aboutsummaryrefslogtreecommitdiffstats
path: root/etc/easystroke.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/easystroke.profile')
-rw-r--r--etc/easystroke.profile14
1 files changed, 8 insertions, 6 deletions
diff --git a/etc/easystroke.profile b/etc/easystroke.profile
index 44156f97e..42529d302 100644
--- a/etc/easystroke.profile
+++ b/etc/easystroke.profile
@@ -10,12 +10,14 @@ noblacklist ${HOME}/.easystroke
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
13include disable-exec.inc
13include disable-interpreters.inc 14include disable-interpreters.inc
14include disable-passwdmgr.inc 15include disable-passwdmgr.inc
15include disable-programs.inc 16include disable-programs.inc
17include disable-xdg.inc
16 18
19apparmor
17caps.drop all 20caps.drop all
18ipc-namespace
19machine-id 21machine-id
20net none 22net none
21no3d 23no3d
@@ -33,13 +35,13 @@ seccomp
33shell none 35shell none
34 36
35disable-mnt 37disable-mnt
36private-bin easystroke,bash,sh 38# breaks custom shell command functionality
39#private-bin bash,easystroke,sh
37private-cache 40private-cache
38private-dev 41private-dev
39private-etc alternatives,fonts 42private-etc alternatives,fonts,group,passwd
40private-lib gdk-pixbuf-2.*,gio,gvfs/libgvfscommon.so,libgconf-2.so.*,librsvg-2.so.* 43# breaks custom shell command functionality
44#private-lib gdk-pixbuf-2.*,gio,gvfs/libgvfscommon.so,libgconf-2.so.*,librsvg-2.so.*
41private-tmp 45private-tmp
42 46
43memory-deny-write-execute 47memory-deny-write-execute
44noexec ${HOME}
45noexec /tmp