1 files changed, 5 insertions, 2 deletions

diff --git a/etc/cvlc.profile b/etc/cvlc.profile
index 460966321..e0d32da0f 100644
--- a/etc/cvlc.profile
+++ b/etc/cvlc.profile
@@ -14,7 +14,7 @@ include /etc/firejail/disable-programs.inc
 
 caps.drop all
 netfilter
-nogroups
+# nogroups
 nonewprivs
 noroot
 protocol unix,inet,inet6,netlink
@@ -27,4 +27,7 @@ tracelog
 private-dev
 private-tmp
 
-memory-deny-write-execute
+# mdwe is disabled due to breaking hardware accelerated decoding
+# memory-deny-write-execute
+noexec ${HOME}
+noexec /tmp