diff options
author | smitsohu <smitsohu@gmail.com> | 2018-01-08 19:07:58 +0100 |
---|---|---|
committer | smitsohu <smitsohu@gmail.com> | 2018-01-08 19:07:58 +0100 |
commit | f66ea88acfa4da165ca4cba57d565d7cb32503ff (patch) | |
tree | af201eadc3f2e290160046058700461eaf516177 /etc | |
parent | Fixup b9846aed427487f5acc764eb21369b0c9cb2b41a (diff) | |
download | firejail-f66ea88acfa4da165ca4cba57d565d7cb32503ff.tar.gz firejail-f66ea88acfa4da165ca4cba57d565d7cb32503ff.tar.zst firejail-f66ea88acfa4da165ca4cba57d565d7cb32503ff.zip |
disable qml disk cache globally
Diffstat (limited to 'etc')
-rw-r--r-- | etc/disable-common.inc | 1 | ||||
-rw-r--r-- | etc/kwin_x11.profile | 3 | ||||
-rw-r--r-- | etc/okular.profile | 5 |
3 files changed, 2 insertions, 7 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc index 91c554f2e..442e71350 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc | |||
@@ -344,4 +344,5 @@ blacklist /initrd* | |||
344 | blacklist /vmlinuz* | 344 | blacklist /vmlinuz* |
345 | 345 | ||
346 | # complement noexec ${HOME} and noexec /tmp | 346 | # complement noexec ${HOME} and noexec /tmp |
347 | env QML_DISABLE_DISK_CACHE=1 | ||
347 | noexec /tmp/.X11-unix | 348 | noexec /tmp/.X11-unix |
diff --git a/etc/kwin_x11.profile b/etc/kwin_x11.profile index 3ce4fe80d..91bb62efc 100644 --- a/etc/kwin_x11.profile +++ b/etc/kwin_x11.profile | |||
@@ -36,8 +36,5 @@ private-dev | |||
36 | private-etc drirc,fonts,ld.so.cache,machine-id,xdg | 36 | private-etc drirc,fonts,ld.so.cache,machine-id,xdg |
37 | private-tmp | 37 | private-tmp |
38 | 38 | ||
39 | # disable QML disk caching as it conflicts with the noexec constraints below | ||
40 | env QML_DISABLE_DISK_CACHE=1 | ||
41 | |||
42 | noexec ${HOME} | 39 | noexec ${HOME} |
43 | noexec /tmp | 40 | noexec /tmp |
diff --git a/etc/okular.profile b/etc/okular.profile index 59c93bdb0..31b773852 100644 --- a/etc/okular.profile +++ b/etc/okular.profile | |||
@@ -43,10 +43,7 @@ tracelog | |||
43 | private-bin okular,kbuildsycoca4,kdeinit4,lpr | 43 | private-bin okular,kbuildsycoca4,kdeinit4,lpr |
44 | private-dev | 44 | private-dev |
45 | private-etc alternatives,cups,fonts,ld.so.cache,machine-id | 45 | private-etc alternatives,cups,fonts,ld.so.cache,machine-id |
46 | # private-tmp - on KDE we need access to the real /tmp for data exchange with thunderbird | 46 | # private-tmp - on KDE we need access to the real /tmp for data exchange with email clients |
47 | |||
48 | # disable QML disk caching as it conflicts with the noexec constraints below | ||
49 | env QML_DISABLE_DISK_CACHE=1 | ||
50 | 47 | ||
51 | # memory-deny-write-execute | 48 | # memory-deny-write-execute |
52 | noexec ${HOME} | 49 | noexec ${HOME} |