filter out scripts

This commit is contained in:
tengel 2025-09-06 05:35:22 -05:00
parent 04c72dd55b
commit 252c35297f

View file

@ -1,6 +1,6 @@
#include <tunables/global>
/var/xyzzy/bin/forgejo* flags=(complain) {
/var/xyzzy/bin/forgejo*amd64 flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/user-tmp>
@ -27,7 +27,7 @@
/usr/share/mime/globs2 r,
/var/xyzzy/backup/* rw,
/var/xyzzy/bin/forgejo* mrix,
/var/xyzzy/bin/forgejo*amd64 mrix,
/var/xyzzy/etc/forgejo/app.ini r,
/var/xyzzy/etc/forgejo/internal_token r,
/var/xyzzy/etc/forgejo/jwt_secret r,