From 71bfb63bfc1ebd100fad0efae46231f124079914 Mon Sep 17 00:00:00 2001 From: Anthony Perkins Date: Sun, 31 Jul 2022 20:58:36 +0100 Subject: [PATCH] Make Debian/Ubuntu certs dir read-only --- roles/home-cli/files/bashrc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/home-cli/files/bashrc b/roles/home-cli/files/bashrc index a087577..30cba3a 100644 --- a/roles/home-cli/files/bashrc +++ b/roles/home-cli/files/bashrc @@ -162,7 +162,7 @@ _podman_run_args=( --volume $HOME:$HOME --volume $XDG_RUNTIME_DIR:$XDG_RUNTIME_DIR --volume /etc/pki/ca-trust:/etc/pki/ca-trust:ro - --volume /etc/ssl/certs:/etc/ssl/certs + --volume /etc/ssl/certs:/etc/ssl/certs:ro --env XDG_RUNTIME_DIR=$XDG_RUNTIME_DIR --env XDG_SESSION_TYPE=wayland --ipc host