From 24f2a892000a296999b778d63d0fa2180828403b Mon Sep 17 00:00:00 2001
From: "Kelvin M. Klann" <kmk3.code@protonmail.com>
Date: Tue, 28 Mar 2023 04:59:16 -0300
Subject: profile.template: note to put read-only entries in dc

---
 etc/templates/profile.template | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'etc/templates/profile.template')

diff --git a/etc/templates/profile.template b/etc/templates/profile.template
index fd328f36c..b88566f54 100644
--- a/etc/templates/profile.template
+++ b/etc/templates/profile.template
@@ -221,6 +221,8 @@ include globals.local
 #dbus-user.talk org.freedesktop.Notifications
 #dbus-system none
 
+# Note: read-only entries should usually go in disable-common.inc (especially
+# entries for configuration files that allow arbitrary command execution).
 ##deterministic-shutdown
 ##env VAR=VALUE
 ##join-or-start NAME
-- 
cgit v1.2.3-70-g09d2