add 'x11 none' to more profiles with 'net none'

13 files changed, 12 insertions, 2 deletions

diff --git a/etc/checkbashisms.profile b/etc/checkbashisms.profile
index 1bb9b1860..fe3202cea 100644
--- a/etc/checkbashisms.profile
+++ b/etc/checkbashisms.profile
@@ -40,6 +40,7 @@ novideo
 protocol unix
 seccomp
 shell none
+x11 none
 
 private-cache
 private-dev
diff --git a/etc/dconf.profile b/etc/dconf.profile
index cf8b4ab43..81763bd94 100644
--- a/etc/dconf.profile
+++ b/etc/dconf.profile
@@ -36,6 +36,7 @@ protocol unix
 seccomp
 shell none
 tracelog
+x11 none
 
 disable-mnt
 private-bin dconf,gsettings
diff --git a/etc/enchant.profile b/etc/enchant.profile
index 288d8799c..d30fb8232 100644
--- a/etc/enchant.profile
+++ b/etc/enchant.profile
@@ -35,6 +35,7 @@ protocol unix
 seccomp
 shell none
 tracelog
+x11 none
 
 private-bin enchant,enchant-*
 private-cache
diff --git a/etc/file.profile b/etc/file.profile
index 2782960c8..69fa7d8cd 100644
--- a/etc/file.profile
+++ b/etc/file.profile
@@ -7,8 +7,6 @@ include file.local
 # Persistent global definitions
 include globals.local
 
-blacklist /tmp/.X11-unix
-
 include disable-common.inc
 include disable-exec.inc
 include disable-passwdmgr.inc
diff --git a/etc/gconf.profile b/etc/gconf.profile
index a795afa17..4baf8c957 100644
--- a/etc/gconf.profile
+++ b/etc/gconf.profile
@@ -42,6 +42,7 @@ protocol unix
 seccomp
 shell none
 tracelog
+x11 none
 
 disable-mnt
 private-bin gconf-editor,gconf-merge-*,gconfpkg,gconftool-2,gsettings-*-convert,python2*
diff --git a/etc/hashcat.profile b/etc/hashcat.profile
index 4ed099fae..da59984d7 100644
--- a/etc/hashcat.profile
+++ b/etc/hashcat.profile
@@ -33,6 +33,7 @@ novideo
 protocol unix
 seccomp
 shell none
+x11 none
 
 disable-mnt
 private-bin hashcat
diff --git a/etc/img2txt.profile b/etc/img2txt.profile
index a36af8abf..19b4e1ed7 100644
--- a/etc/img2txt.profile
+++ b/etc/img2txt.profile
@@ -34,6 +34,7 @@ protocol unix
 seccomp
 shell none
 tracelog
+x11 none
 
 # private-bin img2txt
 private-cache
diff --git a/etc/mp3splt.profile b/etc/mp3splt.profile
index 6cf6f0409..95173a890 100644
--- a/etc/mp3splt.profile
+++ b/etc/mp3splt.profile
@@ -37,6 +37,7 @@ protocol unix
 seccomp
 shell none
 tracelog
+x11 none
 
 disable-mnt
 private-bin flacsplt,mp3splt,mp3wrap,oggsplt
diff --git a/etc/nano.profile b/etc/nano.profile
index 50e251d49..30a6e03e7 100644
--- a/etc/nano.profile
+++ b/etc/nano.profile
@@ -35,6 +35,7 @@ protocol unix
 seccomp
 shell none
 tracelog
+x11 none
 
 # disable-mnt
 private-bin nano,rnano
diff --git a/etc/ncdu.profile b/etc/ncdu.profile
index c18e1c4bf..0d7915839 100644
--- a/etc/ncdu.profile
+++ b/etc/ncdu.profile
@@ -24,6 +24,7 @@ novideo
 protocol unix
 seccomp
 shell none
+x11 none
 
 private-dev
 # private-tmp
diff --git a/etc/pandoc.profile b/etc/pandoc.profile
index 687a31cc2..788324855 100644
--- a/etc/pandoc.profile
+++ b/etc/pandoc.profile
@@ -39,6 +39,7 @@ protocol unix
 seccomp
 shell none
 tracelog
+x11 none
 
 disable-mnt
 private-bin context,latex,mktexfmt,pandoc,pdflatex,pdfroff,prince,weasyprint,wkhtmltopdf
diff --git a/etc/ranger.profile b/etc/ranger.profile
index 13e8911ea..4bbc3ea56 100644
--- a/etc/ranger.profile
+++ b/etc/ranger.profile
@@ -36,5 +36,6 @@ nou2f
 novideo
 protocol unix
 seccomp
+#x11 none
 
 private-dev
diff --git a/etc/spectre-meltdown-checker.profile b/etc/spectre-meltdown-checker.profile
index edbe0e772..ca2c2b435 100644
--- a/etc/spectre-meltdown-checker.profile
+++ b/etc/spectre-meltdown-checker.profile
@@ -38,6 +38,7 @@ novideo
 protocol unix
 seccomp.drop @clock,@cpu-emulation,@module,@obsolete,@reboot,@resources,@swap
 shell none
+x11 none
 
 disable-mnt
 private