profiles: sort blacklist sections (#6289)

See etc/templates/profile.template. This is a follow-up to #6286.
netblue30 · Mar 27, 2024 · 0d8fb3d · 0d8fb3d
1 parent e600fd7
commit 0d8fb3d
Show file tree

Hide file tree

Showing 11 changed files with 13 additions and 13 deletions.
diff --git a/etc/profile-a-l/bpftop.profile b/etc/profile-a-l/bpftop.profile
@@ -7,8 +7,8 @@ include bpftop.local
 # Persistent global definitions
 include globals.local
 
-blacklist /usr/libexec
 blacklist ${RUNUSER}
+blacklist /usr/libexec
 
 include disable-common.inc
 include disable-devel.inc

diff --git a/etc/profile-a-l/cloneit.profile b/etc/profile-a-l/cloneit.profile
@@ -7,8 +7,8 @@ include cloneit.local
 # Persistent global definitions
 include globals.local
 
-blacklist /usr/libexec
 blacklist ${RUNUSER}
+blacklist /usr/libexec
 
 include disable-common.inc
 include disable-devel.inc

diff --git a/etc/profile-a-l/deadlink.profile b/etc/profile-a-l/deadlink.profile
@@ -6,8 +6,8 @@ include deadlink.local
 # Persistent global definitions
 include globals.local
 
-blacklist /usr/libexec
 blacklist ${RUNUSER}
+blacklist /usr/libexec
 
 noblacklist ${HOME}/.config/deadlink
 

diff --git a/etc/profile-a-l/dexios.profile b/etc/profile-a-l/dexios.profile
@@ -7,8 +7,8 @@ include dexios.local
 # Persistent global definitions
 include globals.local
 
-blacklist /usr/libexec
 blacklist ${RUNUSER}
+blacklist /usr/libexec
 
 include disable-common.inc
 include disable-devel.inc

diff --git a/etc/profile-a-l/editorconfiger.profile b/etc/profile-a-l/editorconfiger.profile
@@ -6,8 +6,8 @@ include editorconfiger.local
 # Persistent global definitions
 include globals.local
 
-blacklist /usr/libexec
 blacklist ${RUNUSER}
+blacklist /usr/libexec
 
 include disable-common.inc
 include disable-devel.inc

diff --git a/etc/profile-a-l/kdiff3.profile b/etc/profile-a-l/kdiff3.profile
@@ -12,8 +12,8 @@ noblacklist ${HOME}/.config/kdiff3rc
 # Add the next line to your kdiff3.local if you don't need to compare files in disable-common.inc.
 # By default we deny access only to .ssh and .gnupg.
 #include disable-common.inc
-blacklist ${HOME}/.ssh
 blacklist ${HOME}/.gnupg
+blacklist ${HOME}/.ssh
 
 include disable-devel.inc
 include disable-exec.inc

diff --git a/etc/profile-m-z/makepkg.profile b/etc/profile-m-z/makepkg.profile
@@ -20,11 +20,11 @@ blacklist ${RUNUSER}/wayland-*
 noblacklist ${HOME}/.gnupg
 read-only ${HOME}/.gnupg/trustdb.gpg
 read-only ${HOME}/.gnupg/pubring.kbx
-blacklist ${HOME}/.gnupg/random_seed
-blacklist ${HOME}/.gnupg/pubring.kbx~
-blacklist ${HOME}/.gnupg/private-keys-v1.d
 blacklist ${HOME}/.gnupg/crls.d
 blacklist ${HOME}/.gnupg/openpgp-revocs.d
+blacklist ${HOME}/.gnupg/private-keys-v1.d
+blacklist ${HOME}/.gnupg/pubring.kbx~
+blacklist ${HOME}/.gnupg/random_seed
 
 # Arch Linux (based distributions) need access to /var/lib/pacman. As we drop all capabilities this is automatically read-only.
 noblacklist /var/lib/pacman

diff --git a/etc/profile-m-z/statusof.profile b/etc/profile-m-z/statusof.profile
@@ -7,8 +7,8 @@ include statusof.local
 # Persistent global definitions
 include globals.local
 
-blacklist /usr/libexec
 blacklist ${RUNUSER}
+blacklist /usr/libexec
 
 # Allow python (blacklisted by disable-interpreters.inc)
 include allow-python3.inc

diff --git a/etc/profile-m-z/textroom.profile b/etc/profile-m-z/textroom.profile
@@ -6,8 +6,8 @@ include textroom.local
 # Persistent global definitions
 include globals.local
 
-blacklist /usr/libexec
 blacklist ${RUNUSER}/wayland-*
+blacklist /usr/libexec
 
 noblacklist ${HOME}/.config/textroom
 

diff --git a/etc/profile-m-z/torbrowser.profile b/etc/profile-m-z/torbrowser.profile
@@ -12,8 +12,8 @@ ignore dbus-user none
 noblacklist ${HOME}/.cache/mozilla
 noblacklist ${HOME}/.mozilla
 
-blacklist /usr/libexec
 blacklist /sys/class/net
+blacklist /usr/libexec
 
 mkdir ${HOME}/.cache/mozilla/torbrowser
 mkdir ${HOME}/.mozilla

diff --git a/etc/profile-m-z/tvnamer.profile b/etc/profile-m-z/tvnamer.profile
@@ -6,8 +6,8 @@ include tvnamer.local
 # Persistent global definitions
 include globals.local
 
-blacklist /usr/libexec
 blacklist ${RUNUSER}
+blacklist /usr/libexec
 
 noblacklist ${HOME}/.config/tvnamer
 noblacklist ${VIDEOS}