diff options
| author |  netblue30 <netblue30@yahoo.com> | 2020-04-21 08:24:28 -0400 |
|---|---|---|
| committer | netblue30 <netblue30@yahoo.com> | 2020-04-21 08:24:28 -0400 |
| commit | 018d75775eab4a0f045949a9d069c57686ca2686 (patch) | |
| tree | aac3a1a65cca0d4875795c55109a5c3e35efdefb /etc/inc/disable-exec.inc | |
| parent | small fixes (diff) | |
| download | firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.gz firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.zst firejail-018d75775eab4a0f045949a9d069c57686ca2686.zip | |
reorganize github etc directory
Diffstat (limited to 'etc/inc/disable-exec.inc')
| -rw-r--r-- | etc/inc/disable-exec.inc | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/etc/inc/disable-exec.inc b/etc/inc/disable-exec.inc new file mode 100644 index 000000000..ee3391730 --- /dev/null +++ b/etc/inc/disable-exec.inc | |||
| @@ -0,0 +1,11 @@ | |||
| 1 | # This file is overwritten during software install. | ||
| 2 | # Persistent customizations should go in a .local file. | ||
| 3 | include disable-exec.local | ||
| 4 | |||
| 5 | noexec ${HOME} | ||
| 6 | noexec ${RUNUSER} | ||
| 7 | noexec /dev/shm | ||
| 8 | noexec /tmp | ||
| 9 | # /var is noexec by default for unprivileged users | ||
| 10 | # except there is a writable-var option, so just in case: | ||
| 11 | noexec /var | ||