Skip to content

Commit

Permalink
profiles: rename disable-X11.inc to disable-x11.inc (#6294)
Browse files Browse the repository at this point in the history
That is, make "X11" lowercase so that the order of the includes in the
disable- section remain the same when sorted with `LC_ALL=C`, as is the
case for most of the other sections.  That is also likely to be the
default in text editors (such as in vim on Arch), so this should make
the disable- section more consistent and easier to sort when editing the
profile.

Also, keep the old include as a redirect to the new one for now to avoid
breakage.

Commands used to search and replace:

    git mv etc/inc/disable-X11.inc etc/inc/disable-x11.inc
    git grep -Ilz 'disable-X11' -- etc | xargs -0 \
      perl -pi -e 's/disable-X11/disable-x11/'

Relates to #4462 #4854 #6070 #6289.

This is a follow-up to #6286.
  • Loading branch information
kmk3 authored Mar 27, 2024
1 parent 0d8fb3d commit 0060b51
Show file tree
Hide file tree
Showing 62 changed files with 81 additions and 73 deletions.
15 changes: 4 additions & 11 deletions etc/inc/disable-X11.inc
Original file line number Diff line number Diff line change
Expand Up @@ -2,14 +2,7 @@
# Persistent customizations should go in a .local file.
include disable-X11.local

blacklist /tmp/.X11-unix
blacklist ${HOME}/.Xauthority
blacklist ${RUNUSER}/gdm/Xauthority
blacklist ${RUNUSER}/.mutter-Xwaylandauth*
blacklist ${RUNUSER}/xauth_*
#blacklist ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]
blacklist /tmp/xauth*
blacklist /tmp/.ICE-unix
blacklist ${RUNUSER}/ICEauthority
rmenv DISPLAY
rmenv XAUTHORITY
# Warning: This file is deprecated; use disable-x11.inc (lowercase) instead.

# Redirect
include disable-x11.inc
15 changes: 15 additions & 0 deletions etc/inc/disable-x11.inc
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
# This file is overwritten during software install.
# Persistent customizations should go in a .local file.
include disable-x11.local

blacklist /tmp/.X11-unix
blacklist ${HOME}/.Xauthority
blacklist ${RUNUSER}/gdm/Xauthority
blacklist ${RUNUSER}/.mutter-Xwaylandauth*
blacklist ${RUNUSER}/xauth_*
#blacklist ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]
blacklist /tmp/xauth*
blacklist /tmp/.ICE-unix
blacklist ${RUNUSER}/ICEauthority
rmenv DISPLAY
rmenv XAUTHORITY
2 changes: 1 addition & 1 deletion etc/profile-a-l/agetpkg.profile
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

whitelist ${DOWNLOADS}
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/alpine.profile
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

#whitelist ${DOCUMENTS}
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/aria2c.profile
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc

include whitelist-usr-share-common.inc
include whitelist-var-common.inc
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/bpftop.profile
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

include whitelist-common.inc
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/build-systems-common.profile
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

#whitelist ${HOME}/Projects
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/clac.profile
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
include disable-shell.inc
#include disable-X11.inc # x11 none
#include disable-x11.inc # x11 none
include disable-xdg.inc

#include whitelist-common.inc # see #903
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/cloneit.profile
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

include whitelist-run-common.inc
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/cointop.profile
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

mkdir ${HOME}/.config/cointop
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/curl.profile
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ blacklist ${RUNUSER}
include disable-common.inc
include disable-exec.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
# Depending on workflow you can add 'include disable-xdg.inc' to your curl.local.
#include disable-xdg.inc

Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/daisy.profile
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
include disable-shell.inc
#include disable-X11.inc # x11 none
#include disable-x11.inc # x11 none
include disable-xdg.inc

include whitelist-common.inc
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/dbus-send.profile
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ include disable-interpreters.inc
include disable-programs.inc
include disable-shell.inc
include disable-write-mnt.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

#include whitelist-common.inc # see #903
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/deadlink.profile
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

include whitelist-run-common.inc
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/dexios.profile
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

whitelist ${DOWNLOADS}
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/dig.profile
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ include disable-common.inc
include disable-exec.inc
#include disable-interpreters.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

#mkfile ${HOME}/.digrc # see #903
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/dnscrypt-proxy.profile
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

whitelist /usr/share/dnscrypt-proxy
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/dnsmasq.profile
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ include disable-common.inc
include disable-devel.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

whitelist /var/lib/libvirt/dnsmasq
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/drill.profile
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ include disable-common.inc
include disable-exec.inc
#include disable-interpreters.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

#include whitelist-common.inc # see #903
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/editorconfiger.profile
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

apparmor
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/erd.profile
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ include erd.local
include globals.local

include disable-exec.inc
#include disable-X11.inc # x11 none
#include disable-x11.inc # x11 none

apparmor
caps.drop all
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/fdns.profile
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

#include whitelist-usr-share-common.inc
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/ftp.profile
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ include disable-proc.inc
include disable-programs.inc
#include disable-shell.inc
include disable-write-mnt.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

apparmor
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/gget.profile
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

whitelist ${DOWNLOADS}
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/gist.profile
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

mkdir ${HOME}/.gist
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/git.profile
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ blacklist ${RUNUSER}/wayland-*
include disable-common.inc
include disable-exec.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc

whitelist /usr/share/git
whitelist /usr/share/git-core
Expand Down
4 changes: 2 additions & 2 deletions etc/profile-a-l/gnome-keyring-daemon.profile
Original file line number Diff line number Diff line change
Expand Up @@ -14,8 +14,8 @@ include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
#include disable-X11.inc # x11 none
include disable-X11.inc
#include disable-x11.inc # x11 none
include disable-x11.inc
include disable-xdg.inc

whitelist ${RUNUSER}/gnupg
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/googler-common.profile
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

whitelist ${HOME}/.w3m
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/gpg-agent.profile
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ include disable-common.inc
include disable-devel.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

mkdir ${HOME}/.gnupg
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/gpg.profile
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ include disable-common.inc
include disable-devel.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc

whitelist ${RUNUSER}/gnupg
whitelist ${RUNUSER}/keyring
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/links-common.profile
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ include disable-interpreters.inc
# Additional noblacklist files/directories (blacklisted in disable-programs.inc)
# used as associated programs can be added in your links-common.local.
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

whitelist ${DOWNLOADS}
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-a-l/lynx.profile
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ include disable-common.inc
include disable-devel.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

include whitelist-runuser-common.inc
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-m-z/makepkg.profile
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ noblacklist /var/lib/pacman
include disable-common.inc
include disable-exec.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc

caps.drop all
ipc-namespace
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-m-z/mimetype.profile
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ blacklist ${RUNUSER}/wayland-*

include disable-exec.inc
include disable-proc.inc
include disable-X11.inc
include disable-x11.inc

apparmor
caps.drop all
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-m-z/mocp.profile
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ include disable-exec.inc
include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

mkdir ${HOME}/.moc
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-m-z/mutt.profile
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

mkdir ${HOME}/.Mail
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-m-z/neomutt.profile
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

mkdir ${HOME}/.Mail
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-m-z/nodejs-common.profile
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ include disable-common.inc
include disable-exec.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

# If you want whitelisting, change ${HOME}/Projects below to your node projects directory
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-m-z/nslookup.profile
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ include disable-devel.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

whitelist ${HOME}/.nslookuprc
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-m-z/ping.profile
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ include disable-exec.inc
include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

#include whitelist-common.inc # see #903
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-m-z/qpdf.profile
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ include disable-interpreters.inc
include disable-proc.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

whitelist ${DOCUMENTS}
Expand Down
2 changes: 1 addition & 1 deletion etc/profile-m-z/rsync-download_only.profile
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ include disable-exec.inc
include disable-interpreters.inc
include disable-programs.inc
include disable-shell.inc
include disable-X11.inc
include disable-x11.inc
include disable-xdg.inc

# Add the next line to your rsync-download_only.local to enable extra hardening.
Expand Down
Loading

0 comments on commit 0060b51

Please sign in to comment.