From fe0f975f447d59977d90c3226cc8c623b31b20b3 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Mon, 5 Jul 2021 07:23:31 -0400 Subject: move whitelist/blacklist to allow/deny --- etc/profile-m-z/nodejs-common.profile | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) (limited to 'etc/profile-m-z/nodejs-common.profile') diff --git a/etc/profile-m-z/nodejs-common.profile b/etc/profile-m-z/nodejs-common.profile index fa69f9214..7981ba6ae 100644 --- a/etc/profile-m-z/nodejs-common.profile +++ b/etc/profile-m-z/nodejs-common.profile @@ -7,22 +7,22 @@ include nodejs-common.local # added by caller profile #include globals.local -blacklist /tmp/.X11-unix -blacklist ${RUNUSER} +deny /tmp/.X11-unix +deny ${RUNUSER} ignore read-only ${HOME}/.npm-packages ignore read-only ${HOME}/.npmrc ignore read-only ${HOME}/.nvm ignore read-only ${HOME}/.yarnrc -noblacklist ${HOME}/.node-gyp -noblacklist ${HOME}/.npm -noblacklist ${HOME}/.npmrc -noblacklist ${HOME}/.nvm -noblacklist ${HOME}/.yarn -noblacklist ${HOME}/.yarn-config -noblacklist ${HOME}/.yarncache -noblacklist ${HOME}/.yarnrc +nodeny ${HOME}/.node-gyp +nodeny ${HOME}/.npm +nodeny ${HOME}/.npmrc +nodeny ${HOME}/.nvm +nodeny ${HOME}/.yarn +nodeny ${HOME}/.yarn-config +nodeny ${HOME}/.yarncache +nodeny ${HOME}/.yarnrc ignore noexec ${HOME} @@ -58,9 +58,9 @@ include disable-xdg.inc #whitelist ${HOME}/Projects #include whitelist-common.inc -whitelist /usr/share/doc/node -whitelist /usr/share/nvm -whitelist /usr/share/systemtap/tapset/node.stp +allow /usr/share/doc/node +allow /usr/share/nvm +allow /usr/share/systemtap/tapset/node.stp include whitelist-runuser-common.inc include whitelist-usr-share-common.inc include whitelist-var-common.inc -- cgit v1.2.3-70-g09d2