makepkg profile for safe AUR + firefox tweaks

diff --git a/usr.bin.makepkg b/usr.bin.makepkg
new file mode 100644 (file)
index 0000000..b8f1be0
--- /dev/null
+++ b/usr.bin.makepkg
@@ -0,0 +1,18 @@
+# Last Modified: Wed Jan 18 13:58:35 2012
+# This profile is made for users that are building
+# AUR packages from untrusted PKGBUILDs often
+
+#include <tunables/global>
+
+/usr/bin/makepkg {
+  #include <abstractions/base>
+  #include <abstractions/bash>
+  #include <abstractions/consoles>
+
+  /** rix,
+  /etc/** r,
+  /home/*/.ccache/** rwix,
+  /home/*/{Temp,Work/PKGBUILDs}/** rw,
+  /tmp/** rwkix,
+
+}

diff --git a/usr.lib.firefox.firefox b/usr.lib.firefox.firefox
index c838714e95a6b37d831721c531ebc8ef319111a3..a96b6d3c99c77293dfe78e52c142100c8bbfcce2 100644 (file)
--- a/usr.lib.firefox.firefox
+++ b/usr.lib.firefox.firefox
@@ -1,4 +1,4 @@
-# Last Modified: Wed Jan 18 13:31:46 2012
+# Last Modified: Wed Jan 18 13:50:50 2012
 #include <tunables/global>
 
 /usr/lib/firefox/firefox {
@@ -23,8 +23,11 @@
   /home/*/.macromedia/** rw,
   /home/*/.mozilla/**/ r,
   /home/*/.mozilla/firefox/** mrwk,
+  /home/*/Desktop/ r,
   /home/*/Desktop/** rwk,
+  /home/*/Downloads/ r,
   /home/*/Downloads/** rwk,
+  /home/*/Temp/ r,
   /home/*/Temp/** rwk,
   /opt/java/** r,
   /opt/kde/share/** r,