From 529315fe17a526eb8200e42a44b57ddffbd7a838 Mon Sep 17 00:00:00 2001
From: smitsohu <smitsohu@gmail.com>
Date: Fri, 15 Mar 2019 12:37:36 +0100
Subject: profile hardening: add disable-exec.inc in more places

---
 etc/start-tor-browser.profile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'etc/start-tor-browser.profile')

diff --git a/etc/start-tor-browser.profile b/etc/start-tor-browser.profile
index b0cb52a0f..8acf77349 100644
--- a/etc/start-tor-browser.profile
+++ b/etc/start-tor-browser.profile
@@ -5,9 +5,11 @@ include start-tor-browser.local
 # Persistent global definitions
 include globals.local
 
+ignore noexec ${HOME}
 
 include disable-common.inc
 include disable-devel.inc
+include disable-exec.inc
 include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
@@ -36,5 +38,3 @@ private-bin bash,sh,grep,tail,env,gpg,id,readlink,dirname,test,mkdir,ln,sed,cp,r
 private-dev
 private-etc alternatives,fonts,hostname,hosts,resolv.conf,pki,ssl,ca-certificates,crypto-policies,alsa,asound.conf,pulse,machine-id,ld.so.cache
 private-tmp
-
-noexec /tmp
-- 
cgit v1.2.3-70-g09d2