Fixes (#2816)

* Unbreak gconf-editor

* Add x11 none to curl.profile

* Add x11 none to wget.profile

* Add x11 none to dnscrypt-proxy.profile

* Add tracelog to ssh-agent.profile

* Add x11 none to aria2c.profile

* Add x11 none to arch-audit.profile

* Add x11 none to archaudit-report.profile

8 files changed, 11 insertions, 7 deletions

diff --git a/etc/arch-audit.profile b/etc/arch-audit.profile
index 2f08fa169..7d12df047 100644
--- a/etc/arch-audit.profile
+++ b/etc/arch-audit.profile
@@ -35,6 +35,7 @@ novideo
 protocol inet,inet6
 seccomp
 shell none
+x11 none
 
 disable-mnt
 private
diff --git a/etc/archaudit-report.profile b/etc/archaudit-report.profile
index 19c37f90e..f79633263 100644
--- a/etc/archaudit-report.profile
+++ b/etc/archaudit-report.profile
@@ -30,6 +30,7 @@ novideo
 protocol unix,inet,inet6
 seccomp
 shell none
+x11 none
 
 disable-mnt
 private
diff --git a/etc/aria2c.profile b/etc/aria2c.profile
index 3b9dfc365..6db82e9c1 100644
--- a/etc/aria2c.profile
+++ b/etc/aria2c.profile
@@ -14,7 +14,6 @@ include disable-exec.inc
 include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
-# include disable-xdg.inc
 
 caps.drop all
 ipc-namespace
@@ -32,6 +31,7 @@ novideo
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
+x11 none
 
 # disable-mnt
 private-bin aria2c,gzip
diff --git a/etc/curl.profile b/etc/curl.profile
index d8282b972..3080f05e6 100644
--- a/etc/curl.profile
+++ b/etc/curl.profile
@@ -9,8 +9,6 @@ include globals.local
 
 noblacklist ${HOME}/.curlrc
 
-blacklist /tmp/.X11-unix
-
 include disable-common.inc
 include disable-exec.inc
 include disable-passwdmgr.inc
@@ -33,6 +31,7 @@ novideo
 protocol inet,inet6
 seccomp
 shell none
+x11 none
 
 # private-bin curl
 private-cache
diff --git a/etc/dnscrypt-proxy.profile b/etc/dnscrypt-proxy.profile
index 169b23f5f..0a5ef6abc 100644
--- a/etc/dnscrypt-proxy.profile
+++ b/etc/dnscrypt-proxy.profile
@@ -9,8 +9,6 @@ include globals.local
 noblacklist /sbin
 noblacklist /usr/sbin
 
-blacklist /tmp/.X11-unix
-
 include disable-common.inc
 include disable-devel.inc
 include disable-exec.inc
@@ -32,6 +30,7 @@ nou2f
 novideo
 protocol inet,inet6
 seccomp.drop _sysctl,acct,add_key,adjtimex,clock_adjtime,delete_module,fanotify_init,finit_module,get_mempolicy,init_module,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioperm,iopl,kcmp,kexec_file_load,kexec_load,keyctl,lookup_dcookie,mbind,migrate_pages,modify_ldt,mount,move_pages,open_by_handle_at,perf_event_open,perf_event_open,pivot_root,process_vm_readv,process_vm_writev,ptrace,remap_file_pages,request_key,set_mempolicy,swapoff,swapon,sysfs,syslog,umount2,uselib,vmsplice
+x11 none
 
 disable-mnt
 private
diff --git a/etc/gconf-editor.profile b/etc/gconf-editor.profile
index 1b84bf536..8d98eebbc 100644
--- a/etc/gconf-editor.profile
+++ b/etc/gconf-editor.profile
@@ -7,5 +7,9 @@ include gconf-editor.local
 # added by included profile
 #include globals.local
 
+blacklist /tmp/.X11-unix
+
+ignore x11 none
+
 # Redirect
 include gconf.profile
diff --git a/etc/ssh-agent.profile b/etc/ssh-agent.profile
index 55df45a87..15e2de9b0 100644
--- a/etc/ssh-agent.profile
+++ b/etc/ssh-agent.profile
@@ -27,5 +27,6 @@ notv
 protocol unix,inet,inet6
 seccomp
 shell none
+tracelog
 
 writable-run-user
diff --git a/etc/wget.profile b/etc/wget.profile
index 2d5c0c4d6..23c3c46ee 100644
--- a/etc/wget.profile
+++ b/etc/wget.profile
@@ -10,8 +10,6 @@ include globals.local
 noblacklist ${HOME}/.wget-hsts
 noblacklist ${HOME}/.wgetrc
 
-blacklist /tmp/.X11-unix
-
 include disable-common.inc
 include disable-exec.inc
 include disable-passwdmgr.inc
@@ -33,6 +31,7 @@ novideo
 protocol unix,inet,inet6
 seccomp
 shell none
+x11 none
 
 # private-bin wget
 private-dev