blob: ee33917305cdd3f7c958c5dee5c215d574bcb854 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
|
# This file is overwritten during software install.
# Persistent customizations should go in a .local file.
include disable-exec.local
noexec ${HOME}
noexec ${RUNUSER}
noexec /dev/shm
noexec /tmp
# /var is noexec by default for unprivileged users
# except there is a writable-var option, so just in case:
noexec /var
|