use 'x11 none' option

... instead of just blacklisting the X11 socket.

Systematically added to all profiles with 'net none' and
'blacklist /tmp/.X11-unix', and a few more

1 files changed, 1 insertions, 2 deletions

diff --git a/etc/unrar.profile b/etc/unrar.profile
index a2e101a58..428173e7d 100644
--- a/etc/unrar.profile
+++ b/etc/unrar.profile
@@ -7,8 +7,6 @@ include unrar.local
 # Persistent global definitions
 include globals.local
 
-blacklist /tmp/.X11-unix
-
 include disable-common.inc
 include disable-devel.inc
 include disable-exec.inc
@@ -35,6 +33,7 @@ protocol unix
 seccomp
 shell none
 tracelog
+x11 none
 
 private-bin unrar
 private-dev