From b9e6cd5272aac2837f68247bf531f770ff4e954f Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Thu, 10 Dec 2020 00:29:27 +0000 Subject: minor hardenings and comments --- etc/profile-m-z/yelp.profile | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) (limited to 'etc') diff --git a/etc/profile-m-z/yelp.profile b/etc/profile-m-z/yelp.profile index c06634d4c..7727f30e3 100644 --- a/etc/profile-m-z/yelp.profile +++ b/etc/profile-m-z/yelp.profile @@ -8,7 +8,6 @@ include globals.local noblacklist ${HOME}/.config/yelp -noblacklist ${DOCUMENTS} include disable-common.inc include disable-devel.inc include disable-exec.inc @@ -20,7 +19,6 @@ include disable-xdg.inc mkdir ${HOME}/.config/yelp whitelist ${HOME}/.config/yelp -whitelist ${DOCUMENTS} whitelist /usr/share/doc whitelist /usr/share/groff whitelist /usr/share/help @@ -35,11 +33,13 @@ include whitelist-var-common.inc apparmor caps.drop all +machine-id net none nodvd nogroups nonewprivs noroot +nosound notv nou2f novideo @@ -61,9 +61,14 @@ dbus-user.own org.gnome.Yelp dbus-user.talk ca.desrt.dconf dbus-system none -# read-only ${HOME} breaks some unnecesarry features: +# read-only ${HOME} breaks some features: # 1. yelp --editor-mode # 2. saving the window geometry -# comment the line below or put 'ignore read-only ${HOME}' into your yelp.local if you need it +# comment the line below or put 'ignore read-only ${HOME}' into your yelp.local if you need these features read-only ${HOME} read-write ${HOME}/.cache +# 3. printing to PDF in ${DOCUMENTS} +# additionally uncomment the lines below or put 'noblacklist ${DOCUMENTS}' and +# 'whitelist ${DOCUMENTS}' into your yelp.local if you need printing to PDF support +#noblacklist ${DOCUMENTS} +#whitelist ${DOCUMENTS} -- cgit v1.2.3-54-g00ecf