Harden meld.profile (#2577)

* Harden meld.profile

* Fix meld.profile

* Update meld.profile

1 files changed, 9 insertions, 0 deletions

diff --git a/etc/meld.profile b/etc/meld.profile
index eab089a3c..af3f501e3 100644
--- a/etc/meld.profile
+++ b/etc/meld.profile
@@ -7,9 +7,15 @@ include meld.local
 include globals.local
 
 noblacklist ${HOME}/.local/share/meld
+noblacklist ${PATH}/python*
+noblacklist /usr/include/python*
+noblacklist /usr/lib/python*
+noblacklist /usr/local/lib/python*
+noblacklist /usr/share/python*
 
 include disable-common.inc
 include disable-devel.inc
+include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
 
@@ -31,10 +37,13 @@ novideo
 protocol unix
 seccomp
 shell none
+tracelog
 
 private-bin meld,python*
 private-cache
 private-dev
+# Uncomment the next line if you don't need to compare in /etc.
+# private-etc fonts,alternatives
 private-tmp
 
 noexec ${HOME}