From 41f58083095f952c8b12aba80b9fb0c3a04b6a55 Mon Sep 17 00:00:00 2001 From: rusty-snake Date: Thu, 6 Jun 2019 12:50:31 +0200 Subject: merges & fixes --- etc/rhythmbox.profile | 7 +++++-- etc/templates/profile.template | 3 ++- 2 files changed, 7 insertions(+), 3 deletions(-) (limited to 'etc') diff --git a/etc/rhythmbox.profile b/etc/rhythmbox.profile index df874f378..1c9f0e4d1 100644 --- a/etc/rhythmbox.profile +++ b/etc/rhythmbox.profile @@ -9,11 +9,14 @@ include globals.local noblacklist ${MUSIC} noblacklist ${HOME}/.local/share/rhythmbox +# Allow python (blacklisted by disable-interpreters.inc) +include allow-python2.inc +include allow-python3.inc + include disable-common.inc include disable-devel.inc -# rhythmbox is using Python include disable-exec.inc -#include disable-interpreters.inc +include disable-interpreters.inc include disable-passwdmgr.inc include disable-programs.inc include disable-xdg.inc diff --git a/etc/templates/profile.template b/etc/templates/profile.template index 2c44ee3a9..f2b64ac5d 100644 --- a/etc/templates/profile.template +++ b/etc/templates/profile.template @@ -112,7 +112,7 @@ #novideo #protocol unix,inet,inet6,netlink #seccomp -##seccomp.drop SYSCALLS +##seccomp.drop SYSCALLS (see also syscalls.txt) #shell none #tracelog @@ -135,5 +135,6 @@ ##env VAR=VALUE #memory-deny-write-execute +##noexec PATH ##read-only ${HOME} ##join-or-start NAME -- cgit v1.2.3-70-g09d2