From aa2bdffc4b4d0437dd710a70546c87b8f882b100 Mon Sep 17 00:00:00 2001 From: smitsohu Date: Tue, 12 Mar 2019 20:44:51 +0000 Subject: add disable-exec.inc to all profiles with apparmor (#2576) * add disable-exec.inc to all profiles with apparmor - #2385 #2505 * drop disable-exec.inc from generic electron.profile --- etc/gimp.profile | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) (limited to 'etc/gimp.profile') diff --git a/etc/gimp.profile b/etc/gimp.profile index 9b14b1fe8..91001cd30 100644 --- a/etc/gimp.profile +++ b/etc/gimp.profile @@ -6,12 +6,17 @@ include gimp.local # Persistent global definitions include globals.local +# gimp plugins are installed by the user in ${HOME}/.gimp-2.8/plug-ins/ directory +# if you are not using external plugins, you can disable ignore noexec statement below +ignore noexec ${HOME} + noblacklist ${HOME}/.config/GIMP noblacklist ${HOME}/.gimp* noblacklist ${DOCUMENTS} noblacklist ${PICTURES} include disable-common.inc +include disable-exec.inc include disable-passwdmgr.inc include disable-programs.inc include disable-xdg.inc @@ -35,8 +40,3 @@ shell none private-dev private-tmp - -# gimp plugins are installed by the user in ${HOME}/.gimp-2.8/plug-ins/ directory -# if you are not using external plugins, you can enable noexec statement below -# noexec ${HOME} -noexec /tmp -- cgit v1.2.3-70-g09d2