various little profile fixes and enhancements (#1442)

* add novideo

* add novideo

* add novideo

* put noexec last

* blacklist Clementine configuration and database

* blacklist Clementine configuration and database

* add novideo

* add novideo, permit access to ~/.java

* add novideo

* spoof machine-id

* mimeapps.list is already in whitelist-common.inc

* ~/.local/share/applications is already read-only

see disable-common.inc

* mimeapps.list is already in whitelist-common.inc

* ~/.local/share/applications is already read-only

see disable-common.inc

* drop machine-id option

private-etc hides it anyway

1 files changed, 2 insertions, 1 deletions

diff --git a/etc/scribus.profile b/etc/scribus.profile
index 7e117dcd1..2ccb5126b 100644
--- a/etc/scribus.profile
+++ b/etc/scribus.profile
@@ -5,7 +5,7 @@ include /etc/firejail/scribus.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
-# Support for PDF readers (Scribus 1.5 and higher)
+# Support for PDF readers comes with Scribus 1.5 and higher
 noblacklist ~/.config/okularpartrc
 noblacklist ~/.config/okularrc
 noblacklist ~/.config/scribus
@@ -30,6 +30,7 @@ caps.drop all
 nonewprivs
 noroot
 nosound
+novideo
 protocol unix
 seccomp
 tracelog