various little profile fixes and enhancements (#1442)

* add novideo

* add novideo

* add novideo

* put noexec last

* blacklist Clementine configuration and database

* blacklist Clementine configuration and database

* add novideo

* add novideo, permit access to ~/.java

* add novideo

* spoof machine-id

* mimeapps.list is already in whitelist-common.inc

* ~/.local/share/applications is already read-only

see disable-common.inc

* mimeapps.list is already in whitelist-common.inc

* ~/.local/share/applications is already read-only

see disable-common.inc

* drop machine-id option

private-etc hides it anyway

1 files changed, 0 insertions, 2 deletions

diff --git a/etc/geary.profile b/etc/geary.profile
index 3f9faf058..353d00124 100644
--- a/etc/geary.profile
+++ b/etc/geary.profile
@@ -13,7 +13,6 @@ noblacklist ~/.local/share/geary
 
 mkdir ~/.gnupg
 mkdir ~/.local/share/geary
-whitelist ~/.config/mimeapps.list
 whitelist ~/.gnupg
 whitelist ~/.local/share/applications
 whitelist ~/.local/share/geary
@@ -22,7 +21,6 @@ include /etc/firejail/whitelist-common.inc
 ignore private-tmp
 
 read-only ~/.config/mimeapps.list
-read-only ~/.local/share/applications
 
 # allow browsers
 include /etc/firejail/firefox.profile