From 1862d24fd9990bfc61f9ae9710f089b3d8038427 Mon Sep 17 00:00:00 2001 From: smitsohu Date: Tue, 12 Mar 2019 23:45:13 +0100 Subject: add disable-exec.inc to few more profiles --- etc/default.profile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'etc/default.profile') diff --git a/etc/default.profile b/etc/default.profile index 917e42287..efa66d5db 100644 --- a/etc/default.profile +++ b/etc/default.profile @@ -10,11 +10,13 @@ include globals.local include disable-common.inc # include disable-devel.inc +# include disable-exec.inc # include disable-interpreters.inc include disable-passwdmgr.inc include disable-programs.inc #include disable-xdg.inc +# apparmor caps.drop all # ipc-namespace netfilter @@ -42,5 +44,3 @@ seccomp # private-tmp # memory-deny-write-execute -# noexec ${HOME} -# noexec /tmp -- cgit v1.2.3-70-g09d2