| Commit message (Collapse) | Author | Age |
|
|
|
| |
…les with 'x11 none'
|
| |
|
| |
|
|
|
| |
Fixes #2942.
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Arch Linux specific addition to gzip.profile
* Arch Linux specifics for tar.profile
* Arch Linux specifics for gzip.profile
* Minor re-ordering and wording edits for makepkg.profile
* Spacing fix for cower.profile
|
|
|
|
|
|
|
| |
... instead of just blacklisting the X11 socket.
Systematically added to all profiles with 'net none' and
'blacklist /tmp/.X11-unix', and a few more
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Harden atool
* Harden cpio
* Fix ordering in private-* options
* Harden gzip
* Harden tar
* Harden bsdtar
* Harden+ tar
* Harden+ gzip
* Harden+ cpio
* Create bzip2.profile
* Description for bunzip2
* Add bzip2/bunzip2 to firecfg
|
|
|
|
|
|
|
|
| |
* Add fakeroot support to patch.profile
* Add fakeroot support to strings.profile
* Add fakeroot support to tar.profile
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Streamline include comment for 7z.profile
* Streamline include comment for gzip.profile
* Streamline include comment for less.profile
* Streamline include comment for strings.profile
* Streamline include comment for tar.profile
* Streamline include comment for unrar.profile
* Streamline include comment for unzip.profile
* Streamline include comment for uudeview.profile
* Streamline include comment for xzdec.profile
|
|
|
|
| |
See discussion in #2399
|
| |
|
|\
| |
| | |
Add nou2f to all profiles
|
| |
| |
| |
| | |
- Closes #2194
|
|/
|
|
| |
search for the file.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
* avoid including globals.local twice
|
|
|
|
|
|
|
| |
see #1822 and #1825. also systematically replaces
'blacklist /run/user/*/bus' with 'nodbus'.
with contributions from @Fred-Barclay
|
|
|
|
|
| |
systematically blacklist /run/user/*/bus in all profiles with
'net none'. targets distros like Fedora
|
| |
|
|
|
|
| |
from all profiles
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
There may actually be some other comments that were removed, but the bulk have been restored
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
I've tested compression and uncompression of
various tar formats and also straced unzip/unrar
regarding their file access in /etc.
-> should be fine.
If you want to unpack files in /usr/bin,
then use the --ignore=private-bin switch.
Same for /etc: --ignore=private-etc
|