diff options
| author |  smitsohu <smitsohu@gmail.com> | 2019-03-12 20:44:51 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2019-03-12 20:44:51 +0000 |
| commit | aa2bdffc4b4d0437dd710a70546c87b8f882b100 (patch) | |
| tree | e44a8864ec0964a6c72caa7b6297ca90d7e8fd21 /etc/okular.profile | |
| parent | Harden meld.profile (#2577) (diff) | |
| download | firejail-aa2bdffc4b4d0437dd710a70546c87b8f882b100.tar.gz firejail-aa2bdffc4b4d0437dd710a70546c87b8f882b100.tar.zst firejail-aa2bdffc4b4d0437dd710a70546c87b8f882b100.zip | |
add disable-exec.inc to all profiles with apparmor (#2576)
* add disable-exec.inc to all profiles with apparmor - #2385 #2505
* drop disable-exec.inc from generic electron.profile
Diffstat (limited to 'etc/okular.profile')
| -rw-r--r-- | etc/okular.profile | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/okular.profile b/etc/okular.profile index 0192a1d3d..48e45ca3f 100644 --- a/etc/okular.profile +++ b/etc/okular.profile | |||
| @@ -20,6 +20,7 @@ noblacklist ${DOCUMENTS} | |||
| 20 | 20 | ||
| 21 | include disable-common.inc | 21 | include disable-common.inc |
| 22 | include disable-devel.inc | 22 | include disable-devel.inc |
| 23 | include disable-exec.inc | ||
| 23 | include disable-interpreters.inc | 24 | include disable-interpreters.inc |
| 24 | include disable-passwdmgr.inc | 25 | include disable-passwdmgr.inc |
| 25 | include disable-programs.inc | 26 | include disable-programs.inc |
| @@ -52,7 +53,5 @@ private-etc alternatives,cups,fonts,kde4rc,kde5rc,ld.so.cache,machine-id,xdg | |||
| 52 | # private-tmp - on KDE we need access to the real /tmp for data exchange with email clients | 53 | # private-tmp - on KDE we need access to the real /tmp for data exchange with email clients |
| 53 | 54 | ||
| 54 | # memory-deny-write-execute | 55 | # memory-deny-write-execute |
| 55 | noexec ${HOME} | ||
| 56 | noexec /tmp | ||
| 57 | 56 | ||
| 58 | join-or-start okular | 57 | join-or-start okular |