aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar smitsohu <smitsohu@gmail.com>2018-01-08 19:07:58 +0100
committerLibravatar smitsohu <smitsohu@gmail.com>2018-01-08 19:07:58 +0100
commitf66ea88acfa4da165ca4cba57d565d7cb32503ff (patch)
treeaf201eadc3f2e290160046058700461eaf516177
parentFixup b9846aed427487f5acc764eb21369b0c9cb2b41a (diff)
downloadfirejail-f66ea88acfa4da165ca4cba57d565d7cb32503ff.tar.gz
firejail-f66ea88acfa4da165ca4cba57d565d7cb32503ff.tar.zst
firejail-f66ea88acfa4da165ca4cba57d565d7cb32503ff.zip
disable qml disk cache globally
-rw-r--r--etc/disable-common.inc1
-rw-r--r--etc/kwin_x11.profile3
-rw-r--r--etc/okular.profile5
3 files changed, 2 insertions, 7 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 91c554f2e..442e71350 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -344,4 +344,5 @@ blacklist /initrd*
344blacklist /vmlinuz* 344blacklist /vmlinuz*
345 345
346# complement noexec ${HOME} and noexec /tmp 346# complement noexec ${HOME} and noexec /tmp
347env QML_DISABLE_DISK_CACHE=1
347noexec /tmp/.X11-unix 348noexec /tmp/.X11-unix
diff --git a/etc/kwin_x11.profile b/etc/kwin_x11.profile
index 3ce4fe80d..91bb62efc 100644
--- a/etc/kwin_x11.profile
+++ b/etc/kwin_x11.profile
@@ -36,8 +36,5 @@ private-dev
36private-etc drirc,fonts,ld.so.cache,machine-id,xdg 36private-etc drirc,fonts,ld.so.cache,machine-id,xdg
37private-tmp 37private-tmp
38 38
39# disable QML disk caching as it conflicts with the noexec constraints below
40env QML_DISABLE_DISK_CACHE=1
41
42noexec ${HOME} 39noexec ${HOME}
43noexec /tmp 40noexec /tmp
diff --git a/etc/okular.profile b/etc/okular.profile
index 59c93bdb0..31b773852 100644
--- a/etc/okular.profile
+++ b/etc/okular.profile
@@ -43,10 +43,7 @@ tracelog
43private-bin okular,kbuildsycoca4,kdeinit4,lpr 43private-bin okular,kbuildsycoca4,kdeinit4,lpr
44private-dev 44private-dev
45private-etc alternatives,cups,fonts,ld.so.cache,machine-id 45private-etc alternatives,cups,fonts,ld.so.cache,machine-id
46# private-tmp - on KDE we need access to the real /tmp for data exchange with thunderbird 46# private-tmp - on KDE we need access to the real /tmp for data exchange with email clients
47
48# disable QML disk caching as it conflicts with the noexec constraints below
49env QML_DISABLE_DISK_CACHE=1
50 47
51# memory-deny-write-execute 48# memory-deny-write-execute
52noexec ${HOME} 49noexec ${HOME}