mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 22:01:33 -06:00
disable qml disk cache globally
This commit is contained in:
parent
a87805b3c4
commit
f66ea88acf
3 changed files with 2 additions and 7 deletions
|
|
@ -344,4 +344,5 @@ blacklist /initrd*
|
|||
blacklist /vmlinuz*
|
||||
|
||||
# complement noexec ${HOME} and noexec /tmp
|
||||
env QML_DISABLE_DISK_CACHE=1
|
||||
noexec /tmp/.X11-unix
|
||||
|
|
|
|||
|
|
@ -36,8 +36,5 @@ private-dev
|
|||
private-etc drirc,fonts,ld.so.cache,machine-id,xdg
|
||||
private-tmp
|
||||
|
||||
# disable QML disk caching as it conflicts with the noexec constraints below
|
||||
env QML_DISABLE_DISK_CACHE=1
|
||||
|
||||
noexec ${HOME}
|
||||
noexec /tmp
|
||||
|
|
|
|||
|
|
@ -43,10 +43,7 @@ tracelog
|
|||
private-bin okular,kbuildsycoca4,kdeinit4,lpr
|
||||
private-dev
|
||||
private-etc alternatives,cups,fonts,ld.so.cache,machine-id
|
||||
# private-tmp - on KDE we need access to the real /tmp for data exchange with thunderbird
|
||||
|
||||
# disable QML disk caching as it conflicts with the noexec constraints below
|
||||
env QML_DISABLE_DISK_CACHE=1
|
||||
# private-tmp - on KDE we need access to the real /tmp for data exchange with email clients
|
||||
|
||||
# memory-deny-write-execute
|
||||
noexec ${HOME}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue