From 0065456d6d6043206367ad56440943071ed25b69 Mon Sep 17 00:00:00 2001 From: The Fox in the Shell Date: Sat, 18 Jun 2016 17:38:01 +0200 Subject: disable-common: Protect caff's files Caff (CA fire & forget) is a popular GnuPG helper for keysigning safely. --- etc/disable-common.inc | 2 ++ 1 file changed, 2 insertions(+) (limited to 'etc/disable-common.inc') diff --git a/etc/disable-common.inc b/etc/disable-common.inc index aebf099af..c857ff439 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc @@ -77,6 +77,7 @@ read-only ${HOME}/.csh_files read-only ${HOME}/.profile # Initialization files that allow arbitrary command execution +read-only ${HOME}/.caffrc read-only ${HOME}/.mailcap read-only ${HOME}/.exrc read-only ${HOME}/_exrc @@ -105,6 +106,7 @@ blacklist ${HOME}/.kde/share/apps/kwallet blacklist ${HOME}/.local/share/kwalletd blacklist ${HOME}/.netrc blacklist ${HOME}/.gnupg +blacklist ${HOME}/.caff blacklist ${HOME}/*.kdbx blacklist ${HOME}/*.kdb blacklist ${HOME}/*.key -- cgit v1.2.3-70-g09d2