More fixes for /etc/profile and mdwe

- Adds noblacklist /etc/profile.d to many profiles like 2e17082ba4b3399bf5d68bb75587934ea028cc5c and 970f739e2be202a39ab82f589d5773267b903de6
- Disables mdwe to workaround #1803 like 970f739e2be202a39ab82f589d5773267b903de6

9 files changed, 10 insertions, 3 deletions

diff --git a/etc/aosp.profile b/etc/aosp.profile
index 5ceef9348..015f0967d 100644
--- a/etc/aosp.profile
+++ b/etc/aosp.profile
@@ -6,6 +6,7 @@ include /etc/firejail/aosp.local
 include /etc/firejail/globals.local
 
 
+noblacklist /etc/profile.d
 noblacklist ${HOME}/.android
 noblacklist ${HOME}/.bash_history
 noblacklist ${HOME}/.gitconfig
diff --git a/etc/atom.profile b/etc/atom.profile
index de09275cc..ec8e0e900 100644
--- a/etc/atom.profile
+++ b/etc/atom.profile
@@ -7,6 +7,7 @@ include /etc/firejail/globals.local
 
 # blacklist /run/user/*/bus
 
+noblacklist /etc/profile.d
 noblacklist ${HOME}/.atom
 noblacklist ${HOME}/.config/Atom
 
diff --git a/etc/baobab.profile b/etc/baobab.profile
index 52f8af82e..e47e31bb1 100644
--- a/etc/baobab.profile
+++ b/etc/baobab.profile
@@ -30,6 +30,6 @@ private-bin baobab
 private-dev
 private-tmp
 
-memory-deny-write-execute
+#memory-deny-write-execute  - breaks on Arch
 noexec ${HOME}
 noexec /tmp
diff --git a/etc/file-roller.profile b/etc/file-roller.profile
index 98b7aad42..bc4e70da4 100644
--- a/etc/file-roller.profile
+++ b/etc/file-roller.profile
@@ -34,6 +34,6 @@ private-dev
 # private-etc fonts
 # private-tmp
 
-memory-deny-write-execute
+#memory-deny-write-execute  - breaks on Arch
 noexec ${HOME}
 noexec /tmp
diff --git a/etc/gedit.profile b/etc/gedit.profile
index 97eb692de..87f89b6be 100644
--- a/etc/gedit.profile
+++ b/etc/gedit.profile
@@ -7,6 +7,7 @@ include /etc/firejail/globals.local
 
 # blacklist /run/user/*/bus - makes settings immutable
 
+noblacklist /etc/profile.d
 noblacklist ${HOME}/.config/enchant
 noblacklist ${HOME}/.config/gedit
 noblacklist ${HOME}/.gitconfig
diff --git a/etc/gnome-builder.profile b/etc/gnome-builder.profile
index a5a48e97a..91e84f9e9 100644
--- a/etc/gnome-builder.profile
+++ b/etc/gnome-builder.profile
@@ -5,6 +5,8 @@ include /etc/firejail/gnome-builder.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
+noblacklist /etc/profile.d
+
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
diff --git a/etc/gnome-calculator.profile b/etc/gnome-calculator.profile
index ce3cb03b4..03e68a5cc 100644
--- a/etc/gnome-calculator.profile
+++ b/etc/gnome-calculator.profile
@@ -34,6 +34,6 @@ private-dev
 private-lib
 private-tmp
 
-memory-deny-write-execute
+#memory-deny-write-execute  - breaks on Arch
 noexec ${HOME}
 noexec /tmp
diff --git a/etc/idea.sh.profile b/etc/idea.sh.profile
index caec416e9..52afe8eb0 100644
--- a/etc/idea.sh.profile
+++ b/etc/idea.sh.profile
@@ -5,6 +5,7 @@ include /etc/firejail/idea.sh.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
+noblacklist /etc/profile.d
 noblacklist ${HOME}/.IdeaIC*
 noblacklist ${HOME}/.android
 noblacklist ${HOME}/.gitconfig
diff --git a/etc/pycharm-community.profile b/etc/pycharm-community.profile
index b5e508d06..65dd3e69e 100644
--- a/etc/pycharm-community.profile
+++ b/etc/pycharm-community.profile
@@ -5,6 +5,7 @@ include /etc/firejail/pycharm-community.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
+noblacklist /etc/profile.d
 noblacklist ${HOME}/snap
 noblacklist ${HOME}/.PyCharmCE*
 noblacklist ${HOME}/.java