fixup! refactor some profiles as electron redirects (#3188)

 - move ignores to top
 - add remove netlink protocol from whalebird
 - ignore caps.drop all in wire-desktop

3 files changed, 8 insertions, 3 deletions

diff --git a/etc/teams-for-linux.profile b/etc/teams-for-linux.profile
index a3feb42ad..882d8d0f3 100644
--- a/etc/teams-for-linux.profile
+++ b/etc/teams-for-linux.profile
@@ -7,6 +7,8 @@ include teams-for-linux.local
 # added by included profile
 #include globals.local
 
+ignore nodbus
+
 noblacklist ${HOME}/.config/teams-for-linux
 
 include disable-devel.inc
@@ -18,7 +20,6 @@ whitelist ${HOME}/.config/teams-for-linux
 include whitelist-common.inc
 include whitelist-var-common.inc
 
-ignore nodbus
 nou2f
 novideo
 shell none
diff --git a/etc/whalebird.profile b/etc/whalebird.profile
index bed1a8623..2e24dd8e0 100644
--- a/etc/whalebird.profile
+++ b/etc/whalebird.profile
@@ -7,6 +7,8 @@ include whalebird.local
 # added by included profile
 #include globals.local
 
+ignore nodbus
+
 noblacklist ${HOME}/.config/Whalebird
 
 include disable-devel.inc
@@ -19,10 +21,10 @@ whitelist ${HOME}/.config/Whalebird
 include whitelist-common.inc
 include whitelist-var-common.inc
 
-ignore nodbus
 no3d
 nou2f
 novideo
+protocol unix,inet,inet6
 shell none
 
 disable-mnt
diff --git a/etc/wire-desktop.profile b/etc/wire-desktop.profile
index 78c4b418a..3c783322b 100644
--- a/etc/wire-desktop.profile
+++ b/etc/wire-desktop.profile
@@ -9,6 +9,9 @@ include wire-desktop.local
 
 # Debian/Ubuntu use /opt/Wire. As that is not in PATH by default, run `firejail /opt/Wire/wire-desktop` to start it.
 
+ignore caps.drop all
+ignore nodbus
+
 noblacklist ${HOME}/.config/Wire
 
 include disable-devel.inc
@@ -19,7 +22,6 @@ whitelist ${HOME}/.config/Wire
 include whitelist-common.inc
 
 caps.keep sys_admin,sys_chroot
-ignore nodbus
 nou2f
 shell none