disable-exec: add mount points

Example case: you want to access the photos and have scripts or binaries on the same USB flash drive.
Let's set mount points not executable in disable-exec.inc.
This commit is contained in:
pierretom 2026-03-20 09:33:34 +01:00
parent eed8f78fd9
commit 98c3b41bc9

View file

@ -6,6 +6,10 @@ noexec ${HOME}
noexec ${RUNUSER}
noexec /dev/mqueue
noexec /dev/shm
noexec /media
noexec /mnt
noexec /run/media
noexec /run/mount
noexec /run/shm
noexec /tmp
# /var is noexec by default for unprivileged users