disallow ${HOME}/bin

This commit is contained in:
Octavio Galland 2025-02-03 16:32:58 -03:00
parent 76647b33b1
commit 38399e7720

View file

@ -26,7 +26,6 @@ profile tar /usr/bin/tar {
# tar can be made to filter archives through an arbitrary program
/{usr{/local,},}/{bin,sbin}/* ix,
/opt/** ix,
@{HOME}/bin/* ix,
# tar can compress/extract files over rsh/ssh
network stream,