diff options
author | smitsohu <smitsohu@gmail.com> | 2019-03-12 20:44:51 +0000 |
---|---|---|
committer | GitHub <noreply@github.com> | 2019-03-12 20:44:51 +0000 |
commit | aa2bdffc4b4d0437dd710a70546c87b8f882b100 (patch) | |
tree | e44a8864ec0964a6c72caa7b6297ca90d7e8fd21 /etc/kodi.profile | |
parent | Harden meld.profile (#2577) (diff) | |
download | firejail-aa2bdffc4b4d0437dd710a70546c87b8f882b100.tar.gz firejail-aa2bdffc4b4d0437dd710a70546c87b8f882b100.tar.zst firejail-aa2bdffc4b4d0437dd710a70546c87b8f882b100.zip |
add disable-exec.inc to all profiles with apparmor (#2576)
* add disable-exec.inc to all profiles with apparmor - #2385 #2505
* drop disable-exec.inc from generic electron.profile
Diffstat (limited to 'etc/kodi.profile')
-rw-r--r-- | etc/kodi.profile | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/etc/kodi.profile b/etc/kodi.profile index 303310591..9925f131b 100644 --- a/etc/kodi.profile +++ b/etc/kodi.profile | |||
@@ -6,6 +6,9 @@ include kodi.local | |||
6 | # Persistent global definitions | 6 | # Persistent global definitions |
7 | include globals.local | 7 | include globals.local |
8 | 8 | ||
9 | # noexec ${HOME} breaks plugins | ||
10 | ignore noexec ${HOME} | ||
11 | |||
9 | noblacklist ${HOME}/.kodi | 12 | noblacklist ${HOME}/.kodi |
10 | noblacklist ${MUSIC} | 13 | noblacklist ${MUSIC} |
11 | noblacklist ${PICTURES} | 14 | noblacklist ${PICTURES} |
@@ -19,6 +22,7 @@ noblacklist /usr/lib/python3* | |||
19 | 22 | ||
20 | include disable-common.inc | 23 | include disable-common.inc |
21 | include disable-devel.inc | 24 | include disable-devel.inc |
25 | include disable-exec.inc | ||
22 | include disable-interpreters.inc | 26 | include disable-interpreters.inc |
23 | include disable-passwdmgr.inc | 27 | include disable-passwdmgr.inc |
24 | include disable-programs.inc | 28 | include disable-programs.inc |
@@ -40,7 +44,3 @@ tracelog | |||
40 | 44 | ||
41 | private-dev | 45 | private-dev |
42 | private-tmp | 46 | private-tmp |
43 | |||
44 | # breaks plugins | ||
45 | #noexec ${HOME} | ||
46 | noexec /tmp | ||