summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2017-08-13 07:36:06 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2017-08-13 07:36:06 -0400
commit647b6a220eb3b4d6568f006c60e5f164c7ab22fb (patch)
tree6f3f29ce1f55d6bda5b736fd04a5f0c37d16a40b
parentMerge branch 'master' of https://github.com/netblue30/firejail (diff)
downloadfirejail-647b6a220eb3b4d6568f006c60e5f164c7ab22fb.tar.gz
firejail-647b6a220eb3b4d6568f006c60e5f164c7ab22fb.tar.zst
firejail-647b6a220eb3b4d6568f006c60e5f164c7ab22fb.zip
added nodvd to most profiles
-rw-r--r--etc/0ad.profile1
-rw-r--r--etc/2048-qt.profile1
-rw-r--r--etc/7z.profile1
-rw-r--r--etc/Cryptocat.profile1
-rw-r--r--etc/Mathematica.profile1
-rw-r--r--etc/Thunar.profile1
-rw-r--r--etc/Xephyr.profile1
-rw-r--r--etc/Xvfb.profile1
-rw-r--r--etc/abrowser.profile1
-rw-r--r--etc/akregator.profile1
-rw-r--r--etc/android-studio.profile1
-rw-r--r--etc/apktool.profile1
-rw-r--r--etc/arduino.profile1
-rw-r--r--etc/ark.profile1
-rw-r--r--etc/arm.profile1
-rw-r--r--etc/atom-beta.profile1
-rw-r--r--etc/atom.profile1
-rw-r--r--etc/atool.profile1
-rw-r--r--etc/atril.profile1
-rw-r--r--etc/audacity.profile1
-rw-r--r--etc/aweather.profile1
-rw-r--r--etc/baloo_file.profile1
-rw-r--r--etc/baobab.profile1
-rw-r--r--etc/bibletime.profile1
-rw-r--r--etc/bitlbee.profile1
-rw-r--r--etc/bleachbit.profile1
-rw-r--r--etc/blender.profile1
-rw-r--r--etc/bless.profile1
-rw-r--r--etc/brave.profile1
-rw-r--r--etc/caja.profile1
-rw-r--r--etc/calibre.profile1
-rw-r--r--etc/catfish.profile1
-rw-r--r--etc/cherrytree.profile1
-rw-r--r--etc/chromium.profile1
-rw-r--r--etc/claws-mail.profile1
-rw-r--r--etc/clipit.profile1
-rw-r--r--etc/conkeror.profile1
-rw-r--r--etc/corebird.profile1
-rw-r--r--etc/cpio.profile1
-rw-r--r--etc/curl.profile1
-rw-r--r--etc/cvlc.profile1
-rw-r--r--etc/cyberfox.profile1
-rw-r--r--etc/darktable.profile1
-rw-r--r--etc/default.profile1
-rw-r--r--etc/deluge.profile1
-rw-r--r--etc/dex2jar.profile1
-rw-r--r--etc/dia.profile1
-rw-r--r--etc/digikam.profile1
-rw-r--r--etc/dillo.profile1
-rw-r--r--etc/dino.profile1
-rw-r--r--etc/display.profile1
-rw-r--r--etc/dnscrypt-proxy.profile1
-rw-r--r--etc/dnsmasq.profile1
-rw-r--r--etc/dolphin.profile1
-rw-r--r--etc/dosbox.profile1
-rw-r--r--etc/dragon.profile1
-rw-r--r--etc/dropbox.profile1
-rw-r--r--etc/electron.profile1
-rw-r--r--etc/elinks.profile1
-rw-r--r--etc/emacs.profile1
-rw-r--r--etc/empathy.profile1
-rw-r--r--etc/enchant.profile1
-rw-r--r--etc/engrampa.profile1
-rw-r--r--etc/eog.profile1
-rw-r--r--etc/eom.profile1
-rw-r--r--etc/epiphany.profile1
-rw-r--r--etc/etr.profile1
-rw-r--r--etc/evince.profile1
-rw-r--r--etc/evolution.profile1
-rw-r--r--etc/exiftool.profile1
-rw-r--r--etc/fbreader.profile1
-rw-r--r--etc/feh.profile1
-rw-r--r--etc/file-roller.profile1
-rw-r--r--etc/file.profile1
-rw-r--r--etc/filezilla.profile1
-rw-r--r--etc/firefox.profile1
-rw-r--r--etc/flashpeak-slimjet.profile1
-rw-r--r--etc/flowblade.profile1
-rw-r--r--etc/fontforge.profile1
-rw-r--r--etc/fossamail.profile1
-rw-r--r--etc/franz.profile1
-rw-r--r--etc/frozen-bubble.profile1
-rw-r--r--etc/gajim.profile1
-rw-r--r--etc/galculator.profile1
-rw-r--r--etc/geany.profile1
-rw-r--r--etc/gedit.profile1
-rw-r--r--etc/geeqie.profile1
-rw-r--r--etc/gimp.profile1
-rw-r--r--etc/git.profile1
-rw-r--r--etc/gitg.profile1
-rw-r--r--etc/gitter.profile1
-rw-r--r--etc/gjs.profile1
-rw-r--r--etc/globaltime.profile1
-rw-r--r--etc/gnome-2048.profile1
-rw-r--r--etc/gnome-books.profile1
-rw-r--r--etc/gnome-calculator.profile1
-rw-r--r--etc/gnome-chess.profile1
-rw-r--r--etc/gnome-clocks.profile1
-rw-r--r--etc/gnome-contacts.profile1
-rw-r--r--etc/gnome-documents.profile1
-rw-r--r--etc/gnome-font-viewer.profile1
-rw-r--r--etc/gnome-maps.profile1
-rw-r--r--etc/gnome-photos.profile1
-rw-r--r--etc/gnome-twitch.profile1
-rw-r--r--etc/gnome-weather.profile1
-rw-r--r--etc/goobox.profile1
-rw-r--r--etc/google-chrome-beta.profile1
-rw-r--r--etc/google-chrome-unstable.profile1
-rw-r--r--etc/google-chrome.profile1
-rw-r--r--etc/google-play-music-desktop-player.profile1
-rw-r--r--etc/gpa.profile1
-rw-r--r--etc/gpg-agent.profile1
-rw-r--r--etc/gpg.profile1
-rw-r--r--etc/gpicview.profile1
-rw-r--r--etc/gpredict.profile1
-rw-r--r--etc/gthumb.profile1
-rw-r--r--etc/gucharmap.profile1
-rw-r--r--etc/gwenview.profile1
-rw-r--r--etc/gzip.profile1
-rw-r--r--etc/hashcat.profile1
-rw-r--r--etc/hedgewars.profile1
-rw-r--r--etc/hexchat.profile1
-rw-r--r--etc/highlight.profile1
-rw-r--r--etc/hugin.profile1
-rw-r--r--etc/icecat.profile1
-rw-r--r--etc/idea.sh.profile1
-rw-r--r--etc/img2txt.profile1
-rw-r--r--etc/inkscape.profile1
-rw-r--r--etc/inox.profile1
-rw-r--r--etc/iridium.profile1
-rw-r--r--etc/jd-gui.profile1
-rw-r--r--etc/jitsi.profile1
-rw-r--r--etc/k3b.profile1
-rw-r--r--etc/kate.profile1
-rw-r--r--etc/kcalc.profile1
-rw-r--r--etc/keepass.profile1
-rw-r--r--etc/keepassx.profile1
-rw-r--r--etc/keepassx2.profile1
-rw-r--r--etc/keepassxc.profile1
-rw-r--r--etc/kmail.profile1
-rw-r--r--etc/knotes.profile1
-rw-r--r--etc/konversation.profile1
-rw-r--r--etc/ktorrent.profile1
-rw-r--r--etc/kwrite.profile1
-rw-r--r--etc/leafpad.profile1
-rw-r--r--etc/less.profile1
-rw-r--r--etc/libreoffice.profile1
-rw-r--r--etc/liferea.profile1
-rw-r--r--etc/luminance-hdr.profile1
-rw-r--r--etc/lximage-qt.profile1
-rw-r--r--etc/lxmusic.profile1
-rw-r--r--etc/lxterminal.profile1
-rw-r--r--etc/lynx.profile1
-rw-r--r--etc/mate-calc.profile1
-rw-r--r--etc/mate-color-select.profile1
-rw-r--r--etc/mate-dictionary.profile1
-rw-r--r--etc/mcabber.profile1
-rw-r--r--etc/mediainfo.profile1
-rw-r--r--etc/mediathekview.profile1
-rw-r--r--etc/meld.profile1
-rw-r--r--etc/midori.profile1
-rw-r--r--etc/mousepad.profile1
-rw-r--r--etc/multimc5.profile1
-rw-r--r--etc/mumble.profile1
-rw-r--r--etc/mupdf.profile1
-rw-r--r--etc/mupen64plus.profile1
-rw-r--r--etc/mutt.profile1
-rw-r--r--etc/nautilus.profile1
-rw-r--r--etc/nemo.profile1
-rw-r--r--etc/netsurf.profile1
-rw-r--r--etc/nylas.profile1
-rw-r--r--etc/obs.profile1
-rw-r--r--etc/odt2txt.profile1
-rw-r--r--etc/okular.profile1
-rw-r--r--etc/open-invaders.profile1
-rw-r--r--etc/openshot.profile1
-rw-r--r--etc/opera-beta.profile1
-rw-r--r--etc/opera.profile1
-rw-r--r--etc/orage.profile1
-rw-r--r--etc/palemoon.profile1
-rw-r--r--etc/parole.profile1
-rw-r--r--etc/pcmanfm.profile1
-rw-r--r--etc/pdfsam.profile1
-rw-r--r--etc/pdftotext.profile1
-rw-r--r--etc/peek.profile1
-rw-r--r--etc/picard.profile1
-rw-r--r--etc/pidgin.profile1
-rw-r--r--etc/pingus.profile1
-rw-r--r--etc/pithos.profile1
-rw-r--r--etc/pix.profile1
-rw-r--r--etc/pluma.profile1
-rw-r--r--etc/polari.profile1
-rw-r--r--etc/psi-plus.profile1
-rw-r--r--etc/qbittorrent.profile1
-rw-r--r--etc/qemu-launcher.profile1
-rw-r--r--etc/qemu-system-x86_64.profile1
-rw-r--r--etc/qlipper.profile1
-rw-r--r--etc/qpdfview.profile1
-rw-r--r--etc/qtox.profile1
-rw-r--r--etc/quassel.profile1
-rw-r--r--etc/quiterss.profile1
-rw-r--r--etc/qupzilla.profile1
-rw-r--r--etc/qutebrowser.profile1
-rw-r--r--etc/rambox.profile1
-rw-r--r--etc/ranger.profile1
-rw-r--r--etc/remmina.profile1
-rw-r--r--etc/ristretto.profile1
-rw-r--r--etc/rtorrent.profile1
-rw-r--r--etc/scribus.profile1
-rw-r--r--etc/sdat2img.profile1
-rw-r--r--etc/seamonkey.profile1
-rw-r--r--etc/server.profile1
-rw-r--r--etc/silentarmy.profile1
-rw-r--r--etc/simple-scan.profile1
-rw-r--r--etc/simutrans.profile1
-rw-r--r--etc/skanlite.profile1
-rw-r--r--etc/skype.profile1
-rw-r--r--etc/skypeforlinux.profile1
-rw-r--r--etc/slack.profile1
-rw-r--r--etc/snap.profile1
-rw-r--r--etc/soundconverter.profile1
-rw-r--r--etc/sqlitebrowser.profile1
-rw-r--r--etc/ssh-agent.profile1
-rw-r--r--etc/ssh.profile1
-rw-r--r--etc/start-tor-browser.profile1
-rw-r--r--etc/steam.profile1
-rw-r--r--etc/stellarium.profile1
-rw-r--r--etc/strings.profile1
-rw-r--r--etc/supertux2.profile1
-rw-r--r--etc/synfigstudio.profile1
-rw-r--r--etc/tar.profile1
-rw-r--r--etc/telegram.profile1
-rw-r--r--etc/tracker.profile1
-rw-r--r--etc/transmission-cli.profile1
-rw-r--r--etc/transmission-gtk.profile1
-rw-r--r--etc/transmission-qt.profile1
-rw-r--r--etc/transmission-show.profile1
-rw-r--r--etc/truecraft.profile1
-rw-r--r--etc/tuxguitar.profile1
-rw-r--r--etc/uget-gtk.profile1
-rw-r--r--etc/unbound.profile1
-rw-r--r--etc/unknown-horizons.profile1
-rw-r--r--etc/unrar.profile1
-rw-r--r--etc/unzip.profile1
-rw-r--r--etc/uudeview.profile1
-rw-r--r--etc/uzbl-browser.profile1
-rw-r--r--etc/viewnior.profile1
-rw-r--r--etc/viking.profile1
-rw-r--r--etc/vim.profile1
-rw-r--r--etc/virtualbox.profile1
-rw-r--r--etc/vivaldi.profile1
-rw-r--r--etc/vym.profile1
-rw-r--r--etc/w3m.profile1
-rw-r--r--etc/warzone2100.profile1
-rw-r--r--etc/waterfox.profile1
-rw-r--r--etc/weechat.profile1
-rw-r--r--etc/wesnoth.profile1
-rw-r--r--etc/wget.profile1
-rw-r--r--etc/wine.profile1
-rw-r--r--etc/wire.profile1
-rw-r--r--etc/wireshark.profile1
-rw-r--r--etc/xchat.profile1
-rw-r--r--etc/xed.profile1
-rw-r--r--etc/xfburn.profile1
-rw-r--r--etc/xfce4-dict.profile1
-rw-r--r--etc/xfce4-notes.profile1
-rw-r--r--etc/xiphos.profile1
-rw-r--r--etc/xonotic.profile1
-rw-r--r--etc/xpdf.profile1
-rw-r--r--etc/xpra.profile1
-rw-r--r--etc/xreader.profile1
-rw-r--r--etc/xviewer.profile1
-rw-r--r--etc/xzdec.profile1
-rw-r--r--etc/youtube-dl.profile1
-rw-r--r--etc/zathura.profile1
-rw-r--r--etc/zoom.profile1
276 files changed, 276 insertions, 0 deletions
diff --git a/etc/0ad.profile b/etc/0ad.profile
index 56aa8532f..5ee386268 100644
--- a/etc/0ad.profile
+++ b/etc/0ad.profile
@@ -40,3 +40,4 @@ private-tmp
40 40
41noexec ${HOME} 41noexec ${HOME}
42noexec /tmp 42noexec /tmp
43nodvd
diff --git a/etc/2048-qt.profile b/etc/2048-qt.profile
index b5956b439..e235bd51e 100644
--- a/etc/2048-qt.profile
+++ b/etc/2048-qt.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/7z.profile b/etc/7z.profile
index 1333a8c20..4357cbcd1 100644
--- a/etc/7z.profile
+++ b/etc/7z.profile
@@ -20,3 +20,4 @@ tracelog
20private-dev 20private-dev
21 21
22include /etc/firejail/default.profile 22include /etc/firejail/default.profile
23nodvd
diff --git a/etc/Cryptocat.profile b/etc/Cryptocat.profile
index 1db1af9a6..261fe1373 100644
--- a/etc/Cryptocat.profile
+++ b/etc/Cryptocat.profile
@@ -25,3 +25,4 @@ shell none
25 25
26private-dev 26private-dev
27private-tmp 27private-tmp
28nodvd
diff --git a/etc/Mathematica.profile b/etc/Mathematica.profile
index c023f87ee..b92851c0b 100644
--- a/etc/Mathematica.profile
+++ b/etc/Mathematica.profile
@@ -25,3 +25,4 @@ nonewprivs
25noroot 25noroot
26notv 26notv
27seccomp 27seccomp
28nodvd
diff --git a/etc/Thunar.profile b/etc/Thunar.profile
index 039edc63a..74146d6e3 100644
--- a/etc/Thunar.profile
+++ b/etc/Thunar.profile
@@ -27,3 +27,4 @@ protocol unix
27seccomp 27seccomp
28shell none 28shell none
29tracelog 29tracelog
30nodvd
diff --git a/etc/Xephyr.profile b/etc/Xephyr.profile
index 8ea000750..9c533437b 100644
--- a/etc/Xephyr.profile
+++ b/etc/Xephyr.profile
@@ -39,3 +39,4 @@ private
39private-dev 39private-dev
40# private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname 40# private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname
41private-tmp 41private-tmp
42nodvd
diff --git a/etc/Xvfb.profile b/etc/Xvfb.profile
index 28102d339..69420c3a8 100644
--- a/etc/Xvfb.profile
+++ b/etc/Xvfb.profile
@@ -40,3 +40,4 @@ private
40private-dev 40private-dev
41private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname 41private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname
42private-tmp 42private-tmp
43nodvd
diff --git a/etc/abrowser.profile b/etc/abrowser.profile
index ca9e87ff5..e31b422c5 100644
--- a/etc/abrowser.profile
+++ b/etc/abrowser.profile
@@ -45,3 +45,4 @@ seccomp
45tracelog 45tracelog
46 46
47# private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse 47# private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse
48nodvd
diff --git a/etc/akregator.profile b/etc/akregator.profile
index 0e4a7290a..d47ce4df0 100644
--- a/etc/akregator.profile
+++ b/etc/akregator.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/android-studio.profile b/etc/android-studio.profile
index eee6f3ce8..07d67c639 100644
--- a/etc/android-studio.profile
+++ b/etc/android-studio.profile
@@ -33,3 +33,4 @@ private-dev
33# private-tmp 33# private-tmp
34 34
35noexec /tmp 35noexec /tmp
36nodvd
diff --git a/etc/apktool.profile b/etc/apktool.profile
index 6e8b9ba53..58854df3b 100644
--- a/etc/apktool.profile
+++ b/etc/apktool.profile
@@ -28,3 +28,4 @@ private-dev
28 28
29noexec ${HOME} 29noexec ${HOME}
30noexec /tmp 30noexec /tmp
31nodvd
diff --git a/etc/arduino.profile b/etc/arduino.profile
index 8732b8dec..d1938c01a 100644
--- a/etc/arduino.profile
+++ b/etc/arduino.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/ark.profile b/etc/ark.profile
index 45548a566..2ac7089fb 100644
--- a/etc/ark.profile
+++ b/etc/ark.profile
@@ -28,3 +28,4 @@ shell none
28private-dev 28private-dev
29# private-etc 29# private-etc
30private-tmp 30private-tmp
31nodvd
diff --git a/etc/arm.profile b/etc/arm.profile
index 5deb15738..a75130e4d 100644
--- a/etc/arm.profile
+++ b/etc/arm.profile
@@ -39,3 +39,4 @@ private-tmp
39 39
40noexec ${HOME} 40noexec ${HOME}
41noexec /tmp 41noexec /tmp
42nodvd
diff --git a/etc/atom-beta.profile b/etc/atom-beta.profile
index 74a1e649a..395f4e350 100644
--- a/etc/atom-beta.profile
+++ b/etc/atom-beta.profile
@@ -26,3 +26,4 @@ shell none
26 26
27private-dev 27private-dev
28private-tmp 28private-tmp
29nodvd
diff --git a/etc/atom.profile b/etc/atom.profile
index 4f144e8b4..2a0c46355 100644
--- a/etc/atom.profile
+++ b/etc/atom.profile
@@ -26,3 +26,4 @@ shell none
26 26
27private-dev 27private-dev
28private-tmp 28private-tmp
29nodvd
diff --git a/etc/atool.profile b/etc/atool.profile
index 30ad86498..cd06b4b2a 100644
--- a/etc/atool.profile
+++ b/etc/atool.profile
@@ -30,3 +30,4 @@ tracelog
30private-dev 30private-dev
31private-etc none 31private-etc none
32private-tmp 32private-tmp
33nodvd
diff --git a/etc/atril.profile b/etc/atril.profile
index 2a52ba6a7..1c0d3a11d 100644
--- a/etc/atril.profile
+++ b/etc/atril.profile
@@ -28,3 +28,4 @@ tracelog
28private-bin atril, atril-previewer, atril-thumbnailer 28private-bin atril, atril-previewer, atril-thumbnailer
29private-dev 29private-dev
30private-tmp 30private-tmp
31nodvd
diff --git a/etc/audacity.profile b/etc/audacity.profile
index 5387761e8..f2e4d2b5b 100644
--- a/etc/audacity.profile
+++ b/etc/audacity.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/aweather.profile b/etc/aweather.profile
index 2bdf95f0e..4c2664a91 100644
--- a/etc/aweather.profile
+++ b/etc/aweather.profile
@@ -32,3 +32,4 @@ tracelog
32private-bin aweather 32private-bin aweather
33private-dev 33private-dev
34private-tmp 34private-tmp
35nodvd
diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile
index fc55ae1cb..80c5ea0b0 100644
--- a/etc/baloo_file.profile
+++ b/etc/baloo_file.profile
@@ -40,3 +40,4 @@ noexec /tmp
40# read-only ${HOME} 40# read-only ${HOME}
41# read-write ${HOME}/.local/share 41# read-write ${HOME}/.local/share
42# noexec ${HOME}/.local/share 42# noexec ${HOME}/.local/share
43nodvd
diff --git a/etc/baobab.profile b/etc/baobab.profile
index fc05e9e3e..5eef557bc 100644
--- a/etc/baobab.profile
+++ b/etc/baobab.profile
@@ -30,3 +30,4 @@ private-tmp
30memory-deny-write-execute 30memory-deny-write-execute
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/bibletime.profile b/etc/bibletime.profile
index d0f76fd1b..158733660 100644
--- a/etc/bibletime.profile
+++ b/etc/bibletime.profile
@@ -39,3 +39,4 @@ tracelog
39private-dev 39private-dev
40private-etc fonts,resolv.conf,sword,sword.conf,passwd 40private-etc fonts,resolv.conf,sword,sword.conf,passwd
41private-tmp 41private-tmp
42nodvd
diff --git a/etc/bitlbee.profile b/etc/bitlbee.profile
index 5f714ab04..0566029cb 100644
--- a/etc/bitlbee.profile
+++ b/etc/bitlbee.profile
@@ -30,3 +30,4 @@ private-tmp
30read-write /var/lib/bitlbee 30read-write /var/lib/bitlbee
31 31
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/bleachbit.profile b/etc/bleachbit.profile
index 2fc9bf5b1..0c1670283 100644
--- a/etc/bleachbit.profile
+++ b/etc/bleachbit.profile
@@ -32,3 +32,4 @@ shell none
32memory-deny-write-execute 32memory-deny-write-execute
33noexec ${HOME} 33noexec ${HOME}
34noexec /tmp 34noexec /tmp
35nodvd
diff --git a/etc/blender.profile b/etc/blender.profile
index ec203eaed..438be7e41 100644
--- a/etc/blender.profile
+++ b/etc/blender.profile
@@ -27,3 +27,4 @@ private-tmp
27 27
28noexec ${HOME} 28noexec ${HOME}
29noexec /tmp 29noexec /tmp
30nodvd
diff --git a/etc/bless.profile b/etc/bless.profile
index 6f0fc3f84..6da8187b1 100644
--- a/etc/bless.profile
+++ b/etc/bless.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/brave.profile b/etc/brave.profile
index 38c9cfed4..a512bd133 100644
--- a/etc/brave.profile
+++ b/etc/brave.profile
@@ -35,3 +35,4 @@ notv
35# seccomp 35# seccomp
36 36
37# disable-mnt 37# disable-mnt
38nodvd
diff --git a/etc/caja.profile b/etc/caja.profile
index fb57f5fd8..35b0ce040 100644
--- a/etc/caja.profile
+++ b/etc/caja.profile
@@ -33,3 +33,4 @@ tracelog
33# private-dev 33# private-dev
34# private-etc fonts 34# private-etc fonts
35# private-tmp 35# private-tmp
36nodvd
diff --git a/etc/calibre.profile b/etc/calibre.profile
index 1fe2f6c93..d1371839c 100644
--- a/etc/calibre.profile
+++ b/etc/calibre.profile
@@ -33,3 +33,4 @@ private-tmp
33 33
34noexec ${HOME} 34noexec ${HOME}
35noexec /tmp 35noexec /tmp
36nodvd
diff --git a/etc/catfish.profile b/etc/catfish.profile
index 190a1ba97..2f9c35220 100644
--- a/etc/catfish.profile
+++ b/etc/catfish.profile
@@ -30,3 +30,4 @@ tracelog
30# private-bin bash,catfish,env,locate,ls,mlocate,python,python2,python2.7,python3,python3.5,python3.5m,python3m 30# private-bin bash,catfish,env,locate,ls,mlocate,python,python2,python2.7,python3,python3.5,python3.5m,python3m
31# private-dev 31# private-dev
32# private-tmp 32# private-tmp
33nodvd
diff --git a/etc/cherrytree.profile b/etc/cherrytree.profile
index d11ea8206..901bfed1e 100644
--- a/etc/cherrytree.profile
+++ b/etc/cherrytree.profile
@@ -33,3 +33,4 @@ private-tmp
33 33
34noexec ${HOME} 34noexec ${HOME}
35noexec /tmp 35noexec /tmp
36nodvd
diff --git a/etc/chromium.profile b/etc/chromium.profile
index 8454d3d17..7637b8ea5 100644
--- a/etc/chromium.profile
+++ b/etc/chromium.profile
@@ -36,3 +36,4 @@ private-dev
36 36
37noexec ${HOME} 37noexec ${HOME}
38noexec /tmp 38noexec /tmp
39nodvd
diff --git a/etc/claws-mail.profile b/etc/claws-mail.profile
index 0af5de283..d1470adfb 100644
--- a/etc/claws-mail.profile
+++ b/etc/claws-mail.profile
@@ -27,3 +27,4 @@ shell none
27 27
28private-dev 28private-dev
29private-tmp 29private-tmp
30nodvd
diff --git a/etc/clipit.profile b/etc/clipit.profile
index 83b27000d..64a635efb 100644
--- a/etc/clipit.profile
+++ b/etc/clipit.profile
@@ -32,3 +32,4 @@ private-tmp
32 32
33noexec ${HOME} 33noexec ${HOME}
34noexec /tmp 34noexec /tmp
35nodvd
diff --git a/etc/conkeror.profile b/etc/conkeror.profile
index 8d031f8b6..efee37106 100644
--- a/etc/conkeror.profile
+++ b/etc/conkeror.profile
@@ -30,3 +30,4 @@ noroot
30notv 30notv
31protocol unix,inet,inet6 31protocol unix,inet,inet6
32seccomp 32seccomp
33nodvd
diff --git a/etc/corebird.profile b/etc/corebird.profile
index f7810b4ae..39726d13a 100644
--- a/etc/corebird.profile
+++ b/etc/corebird.profile
@@ -17,3 +17,4 @@ noroot
17notv 17notv
18protocol unix,inet,inet6 18protocol unix,inet,inet6
19seccomp 19seccomp
20nodvd
diff --git a/etc/cpio.profile b/etc/cpio.profile
index 373e13c7c..3f25393b0 100644
--- a/etc/cpio.profile
+++ b/etc/cpio.profile
@@ -26,3 +26,4 @@ shell none
26tracelog 26tracelog
27 27
28private-dev 28private-dev
29nodvd
diff --git a/etc/curl.profile b/etc/curl.profile
index 22c82a106..dea5b3db8 100644
--- a/etc/curl.profile
+++ b/etc/curl.profile
@@ -33,3 +33,4 @@ private-tmp
33 33
34noexec ${HOME} 34noexec ${HOME}
35noexec /tmp 35noexec /tmp
36nodvd
diff --git a/etc/cvlc.profile b/etc/cvlc.profile
index 04168b7f5..b0052eeab 100644
--- a/etc/cvlc.profile
+++ b/etc/cvlc.profile
@@ -29,3 +29,4 @@ private-dev
29private-tmp 29private-tmp
30 30
31memory-deny-write-execute 31memory-deny-write-execute
32nodvd
diff --git a/etc/cyberfox.profile b/etc/cyberfox.profile
index eb1ea39e0..5cd75208b 100644
--- a/etc/cyberfox.profile
+++ b/etc/cyberfox.profile
@@ -69,3 +69,4 @@ private-tmp
69 69
70noexec ${HOME} 70noexec ${HOME}
71noexec /tmp 71noexec /tmp
72nodvd
diff --git a/etc/darktable.profile b/etc/darktable.profile
index 001f24e7e..51cb197b0 100644
--- a/etc/darktable.profile
+++ b/etc/darktable.profile
@@ -30,3 +30,4 @@ private-tmp
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/default.profile b/etc/default.profile
index 066cb1fef..82eded802 100644
--- a/etc/default.profile
+++ b/etc/default.profile
@@ -17,6 +17,7 @@ caps.drop all
17# ipc-namespace 17# ipc-namespace
18netfilter 18netfilter
19# no3d 19# no3d
20# nodvd
20# nogroups 21# nogroups
21nonewprivs 22nonewprivs
22noroot 23noroot
diff --git a/etc/deluge.profile b/etc/deluge.profile
index f406fb133..da477e4c3 100644
--- a/etc/deluge.profile
+++ b/etc/deluge.profile
@@ -32,3 +32,4 @@ shell none
32# private-bin deluge,sh,python,uname 32# private-bin deluge,sh,python,uname
33private-dev 33private-dev
34private-tmp 34private-tmp
35nodvd
diff --git a/etc/dex2jar.profile b/etc/dex2jar.profile
index a4917b66e..a3a1c4ad5 100644
--- a/etc/dex2jar.profile
+++ b/etc/dex2jar.profile
@@ -29,3 +29,4 @@ private-dev
29 29
30noexec ${HOME} 30noexec ${HOME}
31noexec /tmp 31noexec /tmp
32nodvd
diff --git a/etc/dia.profile b/etc/dia.profile
index 4a20aa4da..14724c321 100644
--- a/etc/dia.profile
+++ b/etc/dia.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/digikam.profile b/etc/digikam.profile
index e0906b06c..1a39f5a9d 100644
--- a/etc/digikam.profile
+++ b/etc/digikam.profile
@@ -32,3 +32,4 @@ private-tmp
32 32
33noexec ${HOME} 33noexec ${HOME}
34noexec /tmp 34noexec /tmp
35nodvd
diff --git a/etc/dillo.profile b/etc/dillo.profile
index 45eda5c91..e1f0594e1 100644
--- a/etc/dillo.profile
+++ b/etc/dillo.profile
@@ -27,3 +27,4 @@ notv
27protocol unix,inet,inet6 27protocol unix,inet,inet6
28seccomp 28seccomp
29tracelog 29tracelog
30nodvd
diff --git a/etc/dino.profile b/etc/dino.profile
index cfda5de89..9355f7e6a 100644
--- a/etc/dino.profile
+++ b/etc/dino.profile
@@ -38,3 +38,4 @@ private-tmp
38 38
39noexec ${HOME} 39noexec ${HOME}
40noexec /tmp 40noexec /tmp
41nodvd
diff --git a/etc/display.profile b/etc/display.profile
index 17dd01fdf..d8bbd4423 100644
--- a/etc/display.profile
+++ b/etc/display.profile
@@ -27,3 +27,4 @@ private-bin display
27private-dev 27private-dev
28private-etc none 28private-etc none
29private-tmp 29private-tmp
30nodvd
diff --git a/etc/dnscrypt-proxy.profile b/etc/dnscrypt-proxy.profile
index 07f089703..101e3afb0 100644
--- a/etc/dnscrypt-proxy.profile
+++ b/etc/dnscrypt-proxy.profile
@@ -20,3 +20,4 @@ seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,i
20 20
21private 21private
22private-dev 22private-dev
23nodvd
diff --git a/etc/dnsmasq.profile b/etc/dnsmasq.profile
index 84ec9c9e2..b6ca68bf2 100644
--- a/etc/dnsmasq.profile
+++ b/etc/dnsmasq.profile
@@ -25,3 +25,4 @@ seccomp
25disable-mnt 25disable-mnt
26private 26private
27private-dev 27private-dev
28nodvd
diff --git a/etc/dolphin.profile b/etc/dolphin.profile
index 3db73d712..6bd4fd38f 100644
--- a/etc/dolphin.profile
+++ b/etc/dolphin.profile
@@ -32,3 +32,4 @@ shell none
32# private-dev 32# private-dev
33# private-etc 33# private-etc
34# private-tmp 34# private-tmp
35nodvd
diff --git a/etc/dosbox.profile b/etc/dosbox.profile
index d9a8606de..700458169 100644
--- a/etc/dosbox.profile
+++ b/etc/dosbox.profile
@@ -26,3 +26,4 @@ tracelog
26private-bin dosbox 26private-bin dosbox
27private-dev 27private-dev
28private-tmp 28private-tmp
29nodvd
diff --git a/etc/dragon.profile b/etc/dragon.profile
index 474911d2f..4bab76e7d 100644
--- a/etc/dragon.profile
+++ b/etc/dragon.profile
@@ -30,3 +30,4 @@ private-tmp
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/dropbox.profile b/etc/dropbox.profile
index 4a1e192c7..de41691b8 100644
--- a/etc/dropbox.profile
+++ b/etc/dropbox.profile
@@ -40,3 +40,4 @@ private-dev
40private-tmp 40private-tmp
41 41
42noexec /tmp 42noexec /tmp
43nodvd
diff --git a/etc/electron.profile b/etc/electron.profile
index 6ca67f8bb..a60704035 100644
--- a/etc/electron.profile
+++ b/etc/electron.profile
@@ -18,3 +18,4 @@ noroot
18notv 18notv
19protocol unix,inet,inet6,netlink 19protocol unix,inet,inet6,netlink
20seccomp 20seccomp
21nodvd
diff --git a/etc/elinks.profile b/etc/elinks.profile
index d162a8c34..530e41217 100644
--- a/etc/elinks.profile
+++ b/etc/elinks.profile
@@ -32,3 +32,4 @@ tracelog
32private-dev 32private-dev
33# private-etc none 33# private-etc none
34private-tmp 34private-tmp
35nodvd
diff --git a/etc/emacs.profile b/etc/emacs.profile
index fbf183f43..c262c9900 100644
--- a/etc/emacs.profile
+++ b/etc/emacs.profile
@@ -20,3 +20,4 @@ noroot
20notv 20notv
21protocol unix,inet,inet6 21protocol unix,inet,inet6
22seccomp 22seccomp
23nodvd
diff --git a/etc/empathy.profile b/etc/empathy.profile
index 7a2503d34..e85bf324d 100644
--- a/etc/empathy.profile
+++ b/etc/empathy.profile
@@ -18,3 +18,4 @@ noroot
18notv 18notv
19protocol unix,inet,inet6 19protocol unix,inet,inet6
20seccomp 20seccomp
21nodvd
diff --git a/etc/enchant.profile b/etc/enchant.profile
index 35ead9c86..5574eeae0 100644
--- a/etc/enchant.profile
+++ b/etc/enchant.profile
@@ -28,3 +28,4 @@ tracelog
28# private-dev 28# private-dev
29# private-etc fonts 29# private-etc fonts
30# private-tmp 30# private-tmp
31nodvd
diff --git a/etc/engrampa.profile b/etc/engrampa.profile
index 05959e2cd..9ac577da0 100644
--- a/etc/engrampa.profile
+++ b/etc/engrampa.profile
@@ -28,3 +28,4 @@ tracelog
28private-dev 28private-dev
29# private-etc fonts 29# private-etc fonts
30# private-tmp 30# private-tmp
31nodvd
diff --git a/etc/eog.profile b/etc/eog.profile
index f65f854a8..8dfd01ea1 100644
--- a/etc/eog.profile
+++ b/etc/eog.profile
@@ -36,3 +36,4 @@ private-tmp
36memory-deny-write-execute 36memory-deny-write-execute
37noexec ${HOME} 37noexec ${HOME}
38noexec /tmp 38noexec /tmp
39nodvd
diff --git a/etc/eom.profile b/etc/eom.profile
index 99f784c52..d5470ef24 100644
--- a/etc/eom.profile
+++ b/etc/eom.profile
@@ -33,3 +33,4 @@ private-tmp
33 33
34noexec ${HOME} 34noexec ${HOME}
35noexec /tmp 35noexec /tmp
36nodvd
diff --git a/etc/epiphany.profile b/etc/epiphany.profile
index aec536d42..f3a880bd6 100644
--- a/etc/epiphany.profile
+++ b/etc/epiphany.profile
@@ -28,3 +28,4 @@ nonewprivs
28notv 28notv
29protocol unix,inet,inet6 29protocol unix,inet,inet6
30seccomp 30seccomp
31nodvd
diff --git a/etc/etr.profile b/etc/etr.profile
index 8b079754a..5529c2ed6 100644
--- a/etc/etr.profile
+++ b/etc/etr.profile
@@ -29,3 +29,4 @@ shell none
29private-dev 29private-dev
30# private-etc none 30# private-etc none
31private-tmp 31private-tmp
32nodvd
diff --git a/etc/evince.profile b/etc/evince.profile
index 23eee6c55..a929c8c4f 100644
--- a/etc/evince.profile
+++ b/etc/evince.profile
@@ -35,3 +35,4 @@ private-etc fonts
35memory-deny-write-execute 35memory-deny-write-execute
36noexec ${HOME} 36noexec ${HOME}
37noexec /tmp 37noexec /tmp
38nodvd
diff --git a/etc/evolution.profile b/etc/evolution.profile
index cedbd2a18..ef4c9f627 100644
--- a/etc/evolution.profile
+++ b/etc/evolution.profile
@@ -37,3 +37,4 @@ private-tmp
37 37
38noexec ${HOME} 38noexec ${HOME}
39noexec /tmp 39noexec /tmp
40nodvd
diff --git a/etc/exiftool.profile b/etc/exiftool.profile
index e743e6b41..8b56e810d 100644
--- a/etc/exiftool.profile
+++ b/etc/exiftool.profile
@@ -34,3 +34,4 @@ tracelog
34private-dev 34private-dev
35private-etc none 35private-etc none
36private-tmp 36private-tmp
37nodvd
diff --git a/etc/fbreader.profile b/etc/fbreader.profile
index e124200fc..0756a1d40 100644
--- a/etc/fbreader.profile
+++ b/etc/fbreader.profile
@@ -25,3 +25,4 @@ shell none
25private-bin fbreader,FBReader 25private-bin fbreader,FBReader
26private-dev 26private-dev
27private-tmp 27private-tmp
28nodvd
diff --git a/etc/feh.profile b/etc/feh.profile
index c0d457ed1..1798527f7 100644
--- a/etc/feh.profile
+++ b/etc/feh.profile
@@ -26,3 +26,4 @@ private-bin feh
26private-dev 26private-dev
27private-etc feh 27private-etc feh
28private-tmp 28private-tmp
29nodvd
diff --git a/etc/file-roller.profile b/etc/file-roller.profile
index 68c0e8602..ff8d8c9eb 100644
--- a/etc/file-roller.profile
+++ b/etc/file-roller.profile
@@ -33,3 +33,4 @@ private-dev
33memory-deny-write-execute 33memory-deny-write-execute
34noexec ${HOME} 34noexec ${HOME}
35noexec /tmp 35noexec /tmp
36nodvd
diff --git a/etc/file.profile b/etc/file.profile
index 0b34b5b37..389e89426 100644
--- a/etc/file.profile
+++ b/etc/file.profile
@@ -29,3 +29,4 @@ x11 none
29private-bin file 29private-bin file
30private-dev 30private-dev
31private-etc magic.mgc,magic,localtime 31private-etc magic.mgc,magic,localtime
32nodvd
diff --git a/etc/filezilla.profile b/etc/filezilla.profile
index 53bb0a1a7..cb8c38a14 100644
--- a/etc/filezilla.profile
+++ b/etc/filezilla.profile
@@ -25,3 +25,4 @@ shell none
25private-bin filezilla,uname,sh,bash,dash,python,lsb_release,fzputtygen,fzsftp 25private-bin filezilla,uname,sh,bash,dash,python,lsb_release,fzputtygen,fzsftp
26private-dev 26private-dev
27private-tmp 27private-tmp
28nodvd
diff --git a/etc/firefox.profile b/etc/firefox.profile
index b6d21a158..d4de1332d 100644
--- a/etc/firefox.profile
+++ b/etc/firefox.profile
@@ -69,3 +69,4 @@ private-tmp
69 69
70noexec ${HOME} 70noexec ${HOME}
71noexec /tmp 71noexec /tmp
72nodvd
diff --git a/etc/flashpeak-slimjet.profile b/etc/flashpeak-slimjet.profile
index e9c09e4ba..a661c179a 100644
--- a/etc/flashpeak-slimjet.profile
+++ b/etc/flashpeak-slimjet.profile
@@ -35,3 +35,4 @@ noroot
35notv 35notv
36protocol unix,inet,inet6,netlink 36protocol unix,inet,inet6,netlink
37seccomp 37seccomp
38nodvd
diff --git a/etc/flowblade.profile b/etc/flowblade.profile
index a00b1bf5e..557948c84 100644
--- a/etc/flowblade.profile
+++ b/etc/flowblade.profile
@@ -28,3 +28,4 @@ private-tmp
28 28
29noexec ${HOME} 29noexec ${HOME}
30noexec /tmp 30noexec /tmp
31nodvd
diff --git a/etc/fontforge.profile b/etc/fontforge.profile
index 001e550e7..835f913d4 100644
--- a/etc/fontforge.profile
+++ b/etc/fontforge.profile
@@ -29,3 +29,4 @@ private-tmp
29 29
30noexec ${HOME} 30noexec ${HOME}
31noexec /tmp 31noexec /tmp
32nodvd
diff --git a/etc/fossamail.profile b/etc/fossamail.profile
index a6f07266b..ef89561e9 100644
--- a/etc/fossamail.profile
+++ b/etc/fossamail.profile
@@ -20,3 +20,4 @@ include /etc/firejail/whitelist-common.inc
20notv 20notv
21 21
22include /etc/firejail/firefox.profile 22include /etc/firejail/firefox.profile
23nodvd
diff --git a/etc/franz.profile b/etc/franz.profile
index 128d88a9a..52758dc0c 100644
--- a/etc/franz.profile
+++ b/etc/franz.profile
@@ -38,3 +38,4 @@ private-tmp
38 38
39noexec ${HOME} 39noexec ${HOME}
40noexec /tmp 40noexec /tmp
41nodvd
diff --git a/etc/frozen-bubble.profile b/etc/frozen-bubble.profile
index c66c76c05..6417ce812 100644
--- a/etc/frozen-bubble.profile
+++ b/etc/frozen-bubble.profile
@@ -29,3 +29,4 @@ shell none
29private-dev 29private-dev
30# private-etc none 30# private-etc none
31private-tmp 31private-tmp
32nodvd
diff --git a/etc/gajim.profile b/etc/gajim.profile
index 79ff6217a..f69391f23 100644
--- a/etc/gajim.profile
+++ b/etc/gajim.profile
@@ -43,3 +43,4 @@ private-dev
43# private-tmp 43# private-tmp
44# Allow the local python 2.7 site packages, in case any plugins are using these 44# Allow the local python 2.7 site packages, in case any plugins are using these
45read-only ${HOME}/.local/lib/python2.7/site-packages/ 45read-only ${HOME}/.local/lib/python2.7/site-packages/
46nodvd
diff --git a/etc/galculator.profile b/etc/galculator.profile
index e6006aded..9d2ce57e8 100644
--- a/etc/galculator.profile
+++ b/etc/galculator.profile
@@ -32,3 +32,4 @@ private-bin galculator
32private-dev 32private-dev
33private-etc fonts 33private-etc fonts
34private-tmp 34private-tmp
35nodvd
diff --git a/etc/geany.profile b/etc/geany.profile
index f5e821d62..530b00192 100644
--- a/etc/geany.profile
+++ b/etc/geany.profile
@@ -26,3 +26,4 @@ shell none
26 26
27private-dev 27private-dev
28private-tmp 28private-tmp
29nodvd
diff --git a/etc/gedit.profile b/etc/gedit.profile
index a215a0d61..6b9eb5a44 100644
--- a/etc/gedit.profile
+++ b/etc/gedit.profile
@@ -34,3 +34,4 @@ private-tmp
34 34
35noexec ${HOME} 35noexec ${HOME}
36noexec /tmp 36noexec /tmp
37nodvd
diff --git a/etc/geeqie.profile b/etc/geeqie.profile
index 26636ca64..5009940d1 100644
--- a/etc/geeqie.profile
+++ b/etc/geeqie.profile
@@ -27,3 +27,4 @@ shell none
27# private-bin geeqie 27# private-bin geeqie
28private-dev 28private-dev
29# private-etc X11 29# private-etc X11
30nodvd
diff --git a/etc/gimp.profile b/etc/gimp.profile
index 510d2aa0a..acacc8e28 100644
--- a/etc/gimp.profile
+++ b/etc/gimp.profile
@@ -29,3 +29,4 @@ private-tmp
29# if you are not using external plugins, you can enable noexec statement below 29# if you are not using external plugins, you can enable noexec statement below
30# noexec ${HOME} 30# noexec ${HOME}
31noexec /tmp 31noexec /tmp
32nodvd
diff --git a/etc/git.profile b/etc/git.profile
index 142edcf1c..34bba1974 100644
--- a/etc/git.profile
+++ b/etc/git.profile
@@ -33,3 +33,4 @@ seccomp
33shell none 33shell none
34 34
35private-dev 35private-dev
36nodvd
diff --git a/etc/gitg.profile b/etc/gitg.profile
index 570ed5a46..f28fbe03f 100644
--- a/etc/gitg.profile
+++ b/etc/gitg.profile
@@ -32,3 +32,4 @@ private-tmp
32memory-deny-write-execute 32memory-deny-write-execute
33noexec ${HOME} 33noexec ${HOME}
34noexec /tmp 34noexec /tmp
35nodvd
diff --git a/etc/gitter.profile b/etc/gitter.profile
index 8566f636a..9bbe605e7 100644
--- a/etc/gitter.profile
+++ b/etc/gitter.profile
@@ -26,3 +26,4 @@ shell none
26private-bin gitter 26private-bin gitter
27private-dev 27private-dev
28private-tmp 28private-tmp
29nodvd
diff --git a/etc/gjs.profile b/etc/gjs.profile
index 5e4bea850..1255ec6bb 100644
--- a/etc/gjs.profile
+++ b/etc/gjs.profile
@@ -32,3 +32,4 @@ tracelog
32private-dev 32private-dev
33# private-etc fonts 33# private-etc fonts
34private-tmp 34private-tmp
35nodvd
diff --git a/etc/globaltime.profile b/etc/globaltime.profile
index 1b16f4171..ac72c87c7 100644
--- a/etc/globaltime.profile
+++ b/etc/globaltime.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/gnome-2048.profile b/etc/gnome-2048.profile
index a31602338..7dba3f58b 100644
--- a/etc/gnome-2048.profile
+++ b/etc/gnome-2048.profile
@@ -32,3 +32,4 @@ private-tmp
32 32
33noexec ${HOME} 33noexec ${HOME}
34noexec /tmp 34noexec /tmp
35nodvd
diff --git a/etc/gnome-books.profile b/etc/gnome-books.profile
index ae8dbb35e..c9082995d 100644
--- a/etc/gnome-books.profile
+++ b/etc/gnome-books.profile
@@ -35,3 +35,4 @@ private-tmp
35 35
36noexec ${HOME} 36noexec ${HOME}
37noexec /tmp 37noexec /tmp
38nodvd
diff --git a/etc/gnome-calculator.profile b/etc/gnome-calculator.profile
index b31ec3371..21019893b 100644
--- a/etc/gnome-calculator.profile
+++ b/etc/gnome-calculator.profile
@@ -34,3 +34,4 @@ private-tmp
34memory-deny-write-execute 34memory-deny-write-execute
35noexec ${HOME} 35noexec ${HOME}
36noexec /tmp 36noexec /tmp
37nodvd
diff --git a/etc/gnome-chess.profile b/etc/gnome-chess.profile
index 6801a0f49..87b01bf92 100644
--- a/etc/gnome-chess.profile
+++ b/etc/gnome-chess.profile
@@ -33,3 +33,4 @@ private-tmp
33 33
34noexec ${HOME} 34noexec ${HOME}
35noexec /tmp 35noexec /tmp
36nodvd
diff --git a/etc/gnome-clocks.profile b/etc/gnome-clocks.profile
index 411bc8bdc..b9938e9d2 100644
--- a/etc/gnome-clocks.profile
+++ b/etc/gnome-clocks.profile
@@ -32,3 +32,4 @@ private-tmp
32 32
33noexec ${HOME} 33noexec ${HOME}
34noexec /tmp 34noexec /tmp
35nodvd
diff --git a/etc/gnome-contacts.profile b/etc/gnome-contacts.profile
index 7ce444eed..d905bfe63 100644
--- a/etc/gnome-contacts.profile
+++ b/etc/gnome-contacts.profile
@@ -29,3 +29,4 @@ private-tmp
29 29
30noexec ${HOME} 30noexec ${HOME}
31noexec /tmp 31noexec /tmp
32nodvd
diff --git a/etc/gnome-documents.profile b/etc/gnome-documents.profile
index 62be67c5e..e28b787fe 100644
--- a/etc/gnome-documents.profile
+++ b/etc/gnome-documents.profile
@@ -33,3 +33,4 @@ private-tmp
33 33
34noexec ${HOME} 34noexec ${HOME}
35noexec /tmp 35noexec /tmp
36nodvd
diff --git a/etc/gnome-font-viewer.profile b/etc/gnome-font-viewer.profile
index 06e8f2bd0..daf0ddc2a 100644
--- a/etc/gnome-font-viewer.profile
+++ b/etc/gnome-font-viewer.profile
@@ -28,3 +28,4 @@ private-tmp
28 28
29noexec ${HOME} 29noexec ${HOME}
30noexec /tmp 30noexec /tmp
31nodvd
diff --git a/etc/gnome-maps.profile b/etc/gnome-maps.profile
index 0e3846c05..527899aea 100644
--- a/etc/gnome-maps.profile
+++ b/etc/gnome-maps.profile
@@ -35,3 +35,4 @@ private-tmp
35 35
36noexec ${HOME} 36noexec ${HOME}
37noexec /tmp 37noexec /tmp
38nodvd
diff --git a/etc/gnome-photos.profile b/etc/gnome-photos.profile
index 68d1f2617..c1e9d7b58 100644
--- a/etc/gnome-photos.profile
+++ b/etc/gnome-photos.profile
@@ -33,3 +33,4 @@ private-tmp
33 33
34noexec ${HOME} 34noexec ${HOME}
35noexec /tmp 35noexec /tmp
36nodvd
diff --git a/etc/gnome-twitch.profile b/etc/gnome-twitch.profile
index 0c325d3f2..db7739c33 100644
--- a/etc/gnome-twitch.profile
+++ b/etc/gnome-twitch.profile
@@ -34,3 +34,4 @@ private-tmp
34 34
35noexec ${HOME} 35noexec ${HOME}
36noexec /tmp 36noexec /tmp
37nodvd
diff --git a/etc/gnome-weather.profile b/etc/gnome-weather.profile
index 4d64defcf..f1db7dab3 100644
--- a/etc/gnome-weather.profile
+++ b/etc/gnome-weather.profile
@@ -36,3 +36,4 @@ private-tmp
36 36
37noexec ${HOME} 37noexec ${HOME}
38noexec /tmp 38noexec /tmp
39nodvd
diff --git a/etc/goobox.profile b/etc/goobox.profile
index cfd479acc..c7a52c944 100644
--- a/etc/goobox.profile
+++ b/etc/goobox.profile
@@ -26,3 +26,4 @@ tracelog
26# private-dev 26# private-dev
27# private-etc fonts 27# private-etc fonts
28# private-tmp 28# private-tmp
29nodvd
diff --git a/etc/google-chrome-beta.profile b/etc/google-chrome-beta.profile
index a0a67883d..9c8574d3f 100644
--- a/etc/google-chrome-beta.profile
+++ b/etc/google-chrome-beta.profile
@@ -34,3 +34,4 @@ private-dev
34 34
35noexec ${HOME} 35noexec ${HOME}
36noexec /tmp 36noexec /tmp
37nodvd
diff --git a/etc/google-chrome-unstable.profile b/etc/google-chrome-unstable.profile
index 8d5057a5d..b7ed33703 100644
--- a/etc/google-chrome-unstable.profile
+++ b/etc/google-chrome-unstable.profile
@@ -34,3 +34,4 @@ private-dev
34 34
35noexec ${HOME} 35noexec ${HOME}
36noexec /tmp 36noexec /tmp
37nodvd
diff --git a/etc/google-chrome.profile b/etc/google-chrome.profile
index be016d7e7..6a3c54468 100644
--- a/etc/google-chrome.profile
+++ b/etc/google-chrome.profile
@@ -34,3 +34,4 @@ private-dev
34 34
35noexec ${HOME} 35noexec ${HOME}
36noexec /tmp 36noexec /tmp
37nodvd
diff --git a/etc/google-play-music-desktop-player.profile b/etc/google-play-music-desktop-player.profile
index 550d3d63c..641988796 100644
--- a/etc/google-play-music-desktop-player.profile
+++ b/etc/google-play-music-desktop-player.profile
@@ -35,3 +35,4 @@ private-tmp
35 35
36noexec ${HOME} 36noexec ${HOME}
37noexec /tmp 37noexec /tmp
38nodvd
diff --git a/etc/gpa.profile b/etc/gpa.profile
index c5f767cf8..b33d06ba1 100644
--- a/etc/gpa.profile
+++ b/etc/gpa.profile
@@ -26,3 +26,4 @@ tracelog
26 26
27# private-bin gpa,gpg 27# private-bin gpa,gpg
28private-dev 28private-dev
29nodvd
diff --git a/etc/gpg-agent.profile b/etc/gpg-agent.profile
index c1c6b7686..852bbc210 100644
--- a/etc/gpg-agent.profile
+++ b/etc/gpg-agent.profile
@@ -29,3 +29,4 @@ tracelog
29 29
30# private-bin gpg-agent,gpg 30# private-bin gpg-agent,gpg
31private-dev 31private-dev
32nodvd
diff --git a/etc/gpg.profile b/etc/gpg.profile
index 137e37d5f..91048db14 100644
--- a/etc/gpg.profile
+++ b/etc/gpg.profile
@@ -29,3 +29,4 @@ tracelog
29 29
30# private-bin gpg,gpg-agent 30# private-bin gpg,gpg-agent
31private-dev 31private-dev
32nodvd
diff --git a/etc/gpicview.profile b/etc/gpicview.profile
index ad30915a4..b8c1d60c0 100644
--- a/etc/gpicview.profile
+++ b/etc/gpicview.profile
@@ -28,3 +28,4 @@ private-bin gpicview
28private-dev 28private-dev
29private-etc fonts 29private-etc fonts
30private-tmp 30private-tmp
31nodvd
diff --git a/etc/gpredict.profile b/etc/gpredict.profile
index 8066579d3..ed9ef1a1e 100644
--- a/etc/gpredict.profile
+++ b/etc/gpredict.profile
@@ -34,3 +34,4 @@ private-tmp
34 34
35noexec ${HOME} 35noexec ${HOME}
36noexec /tmp 36noexec /tmp
37nodvd
diff --git a/etc/gthumb.profile b/etc/gthumb.profile
index 4911fbaae..4b922189a 100644
--- a/etc/gthumb.profile
+++ b/etc/gthumb.profile
@@ -28,3 +28,4 @@ tracelog
28private-bin gthumb 28private-bin gthumb
29private-dev 29private-dev
30private-tmp 30private-tmp
31nodvd
diff --git a/etc/gucharmap.profile b/etc/gucharmap.profile
index cfb014623..d9982933d 100644
--- a/etc/gucharmap.profile
+++ b/etc/gucharmap.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/gwenview.profile b/etc/gwenview.profile
index b0a1fc5ef..f5507850b 100644
--- a/etc/gwenview.profile
+++ b/etc/gwenview.profile
@@ -36,3 +36,4 @@ private-dev
36 36
37noexec ${HOME} 37noexec ${HOME}
38noexec /tmp 38noexec /tmp
39nodvd
diff --git a/etc/gzip.profile b/etc/gzip.profile
index 3d0f223f0..5560c8252 100644
--- a/etc/gzip.profile
+++ b/etc/gzip.profile
@@ -19,3 +19,4 @@ tracelog
19private-dev 19private-dev
20 20
21include /etc/firejail/default.profile 21include /etc/firejail/default.profile
22nodvd
diff --git a/etc/hashcat.profile b/etc/hashcat.profile
index 8f4ddce07..677c47b13 100644
--- a/etc/hashcat.profile
+++ b/etc/hashcat.profile
@@ -30,3 +30,4 @@ private-tmp
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/hedgewars.profile b/etc/hedgewars.profile
index 90515b8de..90abe5d27 100644
--- a/etc/hedgewars.profile
+++ b/etc/hedgewars.profile
@@ -28,3 +28,4 @@ tracelog
28disable-mnt 28disable-mnt
29private-dev 29private-dev
30private-tmp 30private-tmp
31nodvd
diff --git a/etc/hexchat.profile b/etc/hexchat.profile
index 178f384b1..875d07e89 100644
--- a/etc/hexchat.profile
+++ b/etc/hexchat.profile
@@ -39,3 +39,4 @@ private-tmp
39 39
40noexec ${HOME} 40noexec ${HOME}
41noexec /tmp 41noexec /tmp
42nodvd
diff --git a/etc/highlight.profile b/etc/highlight.profile
index decba5f6c..bbd08cb6b 100644
--- a/etc/highlight.profile
+++ b/etc/highlight.profile
@@ -29,3 +29,4 @@ private-bin highlight
29private-dev 29private-dev
30# private-etc none 30# private-etc none
31private-tmp 31private-tmp
32nodvd
diff --git a/etc/hugin.profile b/etc/hugin.profile
index 5d66ce3db..064488daa 100644
--- a/etc/hugin.profile
+++ b/etc/hugin.profile
@@ -29,3 +29,4 @@ private-tmp
29 29
30noexec ${HOME} 30noexec ${HOME}
31noexec /tmp 31noexec /tmp
32nodvd
diff --git a/etc/icecat.profile b/etc/icecat.profile
index 4829675bb..0477bfc4c 100644
--- a/etc/icecat.profile
+++ b/etc/icecat.profile
@@ -48,3 +48,4 @@ tracelog
48 48
49noexec ${HOME} 49noexec ${HOME}
50noexec /tmp 50noexec /tmp
51nodvd
diff --git a/etc/idea.sh.profile b/etc/idea.sh.profile
index d74386afa..20ec4f33f 100644
--- a/etc/idea.sh.profile
+++ b/etc/idea.sh.profile
@@ -33,3 +33,4 @@ private-dev
33# private-tmp 33# private-tmp
34 34
35noexec /tmp 35noexec /tmp
36nodvd
diff --git a/etc/img2txt.profile b/etc/img2txt.profile
index 2d2e686b8..342ddf9a3 100644
--- a/etc/img2txt.profile
+++ b/etc/img2txt.profile
@@ -27,3 +27,4 @@ tracelog
27private-dev 27private-dev
28# private-etc none 28# private-etc none
29private-tmp 29private-tmp
30nodvd
diff --git a/etc/inkscape.profile b/etc/inkscape.profile
index 7c0fdfc97..315b0193a 100644
--- a/etc/inkscape.profile
+++ b/etc/inkscape.profile
@@ -29,3 +29,4 @@ private-tmp
29 29
30noexec ${HOME} 30noexec ${HOME}
31noexec /tmp 31noexec /tmp
32nodvd
diff --git a/etc/inox.profile b/etc/inox.profile
index ad8bc0684..aeee91526 100644
--- a/etc/inox.profile
+++ b/etc/inox.profile
@@ -23,3 +23,4 @@ include /etc/firejail/whitelist-common.inc
23 23
24netfilter 24netfilter
25notv 25notv
26nodvd
diff --git a/etc/iridium.profile b/etc/iridium.profile
index 0e49d92ae..395481793 100644
--- a/etc/iridium.profile
+++ b/etc/iridium.profile
@@ -24,3 +24,4 @@ include /etc/firejail/whitelist-common.inc
24 24
25netfilter 25netfilter
26notv 26notv
27nodvd
diff --git a/etc/jd-gui.profile b/etc/jd-gui.profile
index 990e1a563..2422d5b48 100644
--- a/etc/jd-gui.profile
+++ b/etc/jd-gui.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/jitsi.profile b/etc/jitsi.profile
index 5e835b2a3..bd636251c 100644
--- a/etc/jitsi.profile
+++ b/etc/jitsi.profile
@@ -24,3 +24,4 @@ tracelog
24 24
25disable-mnt 25disable-mnt
26private-tmp 26private-tmp
27nodvd
diff --git a/etc/k3b.profile b/etc/k3b.profile
index ca190ecb9..a547cd7b1 100644
--- a/etc/k3b.profile
+++ b/etc/k3b.profile
@@ -29,3 +29,4 @@ tracelog
29# private-bin 29# private-bin
30# private-etc 30# private-etc
31# private-tmp 31# private-tmp
32nodvd
diff --git a/etc/kate.profile b/etc/kate.profile
index 7f44454b7..84057f402 100644
--- a/etc/kate.profile
+++ b/etc/kate.profile
@@ -34,3 +34,4 @@ tracelog
34private-dev 34private-dev
35# private-etc fonts 35# private-etc fonts
36private-tmp 36private-tmp
37nodvd
diff --git a/etc/kcalc.profile b/etc/kcalc.profile
index 8e1239848..fbd4d3e19 100644
--- a/etc/kcalc.profile
+++ b/etc/kcalc.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/keepass.profile b/etc/keepass.profile
index d925261a2..bdd6c9995 100644
--- a/etc/keepass.profile
+++ b/etc/keepass.profile
@@ -36,3 +36,4 @@ private-tmp
36 36
37noexec ${HOME} 37noexec ${HOME}
38noexec /tmp 38noexec /tmp
39nodvd
diff --git a/etc/keepassx.profile b/etc/keepassx.profile
index cd9d7d0b3..3eadcace7 100644
--- a/etc/keepassx.profile
+++ b/etc/keepassx.profile
@@ -37,3 +37,4 @@ private-tmp
37 37
38noexec ${HOME} 38noexec ${HOME}
39noexec /tmp 39noexec /tmp
40nodvd
diff --git a/etc/keepassx2.profile b/etc/keepassx2.profile
index dd81311df..7f8380bfa 100644
--- a/etc/keepassx2.profile
+++ b/etc/keepassx2.profile
@@ -35,3 +35,4 @@ private-tmp
35 35
36noexec ${HOME} 36noexec ${HOME}
37noexec /tmp 37noexec /tmp
38nodvd
diff --git a/etc/keepassxc.profile b/etc/keepassxc.profile
index 5c8229b95..fc44bfdd7 100644
--- a/etc/keepassxc.profile
+++ b/etc/keepassxc.profile
@@ -36,3 +36,4 @@ private-tmp
36memory-deny-write-execute 36memory-deny-write-execute
37noexec ${HOME} 37noexec ${HOME}
38noexec /tmp 38noexec /tmp
39nodvd
diff --git a/etc/kmail.profile b/etc/kmail.profile
index 180beb2a6..e5e8b0fef 100644
--- a/etc/kmail.profile
+++ b/etc/kmail.profile
@@ -24,3 +24,4 @@ tracelog
24 24
25private-dev 25private-dev
26# private-tmp 26# private-tmp
27nodvd
diff --git a/etc/knotes.profile b/etc/knotes.profile
index e5e449b35..c482a2f02 100644
--- a/etc/knotes.profile
+++ b/etc/knotes.profile
@@ -28,3 +28,4 @@ tracelog
28private-dev 28private-dev
29# private-etc fonts 29# private-etc fonts
30private-tmp 30private-tmp
31nodvd
diff --git a/etc/konversation.profile b/etc/konversation.profile
index 926839633..b4f0b5524 100644
--- a/etc/konversation.profile
+++ b/etc/konversation.profile
@@ -20,3 +20,4 @@ protocol unix,inet,inet6
20seccomp 20seccomp
21 21
22private-tmp 22private-tmp
23nodvd
diff --git a/etc/ktorrent.profile b/etc/ktorrent.profile
index 0c159bb0e..ae8d929db 100644
--- a/etc/ktorrent.profile
+++ b/etc/ktorrent.profile
@@ -50,3 +50,4 @@ private-tmp
50 50
51noexec ${HOME} 51noexec ${HOME}
52noexec /tmp 52noexec /tmp
53nodvd
diff --git a/etc/kwrite.profile b/etc/kwrite.profile
index 15113f361..b87d453ec 100644
--- a/etc/kwrite.profile
+++ b/etc/kwrite.profile
@@ -34,3 +34,4 @@ tracelog
34private-dev 34private-dev
35# private-etc fonts 35# private-etc fonts
36private-tmp 36private-tmp
37nodvd
diff --git a/etc/leafpad.profile b/etc/leafpad.profile
index 4fc549241..d04ea862d 100644
--- a/etc/leafpad.profile
+++ b/etc/leafpad.profile
@@ -29,3 +29,4 @@ private-dev
29 29
30noexec ${HOME} 30noexec ${HOME}
31noexec /tmp 31noexec /tmp
32nodvd
diff --git a/etc/less.profile b/etc/less.profile
index e0800891e..725673318 100644
--- a/etc/less.profile
+++ b/etc/less.profile
@@ -28,3 +28,4 @@ noexec ${HOME}
28noexec /tmp 28noexec /tmp
29 29
30include /etc/firejail/default.profile 30include /etc/firejail/default.profile
31nodvd
diff --git a/etc/libreoffice.profile b/etc/libreoffice.profile
index 584020919..b82e402fb 100644
--- a/etc/libreoffice.profile
+++ b/etc/libreoffice.profile
@@ -29,3 +29,4 @@ private-dev
29 29
30noexec ${HOME} 30noexec ${HOME}
31noexec /tmp 31noexec /tmp
32nodvd
diff --git a/etc/liferea.profile b/etc/liferea.profile
index 78adac568..cbc3a2bb5 100644
--- a/etc/liferea.profile
+++ b/etc/liferea.profile
@@ -41,3 +41,4 @@ private-tmp
41 41
42noexec ${HOME} 42noexec ${HOME}
43noexec /tmp 43noexec /tmp
44nodvd
diff --git a/etc/luminance-hdr.profile b/etc/luminance-hdr.profile
index 164b6296f..6fa4b5e86 100644
--- a/etc/luminance-hdr.profile
+++ b/etc/luminance-hdr.profile
@@ -30,3 +30,4 @@ private-tmp
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/lximage-qt.profile b/etc/lximage-qt.profile
index 08c6007ae..9c8dce88b 100644
--- a/etc/lximage-qt.profile
+++ b/etc/lximage-qt.profile
@@ -30,3 +30,4 @@ private-tmp
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/lxmusic.profile b/etc/lxmusic.profile
index c5db75467..67c5e0e9a 100644
--- a/etc/lxmusic.profile
+++ b/etc/lxmusic.profile
@@ -30,3 +30,4 @@ private-tmp
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/lxterminal.profile b/etc/lxterminal.profile
index 72401bdff..dac9bf957 100644
--- a/etc/lxterminal.profile
+++ b/etc/lxterminal.profile
@@ -16,3 +16,4 @@ netfilter
16notv 16notv
17protocol unix,inet,inet6 17protocol unix,inet,inet6
18seccomp 18seccomp
19nodvd
diff --git a/etc/lynx.profile b/etc/lynx.profile
index 365f6dcdb..4b981684a 100644
--- a/etc/lynx.profile
+++ b/etc/lynx.profile
@@ -29,3 +29,4 @@ tracelog
29private-dev 29private-dev
30# private-etc none 30# private-etc none
31private-tmp 31private-tmp
32nodvd
diff --git a/etc/mate-calc.profile b/etc/mate-calc.profile
index 83f4f530f..e56737691 100644
--- a/etc/mate-calc.profile
+++ b/etc/mate-calc.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/mate-color-select.profile b/etc/mate-color-select.profile
index 6b41ab005..207ea9c67 100644
--- a/etc/mate-color-select.profile
+++ b/etc/mate-color-select.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/mate-dictionary.profile b/etc/mate-dictionary.profile
index dbeb9567b..8b18c7f4e 100644
--- a/etc/mate-dictionary.profile
+++ b/etc/mate-dictionary.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/mcabber.profile b/etc/mcabber.profile
index 9a4505ab2..c9ba56710 100644
--- a/etc/mcabber.profile
+++ b/etc/mcabber.profile
@@ -26,3 +26,4 @@ shell none
26private-bin mcabber 26private-bin mcabber
27private-dev 27private-dev
28private-etc null 28private-etc null
29nodvd
diff --git a/etc/mediainfo.profile b/etc/mediainfo.profile
index 81840d1b4..36e237fef 100644
--- a/etc/mediainfo.profile
+++ b/etc/mediainfo.profile
@@ -29,3 +29,4 @@ private-bin mediainfo
29private-dev 29private-dev
30private-etc none 30private-etc none
31private-tmp 31private-tmp
32nodvd
diff --git a/etc/mediathekview.profile b/etc/mediathekview.profile
index b3c239be7..a4077c416 100644
--- a/etc/mediathekview.profile
+++ b/etc/mediathekview.profile
@@ -34,3 +34,4 @@ private-tmp
34 34
35noexec ${HOME} 35noexec ${HOME}
36noexec /tmp 36noexec /tmp
37nodvd
diff --git a/etc/meld.profile b/etc/meld.profile
index e2c6dd00e..92aefaf78 100644
--- a/etc/meld.profile
+++ b/etc/meld.profile
@@ -30,3 +30,4 @@ private-tmp
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/midori.profile b/etc/midori.profile
index 6de433ae0..3b0b96a52 100644
--- a/etc/midori.profile
+++ b/etc/midori.profile
@@ -41,3 +41,4 @@ notv
41protocol unix,inet,inet6,netlink 41protocol unix,inet,inet6,netlink
42seccomp 42seccomp
43tracelog 43tracelog
44nodvd
diff --git a/etc/mousepad.profile b/etc/mousepad.profile
index 2725f004c..325b9d60e 100644
--- a/etc/mousepad.profile
+++ b/etc/mousepad.profile
@@ -27,3 +27,4 @@ tracelog
27private-bin mousepad 27private-bin mousepad
28private-dev 28private-dev
29private-tmp 29private-tmp
30nodvd
diff --git a/etc/multimc5.profile b/etc/multimc5.profile
index 94cf7da86..a51defafa 100644
--- a/etc/multimc5.profile
+++ b/etc/multimc5.profile
@@ -37,3 +37,4 @@ private-tmp
37 37
38noexec ${HOME} 38noexec ${HOME}
39noexec /tmp 39noexec /tmp
40nodvd
diff --git a/etc/mumble.profile b/etc/mumble.profile
index b4c6ed7cf..745b22256 100644
--- a/etc/mumble.profile
+++ b/etc/mumble.profile
@@ -38,3 +38,4 @@ private-tmp
38memory-deny-write-execute 38memory-deny-write-execute
39noexec ${HOME} 39noexec ${HOME}
40noexec /tmp 40noexec /tmp
41nodvd
diff --git a/etc/mupdf.profile b/etc/mupdf.profile
index 7d933867f..050addfe4 100644
--- a/etc/mupdf.profile
+++ b/etc/mupdf.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32# mupdf will never write anything 32# mupdf will never write anything
33read-only ${HOME} 33read-only ${HOME}
34nodvd
diff --git a/etc/mupen64plus.profile b/etc/mupen64plus.profile
index b2415acab..ad54094f0 100644
--- a/etc/mupen64plus.profile
+++ b/etc/mupen64plus.profile
@@ -26,3 +26,4 @@ nonewprivs
26noroot 26noroot
27notv 27notv
28seccomp 28seccomp
29nodvd
diff --git a/etc/mutt.profile b/etc/mutt.profile
index 1ce1b7065..6387fb40b 100644
--- a/etc/mutt.profile
+++ b/etc/mutt.profile
@@ -48,3 +48,4 @@ seccomp
48shell none 48shell none
49 49
50private-dev 50private-dev
51nodvd
diff --git a/etc/nautilus.profile b/etc/nautilus.profile
index 83599c683..616d06e99 100644
--- a/etc/nautilus.profile
+++ b/etc/nautilus.profile
@@ -34,3 +34,4 @@ tracelog
34# private-dev 34# private-dev
35# private-etc fonts 35# private-etc fonts
36# private-tmp 36# private-tmp
37nodvd
diff --git a/etc/nemo.profile b/etc/nemo.profile
index 29a2cad9d..d206e3764 100644
--- a/etc/nemo.profile
+++ b/etc/nemo.profile
@@ -29,3 +29,4 @@ shell none
29 29
30noexec ${HOME} 30noexec ${HOME}
31noexec /tmp 31noexec /tmp
32nodvd
diff --git a/etc/netsurf.profile b/etc/netsurf.profile
index df2241f3a..36a564715 100644
--- a/etc/netsurf.profile
+++ b/etc/netsurf.profile
@@ -27,3 +27,4 @@ notv
27protocol unix,inet,inet6,netlink 27protocol unix,inet,inet6,netlink
28seccomp 28seccomp
29tracelog 29tracelog
30nodvd
diff --git a/etc/nylas.profile b/etc/nylas.profile
index e9a277e5c..43445cb1a 100644
--- a/etc/nylas.profile
+++ b/etc/nylas.profile
@@ -30,3 +30,4 @@ seccomp
30shell none 30shell none
31 31
32private-dev 32private-dev
33nodvd
diff --git a/etc/obs.profile b/etc/obs.profile
index 407161de5..f7d7ac310 100644
--- a/etc/obs.profile
+++ b/etc/obs.profile
@@ -27,3 +27,4 @@ private-tmp
27 27
28noexec ${HOME} 28noexec ${HOME}
29noexec /tmp 29noexec /tmp
30nodvd
diff --git a/etc/odt2txt.profile b/etc/odt2txt.profile
index d146dc571..71eff62ac 100644
--- a/etc/odt2txt.profile
+++ b/etc/odt2txt.profile
@@ -30,3 +30,4 @@ private-dev
30private-etc none 30private-etc none
31private-tmp 31private-tmp
32read-only ${HOME} 32read-only ${HOME}
33nodvd
diff --git a/etc/okular.profile b/etc/okular.profile
index c36b76432..426072331 100644
--- a/etc/okular.profile
+++ b/etc/okular.profile
@@ -40,3 +40,4 @@ private-tmp
40 40
41noexec ${HOME} 41noexec ${HOME}
42noexec /tmp 42noexec /tmp
43nodvd
diff --git a/etc/open-invaders.profile b/etc/open-invaders.profile
index 8414315ea..b225bd2d2 100644
--- a/etc/open-invaders.profile
+++ b/etc/open-invaders.profile
@@ -29,3 +29,4 @@ shell none
29private-dev 29private-dev
30# private-etc none 30# private-etc none
31private-tmp 31private-tmp
32nodvd
diff --git a/etc/openshot.profile b/etc/openshot.profile
index 554bbd40b..2219b670c 100644
--- a/etc/openshot.profile
+++ b/etc/openshot.profile
@@ -28,3 +28,4 @@ private-tmp
28 28
29noexec ${HOME} 29noexec ${HOME}
30noexec /tmp 30noexec /tmp
31nodvd
diff --git a/etc/opera-beta.profile b/etc/opera-beta.profile
index eb9f2ff69..f751d7a8b 100644
--- a/etc/opera-beta.profile
+++ b/etc/opera-beta.profile
@@ -23,3 +23,4 @@ include /etc/firejail/whitelist-common.inc
23 23
24netfilter 24netfilter
25notv 25notv
26nodvd
diff --git a/etc/opera.profile b/etc/opera.profile
index f4d2f14c9..2141fe2ee 100644
--- a/etc/opera.profile
+++ b/etc/opera.profile
@@ -27,3 +27,4 @@ include /etc/firejail/whitelist-common.inc
27 27
28netfilter 28netfilter
29notv 29notv
30nodvd
diff --git a/etc/orage.profile b/etc/orage.profile
index fb29becc5..d5946ab5b 100644
--- a/etc/orage.profile
+++ b/etc/orage.profile
@@ -32,3 +32,4 @@ private-tmp
32 32
33noexec ${HOME} 33noexec ${HOME}
34noexec /tmp 34noexec /tmp
35nodvd
diff --git a/etc/palemoon.profile b/etc/palemoon.profile
index e21a9a73e..962dcd16e 100644
--- a/etc/palemoon.profile
+++ b/etc/palemoon.profile
@@ -55,3 +55,4 @@ tracelog
55# private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse 55# private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse
56# private-opt palemoon 56# private-opt palemoon
57private-tmp 57private-tmp
58nodvd
diff --git a/etc/parole.profile b/etc/parole.profile
index a8ce63e73..e37e39789 100644
--- a/etc/parole.profile
+++ b/etc/parole.profile
@@ -22,3 +22,4 @@ shell none
22 22
23private-bin parole,dbus-launch 23private-bin parole,dbus-launch
24private-etc passwd,group,fonts 24private-etc passwd,group,fonts
25nodvd
diff --git a/etc/pcmanfm.profile b/etc/pcmanfm.profile
index d35d4b369..44375234d 100644
--- a/etc/pcmanfm.profile
+++ b/etc/pcmanfm.profile
@@ -26,3 +26,4 @@ protocol unix
26seccomp 26seccomp
27shell none 27shell none
28tracelog 28tracelog
29nodvd
diff --git a/etc/pdfsam.profile b/etc/pdfsam.profile
index 8af809e27..4dbc05413 100644
--- a/etc/pdfsam.profile
+++ b/etc/pdfsam.profile
@@ -30,3 +30,4 @@ private-tmp
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/pdftotext.profile b/etc/pdftotext.profile
index d668f4554..78fb91d5b 100644
--- a/etc/pdftotext.profile
+++ b/etc/pdftotext.profile
@@ -30,3 +30,4 @@ private-bin pdftotext
30private-dev 30private-dev
31private-etc none 31private-etc none
32private-tmp 32private-tmp
33nodvd
diff --git a/etc/peek.profile b/etc/peek.profile
index 54d7d105d..0157ca9d4 100644
--- a/etc/peek.profile
+++ b/etc/peek.profile
@@ -32,3 +32,4 @@ private-tmp
32memory-deny-write-execute 32memory-deny-write-execute
33noexec ${HOME} 33noexec ${HOME}
34noexec /tmp 34noexec /tmp
35nodvd
diff --git a/etc/picard.profile b/etc/picard.profile
index 94a6f8573..d855a767d 100644
--- a/etc/picard.profile
+++ b/etc/picard.profile
@@ -30,3 +30,4 @@ private-tmp
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/pidgin.profile b/etc/pidgin.profile
index 4471bcd87..113f3ce33 100644
--- a/etc/pidgin.profile
+++ b/etc/pidgin.profile
@@ -26,3 +26,4 @@ tracelog
26private-bin pidgin 26private-bin pidgin
27private-dev 27private-dev
28private-tmp 28private-tmp
29nodvd
diff --git a/etc/pingus.profile b/etc/pingus.profile
index b3078db67..204bc7f40 100644
--- a/etc/pingus.profile
+++ b/etc/pingus.profile
@@ -29,3 +29,4 @@ shell none
29private-dev 29private-dev
30# private-etc none 30# private-etc none
31private-tmp 31private-tmp
32nodvd
diff --git a/etc/pithos.profile b/etc/pithos.profile
index 9f60d41d0..be6e1b72a 100644
--- a/etc/pithos.profile
+++ b/etc/pithos.profile
@@ -30,3 +30,4 @@ private-tmp
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/pix.profile b/etc/pix.profile
index 8062ff322..79107c27c 100644
--- a/etc/pix.profile
+++ b/etc/pix.profile
@@ -29,3 +29,4 @@ tracelog
29private-bin pix 29private-bin pix
30private-dev 30private-dev
31private-tmp 31private-tmp
32nodvd
diff --git a/etc/pluma.profile b/etc/pluma.profile
index 80f9a8e57..ed64c4cf7 100644
--- a/etc/pluma.profile
+++ b/etc/pluma.profile
@@ -26,3 +26,4 @@ tracelog
26private-bin pluma 26private-bin pluma
27private-dev 27private-dev
28private-tmp 28private-tmp
29nodvd
diff --git a/etc/polari.profile b/etc/polari.profile
index b31954ed4..c41581b0d 100644
--- a/etc/polari.profile
+++ b/etc/polari.profile
@@ -43,3 +43,4 @@ private-tmp
43 43
44noexec ${HOME} 44noexec ${HOME}
45noexec /tmp 45noexec /tmp
46nodvd
diff --git a/etc/psi-plus.profile b/etc/psi-plus.profile
index 96dbfdfb4..3611e66f2 100644
--- a/etc/psi-plus.profile
+++ b/etc/psi-plus.profile
@@ -40,3 +40,4 @@ private-tmp
40 40
41noexec ${HOME} 41noexec ${HOME}
42noexec /tmp 42noexec /tmp
43nodvd
diff --git a/etc/qbittorrent.profile b/etc/qbittorrent.profile
index 3cfbff52e..b5b5f2cf5 100644
--- a/etc/qbittorrent.profile
+++ b/etc/qbittorrent.profile
@@ -42,3 +42,4 @@ seccomp
42private-dev 42private-dev
43# private-etc X11,fonts,xdg,resolv.conf 43# private-etc X11,fonts,xdg,resolv.conf
44private-tmp 44private-tmp
45nodvd
diff --git a/etc/qemu-launcher.profile b/etc/qemu-launcher.profile
index a80d21129..292b6b266 100644
--- a/etc/qemu-launcher.profile
+++ b/etc/qemu-launcher.profile
@@ -25,3 +25,4 @@ tracelog
25private-tmp 25private-tmp
26 26
27noexec /tmp 27noexec /tmp
28nodvd
diff --git a/etc/qemu-system-x86_64.profile b/etc/qemu-system-x86_64.profile
index bec350bc5..a4b962b8a 100644
--- a/etc/qemu-system-x86_64.profile
+++ b/etc/qemu-system-x86_64.profile
@@ -24,3 +24,4 @@ tracelog
24private-tmp 24private-tmp
25 25
26noexec /tmp 26noexec /tmp
27nodvd
diff --git a/etc/qlipper.profile b/etc/qlipper.profile
index 8e37515ee..8e5a4f19d 100644
--- a/etc/qlipper.profile
+++ b/etc/qlipper.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/qpdfview.profile b/etc/qpdfview.profile
index fb34ff788..7fe8567dd 100644
--- a/etc/qpdfview.profile
+++ b/etc/qpdfview.profile
@@ -28,3 +28,4 @@ tracelog
28private-bin qpdfview 28private-bin qpdfview
29private-dev 29private-dev
30private-tmp 30private-tmp
31nodvd
diff --git a/etc/qtox.profile b/etc/qtox.profile
index b4c019979..6fe942eeb 100644
--- a/etc/qtox.profile
+++ b/etc/qtox.profile
@@ -37,3 +37,4 @@ private-tmp
37 37
38noexec ${HOME} 38noexec ${HOME}
39noexec /tmp 39noexec /tmp
40nodvd
diff --git a/etc/quassel.profile b/etc/quassel.profile
index 897fc1044..223376272 100644
--- a/etc/quassel.profile
+++ b/etc/quassel.profile
@@ -17,3 +17,4 @@ noroot
17notv 17notv
18protocol unix,inet,inet6 18protocol unix,inet,inet6
19seccomp 19seccomp
20nodvd
diff --git a/etc/quiterss.profile b/etc/quiterss.profile
index 7508365ca..01bc439cd 100644
--- a/etc/quiterss.profile
+++ b/etc/quiterss.profile
@@ -45,3 +45,4 @@ private-dev
45 45
46noexec ${HOME} 46noexec ${HOME}
47noexec /tmp 47noexec /tmp
48nodvd
diff --git a/etc/qupzilla.profile b/etc/qupzilla.profile
index 35687c51c..c34a6031f 100644
--- a/etc/qupzilla.profile
+++ b/etc/qupzilla.profile
@@ -27,3 +27,4 @@ seccomp
27tracelog 27tracelog
28 28
29# private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse 29# private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse
30nodvd
diff --git a/etc/qutebrowser.profile b/etc/qutebrowser.profile
index 035636d9b..e041cb04f 100644
--- a/etc/qutebrowser.profile
+++ b/etc/qutebrowser.profile
@@ -29,3 +29,4 @@ notv
29protocol unix,inet,inet6,netlink 29protocol unix,inet,inet6,netlink
30seccomp 30seccomp
31tracelog 31tracelog
32nodvd
diff --git a/etc/rambox.profile b/etc/rambox.profile
index c66fdb964..686691849 100644
--- a/etc/rambox.profile
+++ b/etc/rambox.profile
@@ -28,3 +28,4 @@ notv
28protocol unix,inet,inet6,netlink 28protocol unix,inet,inet6,netlink
29seccomp 29seccomp
30# tracelog 30# tracelog
31nodvd
diff --git a/etc/ranger.profile b/etc/ranger.profile
index 1cc3b07b9..93f517a61 100644
--- a/etc/ranger.profile
+++ b/etc/ranger.profile
@@ -27,3 +27,4 @@ protocol unix
27seccomp 27seccomp
28 28
29private-dev 29private-dev
30nodvd
diff --git a/etc/remmina.profile b/etc/remmina.profile
index b03c0d9de..70ce4c465 100644
--- a/etc/remmina.profile
+++ b/etc/remmina.profile
@@ -29,3 +29,4 @@ private-tmp
29 29
30noexec ${HOME} 30noexec ${HOME}
31noexec /tmp 31noexec /tmp
32nodvd
diff --git a/etc/ristretto.profile b/etc/ristretto.profile
index 7971c79e6..4f271db58 100644
--- a/etc/ristretto.profile
+++ b/etc/ristretto.profile
@@ -32,3 +32,4 @@ private-tmp
32 32
33noexec ${HOME} 33noexec ${HOME}
34noexec /tmp 34noexec /tmp
35nodvd
diff --git a/etc/rtorrent.profile b/etc/rtorrent.profile
index 5dcf1fe8d..258349f1f 100644
--- a/etc/rtorrent.profile
+++ b/etc/rtorrent.profile
@@ -24,3 +24,4 @@ shell none
24private-bin rtorrent 24private-bin rtorrent
25private-dev 25private-dev
26private-tmp 26private-tmp
27nodvd
diff --git a/etc/scribus.profile b/etc/scribus.profile
index f18be4ac8..7f98065ef 100644
--- a/etc/scribus.profile
+++ b/etc/scribus.profile
@@ -38,3 +38,4 @@ tracelog
38 38
39private-dev 39private-dev
40# private-tmp 40# private-tmp
41nodvd
diff --git a/etc/sdat2img.profile b/etc/sdat2img.profile
index 7b13ac772..06889be33 100644
--- a/etc/sdat2img.profile
+++ b/etc/sdat2img.profile
@@ -29,3 +29,4 @@ private-dev
29 29
30noexec ${HOME} 30noexec ${HOME}
31noexec /tmp 31noexec /tmp
32nodvd
diff --git a/etc/seamonkey.profile b/etc/seamonkey.profile
index 7d35eeb1b..c9bc2d593 100644
--- a/etc/seamonkey.profile
+++ b/etc/seamonkey.profile
@@ -45,3 +45,4 @@ seccomp
45tracelog 45tracelog
46 46
47# private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse 47# private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,gtk-2.0,pango,fonts,iceweasel,firefox,adobe,mime.types,mailcap,asound.conf,pulse
48nodvd
diff --git a/etc/server.profile b/etc/server.profile
index cae1a7e79..1bc2920d9 100644
--- a/etc/server.profile
+++ b/etc/server.profile
@@ -37,3 +37,4 @@ private-tmp
37# memory-deny-write-execute 37# memory-deny-write-execute
38# noexec ${HOME} 38# noexec ${HOME}
39# noexec /tmp 39# noexec /tmp
40nodvd
diff --git a/etc/silentarmy.profile b/etc/silentarmy.profile
index bbbd5be10..2e998b1b9 100644
--- a/etc/silentarmy.profile
+++ b/etc/silentarmy.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/simple-scan.profile b/etc/simple-scan.profile
index 9cf150066..faf31d7a3 100644
--- a/etc/simple-scan.profile
+++ b/etc/simple-scan.profile
@@ -28,3 +28,4 @@ tracelog
28# private-dev 28# private-dev
29# private-etc fonts 29# private-etc fonts
30# private-tmp 30# private-tmp
31nodvd
diff --git a/etc/simutrans.profile b/etc/simutrans.profile
index c2ef90853..8e1f6031e 100644
--- a/etc/simutrans.profile
+++ b/etc/simutrans.profile
@@ -29,3 +29,4 @@ shell none
29private-dev 29private-dev
30# private-etc none 30# private-etc none
31private-tmp 31private-tmp
32nodvd
diff --git a/etc/skanlite.profile b/etc/skanlite.profile
index 6fccba92c..1fdfc0dd5 100644
--- a/etc/skanlite.profile
+++ b/etc/skanlite.profile
@@ -26,3 +26,4 @@ shell none
26# private-dev 26# private-dev
27# private-etc 27# private-etc
28# private-tmp 28# private-tmp
29nodvd
diff --git a/etc/skype.profile b/etc/skype.profile
index 13bf06aa6..1c78313aa 100644
--- a/etc/skype.profile
+++ b/etc/skype.profile
@@ -28,3 +28,4 @@ private-tmp
28 28
29noexec ${HOME} 29noexec ${HOME}
30noexec /tmp 30noexec /tmp
31nodvd
diff --git a/etc/skypeforlinux.profile b/etc/skypeforlinux.profile
index 20632e91b..3cd0480c7 100644
--- a/etc/skypeforlinux.profile
+++ b/etc/skypeforlinux.profile
@@ -28,3 +28,4 @@ private-tmp
28 28
29noexec ${HOME} 29noexec ${HOME}
30noexec /tmp 30noexec /tmp
31nodvd
diff --git a/etc/slack.profile b/etc/slack.profile
index 62463ff5c..f973f2cae 100644
--- a/etc/slack.profile
+++ b/etc/slack.profile
@@ -37,3 +37,4 @@ private-bin slack
37private-dev 37private-dev
38private-etc fonts,resolv.conf,ld.so.conf,ld.so.cache,localtime 38private-etc fonts,resolv.conf,ld.so.conf,ld.so.cache,localtime
39private-tmp 39private-tmp
40nodvd
diff --git a/etc/snap.profile b/etc/snap.profile
index ddff7e019..175589397 100644
--- a/etc/snap.profile
+++ b/etc/snap.profile
@@ -15,3 +15,4 @@ whitelist ${DOWNLOADS}
15whitelist ~/snap 15whitelist ~/snap
16include /etc/firejail/whitelist-common.inc 16include /etc/firejail/whitelist-common.inc
17notv 17notv
18nodvd
diff --git a/etc/soundconverter.profile b/etc/soundconverter.profile
index 933c0fc70..a9b59b89a 100644
--- a/etc/soundconverter.profile
+++ b/etc/soundconverter.profile
@@ -29,3 +29,4 @@ private-tmp
29 29
30noexec ${HOME} 30noexec ${HOME}
31noexec /tmp 31noexec /tmp
32nodvd
diff --git a/etc/sqlitebrowser.profile b/etc/sqlitebrowser.profile
index bfa8cac8b..a61aca77a 100644
--- a/etc/sqlitebrowser.profile
+++ b/etc/sqlitebrowser.profile
@@ -32,3 +32,4 @@ private-tmp
32memory-deny-write-execute 32memory-deny-write-execute
33noexec ${HOME} 33noexec ${HOME}
34noexec /tmp 34noexec /tmp
35nodvd
diff --git a/etc/ssh-agent.profile b/etc/ssh-agent.profile
index 0005f0ecb..fcfdd057a 100644
--- a/etc/ssh-agent.profile
+++ b/etc/ssh-agent.profile
@@ -24,3 +24,4 @@ noroot
24notv 24notv
25protocol unix,inet,inet6 25protocol unix,inet,inet6
26seccomp 26seccomp
27nodvd
diff --git a/etc/ssh.profile b/etc/ssh.profile
index 3bb115631..905e3900e 100644
--- a/etc/ssh.profile
+++ b/etc/ssh.profile
@@ -34,3 +34,4 @@ private-dev
34memory-deny-write-execute 34memory-deny-write-execute
35noexec ${HOME} 35noexec ${HOME}
36noexec /tmp 36noexec /tmp
37nodvd
diff --git a/etc/start-tor-browser.profile b/etc/start-tor-browser.profile
index 47cceaddd..b37ed72b7 100644
--- a/etc/start-tor-browser.profile
+++ b/etc/start-tor-browser.profile
@@ -26,3 +26,4 @@ private-bin bash,dash,sh,grep,tail,env,gpg,id,readlink,dirname,test,mkdir,ln,sed
26private-dev 26private-dev
27private-etc fonts 27private-etc fonts
28private-tmp 28private-tmp
29nodvd
diff --git a/etc/steam.profile b/etc/steam.profile
index ec6ea09cc..8d8eabe6d 100644
--- a/etc/steam.profile
+++ b/etc/steam.profile
@@ -37,3 +37,4 @@ shell none
37 37
38private-dev 38private-dev
39private-tmp 39private-tmp
40nodvd
diff --git a/etc/stellarium.profile b/etc/stellarium.profile
index eff80393e..06bbf3445 100644
--- a/etc/stellarium.profile
+++ b/etc/stellarium.profile
@@ -35,3 +35,4 @@ disable-mnt
35private-bin stellarium 35private-bin stellarium
36private-dev 36private-dev
37private-tmp 37private-tmp
38nodvd
diff --git a/etc/strings.profile b/etc/strings.profile
index 4bbdcb97e..28f5598cf 100644
--- a/etc/strings.profile
+++ b/etc/strings.profile
@@ -22,3 +22,4 @@ private-dev
22memory-deny-write-execute 22memory-deny-write-execute
23 23
24include /etc/firejail/default.profile 24include /etc/firejail/default.profile
25nodvd
diff --git a/etc/supertux2.profile b/etc/supertux2.profile
index 0a99246cc..910c39aeb 100644
--- a/etc/supertux2.profile
+++ b/etc/supertux2.profile
@@ -29,3 +29,4 @@ shell none
29private-dev 29private-dev
30# private-etc none 30# private-etc none
31private-tmp 31private-tmp
32nodvd
diff --git a/etc/synfigstudio.profile b/etc/synfigstudio.profile
index 1ec2185f0..7db148e8d 100644
--- a/etc/synfigstudio.profile
+++ b/etc/synfigstudio.profile
@@ -30,3 +30,4 @@ private-tmp
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/tar.profile b/etc/tar.profile
index 3fc0e975c..ae520be02 100644
--- a/etc/tar.profile
+++ b/etc/tar.profile
@@ -23,3 +23,4 @@ private-dev
23private-etc passwd,group,localtime 23private-etc passwd,group,localtime
24 24
25include /etc/firejail/default.profile 25include /etc/firejail/default.profile
26nodvd
diff --git a/etc/telegram.profile b/etc/telegram.profile
index 5257083bc..38cbe3bd0 100644
--- a/etc/telegram.profile
+++ b/etc/telegram.profile
@@ -24,3 +24,4 @@ private-tmp
24 24
25noexec ${HOME} 25noexec ${HOME}
26noexec /tmp 26noexec /tmp
27nodvd
diff --git a/etc/tracker.profile b/etc/tracker.profile
index 52929c548..9da8931f8 100644
--- a/etc/tracker.profile
+++ b/etc/tracker.profile
@@ -31,3 +31,4 @@ tracelog
31# private-dev 31# private-dev
32# private-etc fonts 32# private-etc fonts
33# private-tmp 33# private-tmp
34nodvd
diff --git a/etc/transmission-cli.profile b/etc/transmission-cli.profile
index b3a4bbb84..ffdfe16fe 100644
--- a/etc/transmission-cli.profile
+++ b/etc/transmission-cli.profile
@@ -30,3 +30,4 @@ private-etc none
30private-tmp 30private-tmp
31 31
32memory-deny-write-execute 32memory-deny-write-execute
33nodvd
diff --git a/etc/transmission-gtk.profile b/etc/transmission-gtk.profile
index b8872adfe..0de1ea99d 100644
--- a/etc/transmission-gtk.profile
+++ b/etc/transmission-gtk.profile
@@ -36,3 +36,4 @@ private-dev
36private-tmp 36private-tmp
37 37
38memory-deny-write-execute 38memory-deny-write-execute
39nodvd
diff --git a/etc/transmission-qt.profile b/etc/transmission-qt.profile
index 083b293e1..6d71cd945 100644
--- a/etc/transmission-qt.profile
+++ b/etc/transmission-qt.profile
@@ -34,3 +34,4 @@ tracelog
34private-bin transmission-qt 34private-bin transmission-qt
35private-dev 35private-dev
36private-tmp 36private-tmp
37nodvd
diff --git a/etc/transmission-show.profile b/etc/transmission-show.profile
index ad97b537a..6fcffe4f8 100644
--- a/etc/transmission-show.profile
+++ b/etc/transmission-show.profile
@@ -28,3 +28,4 @@ tracelog
28private-dev 28private-dev
29private-etc none 29private-etc none
30private-tmp 30private-tmp
31nodvd
diff --git a/etc/truecraft.profile b/etc/truecraft.profile
index 186f6c7f7..ccdac70dc 100644
--- a/etc/truecraft.profile
+++ b/etc/truecraft.profile
@@ -35,3 +35,4 @@ private-tmp
35 35
36noexec ${HOME} 36noexec ${HOME}
37noexec /tmp 37noexec /tmp
38nodvd
diff --git a/etc/tuxguitar.profile b/etc/tuxguitar.profile
index 5f64095f0..e0f66d877 100644
--- a/etc/tuxguitar.profile
+++ b/etc/tuxguitar.profile
@@ -28,3 +28,4 @@ private-tmp
28 28
29# noexec ${HOME} - tuxguitar may fail to launch 29# noexec ${HOME} - tuxguitar may fail to launch
30noexec /tmp 30noexec /tmp
31nodvd
diff --git a/etc/uget-gtk.profile b/etc/uget-gtk.profile
index a9c332799..f85d6a7b9 100644
--- a/etc/uget-gtk.profile
+++ b/etc/uget-gtk.profile
@@ -29,3 +29,4 @@ shell none
29private-bin uget-gtk 29private-bin uget-gtk
30private-dev 30private-dev
31private-tmp 31private-tmp
32nodvd
diff --git a/etc/unbound.profile b/etc/unbound.profile
index 0e5539764..3ca75b3ef 100644
--- a/etc/unbound.profile
+++ b/etc/unbound.profile
@@ -20,3 +20,4 @@ seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,i
20 20
21private 21private
22private-dev 22private-dev
23nodvd
diff --git a/etc/unknown-horizons.profile b/etc/unknown-horizons.profile
index db768b883..c282bb020 100644
--- a/etc/unknown-horizons.profile
+++ b/etc/unknown-horizons.profile
@@ -28,3 +28,4 @@ shell none
28private-dev 28private-dev
29# private-etc none 29# private-etc none
30private-tmp 30private-tmp
31nodvd
diff --git a/etc/unrar.profile b/etc/unrar.profile
index 37227e5d3..b9f2999ae 100644
--- a/etc/unrar.profile
+++ b/etc/unrar.profile
@@ -23,3 +23,4 @@ private-etc passwd,group,localtime
23private-tmp 23private-tmp
24 24
25include /etc/firejail/default.profile 25include /etc/firejail/default.profile
26nodvd
diff --git a/etc/unzip.profile b/etc/unzip.profile
index 8a0a79bf8..c391dd7a5 100644
--- a/etc/unzip.profile
+++ b/etc/unzip.profile
@@ -22,3 +22,4 @@ private-dev
22private-etc passwd,group,localtime 22private-etc passwd,group,localtime
23 23
24include /etc/firejail/default.profile 24include /etc/firejail/default.profile
25nodvd
diff --git a/etc/uudeview.profile b/etc/uudeview.profile
index 3f86a43f2..3b254ba4e 100644
--- a/etc/uudeview.profile
+++ b/etc/uudeview.profile
@@ -20,3 +20,4 @@ private-dev
20private-etc ld.so.preload 20private-etc ld.so.preload
21 21
22include /etc/firejail/default.profile 22include /etc/firejail/default.profile
23nodvd
diff --git a/etc/uzbl-browser.profile b/etc/uzbl-browser.profile
index d8eba6c7d..53fc303a0 100644
--- a/etc/uzbl-browser.profile
+++ b/etc/uzbl-browser.profile
@@ -31,3 +31,4 @@ notv
31protocol unix,inet,inet6 31protocol unix,inet,inet6
32seccomp 32seccomp
33tracelog 33tracelog
34nodvd
diff --git a/etc/viewnior.profile b/etc/viewnior.profile
index 5f6b9848d..3dd9a5389 100644
--- a/etc/viewnior.profile
+++ b/etc/viewnior.profile
@@ -33,3 +33,4 @@ private-bin viewnior
33private-dev 33private-dev
34private-etc fonts 34private-etc fonts
35private-tmp 35private-tmp
36nodvd
diff --git a/etc/viking.profile b/etc/viking.profile
index 331a759c4..8b5bff2b8 100644
--- a/etc/viking.profile
+++ b/etc/viking.profile
@@ -30,3 +30,4 @@ private-tmp
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/vim.profile b/etc/vim.profile
index adbcef008..0264930ef 100644
--- a/etc/vim.profile
+++ b/etc/vim.profile
@@ -21,3 +21,4 @@ noroot
21notv 21notv
22protocol unix,inet,inet6 22protocol unix,inet,inet6
23seccomp 23seccomp
24nodvd
diff --git a/etc/virtualbox.profile b/etc/virtualbox.profile
index df8d6bf81..da0b91e09 100644
--- a/etc/virtualbox.profile
+++ b/etc/virtualbox.profile
@@ -25,3 +25,4 @@ include /etc/firejail/whitelist-common.inc
25caps.drop all 25caps.drop all
26netfilter 26netfilter
27notv 27notv
28nodvd
diff --git a/etc/vivaldi.profile b/etc/vivaldi.profile
index 816548bc7..cd4d62e44 100644
--- a/etc/vivaldi.profile
+++ b/etc/vivaldi.profile
@@ -30,3 +30,4 @@ private-dev
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/vym.profile b/etc/vym.profile
index c81bc580a..702680958 100644
--- a/etc/vym.profile
+++ b/etc/vym.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/w3m.profile b/etc/w3m.profile
index f7f7d30b2..04760d176 100644
--- a/etc/w3m.profile
+++ b/etc/w3m.profile
@@ -31,3 +31,4 @@ tracelog
31private-dev 31private-dev
32private-etc none 32private-etc none
33private-tmp 33private-tmp
34nodvd
diff --git a/etc/warzone2100.profile b/etc/warzone2100.profile
index c40114b24..0a8a73f1f 100644
--- a/etc/warzone2100.profile
+++ b/etc/warzone2100.profile
@@ -33,3 +33,4 @@ disable-mnt
33private-bin warzone2100 33private-bin warzone2100
34private-dev 34private-dev
35private-tmp 35private-tmp
36nodvd
diff --git a/etc/waterfox.profile b/etc/waterfox.profile
index af5ce150d..c842e6700 100644
--- a/etc/waterfox.profile
+++ b/etc/waterfox.profile
@@ -69,3 +69,4 @@ private-tmp
69 69
70noexec ${HOME} 70noexec ${HOME}
71noexec /tmp 71noexec /tmp
72nodvd
diff --git a/etc/weechat.profile b/etc/weechat.profile
index 7a2c46cd1..79619bb82 100644
--- a/etc/weechat.profile
+++ b/etc/weechat.profile
@@ -21,3 +21,4 @@ seccomp
21# no private-bin support for various reasons: 21# no private-bin support for various reasons:
22# Plugins loaded: alias, aspell, charset, exec, fifo, guile, irc, 22# Plugins loaded: alias, aspell, charset, exec, fifo, guile, irc,
23# logger, lua, perl, python, relay, ruby, script, tcl, trigger, xferloading plugins 23# logger, lua, perl, python, relay, ruby, script, tcl, trigger, xferloading plugins
24nodvd
diff --git a/etc/wesnoth.profile b/etc/wesnoth.profile
index 4796b792e..30f857f47 100644
--- a/etc/wesnoth.profile
+++ b/etc/wesnoth.profile
@@ -31,3 +31,4 @@ seccomp
31 31
32private-dev 32private-dev
33private-tmp 33private-tmp
34nodvd
diff --git a/etc/wget.profile b/etc/wget.profile
index 553e03c33..23eba46fe 100644
--- a/etc/wget.profile
+++ b/etc/wget.profile
@@ -34,3 +34,4 @@ private-dev
34 34
35noexec ${HOME} 35noexec ${HOME}
36noexec /tmp 36noexec /tmp
37nodvd
diff --git a/etc/wine.profile b/etc/wine.profile
index 0f7c48837..69ad72137 100644
--- a/etc/wine.profile
+++ b/etc/wine.profile
@@ -22,3 +22,4 @@ nonewprivs
22noroot 22noroot
23notv 23notv
24seccomp 24seccomp
25nodvd
diff --git a/etc/wire.profile b/etc/wire.profile
index d1aba549d..00da13cce 100644
--- a/etc/wire.profile
+++ b/etc/wire.profile
@@ -29,3 +29,4 @@ shell none
29disable-mnt 29disable-mnt
30private-dev 30private-dev
31private-tmp 31private-tmp
32nodvd
diff --git a/etc/wireshark.profile b/etc/wireshark.profile
index d6b8ba23c..1bee919b3 100644
--- a/etc/wireshark.profile
+++ b/etc/wireshark.profile
@@ -32,3 +32,4 @@ private-tmp
32 32
33noexec ${HOME} 33noexec ${HOME}
34noexec /tmp 34noexec /tmp
35nodvd
diff --git a/etc/xchat.profile b/etc/xchat.profile
index 3297b24fc..73df480bf 100644
--- a/etc/xchat.profile
+++ b/etc/xchat.profile
@@ -19,3 +19,4 @@ protocol unix,inet,inet6
19seccomp 19seccomp
20 20
21# private-bin requires perl, python, etc. 21# private-bin requires perl, python, etc.
22nodvd
diff --git a/etc/xed.profile b/etc/xed.profile
index 29c35c08c..b47cca36f 100644
--- a/etc/xed.profile
+++ b/etc/xed.profile
@@ -26,3 +26,4 @@ tracelog
26private-bin xed 26private-bin xed
27private-dev 27private-dev
28private-tmp 28private-tmp
29nodvd
diff --git a/etc/xfburn.profile b/etc/xfburn.profile
index 0f94698f2..4729ebaf7 100644
--- a/etc/xfburn.profile
+++ b/etc/xfburn.profile
@@ -28,3 +28,4 @@ tracelog
28# private-dev 28# private-dev
29# private-etc fonts 29# private-etc fonts
30# private-tmp 30# private-tmp
31nodvd
diff --git a/etc/xfce4-dict.profile b/etc/xfce4-dict.profile
index aea5aa80a..3e2d4b1d4 100644
--- a/etc/xfce4-dict.profile
+++ b/etc/xfce4-dict.profile
@@ -31,3 +31,4 @@ private-tmp
31 31
32noexec ${HOME} 32noexec ${HOME}
33noexec /tmp 33noexec /tmp
34nodvd
diff --git a/etc/xfce4-notes.profile b/etc/xfce4-notes.profile
index 302b26c5e..12b7e6de7 100644
--- a/etc/xfce4-notes.profile
+++ b/etc/xfce4-notes.profile
@@ -33,3 +33,4 @@ private-tmp
33 33
34noexec ${HOME} 34noexec ${HOME}
35noexec /tmp 35noexec /tmp
36nodvd
diff --git a/etc/xiphos.profile b/etc/xiphos.profile
index eae4e338d..ae3e303a3 100644
--- a/etc/xiphos.profile
+++ b/etc/xiphos.profile
@@ -36,3 +36,4 @@ private-bin xiphos
36private-dev 36private-dev
37private-etc fonts,resolv.conf,sword 37private-etc fonts,resolv.conf,sword
38private-tmp 38private-tmp
39nodvd
diff --git a/etc/xonotic.profile b/etc/xonotic.profile
index 5275e4a09..6a67bde75 100644
--- a/etc/xonotic.profile
+++ b/etc/xonotic.profile
@@ -34,3 +34,4 @@ private-tmp
34 34
35noexec ${HOME} 35noexec ${HOME}
36noexec /tmp 36noexec /tmp
37nodvd
diff --git a/etc/xpdf.profile b/etc/xpdf.profile
index ab2b33455..1f51c220d 100644
--- a/etc/xpdf.profile
+++ b/etc/xpdf.profile
@@ -30,3 +30,4 @@ private-tmp
30 30
31noexec ${HOME} 31noexec ${HOME}
32noexec /tmp 32noexec /tmp
33nodvd
diff --git a/etc/xpra.profile b/etc/xpra.profile
index e5d86b9e9..28586f134 100644
--- a/etc/xpra.profile
+++ b/etc/xpra.profile
@@ -44,3 +44,4 @@ shell none
44private-dev 44private-dev
45# private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname,machine-id,xpra,X11 45# private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname,machine-id,xpra,X11
46private-tmp 46private-tmp
47nodvd
diff --git a/etc/xreader.profile b/etc/xreader.profile
index cb5ad1ee6..35358814a 100644
--- a/etc/xreader.profile
+++ b/etc/xreader.profile
@@ -28,3 +28,4 @@ tracelog
28private-bin xreader, xreader-previewer, xreader-thumbnailer 28private-bin xreader, xreader-previewer, xreader-thumbnailer
29private-dev 29private-dev
30private-tmp 30private-tmp
31nodvd
diff --git a/etc/xviewer.profile b/etc/xviewer.profile
index 6fa286937..dd3103909 100644
--- a/etc/xviewer.profile
+++ b/etc/xviewer.profile
@@ -32,3 +32,4 @@ private-tmp
32 32
33noexec ${HOME} 33noexec ${HOME}
34noexec /tmp 34noexec /tmp
35nodvd
diff --git a/etc/xzdec.profile b/etc/xzdec.profile
index c7d3ebac3..18384680f 100644
--- a/etc/xzdec.profile
+++ b/etc/xzdec.profile
@@ -19,3 +19,4 @@ tracelog
19private-dev 19private-dev
20 20
21include /etc/firejail/default.profile 21include /etc/firejail/default.profile
22nodvd
diff --git a/etc/youtube-dl.profile b/etc/youtube-dl.profile
index 3e99add9c..e9f6d5641 100644
--- a/etc/youtube-dl.profile
+++ b/etc/youtube-dl.profile
@@ -32,3 +32,4 @@ private-dev
32 32
33noexec ${HOME} 33noexec ${HOME}
34noexec /tmp 34noexec /tmp
35nodvd
diff --git a/etc/zathura.profile b/etc/zathura.profile
index f495e1973..9f1c4a3da 100644
--- a/etc/zathura.profile
+++ b/etc/zathura.profile
@@ -30,3 +30,4 @@ private-etc fonts
30private-tmp 30private-tmp
31read-only ~/ 31read-only ~/
32read-write ~/.local/share/zathura/ 32read-write ~/.local/share/zathura/
33nodvd
diff --git a/etc/zoom.profile b/etc/zoom.profile
index 8f52f2f7f..e0902390f 100644
--- a/etc/zoom.profile
+++ b/etc/zoom.profile
@@ -25,3 +25,4 @@ protocol unix,inet,inet6
25seccomp 25seccomp
26 26
27private-tmp 27private-tmp
28nodvd