hardenings for various profiles (#3160)

* harden devilspie

* harden devilspie2

* harden curl

* harden wget

* harden curl

* harden dig

* harden claws-mail

* harden dnscrypt-proxy

* harden dnscrypt-proxy

* harden dnscrypt-proxy

* harden exfalso

* refactor easystroke as whitelist profile

* refactor enchant as whitelist profile

* safeguard ${DOCUMENTS}

Thanks @rusty-snake for the suggestion.

* drop x11-none

Thanks @rusty-snake for catching this.

* drop x11 none

Thanks @rusty-snake for saving the bacon...

* drop x11 none

Thanks @rusty-snake for catching this.

* drop x11 none

Thanks @rusty-snake for preventing breakage!

* drop ipc-namespace

Better safe than sorry...

1 files changed, 5 insertions, 0 deletions

diff --git a/etc/easystroke.profile b/etc/easystroke.profile
index 623a4cadc..1297f5f40 100644
--- a/etc/easystroke.profile
+++ b/etc/easystroke.profile
@@ -16,7 +16,11 @@ include disable-passwdmgr.inc
 include disable-programs.inc
 include disable-xdg.inc
 
+mkdir ${HOME}/.easystroke
+whitelist ${HOME}/.easystroke
+include whitelist-common.inc
 include whitelist-usr-share-common.inc
+include whitelist-var-common.inc
 
 apparmor
 caps.drop all
@@ -35,6 +39,7 @@ novideo
 protocol unix
 seccomp
 shell none
+tracelog
 
 disable-mnt
 # breaks custom shell command functionality