firejail/etc
Kelvin M. Klann 04efbb2763 profiles: replace x11 socket blacklist with disable-X11.inc
Replace all occurrences of `blacklist /tmp/.X11-unix` with
`include disable-X11.inc`, which blacklists more X11-related files.

Commands used to search and replace:

    $ git grep -Ilz '^blacklist /tmp/.X11-unix' -- \
      etc/profile*/*.profile | xargs -0 perl -0 -pi -e '\
        s/\nblacklist \/tmp\/.X11-unix\n/\n/; \
        s/(\ninclude disable-xdg.inc\n)/\ninclude disable-X11.inc$1/; \
        s/(\ninclude disable-[^Xx\n]+\n)(\n|# )/$1include disable-X11.inc\n$2/'

Note: The following files were also edited manually:

* etc/profile-a-l/erd.profile
* etc/profile-a-l/links-common.profile
* etc/profile-m-z/termshark.profile
* etc/profile-m-z/tmux.profile
* etc/profile-m-z/tshark.profile

Relates to #4462 #4854.
2024-03-24 03:42:59 -03:00
..
apparmor firejail-local: be less restrictive with torbrowser-launcher 2024-03-16 15:49:07 +00:00
inc New profile: session-desktop.profile (#6259) 2024-03-19 11:57:10 +00:00
net fix nolocal netfilter 2022-10-25 14:33:56 -04:00
profile-a-l profiles: replace x11 socket blacklist with disable-X11.inc 2024-03-24 03:42:59 -03:00
profile-m-z profiles: replace x11 socket blacklist with disable-X11.inc 2024-03-24 03:42:59 -03:00
templates landlock: use "landlock.fs." prefix in filesystem commands 2024-02-27 22:27:46 -03:00
firejail.config profiles: Miscellaneous cleanups (#5918) 2023-07-25 19:32:12 +00:00
ids.config disable-common.inc: blacklist sudo/doas paths in /etc 2023-07-14 08:08:47 -03:00
login.users