From 8ecf31ca78cd7b600158a19b2b93db21e53d54e1 Mon Sep 17 00:00:00 2001
From: smitsohu <smitsohu@gmail.com>
Date: Tue, 22 Aug 2017 23:02:15 +0200
Subject: harmonize vlc and cvlc

---
 etc/cvlc.profile | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

(limited to 'etc/cvlc.profile')

diff --git a/etc/cvlc.profile b/etc/cvlc.profile
index 460966321..e0d32da0f 100644
--- a/etc/cvlc.profile
+++ b/etc/cvlc.profile
@@ -14,7 +14,7 @@ include /etc/firejail/disable-programs.inc
 
 caps.drop all
 netfilter
-nogroups
+# nogroups
 nonewprivs
 noroot
 protocol unix,inet,inet6,netlink
@@ -27,4 +27,7 @@ tracelog
 private-dev
 private-tmp
 
-memory-deny-write-execute
+# mdwe is disabled due to breaking hardware accelerated decoding
+# memory-deny-write-execute
+noexec ${HOME}
+noexec /tmp
-- 
cgit v1.2.3-70-g09d2