From b59225f5d987d0467c659b0b5c0630009d519e98 Mon Sep 17 00:00:00 2001
From: smitsohu <smitsohu@gmail.com>
Date: Tue, 18 Jun 2019 18:52:18 +0200
Subject: use 'x11 none' option

... instead of just blacklisting the X11 socket.

Systematically added to all profiles with 'net none' and
'blacklist /tmp/.X11-unix', and a few more
---
 etc/tar.profile | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

(limited to 'etc/tar.profile')

diff --git a/etc/tar.profile b/etc/tar.profile
index 7e1fa8b92..1232bb372 100644
--- a/etc/tar.profile
+++ b/etc/tar.profile
@@ -7,8 +7,6 @@ include tar.local
 # Persistent global definitions
 include globals.local
 
-blacklist /tmp/.X11-unix
-
 include disable-common.inc
 include disable-devel.inc
 include disable-exec.inc
@@ -36,6 +34,7 @@ protocol unix
 seccomp
 shell none
 tracelog
+x11 none
 
 # support compressed archives
 private-bin bash,bzip2,compress,gtar,gzip,lbzip2,lzip,lzma,lzop,sh,tar,xz
-- 
cgit v1.2.3-54-g00ecf