From 95ad89d24e8e75f2f52defbb80d0d4ee0f27d31e Mon Sep 17 00:00:00 2001
From: glitsj16 <glitsj16@users.noreply.github.com>
Date: Tue, 15 Dec 2020 20:06:10 +0000
Subject: Refactor archivers ii (#3827)

* harden 7z.profile

* harden atool.profile

* harden bsdtar.profile

* harden cpio.profile

* harden gzip.profile

* harden tar.profile

* harden unrar.profile

* harden unzip.profile

* harden xzdec.profile

* harden zstd.profile
---
 etc/profile-m-z/tar.profile | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

(limited to 'etc/profile-m-z/tar.profile')

diff --git a/etc/profile-m-z/tar.profile b/etc/profile-m-z/tar.profile
index 2ddc82dbb..29fda7e45 100644
--- a/etc/profile-m-z/tar.profile
+++ b/etc/profile-m-z/tar.profile
@@ -10,12 +10,13 @@ include globals.local
 # Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only.
 noblacklist /var/lib/pacman
 
-ignore include disable-shell.inc
+noblacklist ${PATH}/bash
+noblacklist ${PATH}/sh
 include archiver-common.inc
 
 # support compressed archives
 private-bin awk,bash,bzip2,compress,firejail,grep,gtar,gzip,lbzip2,lzip,lzma,lzop,sh,tar,xz
 private-etc alternatives,group,localtime,login.defs,passwd
-private-lib libfakeroot
+private-lib libfakeroot,liblzma.so.*,libreadline.so.*
 # Debian based distributions need this for 'dpkg --unpack' (incl. synaptic)
 writable-var
-- 
cgit v1.2.3-70-g09d2