summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--etc/disable-common.inc9
1 files changed, 9 insertions, 0 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 71d4ad97b..56121809a 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -383,3 +383,12 @@ blacklist /vmlinuz*
383 383
384# complement noexec ${HOME} and noexec /tmp 384# complement noexec ${HOME} and noexec /tmp
385noexec /tmp/.X11-unix 385noexec /tmp/.X11-unix
386
387# flatpak
388blacklist ${HOME}/*.config/flatpak
389blacklist ${HOME}/*.var
390blacklist ${HOME}/*.local/share/flatpak
391blacklist /var/lib/flatpak
392blacklist /usr/share/flatpak
393# most of the time bwrap is SUID binary
394blacklist /usr/bin/bwrap \ No newline at end of file