27 files changed, 30 insertions, 0 deletions

diff --git a/etc/atom-beta.profile b/etc/atom-beta.profile
index e2c3000c9..3c753e86c 100644
--- a/etc/atom-beta.profile
+++ b/etc/atom-beta.profile
@@ -15,3 +15,5 @@ seccomp
 shell none
 
 private-dev
+nosound
+
diff --git a/etc/atom.profile b/etc/atom.profile
index f996ea79e..8304cd379 100644
--- a/etc/atom.profile
+++ b/etc/atom.profile
@@ -15,3 +15,4 @@ seccomp
 shell none
 
 private-dev
+nosound
diff --git a/etc/bitlbee.profile b/etc/bitlbee.profile
index e63802c8a..4666d2fe7 100644
--- a/etc/bitlbee.profile
+++ b/etc/bitlbee.profile
@@ -10,3 +10,5 @@ private
 private-dev
 protocol unix,inet,inet6
 seccomp
+nosound
+
diff --git a/etc/cpio.profile b/etc/cpio.profile
index b0e59c106..b4d232496 100644
--- a/etc/cpio.profile
+++ b/etc/cpio.profile
@@ -16,6 +16,7 @@ net none
 shell none
 tracelog
 net none
+nosound
 
 
 
diff --git a/etc/deluge.profile b/etc/deluge.profile
index 61bc80bd5..8fde9acf9 100644
--- a/etc/deluge.profile
+++ b/etc/deluge.profile
@@ -17,4 +17,5 @@ shell none
 private-bin deluge,sh,python,uname
 whitelist /tmp/.X11-unix
 private-dev
+nosound
 
diff --git a/etc/dnscrypt-proxy.profile b/etc/dnscrypt-proxy.profile
index bd7e19dc2..90c244e03 100644
--- a/etc/dnscrypt-proxy.profile
+++ b/etc/dnscrypt-proxy.profile
@@ -8,5 +8,6 @@ include /etc/firejail/disable-passwdmgr.inc
 
 private
 private-dev
+nosound
 seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open
 
diff --git a/etc/dnsmasq.profile b/etc/dnsmasq.profile
index 6b199c34b..1c01d44e4 100644
--- a/etc/dnsmasq.profile
+++ b/etc/dnsmasq.profile
@@ -11,5 +11,6 @@ netfilter
 nonewprivs
 private
 private-dev
+nosound
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/fbreader.profile b/etc/fbreader.profile
index 24b35df9a..de31ce8de 100644
--- a/etc/fbreader.profile
+++ b/etc/fbreader.profile
@@ -18,3 +18,4 @@ shell none
 private-bin fbreader,FBReader
 whitelist /tmp/.X11-unix
 private-dev
+nosound
diff --git a/etc/filezilla.profile b/etc/filezilla.profile
index 390769382..551c17a78 100644
--- a/etc/filezilla.profile
+++ b/etc/filezilla.profile
@@ -18,3 +18,5 @@ shell none
 private-bin filezilla,uname,sh,python,lsb_release,fzputtygen,fzsftp
 whitelist /tmp/.X11-unix
 private-dev
+nosound
+
diff --git a/etc/gthumb.profile b/etc/gthumb.profile
index 44e7051a5..c673a1297 100644
--- a/etc/gthumb.profile
+++ b/etc/gthumb.profile
@@ -17,3 +17,4 @@ shell none
 private-bin gthumb
 whitelist /tmp/.X11-unix
 private-dev
+nosound
diff --git a/etc/gwenview.profile b/etc/gwenview.profile
index 65cc084e6..67f10c4e1 100644
--- a/etc/gwenview.profile
+++ b/etc/gwenview.profile
@@ -13,6 +13,7 @@ nogroups
 private-dev
 protocol unix
 seccomp
+nosound
 
 #Experimental:
 #shell none
diff --git a/etc/gzip.profile b/etc/gzip.profile
index 8d35c9f66..cc19e7608 100644
--- a/etc/gzip.profile
+++ b/etc/gzip.profile
@@ -5,3 +5,4 @@ net none
 shell none
 private-dev
 private-tmp
+nosound
diff --git a/etc/hedgewars.profile b/etc/hedgewars.profile
index c5d863bd5..11cd844ce 100644
--- a/etc/hedgewars.profile
+++ b/etc/hedgewars.profile
@@ -12,6 +12,7 @@ noroot
 private-dev
 seccomp
 tracelog
+nosound
 
 mkdir     ~/.hedgewars
 whitelist ~/.hedgewars
diff --git a/etc/less.profile b/etc/less.profile
index 9cad7ceb6..0c43111d7 100644
--- a/etc/less.profile
+++ b/etc/less.profile
@@ -5,3 +5,4 @@ net none
 shell none
 private-dev
 private-tmp
+nosound
diff --git a/etc/libreoffice.profile b/etc/libreoffice.profile
index 6cbdbfd66..77a00ebef 100644
--- a/etc/libreoffice.profile
+++ b/etc/libreoffice.profile
@@ -15,4 +15,5 @@ tracelog
 
 private-dev
 whitelist /tmp/.X11-unix/
+nosound
 
diff --git a/etc/mcabber.profile b/etc/mcabber.profile
index 6b236a9a7..48b46dba0 100644
--- a/etc/mcabber.profile
+++ b/etc/mcabber.profile
@@ -18,3 +18,4 @@ private-bin mcabber
 private-etc null
 private-dev
 shell none
+nosound
diff --git a/etc/okular.profile b/etc/okular.profile
index b1efc4753..c9c342b15 100644
--- a/etc/okular.profile
+++ b/etc/okular.profile
@@ -14,6 +14,7 @@ noroot
 private-dev
 protocol unix
 seccomp
+nosound
 
 #Experimental:
 #net none
diff --git a/etc/pix.profile b/etc/pix.profile
index 87056e32c..81ab7486f 100644
--- a/etc/pix.profile
+++ b/etc/pix.profile
@@ -18,4 +18,5 @@ shell none
 private-bin pix
 whitelist /tmp/.X11-unix
 private-dev
+nosound
 
diff --git a/etc/qbittorrent.profile b/etc/qbittorrent.profile
index c5b9a72e6..138b6db55 100644
--- a/etc/qbittorrent.profile
+++ b/etc/qbittorrent.profile
@@ -17,3 +17,4 @@ seccomp
 #private-bin qbittorrent
 whitelist /tmp/.X11-unix
 private-dev
+nosound
diff --git a/etc/quiterss.profile b/etc/quiterss.profile
index 3e5dde36e..f2b9959f6 100644
--- a/etc/quiterss.profile
+++ b/etc/quiterss.profile
@@ -22,6 +22,7 @@ nogroups
 noroot
 private-bin quiterss
 private-dev
+nosound
 #private-etc X11,ssl
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/rtorrent.profile b/etc/rtorrent.profile
index 1226a51cd..15df2c374 100644
--- a/etc/rtorrent.profile
+++ b/etc/rtorrent.profile
@@ -16,3 +16,4 @@ shell none
 private-bin rtorrent
 whitelist /tmp/.X11-unix
 private-dev
+nosound
diff --git a/etc/server.profile b/etc/server.profile
index 1b3cb7207..88331d951 100644
--- a/etc/server.profile
+++ b/etc/server.profile
@@ -8,6 +8,7 @@ include /etc/firejail/disable-passwdmgr.inc
 
 private
 private-dev
+nosound
 private-tmp
 seccomp
 
diff --git a/etc/strings.profile b/etc/strings.profile
index 9bc67cfb8..881edf4ad 100644
--- a/etc/strings.profile
+++ b/etc/strings.profile
@@ -5,3 +5,4 @@ net none
 shell none
 private-dev
 private-tmp
+nosound
diff --git a/etc/uget-gtk.profile b/etc/uget-gtk.profile
index 2c3c62c5f..269f8f0fd 100644
--- a/etc/uget-gtk.profile
+++ b/etc/uget-gtk.profile
@@ -22,4 +22,5 @@ shell none
 private-bin uget-gtk
 whitelist /tmp/.X11-unix
 private-dev
+nosound
 
diff --git a/etc/unbound.profile b/etc/unbound.profile
index 4365e4fee..5e2cb5f65 100644
--- a/etc/unbound.profile
+++ b/etc/unbound.profile
@@ -8,5 +8,6 @@ include /etc/firejail/disable-passwdmgr.inc
 
 private
 private-dev
+nosound
 seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open
 
diff --git a/etc/wesnoth.profile b/etc/wesnoth.profile
index cd0c6406f..8bd6ef8e1 100644
--- a/etc/wesnoth.profile
+++ b/etc/wesnoth.profile
@@ -15,6 +15,7 @@ protocol unix,inet,inet6
 seccomp
 
 private-dev
+nosound
 
 whitelist /tmp/.X11-unix
 
diff --git a/etc/xzdec.profile b/etc/xzdec.profile
index 1bff66965..ddf2061bf 100644
--- a/etc/xzdec.profile
+++ b/etc/xzdec.profile
@@ -5,3 +5,4 @@ net none
 shell none
 private-dev
 private-tmp
+nosound