profiles: evolution: add /tmp/evolution-* & disable private-tmp (#6469)

These paths are apparently used for attachments.

Disable private-tmp to make it easier to open attachments with external
programs.

Relates to #5101.

Reported-by: @githlp
Suggested-by: @rusty-snake
This commit is contained in:
Kelvin M. Klann 2024-09-13 08:50:32 +00:00 committed by GitHub
parent 26f3e9bf5d
commit 1c059149c3
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 3 additions and 1 deletions

View file

@ -1262,6 +1262,7 @@ blacklist ${RUNUSER}/qutebrowser
blacklist /etc/ssmtp
blacklist /tmp/.wine-*
blacklist /tmp/akonadi-*
blacklist /tmp/evolution-*
blacklist /tmp/i3-*
blacklist /tmp/lwjgl_*
blacklist /var/games/nethack

View file

@ -6,6 +6,7 @@ include evolution.local
# Persistent global definitions
include globals.local
noblacklist /tmp/evolution-*
noblacklist /var/mail
noblacklist /var/spool/mail
noblacklist ${HOME}/.bogofilter
@ -41,7 +42,7 @@ protocol unix,inet,inet6
seccomp
private-dev
private-tmp
#private-tmp
writable-var
restrict-namespaces