profile.template: note to put read-only entries in dc

netblue30 · Mar 29, 2023 · 24f2a89 · 24f2a89
1 parent 7e1a583
commit 24f2a89
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/etc/templates/profile.template b/etc/templates/profile.template
@@ -221,6 +221,8 @@ include globals.local
 #dbus-user.talk org.freedesktop.Notifications
 #dbus-system none
 
+# Note: read-only entries should usually go in disable-common.inc (especially
+# entries for configuration files that allow arbitrary command execution).
 ##deterministic-shutdown
 ##env VAR=VALUE
 ##join-or-start NAME