hardenings for various profiles (#3160)

* harden devilspie

* harden devilspie2

* harden curl

* harden wget

* harden curl

* harden dig

* harden claws-mail

* harden dnscrypt-proxy

* harden dnscrypt-proxy

* harden dnscrypt-proxy

* harden exfalso

* refactor easystroke as whitelist profile

* refactor enchant as whitelist profile

* safeguard ${DOCUMENTS}

Thanks @rusty-snake for the suggestion.

* drop x11-none

Thanks @rusty-snake for catching this.

* drop x11 none

Thanks @rusty-snake for saving the bacon...

* drop x11 none

Thanks @rusty-snake for catching this.

* drop x11 none

Thanks @rusty-snake for preventing breakage!

* drop ipc-namespace

Better safe than sorry...

1 files changed, 3 insertions, 0 deletions

diff --git a/etc/claws-mail.profile b/etc/claws-mail.profile
index f07e2039b..44124f4a3 100644
--- a/etc/claws-mail.profile
+++ b/etc/claws-mail.profile
@@ -13,11 +13,14 @@ noblacklist ${HOME}/.signature
 # and 'blacklist' it in your disable-common.local too so it is  kept hidden from other applications
 noblacklist ${HOME}/Mail
 
+noblacklist ${DOCUMENTS}
 include disable-common.inc
 include disable-devel.inc
+include disable-exec.inc
 include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
+include disable-xdg.inc
 
 whitelist /usr/share/doc/claws-mail
 whitelist /usr/share/gnupg