Chromium managed policy is mandatory for every profile. World-writable dirs let any local uid plant policy, including force-installed extensions. Write goes through the omarchy-browser-policy group at 2775 so theme colour still works without other-write.
13 lines
653 B
Bash
13 lines
653 B
Bash
run_logged "$OMARCHY_INSTALL/config/theme-system.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/browser-policy.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/increase-lockout-limit.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/lockscreen-pam.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/fix-powerprofilesctl-shebang.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/ssh-command-path.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/ssh-keepalive.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/docker.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/snapper.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/locate.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/enable-services.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/firewall.sh"
|