From cbb8417abad24234979c6ade8ef87f764b2ad791 Mon Sep 17 00:00:00 2001
From: The Fox in the Shell <KellerFuchs@hashbang.sh>
Date: Thu, 12 Jan 2017 00:21:52 +0100
Subject: disable-common: Make ~/.local read-only

---
 etc/disable-common.inc | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'etc')

diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 78698782b..184885c7f 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -123,6 +123,11 @@ read-only ${HOME}/.gem
 read-only ${HOME}/.luarocks
 read-only ${HOME}/.npm-packages
 
+# Make the contents of ~/.local read-only,
+#  except the commonly-used ~/.local/share
+read-only  ${HOME}/.local
+read-write ${HOME}/.local/share
+
 # top secret
 blacklist ${HOME}/.ecryptfs
 blacklist ${HOME}/.Private
-- 
cgit v1.2.3-54-g00ecf