diff options
-rw-r--r-- | etc/disable-common.inc | 1 | ||||
-rw-r--r-- | etc/kwin_x11.profile | 3 | ||||
-rw-r--r-- | etc/okular.profile | 5 |
3 files changed, 2 insertions, 7 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc index 91c554f2e..442e71350 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc | |||
@@ -344,4 +344,5 @@ blacklist /initrd* | |||
344 | blacklist /vmlinuz* | 344 | blacklist /vmlinuz* |
345 | 345 | ||
346 | # complement noexec ${HOME} and noexec /tmp | 346 | # complement noexec ${HOME} and noexec /tmp |
347 | env QML_DISABLE_DISK_CACHE=1 | ||
347 | noexec /tmp/.X11-unix | 348 | noexec /tmp/.X11-unix |
diff --git a/etc/kwin_x11.profile b/etc/kwin_x11.profile index 3ce4fe80d..91bb62efc 100644 --- a/etc/kwin_x11.profile +++ b/etc/kwin_x11.profile | |||
@@ -36,8 +36,5 @@ private-dev | |||
36 | private-etc drirc,fonts,ld.so.cache,machine-id,xdg | 36 | private-etc drirc,fonts,ld.so.cache,machine-id,xdg |
37 | private-tmp | 37 | private-tmp |
38 | 38 | ||
39 | # disable QML disk caching as it conflicts with the noexec constraints below | ||
40 | env QML_DISABLE_DISK_CACHE=1 | ||
41 | |||
42 | noexec ${HOME} | 39 | noexec ${HOME} |
43 | noexec /tmp | 40 | noexec /tmp |
diff --git a/etc/okular.profile b/etc/okular.profile index 59c93bdb0..31b773852 100644 --- a/etc/okular.profile +++ b/etc/okular.profile | |||
@@ -43,10 +43,7 @@ tracelog | |||
43 | private-bin okular,kbuildsycoca4,kdeinit4,lpr | 43 | private-bin okular,kbuildsycoca4,kdeinit4,lpr |
44 | private-dev | 44 | private-dev |
45 | private-etc alternatives,cups,fonts,ld.so.cache,machine-id | 45 | private-etc alternatives,cups,fonts,ld.so.cache,machine-id |
46 | # private-tmp - on KDE we need access to the real /tmp for data exchange with thunderbird | 46 | # private-tmp - on KDE we need access to the real /tmp for data exchange with email clients |
47 | |||
48 | # disable QML disk caching as it conflicts with the noexec constraints below | ||
49 | env QML_DISABLE_DISK_CACHE=1 | ||
50 | 47 | ||
51 | # memory-deny-write-execute | 48 | # memory-deny-write-execute |
52 | noexec ${HOME} | 49 | noexec ${HOME} |