include disable-xdg.inc | 41 | include disable-xdg.inc |
42 | 42 | ||
43 | include whitelist-usr-share-common.inc | 43 | include whitelist-usr-share-common.inc |