private-bin conversion

8 files changed, 28 insertions, 5 deletions

diff --git a/etc/deluge.profile b/etc/deluge.profile
index 277ecc15e..87a17423b 100644
--- a/etc/deluge.profile
+++ b/etc/deluge.profile
@@ -1,4 +1,4 @@
-# deluge bittorernt client profile
+# deluge bittorrernt client profile
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-programs.inc
 # deluge is using python on Debian
@@ -12,3 +12,6 @@ noroot
 nosound
 protocol unix,inet,inet6
 seccomp
+
+shell none
+private-bin deluge,sh,python,uname
diff --git a/etc/disable-devel.inc b/etc/disable-devel.inc
index 0c9d21d39..99f059c44 100644
--- a/etc/disable-devel.inc
+++ b/etc/disable-devel.inc
@@ -37,8 +37,7 @@ blacklist /usr/lib/php*
 blacklist /usr/bin/ruby
 blacklist /usr/lib/ruby
 
-# disabled temporarily pending globbing implementation
-# in noblacklist command and firefox profile fix
+# Programs using python: deluge, some firefox addons
 # Python 2
 #blacklist /usr/bin/python2*
 #blacklist /usr/lib/python2*
diff --git a/etc/mpv.profile b/etc/mpv.profile
index 0a8a6103f..cbed7e8c6 100644
--- a/etc/mpv.profile
+++ b/etc/mpv.profile
@@ -12,3 +12,7 @@ nonewprivs
 noroot
 protocol unix,inet,inet6
 seccomp
+
+# to test
+shell none
+private-bin mpv
diff --git a/etc/qbittorrent.profile b/etc/qbittorrent.profile
index cbf898502..bb97a880b 100644
--- a/etc/qbittorrent.profile
+++ b/etc/qbittorrent.profile
@@ -11,3 +11,6 @@ noroot
 nosound
 protocol unix,inet,inet6
 seccomp
+
+shell none
+private-bin qbittorrent
diff --git a/etc/rtorrent.profile b/etc/rtorrent.profile
index 0be5e15d1..c196370a2 100644
--- a/etc/rtorrent.profile
+++ b/etc/rtorrent.profile
@@ -11,3 +11,6 @@ noroot
 nosound
 protocol unix,inet,inet6
 seccomp
+
+shell none
+private-bin rtorrent
diff --git a/etc/transmission-gtk.profile b/etc/transmission-gtk.profile
index 5aef32d45..e8d0e25e7 100644
--- a/etc/transmission-gtk.profile
+++ b/etc/transmission-gtk.profile
@@ -1,4 +1,4 @@
-# transmission-gtk profile
+# transmission-gtk bittorrent profile
 noblacklist ${HOME}/.config/transmission
 noblacklist ${HOME}/.cache/transmission
 
@@ -15,3 +15,6 @@ nosound
 protocol unix,inet,inet6
 seccomp
 tracelog
+
+shell none
+private-bin transmission-gtk
diff --git a/etc/transmission-qt.profile b/etc/transmission-qt.profile
index d8ab1c60d..fd3a98aad 100644
--- a/etc/transmission-qt.profile
+++ b/etc/transmission-qt.profile
@@ -1,4 +1,4 @@
-# transmission-qt profile
+# transmission-qt bittorrent profile
 noblacklist ${HOME}/.config/transmission
 noblacklist ${HOME}/.cache/transmission
 
@@ -15,3 +15,6 @@ nosound
 protocol unix,inet,inet6
 seccomp
 tracelog
+
+shell none
+private-bin transmission-qt
diff --git a/etc/vlc.profile b/etc/vlc.profile
index f8eebd376..e225e80e9 100644
--- a/etc/vlc.profile
+++ b/etc/vlc.profile
@@ -12,3 +12,8 @@ nonewprivs
 noroot
 protocol unix,inet,inet6
 seccomp
+
+
+# to test
+shell none
+private-bin vlc