blob: 5df7913a6803458d9879303095b0bb90a738f30e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
|
# # alsa audio will work with ipc-namespace,
# # but it hogs the alsa device from other applications
ignore ipc-namespace
# # qtox can make use of a webcam for calls
# # comment this if you intend to do so
novideo
# # seccomp breaks integrated file manager on kde applications
# # due to syscall name_to_handle_at
seccomp !name_to_handle_at
# # mdwe breaks qtox
ignore memory-deny-write-execute
# # qtox requires anotehr binary lately, but I do not know which
# private-bin qtox,dbus-launch
ignore private-bin
private-etc asound.conf,fonts,group,ld.so.cache,localtime,machine-id,passwd,pulse,resolv.conf
# private-tmp breaks qtox appearing in the systray
ignore private-tmp
# nodbus breaks qtox appearing in the systray
ignore dbus-user none
ignore dbus-system none
# # Use with hardened-malloc package
# This breaks qtox on some graphics cards
# polaris10 amdgpu, aruba radeon
env LD_PRELOAD=/usr/lib/libhardened_malloc.so
|
