apparmor: disable exec from home by default

Executing from /home was supposed to be disabled by default
netblue30 · Aug 27, 2018 · 9c6ce24 · 9c6ce24
1 parent 1b309f8
commit 9c6ce24
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/etc/firejail-default b/etc/firejail-default
@@ -79,7 +79,7 @@ deny /proc/@{PID}/oom_score_adj w,
 /{,run/firejail/mnt/oroot/}{,usr/,usr/local/}games/** ix,
 /{,run/firejail/mnt/oroot/}{,usr/,usr/local/}lib{,32,64}/** ix,
 /{,run/firejail/mnt/oroot/}{,usr/,usr/local/}opt/** ix,
-/{,run/firejail/mnt/oroot/}{,usr/,usr/local/}home/** ix,
+#/{,run/firejail/mnt/oroot/}{,usr/,usr/local/}home/** ix,
 
 # Appimage support
 /{,run/firejail/mnt/oroot/}{,var/}run/firejail/appimage/** ix,