diff options
| author |  Flox <flo@devtek.de> | 2017-12-21 17:35:51 +0100 |
|---|---|---|
| committer | Flox <flo@devtek.de> | 2017-12-21 17:35:51 +0100 |
| commit | 8b6be0a1a1bde97abc367b0128515b61bb7f2b8e (patch) | |
| tree | 0ca093ded5b06a3a2949c81363d51ed08f5df253 | |
| parent | firemon fixes (diff) | |
| download | firejail-8b6be0a1a1bde97abc367b0128515b61bb7f2b8e.tar.gz firejail-8b6be0a1a1bde97abc367b0128515b61bb7f2b8e.tar.zst firejail-8b6be0a1a1bde97abc367b0128515b61bb7f2b8e.zip | |
Added environment variable QML_DISABLE_DISK_CACHE=1 to okular.profile.
Without it, recent okular versions (here 17.12.0-1 on Arch Linux) crash with
mprotect failed in ExecutableAllocator::makeExecutable: Permission denied
due to the noexec constraints in the firejail profile.
| -rw-r--r-- | etc/okular.profile | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/okular.profile b/etc/okular.profile index e71cd1880..59c93bdb0 100644 --- a/etc/okular.profile +++ b/etc/okular.profile | |||
| @@ -45,6 +45,9 @@ private-dev | |||
| 45 | private-etc alternatives,cups,fonts,ld.so.cache,machine-id | 45 | private-etc alternatives,cups,fonts,ld.so.cache,machine-id |
| 46 | # private-tmp - on KDE we need access to the real /tmp for data exchange with thunderbird | 46 | # private-tmp - on KDE we need access to the real /tmp for data exchange with thunderbird |
| 47 | 47 | ||
| 48 | # disable QML disk caching as it conflicts with the noexec constraints below | ||
| 49 | env QML_DISABLE_DISK_CACHE=1 | ||
| 50 | |||
| 48 | # memory-deny-write-execute | 51 | # memory-deny-write-execute |
| 49 | noexec ${HOME} | 52 | noexec ${HOME} |
| 50 | noexec /tmp | 53 | noexec /tmp |