From 8ecf31ca78cd7b600158a19b2b93db21e53d54e1 Mon Sep 17 00:00:00 2001 From: smitsohu Date: Tue, 22 Aug 2017 23:02:15 +0200 Subject: harmonize vlc and cvlc --- etc/cvlc.profile | 7 +++++-- etc/vlc.profile | 1 + 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/etc/cvlc.profile b/etc/cvlc.profile index 460966321..e0d32da0f 100644 --- a/etc/cvlc.profile +++ b/etc/cvlc.profile @@ -14,7 +14,7 @@ include /etc/firejail/disable-programs.inc caps.drop all netfilter -nogroups +# nogroups nonewprivs noroot protocol unix,inet,inet6,netlink @@ -27,4 +27,7 @@ tracelog private-dev private-tmp -memory-deny-write-execute +# mdwe is disabled due to breaking hardware accelerated decoding +# memory-deny-write-execute +noexec ${HOME} +noexec /tmp diff --git a/etc/vlc.profile b/etc/vlc.profile index 01ddfa8a9..bccde7a3d 100644 --- a/etc/vlc.profile +++ b/etc/vlc.profile @@ -25,6 +25,7 @@ private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc private-dev private-tmp +# mdwe is disabled due to breaking hardware accelerated decoding # memory-deny-write-execute noexec ${HOME} noexec /tmp -- cgit v1.2.3-54-g00ecf