blob: 6b66c043935004f737525252e432feda50774855 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
noblacklist ${HOME}/.config/rtv
mkdir ${HOME}/.config/rtv
whitelist ${HOME}/.config/rtv
whitelist ${HOME}/.local/share/rtv
ipc-namespace
protocol inet,inet6
# private-bin rtv,python,sh,xdg-settings
private-etc ca-certificates,resolv.conf,ssl
private-tmp
# memory-deny-write-execute
# # Use with hardened-malloc package
env LD_PRELOAD=/usr/lib/libhardened_malloc.so
|
