acrogenesis
bebe19bc70
install -d follows a planted ancestor symlink, and a writable parent can rename the managed leaf aside. chromium.theme is user-installed, so only a 0-255 RGB triple becomes a colour.
31 lines
857 B
Bash
31 lines
857 B
Bash
echo "Stop world-writable Chromium and Firefox policy directories"
|
|
|
|
source "$OMARCHY_PATH/install/helpers/browser-policy.sh"
|
|
|
|
browser_policy_setup_group
|
|
browser_policy_grant_user "${USER:-$(id -un)}"
|
|
|
|
repaired=0
|
|
for dir in "${BROWSER_POLICY_MANAGED_DIRS[@]}"; do
|
|
[[ -d $dir ]] || continue
|
|
if browser_policy_dir_hardened "$dir" && browser_policy_parents_hardened "$dir"; then
|
|
continue
|
|
fi
|
|
browser_policy_setup_dir "$dir"
|
|
repaired=1
|
|
done
|
|
|
|
if (( repaired )); then
|
|
omarchy-theme-set-browser
|
|
fi
|
|
|
|
for dir in "${BROWSER_POLICY_FIREFOX_DIRS[@]}"; do
|
|
[[ -d $dir ]] || continue
|
|
browser_policy_firefox_hardened "$dir" && continue
|
|
as_root install -d -m 0755 -o root -g root "$dir"
|
|
browser_policy_purge_dir "$dir"
|
|
if ! browser_policy_firefox_policy_file_ok "$dir/policies.json"; then
|
|
browser_policy_install_firefox_policies "$dir"
|
|
fi
|
|
done
|