From 529315fe17a526eb8200e42a44b57ddffbd7a838 Mon Sep 17 00:00:00 2001
From: smitsohu <smitsohu@gmail.com>
Date: Fri, 15 Mar 2019 12:37:36 +0100
Subject: profile hardening: add disable-exec.inc in more places

---
 etc/server.profile | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

(limited to 'etc/server.profile')

diff --git a/etc/server.profile b/etc/server.profile
index 8da4853e7..686268a18 100644
--- a/etc/server.profile
+++ b/etc/server.profile
@@ -17,10 +17,11 @@ noblacklist /usr/sbin
 
 include disable-common.inc
 # include disable-devel.inc
+# include disable-exec.inc
 # include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
-#include disable-xdg.inc
+# include disable-xdg.inc
 
 caps
 # ipc-namespace
@@ -48,5 +49,3 @@ private-dev
 private-tmp
 
 # memory-deny-write-execute
-# noexec ${HOME}
-# noexec /tmp
-- 
cgit v1.2.3-70-g09d2