aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z
diff options
context:
space:
mode:
Diffstat (limited to 'etc/profile-m-z')
-rw-r--r--etc/profile-m-z/tar.profile38
-rw-r--r--etc/profile-m-z/unrar.profile36
-rw-r--r--etc/profile-m-z/unzip.profile34
-rw-r--r--etc/profile-m-z/xzdec.profile35
-rw-r--r--etc/profile-m-z/zstd.profile36
5 files changed, 12 insertions, 167 deletions
diff --git a/etc/profile-m-z/tar.profile b/etc/profile-m-z/tar.profile
index 3a7405305..2ddc82dbb 100644
--- a/etc/profile-m-z/tar.profile
+++ b/etc/profile-m-z/tar.profile
@@ -7,49 +7,15 @@ include tar.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER}/wayland-*
11
12# Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only. 10# Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only.
13noblacklist /var/lib/pacman 11noblacklist /var/lib/pacman
14 12
15include disable-common.inc 13ignore include disable-shell.inc
16include disable-devel.inc 14include archiver-common.inc
17include disable-exec.inc
18include disable-interpreters.inc
19include disable-passwdmgr.inc
20include disable-programs.inc
21
22apparmor
23caps.drop all
24hostname tar
25ipc-namespace
26machine-id
27net none
28no3d
29nodvd
30nogroups
31nonewprivs
32#noroot
33nosound
34notv
35nou2f
36novideo
37protocol unix
38seccomp
39shell none
40tracelog
41x11 none
42 15
43# support compressed archives 16# support compressed archives
44private-bin awk,bash,bzip2,compress,firejail,grep,gtar,gzip,lbzip2,lzip,lzma,lzop,sh,tar,xz 17private-bin awk,bash,bzip2,compress,firejail,grep,gtar,gzip,lbzip2,lzip,lzma,lzop,sh,tar,xz
45private-cache
46private-dev
47private-etc alternatives,group,localtime,login.defs,passwd 18private-etc alternatives,group,localtime,login.defs,passwd
48private-lib libfakeroot 19private-lib libfakeroot
49# Debian based distributions need this for 'dpkg --unpack' (incl. synaptic) 20# Debian based distributions need this for 'dpkg --unpack' (incl. synaptic)
50writable-var 21writable-var
51
52dbus-user none
53dbus-system none
54
55memory-deny-write-execute
diff --git a/etc/profile-m-z/unrar.profile b/etc/profile-m-z/unrar.profile
index e07a6fc93..cbf0e8679 100644
--- a/etc/profile-m-z/unrar.profile
+++ b/etc/profile-m-z/unrar.profile
@@ -7,40 +7,10 @@ include unrar.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER}/wayland-* 10ignore nogroups
11 11ignore private-cache
12include disable-common.inc 12include archiver-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18include disable-shell.inc
19
20caps.drop all
21hostname unrar
22ipc-namespace
23machine-id
24net none
25no3d
26nodvd
27#nogroups
28nonewprivs
29#noroot
30nosound
31notv
32nou2f
33novideo
34protocol unix
35seccomp
36shell none
37tracelog
38x11 none
39 13
40private-bin unrar 14private-bin unrar
41private-dev
42private-etc alternatives,group,localtime,passwd 15private-etc alternatives,group,localtime,passwd
43private-tmp 16private-tmp
44
45dbus-user none
46dbus-system none
diff --git a/etc/profile-m-z/unzip.profile b/etc/profile-m-z/unzip.profile
index e08511c12..30ee3ec12 100644
--- a/etc/profile-m-z/unzip.profile
+++ b/etc/profile-m-z/unzip.profile
@@ -7,42 +7,12 @@ include unzip.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER}/wayland-*
11
12# GNOME Shell integration (chrome-gnome-shell) 10# GNOME Shell integration (chrome-gnome-shell)
13noblacklist ${HOME}/.local/share/gnome-shell 11noblacklist ${HOME}/.local/share/gnome-shell
14 12
15include disable-common.inc 13ignore nogroups
16include disable-devel.inc
17include disable-exec.inc
18include disable-interpreters.inc
19include disable-passwdmgr.inc
20include disable-programs.inc
21include disable-shell.inc
22
23caps.drop all
24hostname unzip
25ipc-namespace
26machine-id
27net none
28no3d
29nodvd
30#nogroups
31nonewprivs
32noroot 14noroot
33nosound 15include archiver-common.inc
34notv
35nou2f
36novideo
37protocol unix
38seccomp
39shell none
40tracelog
41x11 none
42 16
43private-bin unzip 17private-bin unzip
44private-dev
45private-etc alternatives,group,localtime,passwd 18private-etc alternatives,group,localtime,passwd
46
47dbus-user none
48dbus-system none
diff --git a/etc/profile-m-z/xzdec.profile b/etc/profile-m-z/xzdec.profile
index 542363b57..c21fe16cf 100644
--- a/etc/profile-m-z/xzdec.profile
+++ b/etc/profile-m-z/xzdec.profile
@@ -7,35 +7,6 @@ include xzdec.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER}/wayland-* 10ignore include disable-shell.inc
11 11ignore nogroups
12include disable-common.inc 12include archiver-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18
19caps.drop all
20ipc-namespace
21machine-id
22net none
23no3d
24nodvd
25#nogroups
26nonewprivs
27#noroot
28nosound
29notv
30nou2f
31novideo
32protocol unix
33seccomp
34shell none
35tracelog
36x11 none
37
38private-dev
39
40dbus-user none
41dbus-system none
diff --git a/etc/profile-m-z/zstd.profile b/etc/profile-m-z/zstd.profile
index be27c10e1..5ae38e633 100644
--- a/etc/profile-m-z/zstd.profile
+++ b/etc/profile-m-z/zstd.profile
@@ -7,37 +7,5 @@ include zstd.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER}/wayland-* 10ignore include disable-shell.inc
11 11include archiver-common.inc
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18
19apparmor
20caps.drop all
21hostname zstd
22ipc-namespace
23machine-id
24net none
25no3d
26nodvd
27nogroups
28nonewprivs
29#noroot
30nosound
31notv
32nou2f
33novideo
34protocol unix
35seccomp
36shell none
37tracelog
38x11 none
39
40private-cache
41private-dev
42
43memory-deny-write-execute
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-19 04:56:24 +0000