Skip to content

Commit

Permalink
profiles: evolution: add /tmp/evolution-* & disable private-tmp (#6469)
Browse files Browse the repository at this point in the history
These paths are apparently used for attachments.

Disable private-tmp to make it easier to open attachments with external
programs.

Relates to #5101.

Reported-by: @githlp
Suggested-by: @rusty-snake
  • Loading branch information
kmk3 authored Sep 13, 2024
1 parent 26f3e9b commit 1c05914
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 1 deletion.
1 change: 1 addition & 0 deletions etc/inc/disable-programs.inc
Original file line number Diff line number Diff line change
Expand Up @@ -1262,6 +1262,7 @@ blacklist ${RUNUSER}/qutebrowser
blacklist /etc/ssmtp
blacklist /tmp/.wine-*
blacklist /tmp/akonadi-*
blacklist /tmp/evolution-*
blacklist /tmp/i3-*
blacklist /tmp/lwjgl_*
blacklist /var/games/nethack
Expand Down
3 changes: 2 additions & 1 deletion etc/profile-a-l/evolution.profile
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@ include evolution.local
# Persistent global definitions
include globals.local

noblacklist /tmp/evolution-*
noblacklist /var/mail
noblacklist /var/spool/mail
noblacklist ${HOME}/.bogofilter
Expand Down Expand Up @@ -41,7 +42,7 @@ protocol unix,inet,inet6
seccomp

private-dev
private-tmp
#private-tmp
writable-var

restrict-namespaces

0 comments on commit 1c05914

Please sign in to comment.