323 files changed, 323 insertions, 3 deletions

diff --git a/etc/0ad.profile b/etc/0ad.profile
index d20fdb014..674fb2c6a 100644
--- a/etc/0ad.profile
+++ b/etc/0ad.profile
@@ -32,6 +32,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/2048-qt.profile b/etc/2048-qt.profile
index 03e71485a..10f354f19 100644
--- a/etc/2048-qt.profile
+++ b/etc/2048-qt.profile
@@ -30,6 +30,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/7z.profile b/etc/7z.profile
index 909f3baf8..363e301e2 100644
--- a/etc/7z.profile
+++ b/etc/7z.profile
@@ -16,6 +16,7 @@ nodbus
 nodvd
 nosound
 notv
+nou2f
 novideo
 shell none
 tracelog
diff --git a/etc/Cryptocat.profile b/etc/Cryptocat.profile
index cd5229576..e9cc07bd7 100644
--- a/etc/Cryptocat.profile
+++ b/etc/Cryptocat.profile
@@ -21,6 +21,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/Fritzing.profile b/etc/Fritzing.profile
index 1e8fd0ffe..55fb7bae7 100644
--- a/etc/Fritzing.profile
+++ b/etc/Fritzing.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/JDownloader.profile b/etc/JDownloader.profile
index 6eb8886bc..2803ebe07 100644
--- a/etc/JDownloader.profile
+++ b/etc/JDownloader.profile
@@ -38,6 +38,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/XMind.profile b/etc/XMind.profile
index 2f650950c..6b767555c 100644
--- a/etc/XMind.profile
+++ b/etc/XMind.profile
@@ -25,6 +25,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/Xephyr.profile b/etc/Xephyr.profile
index 56e0cf8e7..a95c8989a 100644
--- a/etc/Xephyr.profile
+++ b/etc/Xephyr.profile
@@ -29,6 +29,7 @@ nonewprivs
 # noroot
 nosound
 notv
+nou2f
 protocol unix
 seccomp
 shell none
diff --git a/etc/Xvfb.profile b/etc/Xvfb.profile
index d71a69903..967946a6c 100644
--- a/etc/Xvfb.profile
+++ b/etc/Xvfb.profile
@@ -31,6 +31,7 @@ nonewprivs
 #noroot
 nosound
 notv
+nou2f
 protocol unix
 seccomp
 shell none
diff --git a/etc/akonadi_control.profile b/etc/akonadi_control.profile
index 7ea57e235..4d40e6594 100644
--- a/etc/akonadi_control.profile
+++ b/etc/akonadi_control.profile
@@ -42,6 +42,7 @@ nogroups
 noroot
 nosound
 notv
+nou2f
 novideo
 # protocol unix,inet,inet6
 # seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice
diff --git a/etc/akregator.profile b/etc/akregator.profile
index 8147e33e5..e7d0b74b9 100644
--- a/etc/akregator.profile
+++ b/etc/akregator.profile
@@ -31,6 +31,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 # chroot syscalls are needed for setting up the built-in sandbox
diff --git a/etc/amarok.profile b/etc/amarok.profile
index 71bd87241..6f2e6b3cc 100644
--- a/etc/amarok.profile
+++ b/etc/amarok.profile
@@ -23,6 +23,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 # seccomp
diff --git a/etc/amule.profile b/etc/amule.profile
index a7b6f0770..e969bb1df 100644
--- a/etc/amule.profile
+++ b/etc/amule.profile
@@ -29,6 +29,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/anydesk.profile b/etc/anydesk.profile
index bd66f984b..35b18bab4 100644
--- a/etc/anydesk.profile
+++ b/etc/anydesk.profile
@@ -24,6 +24,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/apktool.profile b/etc/apktool.profile
index 552c35321..bad0c9346 100644
--- a/etc/apktool.profile
+++ b/etc/apktool.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/arch-audit.profile b/etc/arch-audit.profile
index e76f86fa4..7321f4e90 100644
--- a/etc/arch-audit.profile
+++ b/etc/arch-audit.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/ardour5.profile b/etc/ardour5.profile
index 9bce48b91..3c207b5b3 100644
--- a/etc/ardour5.profile
+++ b/etc/ardour5.profile
@@ -28,6 +28,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix
 seccomp
 shell none
diff --git a/etc/aria2c.profile b/etc/aria2c.profile
index bc341d710..3015349b7 100644
--- a/etc/aria2c.profile
+++ b/etc/aria2c.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/ark.profile b/etc/ark.profile
index 75dc76c7f..37211682c 100644
--- a/etc/ark.profile
+++ b/etc/ark.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/arm.profile b/etc/arm.profile
index 667b8f06e..288dd972a 100644
--- a/etc/arm.profile
+++ b/etc/arm.profile
@@ -34,6 +34,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/asunder.profile b/etc/asunder.profile
index 4efe62c39..3167dfe12 100644
--- a/etc/asunder.profile
+++ b/etc/asunder.profile
@@ -28,6 +28,7 @@ nodbus
 # nogroups
 nonewprivs
 noroot
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/atom.profile b/etc/atom.profile
index 0d9626396..ceb68ef3d 100644
--- a/etc/atom.profile
+++ b/etc/atom.profile
@@ -23,6 +23,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/atool.profile b/etc/atool.profile
index d7b02a23a..eabdfbc13 100644
--- a/etc/atool.profile
+++ b/etc/atool.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/atril.profile b/etc/atril.profile
index 85c9c04ca..92fae21d4 100644
--- a/etc/atril.profile
+++ b/etc/atril.profile
@@ -32,6 +32,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/audacious.profile b/etc/audacious.profile
index 9a95769ba..93a2f4b3e 100644
--- a/etc/audacious.profile
+++ b/etc/audacious.profile
@@ -27,6 +27,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/audacity.profile b/etc/audacity.profile
index 44237cdc5..4dd412359 100644
--- a/etc/audacity.profile
+++ b/etc/audacity.profile
@@ -29,6 +29,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/authenticator.profile b/etc/authenticator.profile
index 46473484e..9656bb3d7 100644
--- a/etc/authenticator.profile
+++ b/etc/authenticator.profile
@@ -30,8 +30,8 @@ nonewprivs
 noroot
 nosound
 notv
-# novideo
 nou2f
+# novideo
 protocol unix
 seccomp
 shell none
diff --git a/etc/aweather.profile b/etc/aweather.profile
index 99829898b..d7228570f 100644
--- a/etc/aweather.profile
+++ b/etc/aweather.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile
index d70825ecf..5e749cac1 100644
--- a/etc/baloo_file.profile
+++ b/etc/baloo_file.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 # blacklisting of ioprio_set system calls breaks baloo_file
diff --git a/etc/baobab.profile b/etc/baobab.profile
index 4749601d6..c223b138e 100644
--- a/etc/baobab.profile
+++ b/etc/baobab.profile
@@ -22,6 +22,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/bibletime.profile b/etc/bibletime.profile
index 6c5b7bcad..0691b32c3 100644
--- a/etc/bibletime.profile
+++ b/etc/bibletime.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/bitcoin-qt.profile b/etc/bitcoin-qt.profile
index 2cf42400d..46ce0775b 100644
--- a/etc/bitcoin-qt.profile
+++ b/etc/bitcoin-qt.profile
@@ -32,6 +32,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/bitlbee.profile b/etc/bitlbee.profile
index bceffe4aa..2c2f88ed5 100644
--- a/etc/bitlbee.profile
+++ b/etc/bitlbee.profile
@@ -23,6 +23,7 @@ nodvd
 nonewprivs
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/bleachbit.profile b/etc/bleachbit.profile
index 8163ac400..fa850fe1a 100644
--- a/etc/bleachbit.profile
+++ b/etc/bleachbit.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/blender.profile b/etc/blender.profile
index 05a26220b..77d073cd7 100644
--- a/etc/blender.profile
+++ b/etc/blender.profile
@@ -32,6 +32,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/bless.profile b/etc/bless.profile
index 555424126..cc03107a5 100644
--- a/etc/bless.profile
+++ b/etc/bless.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/bluefish.profile b/etc/bluefish.profile
index 3a3072a6e..ce47cb9ab 100644
--- a/etc/bluefish.profile
+++ b/etc/bluefish.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/brackets.profile b/etc/brackets.profile
index a89f87859..1c03b2119 100644
--- a/etc/brackets.profile
+++ b/etc/brackets.profile
@@ -21,6 +21,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplic
diff --git a/etc/bsdtar.profile b/etc/bsdtar.profile
index da36d9ced..f6864386e 100644
--- a/etc/bsdtar.profile
+++ b/etc/bsdtar.profile
@@ -25,6 +25,7 @@ nonewprivs
 # noroot
 nosound
 notv
+nou2f
 novideo
 nonewprivs
 protocol unix
diff --git a/etc/calibre.profile b/etc/calibre.profile
index 122259ac8..5c7d3e1e7 100644
--- a/etc/calibre.profile
+++ b/etc/calibre.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/calligra.profile b/etc/calligra.profile
index b300ef240..84a60a196 100644
--- a/etc/calligra.profile
+++ b/etc/calligra.profile
@@ -21,6 +21,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/checkbashisms.profile b/etc/checkbashisms.profile
index 4d572f580..601ca58a9 100644
--- a/etc/checkbashisms.profile
+++ b/etc/checkbashisms.profile
@@ -36,6 +36,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/cherrytree.profile b/etc/cherrytree.profile
index 1cb7c50df..134a06c48 100644
--- a/etc/cherrytree.profile
+++ b/etc/cherrytree.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/chromium-common.profile b/etc/chromium-common.profile
index 732a7865f..e7062c5b8 100644
--- a/etc/chromium-common.profile
+++ b/etc/chromium-common.profile
@@ -27,6 +27,7 @@ nodbus
 nodvd
 nogroups
 notv
+nou2f
 shell none
 
 disable-mnt
diff --git a/etc/cin.profile b/etc/cin.profile
index 7a6f7035c..02511c478 100644
--- a/etc/cin.profile
+++ b/etc/cin.profile
@@ -21,6 +21,7 @@ nodvd
 #nogroups
 nonewprivs
 notv
+nou2f
 noroot
 protocol unix
 
diff --git a/etc/clamav.profile b/etc/clamav.profile
index e5b198dab..a48fa8039 100644
--- a/etc/clamav.profile
+++ b/etc/clamav.profile
@@ -18,6 +18,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/clamtk.profile b/etc/clamtk.profile
index 6b64af7d8..c3b5f3ce5 100644
--- a/etc/clamtk.profile
+++ b/etc/clamtk.profile
@@ -16,6 +16,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/clementine.profile b/etc/clementine.profile
index 224488325..147b0de4b 100644
--- a/etc/clementine.profile
+++ b/etc/clementine.profile
@@ -23,6 +23,7 @@ caps.drop all
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 # blacklisting of ioprio_set system calls breaks clementine
diff --git a/etc/clion.profile b/etc/clion.profile
index fba610d29..e230a740d 100644
--- a/etc/clion.profile
+++ b/etc/clion.profile
@@ -23,6 +23,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/clipit.profile b/etc/clipit.profile
index 0caa1faf2..1b3ed8c62 100644
--- a/etc/clipit.profile
+++ b/etc/clipit.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/code.profile b/etc/code.profile
index da710bba1..6528b63ff 100644
--- a/etc/code.profile
+++ b/etc/code.profile
@@ -21,6 +21,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/conky.profile b/etc/conky.profile
index bbac5e751..846868be2 100644
--- a/etc/conky.profile
+++ b/etc/conky.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/corebird.profile b/etc/corebird.profile
index e382c1361..bf2e97356 100644
--- a/etc/corebird.profile
+++ b/etc/corebird.profile
@@ -24,6 +24,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/cower.profile b/etc/cower.profile
index cb2d9b332..ebd83b326 100644
--- a/etc/cower.profile
+++ b/etc/cower.profile
@@ -33,6 +33,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/cpio.profile b/etc/cpio.profile
index ab9e37d73..f63e0a552 100644
--- a/etc/cpio.profile
+++ b/etc/cpio.profile
@@ -24,6 +24,7 @@ nodvd
 nonewprivs
 nosound
 notv
+nou2f
 novideo
 seccomp
 shell none
diff --git a/etc/curl.profile b/etc/curl.profile
index ab9c1e5bd..d20e00740 100644
--- a/etc/curl.profile
+++ b/etc/curl.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/darktable.profile b/etc/darktable.profile
index a4898fd35..af834f90b 100644
--- a/etc/darktable.profile
+++ b/etc/darktable.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/deadbeef.profile b/etc/deadbeef.profile
index 3f818fd69..f751b7bb0 100644
--- a/etc/deadbeef.profile
+++ b/etc/deadbeef.profile
@@ -23,6 +23,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/deluge.profile b/etc/deluge.profile
index b2cb9bf22..cb8bff07e 100644
--- a/etc/deluge.profile
+++ b/etc/deluge.profile
@@ -34,6 +34,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/dex2jar.profile b/etc/dex2jar.profile
index e8dbd00ec..b0226f1e9 100644
--- a/etc/dex2jar.profile
+++ b/etc/dex2jar.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/dia.profile b/etc/dia.profile
index c6adc5a4c..a0075acaf 100644
--- a/etc/dia.profile
+++ b/etc/dia.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/dig.profile b/etc/dig.profile
index 4d4ce7a26..a27ae6be4 100644
--- a/etc/dig.profile
+++ b/etc/dig.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/dillo.profile b/etc/dillo.profile
index ac68f48a3..7103d0285 100644
--- a/etc/dillo.profile
+++ b/etc/dillo.profile
@@ -28,6 +28,7 @@ nodvd
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 tracelog
diff --git a/etc/dino.profile b/etc/dino.profile
index 84731a96f..9844ce81a 100644
--- a/etc/dino.profile
+++ b/etc/dino.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/discord-common.profile b/etc/discord-common.profile
index 765ad21e5..9c6a40e8a 100644
--- a/etc/discord-common.profile
+++ b/etc/discord-common.profile
@@ -20,6 +20,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/display.profile b/etc/display.profile
index 7e553398f..3182aebbe 100644
--- a/etc/display.profile
+++ b/etc/display.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 protocol unix
 seccomp
 shell none
diff --git a/etc/dnscrypt-proxy.profile b/etc/dnscrypt-proxy.profile
index a14e502e5..0dc0cc793 100644
--- a/etc/dnscrypt-proxy.profile
+++ b/etc/dnscrypt-proxy.profile
@@ -24,6 +24,7 @@ nodvd
 nonewprivs
 nosound
 notv
+nou2f
 novideo
 seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open
 
diff --git a/etc/dnsmasq.profile b/etc/dnsmasq.profile
index c1ee03bca..bb41b71d1 100644
--- a/etc/dnsmasq.profile
+++ b/etc/dnsmasq.profile
@@ -24,6 +24,7 @@ nodvd
 nonewprivs
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/dooble.profile b/etc/dooble.profile
index 69765f119..bc4a4c348 100644
--- a/etc/dooble.profile
+++ b/etc/dooble.profile
@@ -26,6 +26,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/dosbox.profile b/etc/dosbox.profile
index 68a67380c..17ccc9b9a 100644
--- a/etc/dosbox.profile
+++ b/etc/dosbox.profile
@@ -25,6 +25,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/dragon.profile b/etc/dragon.profile
index 32cf0c09d..cdf941acd 100644
--- a/etc/dragon.profile
+++ b/etc/dragon.profile
@@ -25,6 +25,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/dropbox.profile b/etc/dropbox.profile
index 8571479c1..1b242d422 100644
--- a/etc/dropbox.profile
+++ b/etc/dropbox.profile
@@ -34,6 +34,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/electrum.profile b/etc/electrum.profile
index d14a88d0a..d24a31299 100644
--- a/etc/electrum.profile
+++ b/etc/electrum.profile
@@ -37,6 +37,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/elinks.profile b/etc/elinks.profile
index 92d5a13fa..6643c5fda 100644
--- a/etc/elinks.profile
+++ b/etc/elinks.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/enchant.profile b/etc/enchant.profile
index 7ca7fdcea..e29e542ab 100644
--- a/etc/enchant.profile
+++ b/etc/enchant.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/engrampa.profile b/etc/engrampa.profile
index 02919f271..b9f2632c4 100644
--- a/etc/engrampa.profile
+++ b/etc/engrampa.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/enpass.profile b/etc/enpass.profile
index e3e146d5d..3208c9454 100644
--- a/etc/enpass.profile
+++ b/etc/enpass.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/eog.profile b/etc/eog.profile
index fada8213f..8cb64009c 100644
--- a/etc/eog.profile
+++ b/etc/eog.profile
@@ -30,6 +30,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/eom.profile b/etc/eom.profile
index 1a248f4e8..7d84cd3b4 100644
--- a/etc/eom.profile
+++ b/etc/eom.profile
@@ -30,6 +30,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/etr.profile b/etc/etr.profile
index 5fc989de3..6c3db897b 100644
--- a/etc/etr.profile
+++ b/etc/etr.profile
@@ -24,6 +24,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,netlink
 seccomp
 shell none
diff --git a/etc/evince.profile b/etc/evince.profile
index 5b5d40077..1702daeff 100644
--- a/etc/evince.profile
+++ b/etc/evince.profile
@@ -30,6 +30,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/evolution.profile b/etc/evolution.profile
index 1c5347e04..1cce0656c 100644
--- a/etc/evolution.profile
+++ b/etc/evolution.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/exiftool.profile b/etc/exiftool.profile
index 8fc99037f..3eac35bac 100644
--- a/etc/exiftool.profile
+++ b/etc/exiftool.profile
@@ -29,6 +29,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/falkon.profile b/etc/falkon.profile
index 140d40a00..9fd446fe1 100644
--- a/etc/falkon.profile
+++ b/etc/falkon.profile
@@ -28,6 +28,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 # blacklisting of chroot system calls breaks falkon
 seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
diff --git a/etc/fbreader.profile b/etc/fbreader.profile
index c31ed5009..701f14dce 100644
--- a/etc/fbreader.profile
+++ b/etc/fbreader.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/feh.profile b/etc/feh.profile
index 8e6ae49de..ddf0fa154 100644
--- a/etc/feh.profile
+++ b/etc/feh.profile
@@ -22,6 +22,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/fetchmail.profile b/etc/fetchmail.profile
index 43c6894a3..46d0bd08e 100644
--- a/etc/fetchmail.profile
+++ b/etc/fetchmail.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/ffmpeg.profile b/etc/ffmpeg.profile
index 5314eb04c..8aa6198df 100644
--- a/etc/ffmpeg.profile
+++ b/etc/ffmpeg.profile
@@ -22,6 +22,7 @@ nodbus
 nodvd
 nosound
 notv
+nou2f
 novideo
 nonewprivs
 noroot
diff --git a/etc/file-roller.profile b/etc/file-roller.profile
index 9ef26d08f..d79b4de4b 100644
--- a/etc/file-roller.profile
+++ b/etc/file-roller.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/file.profile b/etc/file.profile
index 2dc21dde4..daf2a524e 100644
--- a/etc/file.profile
+++ b/etc/file.profile
@@ -23,6 +23,7 @@ nogroups
 nonewprivs
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/filezilla.profile b/etc/filezilla.profile
index f4c25ed05..2e77937ea 100644
--- a/etc/filezilla.profile
+++ b/etc/filezilla.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/firefox-common.profile b/etc/firefox-common.profile
index e02d3afd0..253f1b3bd 100644
--- a/etc/firefox-common.profile
+++ b/etc/firefox-common.profile
@@ -35,6 +35,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
 shell none
diff --git a/etc/flameshot.profile b/etc/flameshot.profile
index 7f626dce3..32e416b34 100644
--- a/etc/flameshot.profile
+++ b/etc/flameshot.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/flowblade.profile b/etc/flowblade.profile
index ecd50bcea..4628b85ee 100644
--- a/etc/flowblade.profile
+++ b/etc/flowblade.profile
@@ -28,6 +28,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/fontforge.profile b/etc/fontforge.profile
index 7fac6f01b..2a833de06 100644
--- a/etc/fontforge.profile
+++ b/etc/fontforge.profile
@@ -30,6 +30,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/franz.profile b/etc/franz.profile
index 751784bea..5ce8954c4 100644
--- a/etc/franz.profile
+++ b/etc/franz.profile
@@ -30,6 +30,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/freecad.profile b/etc/freecad.profile
index 7585b9786..11fe3245c 100644
--- a/etc/freecad.profile
+++ b/etc/freecad.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/freshclam.profile b/etc/freshclam.profile
index f688ba47b..2dd55d8cc 100644
--- a/etc/freshclam.profile
+++ b/etc/freshclam.profile
@@ -16,6 +16,7 @@ nogroups
 nonewprivs
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/frozen-bubble.profile b/etc/frozen-bubble.profile
index 493d11da6..3697252e7 100644
--- a/etc/frozen-bubble.profile
+++ b/etc/frozen-bubble.profile
@@ -27,6 +27,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,netlink
 seccomp
 shell none
diff --git a/etc/gajim.profile b/etc/gajim.profile
index 82ae53545..b60437c6e 100644
--- a/etc/gajim.profile
+++ b/etc/gajim.profile
@@ -38,6 +38,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 
diff --git a/etc/galculator.profile b/etc/galculator.profile
index d000015b3..323c880a8 100644
--- a/etc/galculator.profile
+++ b/etc/galculator.profile
@@ -29,6 +29,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/gcloud.profile b/etc/gcloud.profile
index d800932bb..5aa73b38f 100644
--- a/etc/gcloud.profile
+++ b/etc/gcloud.profile
@@ -24,6 +24,7 @@ nodvd
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/geany.profile b/etc/geany.profile
index 7389f8e6c..a236ea2c5 100644
--- a/etc/geany.profile
+++ b/etc/geany.profile
@@ -21,6 +21,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gedit.profile b/etc/gedit.profile
index 3d3ecfab2..d537f1294 100644
--- a/etc/gedit.profile
+++ b/etc/gedit.profile
@@ -30,6 +30,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/geeqie.profile b/etc/geeqie.profile
index a54ed16a2..a7d82b5fb 100644
--- a/etc/geeqie.profile
+++ b/etc/geeqie.profile
@@ -23,6 +23,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/gimp.profile b/etc/gimp.profile
index 0e52f54eb..9b14b1fe8 100644
--- a/etc/gimp.profile
+++ b/etc/gimp.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 protocol unix
 seccomp
 shell none
diff --git a/etc/git.profile b/etc/git.profile
index c3fd6fe94..7d4392c80 100644
--- a/etc/git.profile
+++ b/etc/git.profile
@@ -30,6 +30,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gitg.profile b/etc/gitg.profile
index c0634c231..f6d78cc54 100644
--- a/etc/gitg.profile
+++ b/etc/gitg.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gitter.profile b/etc/gitter.profile
index 5278f7a71..d8439fa79 100644
--- a/etc/gitter.profile
+++ b/etc/gitter.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/gjs.profile b/etc/gjs.profile
index 5e3370066..9c7aa5700 100644
--- a/etc/gjs.profile
+++ b/etc/gjs.profile
@@ -26,6 +26,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/globaltime.profile b/etc/globaltime.profile
index 44b17eace..c007fb0cc 100644
--- a/etc/globaltime.profile
+++ b/etc/globaltime.profile
@@ -23,6 +23,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gnome-2048.profile b/etc/gnome-2048.profile
index 166669a19..ce83fbb66 100644
--- a/etc/gnome-2048.profile
+++ b/etc/gnome-2048.profile
@@ -26,6 +26,7 @@ nodvd
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gnome-books.profile b/etc/gnome-books.profile
index a55b3f574..c748cf7e3 100644
--- a/etc/gnome-books.profile
+++ b/etc/gnome-books.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/gnome-builder.profile b/etc/gnome-builder.profile
index 70bbd53bd..dffe16263 100644
--- a/etc/gnome-builder.profile
+++ b/etc/gnome-builder.profile
@@ -19,6 +19,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gnome-calculator.profile b/etc/gnome-calculator.profile
index 3a2aa5c1d..7974211c7 100644
--- a/etc/gnome-calculator.profile
+++ b/etc/gnome-calculator.profile
@@ -29,6 +29,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gnome-chess.profile b/etc/gnome-chess.profile
index 4dfbbba0c..fbd8c22c0 100644
--- a/etc/gnome-chess.profile
+++ b/etc/gnome-chess.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/gnome-clocks.profile b/etc/gnome-clocks.profile
index a6514f44f..54356a1b7 100644
--- a/etc/gnome-clocks.profile
+++ b/etc/gnome-clocks.profile
@@ -24,6 +24,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gnome-contacts.profile b/etc/gnome-contacts.profile
index 22121fda8..2a13b3b27 100644
--- a/etc/gnome-contacts.profile
+++ b/etc/gnome-contacts.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/gnome-documents.profile b/etc/gnome-documents.profile
index abb9c7304..36b69ce90 100644
--- a/etc/gnome-documents.profile
+++ b/etc/gnome-documents.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/gnome-font-viewer.profile b/etc/gnome-font-viewer.profile
index a9793b7b3..c616b7381 100644
--- a/etc/gnome-font-viewer.profile
+++ b/etc/gnome-font-viewer.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gnome-logs.profile b/etc/gnome-logs.profile
index 613a56350..f89684219 100644
--- a/etc/gnome-logs.profile
+++ b/etc/gnome-logs.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/gnome-maps.profile b/etc/gnome-maps.profile
index 62a1241cc..d27d90d29 100644
--- a/etc/gnome-maps.profile
+++ b/etc/gnome-maps.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gnome-mplayer.profile b/etc/gnome-mplayer.profile
index 96adf7a5c..3dd623ea9 100644
--- a/etc/gnome-mplayer.profile
+++ b/etc/gnome-mplayer.profile
@@ -21,6 +21,7 @@ caps.drop all
 nogroups
 nonewprivs
 noroot
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/gnome-mpv.profile b/etc/gnome-mpv.profile
index 3d04470b7..ffb04add1 100644
--- a/etc/gnome-mpv.profile
+++ b/etc/gnome-mpv.profile
@@ -24,6 +24,7 @@ nodbus
 nogroups
 nonewprivs
 noroot
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/gnome-music.profile b/etc/gnome-music.profile
index b902f51bc..54e055358 100644
--- a/etc/gnome-music.profile
+++ b/etc/gnome-music.profile
@@ -31,6 +31,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/gnome-photos.profile b/etc/gnome-photos.profile
index 8b982156b..2e3356607 100644
--- a/etc/gnome-photos.profile
+++ b/etc/gnome-photos.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 protocol unix
 seccomp
 shell none
diff --git a/etc/gnome-recipes.profile b/etc/gnome-recipes.profile
index 867ea8561..761c604ff 100644
--- a/etc/gnome-recipes.profile
+++ b/etc/gnome-recipes.profile
@@ -29,6 +29,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gnome-twitch.profile b/etc/gnome-twitch.profile
index 2016f6c6e..4b54d9627 100644
--- a/etc/gnome-twitch.profile
+++ b/etc/gnome-twitch.profile
@@ -27,6 +27,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gnome-weather.profile b/etc/gnome-weather.profile
index f1035ce7e..6b5f5480d 100644
--- a/etc/gnome-weather.profile
+++ b/etc/gnome-weather.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/goobox.profile b/etc/goobox.profile
index 32cfc2f58..3cc159eb2 100644
--- a/etc/goobox.profile
+++ b/etc/goobox.profile
@@ -22,6 +22,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/google-earth.profile b/etc/google-earth.profile
index 7e261ecc7..6e5f99745 100644
--- a/etc/google-earth.profile
+++ b/etc/google-earth.profile
@@ -37,6 +37,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/google-play-music-desktop-player.profile b/etc/google-play-music-desktop-player.profile
index 73041bada..4932c9e42 100644
--- a/etc/google-play-music-desktop-player.profile
+++ b/etc/google-play-music-desktop-player.profile
@@ -26,6 +26,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/gpa.profile b/etc/gpa.profile
index d8083fc96..ce7c8496d 100644
--- a/etc/gpa.profile
+++ b/etc/gpa.profile
@@ -22,6 +22,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gpg-agent.profile b/etc/gpg-agent.profile
index 73a587136..7181837d5 100644
--- a/etc/gpg-agent.profile
+++ b/etc/gpg-agent.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gpg.profile b/etc/gpg.profile
index a801d7d09..e920b9072 100644
--- a/etc/gpg.profile
+++ b/etc/gpg.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/gpicview.profile b/etc/gpicview.profile
index 8f4b64cfc..d3e1123f3 100644
--- a/etc/gpicview.profile
+++ b/etc/gpicview.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/gpredict.profile b/etc/gpredict.profile
index 760a647ba..76a10f697 100644
--- a/etc/gpredict.profile
+++ b/etc/gpredict.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/gthumb.profile b/etc/gthumb.profile
index e08ebcdcd..77de59802 100644
--- a/etc/gthumb.profile
+++ b/etc/gthumb.profile
@@ -23,6 +23,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/guayadeque.profile b/etc/guayadeque.profile
index 0b83ea250..22457c547 100644
--- a/etc/guayadeque.profile
+++ b/etc/guayadeque.profile
@@ -21,6 +21,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/gucharmap.profile b/etc/gucharmap.profile
index 978757612..13db746f8 100644
--- a/etc/gucharmap.profile
+++ b/etc/gucharmap.profile
@@ -23,6 +23,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/gwenview.profile b/etc/gwenview.profile
index f2bf94209..8723b0135 100644
--- a/etc/gwenview.profile
+++ b/etc/gwenview.profile
@@ -34,6 +34,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/gzip.profile b/etc/gzip.profile
index 4a24736a7..16ca6b94d 100644
--- a/etc/gzip.profile
+++ b/etc/gzip.profile
@@ -17,6 +17,7 @@ nodbus
 nodvd
 nosound
 notv
+nou2f
 novideo
 shell none
 tracelog
diff --git a/etc/handbrake.profile b/etc/handbrake.profile
index 57f706d72..a98f80bc7 100644
--- a/etc/handbrake.profile
+++ b/etc/handbrake.profile
@@ -26,6 +26,7 @@ nodbus
 nogroups
 nonewprivs
 noroot
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/hashcat.profile b/etc/hashcat.profile
index 353f9e638..bf4836c45 100644
--- a/etc/hashcat.profile
+++ b/etc/hashcat.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/hedgewars.profile b/etc/hedgewars.profile
index 39309f482..4dfb40890 100644
--- a/etc/hedgewars.profile
+++ b/etc/hedgewars.profile
@@ -25,6 +25,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 seccomp
 tracelog
 
diff --git a/etc/hexchat.profile b/etc/hexchat.profile
index ffe7909c2..783f91e82 100644
--- a/etc/hexchat.profile
+++ b/etc/hexchat.profile
@@ -36,6 +36,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/highlight.profile b/etc/highlight.profile
index 2dc8ac470..ae2cce0b4 100644
--- a/etc/highlight.profile
+++ b/etc/highlight.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/hugin.profile b/etc/hugin.profile
index 1b345fdc2..1e235f381 100644
--- a/etc/hugin.profile
+++ b/etc/hugin.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/idea.sh.profile b/etc/idea.sh.profile
index 1c1158707..bbacef764 100644
--- a/etc/idea.sh.profile
+++ b/etc/idea.sh.profile
@@ -27,6 +27,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/imagej.profile b/etc/imagej.profile
index 9fff11d31..9ff0f9203 100644
--- a/etc/imagej.profile
+++ b/etc/imagej.profile
@@ -30,6 +30,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/img2txt.profile b/etc/img2txt.profile
index 63ce645a5..6f860a3d4 100644
--- a/etc/img2txt.profile
+++ b/etc/img2txt.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/inkscape.profile b/etc/inkscape.profile
index afd979327..a13f5c378 100644
--- a/etc/inkscape.profile
+++ b/etc/inkscape.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/itch.profile b/etc/itch.profile
index 83ee20f23..c0b4fe6ce 100644
--- a/etc/itch.profile
+++ b/etc/itch.profile
@@ -27,6 +27,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/jd-gui.profile b/etc/jd-gui.profile
index 65b6e3c5b..443e6b550 100644
--- a/etc/jd-gui.profile
+++ b/etc/jd-gui.profile
@@ -33,6 +33,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/kaffeine.profile b/etc/kaffeine.profile
index 3e9456ba0..85870da36 100644
--- a/etc/kaffeine.profile
+++ b/etc/kaffeine.profile
@@ -29,6 +29,7 @@ netfilter
 nogroups
 nonewprivs
 noroot
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/kate.profile b/etc/kate.profile
index e0aa78b26..cce36eacc 100644
--- a/etc/kate.profile
+++ b/etc/kate.profile
@@ -33,6 +33,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/kcalc.profile b/etc/kcalc.profile
index 03df23ec1..8baefaa98 100644
--- a/etc/kcalc.profile
+++ b/etc/kcalc.profile
@@ -33,6 +33,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/kdeinit4.profile b/etc/kdeinit4.profile
index f853b1812..cd7c4cae3 100644
--- a/etc/kdeinit4.profile
+++ b/etc/kdeinit4.profile
@@ -22,6 +22,7 @@ nogroups
 nonewprivs
 # nosound - disabled for knotify
 noroot
+nou2f
 novideo
 notv
 protocol unix,inet,inet6,netlink
diff --git a/etc/kdenlive.profile b/etc/kdenlive.profile
index 1d7b2ff53..2ef44bc7f 100644
--- a/etc/kdenlive.profile
+++ b/etc/kdenlive.profile
@@ -25,6 +25,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,netlink
 seccomp
 shell none
diff --git a/etc/keepass.profile b/etc/keepass.profile
index 96b522f17..788561a14 100644
--- a/etc/keepass.profile
+++ b/etc/keepass.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/keepassx.profile b/etc/keepassx.profile
index eb8d2e235..fc9386618 100644
--- a/etc/keepassx.profile
+++ b/etc/keepassx.profile
@@ -32,6 +32,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/keepassxc.profile b/etc/keepassxc.profile
index bb0ec602f..053344cc2 100644
--- a/etc/keepassxc.profile
+++ b/etc/keepassxc.profile
@@ -34,6 +34,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/kget.profile b/etc/kget.profile
index 582b297f9..2ef84a0ee 100644
--- a/etc/kget.profile
+++ b/etc/kget.profile
@@ -29,6 +29,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/kino.profile b/etc/kino.profile
index 31613259c..ead42f9ca 100644
--- a/etc/kino.profile
+++ b/etc/kino.profile
@@ -21,6 +21,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/kmail.profile b/etc/kmail.profile
index 89c591280..1f8403ef1 100644
--- a/etc/kmail.profile
+++ b/etc/kmail.profile
@@ -46,6 +46,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 # we need to allow chroot, io_getevents, ioprio_set, io_setup, io_submit system calls
diff --git a/etc/kodi.profile b/etc/kodi.profile
index f02dec787..3a161db4c 100644
--- a/etc/kodi.profile
+++ b/etc/kodi.profile
@@ -32,6 +32,7 @@ netfilter
 nogroups
 nonewprivs
 noroot
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/konversation.profile b/etc/konversation.profile
index dff8bbab4..c679bd61b 100644
--- a/etc/konversation.profile
+++ b/etc/konversation.profile
@@ -25,6 +25,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/kopete.profile b/etc/kopete.profile
index 0ac7c7e97..fef415f6e 100644
--- a/etc/kopete.profile
+++ b/etc/kopete.profile
@@ -27,6 +27,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 writable-var
diff --git a/etc/krita.profile b/etc/krita.profile
index ba3bb820f..bd02522f6 100644
--- a/etc/krita.profile
+++ b/etc/krita.profile
@@ -35,6 +35,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/ktorrent.profile b/etc/ktorrent.profile
index 344d1f932..4dc635df7 100644
--- a/etc/ktorrent.profile
+++ b/etc/ktorrent.profile
@@ -45,6 +45,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/kwin_x11.profile b/etc/kwin_x11.profile
index a7a42d5ad..4cb489577 100644
--- a/etc/kwin_x11.profile
+++ b/etc/kwin_x11.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/kwrite.profile b/etc/kwrite.profile
index bde981737..9922cb0b5 100644
--- a/etc/kwrite.profile
+++ b/etc/kwrite.profile
@@ -35,6 +35,7 @@ nonewprivs
 noroot
 # nosound - KWrite is using ALSA!
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/leafpad.profile b/etc/leafpad.profile
index f4e04bf0c..47ea5606a 100644
--- a/etc/leafpad.profile
+++ b/etc/leafpad.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/less.profile b/etc/less.profile
index b083c3809..466539c6b 100644
--- a/etc/less.profile
+++ b/etc/less.profile
@@ -17,6 +17,7 @@ nodbus
 nodvd
 nosound
 notv
+nou2f
 novideo
 shell none
 tracelog
diff --git a/etc/libreoffice.profile b/etc/libreoffice.profile
index fb582508e..1a3f6cbd1 100644
--- a/etc/libreoffice.profile
+++ b/etc/libreoffice.profile
@@ -36,6 +36,7 @@ nogroups
 #nonewprivs - fix for Ubuntu 18.04/Debian 10
 noroot
 notv
+nou2f
 #protocol unix,inet,inet6  - fix for Ubuntu 18.04/Debian 10
 #seccomp  - fix for Ubuntu 18.04/Debian 10
 shell none
diff --git a/etc/liferea.profile b/etc/liferea.profile
index 3d83ffd22..c498541d4 100644
--- a/etc/liferea.profile
+++ b/etc/liferea.profile
@@ -40,6 +40,7 @@ nonewprivs
 noroot
 # nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/linphone.profile b/etc/linphone.profile
index a3e072509..feb4037fb 100644
--- a/etc/linphone.profile
+++ b/etc/linphone.profile
@@ -30,6 +30,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/lmms.profile b/etc/lmms.profile
index 1534b57a0..6c81b9172 100644
--- a/etc/lmms.profile
+++ b/etc/lmms.profile
@@ -27,6 +27,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/lollypop.profile b/etc/lollypop.profile
index b279602ef..6e53fc62b 100644
--- a/etc/lollypop.profile
+++ b/etc/lollypop.profile
@@ -31,6 +31,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/luminance-hdr.profile b/etc/luminance-hdr.profile
index 0b43a0b71..38f2ab10c 100644
--- a/etc/luminance-hdr.profile
+++ b/etc/luminance-hdr.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/lximage-qt.profile b/etc/lximage-qt.profile
index 6e310c509..c275a69c8 100644
--- a/etc/lximage-qt.profile
+++ b/etc/lximage-qt.profile
@@ -23,6 +23,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/lxmusic.profile b/etc/lxmusic.profile
index 219f312e5..e0c03db50 100644
--- a/etc/lxmusic.profile
+++ b/etc/lxmusic.profile
@@ -27,6 +27,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/lynx.profile b/etc/lynx.profile
index 6fcd026dc..e8d44823b 100644
--- a/etc/lynx.profile
+++ b/etc/lynx.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/macrofusion.profile b/etc/macrofusion.profile
index e1d940425..170085117 100644
--- a/etc/macrofusion.profile
+++ b/etc/macrofusion.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/mate-calc.profile b/etc/mate-calc.profile
index 46bd7aa2e..e3220076d 100644
--- a/etc/mate-calc.profile
+++ b/etc/mate-calc.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/mate-color-select.profile b/etc/mate-color-select.profile
index b4cf0b38a..1ba744d5a 100644
--- a/etc/mate-color-select.profile
+++ b/etc/mate-color-select.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/mate-dictionary.profile b/etc/mate-dictionary.profile
index 10978df20..ba179dfdd 100644
--- a/etc/mate-dictionary.profile
+++ b/etc/mate-dictionary.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/mcabber.profile b/etc/mcabber.profile
index 1a1c255e7..ea4cb0250 100644
--- a/etc/mcabber.profile
+++ b/etc/mcabber.profile
@@ -22,6 +22,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol inet,inet6
 seccomp
diff --git a/etc/mediainfo.profile b/etc/mediainfo.profile
index 5e636c107..115444e0f 100644
--- a/etc/mediainfo.profile
+++ b/etc/mediainfo.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/mediathekview.profile b/etc/mediathekview.profile
index b9a6416bb..06e140990 100644
--- a/etc/mediathekview.profile
+++ b/etc/mediathekview.profile
@@ -38,6 +38,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/meld.profile b/etc/meld.profile
index 3c028e064..2b87094fb 100644
--- a/etc/meld.profile
+++ b/etc/meld.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/min.profile b/etc/min.profile
index 9cef737a8..3029c2952 100644
--- a/etc/min.profile
+++ b/etc/min.profile
@@ -33,6 +33,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/minetest.profile b/etc/minetest.profile
index c1aef8aa6..17b39f7c6 100644
--- a/etc/minetest.profile
+++ b/etc/minetest.profile
@@ -28,6 +28,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/mousepad.profile b/etc/mousepad.profile
index 8e789f112..4500f74a5 100644
--- a/etc/mousepad.profile
+++ b/etc/mousepad.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 protocol unix
 seccomp
 shell none
diff --git a/etc/mpd.profile b/etc/mpd.profile
index 70a438fb7..4f0977c40 100644
--- a/etc/mpd.profile
+++ b/etc/mpd.profile
@@ -25,6 +25,7 @@ nodvd
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/mplayer.profile b/etc/mplayer.profile
index fbe6200fa..8c0b50eca 100644
--- a/etc/mplayer.profile
+++ b/etc/mplayer.profile
@@ -24,6 +24,7 @@ netfilter
 # nogroups
 nonewprivs
 noroot
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/mpv.profile b/etc/mpv.profile
index b521e58b9..3d73a8eae 100644
--- a/etc/mpv.profile
+++ b/etc/mpv.profile
@@ -34,6 +34,7 @@ nodbus
 nogroups
 nonewprivs
 noroot
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/ms-office.profile b/etc/ms-office.profile
index 61478fd07..6c8cb213f 100644
--- a/etc/ms-office.profile
+++ b/etc/ms-office.profile
@@ -28,6 +28,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/multimc5.profile b/etc/multimc5.profile
index b73857826..75e6e2804 100644
--- a/etc/multimc5.profile
+++ b/etc/multimc5.profile
@@ -35,6 +35,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 # seccomp
diff --git a/etc/mupdf.profile b/etc/mupdf.profile
index 17658e2ef..011e85c0e 100644
--- a/etc/mupdf.profile
+++ b/etc/mupdf.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/musixmatch.profile b/etc/musixmatch.profile
index 2b8e5b256..d5fde525e 100644
--- a/etc/musixmatch.profile
+++ b/etc/musixmatch.profile
@@ -24,6 +24,7 @@ noroot
 nogroups 
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/mutt.profile b/etc/mutt.profile
index a05227125..b092f2333 100644
--- a/etc/mutt.profile
+++ b/etc/mutt.profile
@@ -47,6 +47,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/ncdu.profile b/etc/ncdu.profile
index d8f9f62ff..ac0fd19b2 100644
--- a/etc/ncdu.profile
+++ b/etc/ncdu.profile
@@ -17,6 +17,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/neverball.profile b/etc/neverball.profile
index 207774ed0..34493485a 100644
--- a/etc/neverball.profile
+++ b/etc/neverball.profile
@@ -25,6 +25,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,netlink
 seccomp
diff --git a/etc/nylas.profile b/etc/nylas.profile
index 935ab8f8a..263e09198 100644
--- a/etc/nylas.profile
+++ b/etc/nylas.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/obs.profile b/etc/obs.profile
index 3e228365d..87afdc222 100644
--- a/etc/obs.profile
+++ b/etc/obs.profile
@@ -31,6 +31,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/odt2txt.profile b/etc/odt2txt.profile
index b9c525f0c..3a1369b83 100644
--- a/etc/odt2txt.profile
+++ b/etc/odt2txt.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/okular.profile b/etc/okular.profile
index 80407ac3a..0192a1d3d 100644
--- a/etc/okular.profile
+++ b/etc/okular.profile
@@ -39,6 +39,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/onionshare-gui.profile b/etc/onionshare-gui.profile
index 6db776f6a..1955901b0 100644
--- a/etc/onionshare-gui.profile
+++ b/etc/onionshare-gui.profile
@@ -29,6 +29,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/open-invaders.profile b/etc/open-invaders.profile
index dc00e47a1..108398104 100644
--- a/etc/open-invaders.profile
+++ b/etc/open-invaders.profile
@@ -26,6 +26,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,netlink
 seccomp
 shell none
diff --git a/etc/openshot.profile b/etc/openshot.profile
index fd69b8dbf..e383ecf06 100644
--- a/etc/openshot.profile
+++ b/etc/openshot.profile
@@ -32,6 +32,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/orage.profile b/etc/orage.profile
index 17a40a173..29b8ef749 100644
--- a/etc/orage.profile
+++ b/etc/orage.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/patch.profile b/etc/patch.profile
index 44b3cd677..26542e229 100644
--- a/etc/patch.profile
+++ b/etc/patch.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/pdfchain.profile b/etc/pdfchain.profile
index 6fe76360b..f0db20b74 100644
--- a/etc/pdfchain.profile
+++ b/etc/pdfchain.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/pdfmod.profile b/etc/pdfmod.profile
index 6853efd24..3b6116c85 100644
--- a/etc/pdfmod.profile
+++ b/etc/pdfmod.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/pdfsam.profile b/etc/pdfsam.profile
index 8ba0e6a10..4eed98e88 100644
--- a/etc/pdfsam.profile
+++ b/etc/pdfsam.profile
@@ -33,6 +33,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/pdftotext.profile b/etc/pdftotext.profile
index 8e7951e81..6b2b0fba5 100644
--- a/etc/pdftotext.profile
+++ b/etc/pdftotext.profile
@@ -29,6 +29,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/peek.profile b/etc/peek.profile
index a3c64e1b4..06e7b3e62 100644
--- a/etc/peek.profile
+++ b/etc/peek.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/picard.profile b/etc/picard.profile
index b4d4fd597..dc13d7d6e 100644
--- a/etc/picard.profile
+++ b/etc/picard.profile
@@ -33,6 +33,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/pidgin.profile b/etc/pidgin.profile
index 0d4aebc50..91a204557 100644
--- a/etc/pidgin.profile
+++ b/etc/pidgin.profile
@@ -21,6 +21,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/ping.profile b/etc/ping.profile
index 259b86a26..bdd29c1a1 100644
--- a/etc/ping.profile
+++ b/etc/ping.profile
@@ -27,6 +27,7 @@ nogroups
 #noroot
 nosound
 notv
+nou2f
 novideo
 
 # protocol command is built using seccomp; nonewprivs will kill it
@@ -47,5 +48,3 @@ private-tmp
 #memory-deny-write-execute
 noexec ${HOME}
 noexec /tmp
-
-
diff --git a/etc/pingus.profile b/etc/pingus.profile
index 56b6036d9..f071e664f 100644
--- a/etc/pingus.profile
+++ b/etc/pingus.profile
@@ -26,6 +26,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,netlink
 seccomp
 shell none
diff --git a/etc/pinta.profile b/etc/pinta.profile
index 1e0611516..3dfe3cc1b 100644
--- a/etc/pinta.profile
+++ b/etc/pinta.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/pithos.profile b/etc/pithos.profile
index 9309ffdcc..b201dcfea 100644
--- a/etc/pithos.profile
+++ b/etc/pithos.profile
@@ -30,6 +30,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/pitivi.profile b/etc/pitivi.profile
index bce2f795f..5bd6fd357 100644
--- a/etc/pitivi.profile
+++ b/etc/pitivi.profile
@@ -31,6 +31,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/pix.profile b/etc/pix.profile
index 5734effde..9864ed718 100644
--- a/etc/pix.profile
+++ b/etc/pix.profile
@@ -23,6 +23,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/pluma.profile b/etc/pluma.profile
index 4e0dc3505..35b141c1a 100644
--- a/etc/pluma.profile
+++ b/etc/pluma.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/polari.profile b/etc/polari.profile
index 5aa1f6a46..5fa717cb3 100644
--- a/etc/polari.profile
+++ b/etc/polari.profile
@@ -35,6 +35,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/psi-plus.profile b/etc/psi-plus.profile
index d04690cf9..7ec789440 100644
--- a/etc/psi-plus.profile
+++ b/etc/psi-plus.profile
@@ -32,6 +32,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/pybitmessage.profile b/etc/pybitmessage.profile
index 94abe0a5c..eea0d9e9f 100644
--- a/etc/pybitmessage.profile
+++ b/etc/pybitmessage.profile
@@ -33,6 +33,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/pycharm-community.profile b/etc/pycharm-community.profile
index aa145498c..32fdc750f 100644
--- a/etc/pycharm-community.profile
+++ b/etc/pycharm-community.profile
@@ -26,6 +26,7 @@ nodvd
 nogroups
 nosound
 notv
+nou2f
 novideo
 shell none
 tracelog
diff --git a/etc/qbittorrent.profile b/etc/qbittorrent.profile
index e5568a2fa..b6b94c703 100644
--- a/etc/qbittorrent.profile
+++ b/etc/qbittorrent.profile
@@ -45,6 +45,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/qlipper.profile b/etc/qlipper.profile
index 3aa6c1a59..ec0b6c64d 100644
--- a/etc/qlipper.profile
+++ b/etc/qlipper.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/qmmp.profile b/etc/qmmp.profile
index fccd6b1f8..66c27a585 100644
--- a/etc/qmmp.profile
+++ b/etc/qmmp.profile
@@ -23,6 +23,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/qpdfview.profile b/etc/qpdfview.profile
index 851cad4ae..06598c769 100644
--- a/etc/qpdfview.profile
+++ b/etc/qpdfview.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/qtox.profile b/etc/qtox.profile
index 0cd434b08..450e005f7 100644
--- a/etc/qtox.profile
+++ b/etc/qtox.profile
@@ -28,6 +28,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/quiterss.profile b/etc/quiterss.profile
index 3d979a5b2..ce0816114 100644
--- a/etc/quiterss.profile
+++ b/etc/quiterss.profile
@@ -37,6 +37,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/qupzilla.profile b/etc/qupzilla.profile
index ad04b892d..efee6ce84 100644
--- a/etc/qupzilla.profile
+++ b/etc/qupzilla.profile
@@ -27,6 +27,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 # blacklisting of chroot system calls breaks qupzilla
 seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
diff --git a/etc/ranger.profile b/etc/ranger.profile
index ea3137512..f582b8dfb 100644
--- a/etc/ranger.profile
+++ b/etc/ranger.profile
@@ -35,6 +35,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/redeclipse.profile b/etc/redeclipse.profile
index 100ee57e3..278514538 100644
--- a/etc/redeclipse.profile
+++ b/etc/redeclipse.profile
@@ -26,6 +26,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/remmina.profile b/etc/remmina.profile
index d23c1dc6d..888f3819f 100644
--- a/etc/remmina.profile
+++ b/etc/remmina.profile
@@ -26,6 +26,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/rhythmbox.profile b/etc/rhythmbox.profile
index 39330b4d1..f9b7115ac 100644
--- a/etc/rhythmbox.profile
+++ b/etc/rhythmbox.profile
@@ -27,6 +27,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/ricochet.profile b/etc/ricochet.profile
index 715642185..cbdc28cf6 100644
--- a/etc/ricochet.profile
+++ b/etc/ricochet.profile
@@ -27,6 +27,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/ristretto.profile b/etc/ristretto.profile
index 42493db98..e6b22b914 100644
--- a/etc/ristretto.profile
+++ b/etc/ristretto.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/rtorrent.profile b/etc/rtorrent.profile
index 2ce3e9640..0b4d6e1b1 100644
--- a/etc/rtorrent.profile
+++ b/etc/rtorrent.profile
@@ -21,6 +21,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/sayonara.profile b/etc/sayonara.profile
index d978f722a..ce86c80f9 100644
--- a/etc/sayonara.profile
+++ b/etc/sayonara.profile
@@ -21,6 +21,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/scallion.profile b/etc/scallion.profile
index 1c2157d80..b4d0ef240 100644
--- a/etc/scallion.profile
+++ b/etc/scallion.profile
@@ -30,6 +30,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/scribus.profile b/etc/scribus.profile
index 0d718be1d..a8e510b8a 100644
--- a/etc/scribus.profile
+++ b/etc/scribus.profile
@@ -50,6 +50,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/sdat2img.profile b/etc/sdat2img.profile
index d3124c257..01a056767 100644
--- a/etc/sdat2img.profile
+++ b/etc/sdat2img.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/server.profile b/etc/server.profile
index a544a6284..3526e88ab 100644
--- a/etc/server.profile
+++ b/etc/server.profile
@@ -33,6 +33,7 @@ nodvd
 # noroot
 nosound
 notv
+nou2f
 novideo
 seccomp
 # shell none
diff --git a/etc/shellcheck.profile b/etc/shellcheck.profile
index 7bc3febe0..429633a6d 100644
--- a/etc/shellcheck.profile
+++ b/etc/shellcheck.profile
@@ -29,6 +29,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/shotcut.profile b/etc/shotcut.profile
index 9167dda25..264566dcd 100644
--- a/etc/shotcut.profile
+++ b/etc/shotcut.profile
@@ -21,6 +21,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix
 seccomp
 shell none
diff --git a/etc/signal-desktop.profile b/etc/signal-desktop.profile
index 250f9d3a5..008cd218e 100644
--- a/etc/signal-desktop.profile
+++ b/etc/signal-desktop.profile
@@ -26,6 +26,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/silentarmy.profile b/etc/silentarmy.profile
index 67b54dd74..5ef96a4ea 100644
--- a/etc/silentarmy.profile
+++ b/etc/silentarmy.profile
@@ -23,6 +23,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/simutrans.profile b/etc/simutrans.profile
index 5afa8e52e..a4e4d892c 100644
--- a/etc/simutrans.profile
+++ b/etc/simutrans.profile
@@ -26,6 +26,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix
 seccomp
 shell none
diff --git a/etc/skype.profile b/etc/skype.profile
index c8d09c585..09b9baa11 100644
--- a/etc/skype.profile
+++ b/etc/skype.profile
@@ -20,6 +20,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/slack.profile b/etc/slack.profile
index 3b60e7379..995d49687 100644
--- a/etc/slack.profile
+++ b/etc/slack.profile
@@ -29,6 +29,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/smplayer.profile b/etc/smplayer.profile
index c2628aa4d..57ab2cde6 100644
--- a/etc/smplayer.profile
+++ b/etc/smplayer.profile
@@ -27,6 +27,7 @@ netfilter
 # nogroups
 nonewprivs
 noroot
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/smtube.profile b/etc/smtube.profile
index 3134aeaf3..24f3db40a 100644
--- a/etc/smtube.profile
+++ b/etc/smtube.profile
@@ -28,6 +28,7 @@ caps.drop all
 netfilter
 nodvd
 notv
+nou2f
 novideo
 nogroups
 nonewprivs
diff --git a/etc/soundconverter.profile b/etc/soundconverter.profile
index 6c1894dc4..d34ccf901 100644
--- a/etc/soundconverter.profile
+++ b/etc/soundconverter.profile
@@ -32,6 +32,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/spotify.profile b/etc/spotify.profile
index cd42b781d..f6f31028f 100644
--- a/etc/spotify.profile
+++ b/etc/spotify.profile
@@ -37,6 +37,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/sqlitebrowser.profile b/etc/sqlitebrowser.profile
index 6e9c0022e..6bdd437cd 100644
--- a/etc/sqlitebrowser.profile
+++ b/etc/sqlitebrowser.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/ssh.profile b/etc/ssh.profile
index cc94793f3..de627dcf0 100644
--- a/etc/ssh.profile
+++ b/etc/ssh.profile
@@ -25,6 +25,7 @@ nonewprivs
 # noroot - see issue #1543
 nosound
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/standardnotes-desktop.profile b/etc/standardnotes-desktop.profile
index d6dd2404d..4486c8869 100644
--- a/etc/standardnotes-desktop.profile
+++ b/etc/standardnotes-desktop.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 
diff --git a/etc/start-tor-browser.profile b/etc/start-tor-browser.profile
index a7e99a7fb..d3b0b27e3 100644
--- a/etc/start-tor-browser.profile
+++ b/etc/start-tor-browser.profile
@@ -23,6 +23,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
diff --git a/etc/steam.profile b/etc/steam.profile
index 7ea9d7abf..775b6c875 100644
--- a/etc/steam.profile
+++ b/etc/steam.profile
@@ -55,6 +55,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 # novideo should be commented for VR
 novideo
 protocol unix,inet,inet6,netlink
diff --git a/etc/stellarium.profile b/etc/stellarium.profile
index 229f871c6..7d0000fb3 100644
--- a/etc/stellarium.profile
+++ b/etc/stellarium.profile
@@ -31,6 +31,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/strings.profile b/etc/strings.profile
index 3791486c5..f243606ec 100644
--- a/etc/strings.profile
+++ b/etc/strings.profile
@@ -16,6 +16,7 @@ nodbus
 nodvd
 nosound
 notv
+nou2f
 novideo
 shell none
 tracelog
diff --git a/etc/supertux2.profile b/etc/supertux2.profile
index 789a75ad0..fc523ce0a 100644
--- a/etc/supertux2.profile
+++ b/etc/supertux2.profile
@@ -26,6 +26,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,netlink
 seccomp
 shell none
diff --git a/etc/surf.profile b/etc/surf.profile
index d98946cc8..3a1b1f383 100644
--- a/etc/surf.profile
+++ b/etc/surf.profile
@@ -23,6 +23,7 @@ nodvd
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/sylpheed.profile b/etc/sylpheed.profile
index ec29b38e3..64de64eb4 100644
--- a/etc/sylpheed.profile
+++ b/etc/sylpheed.profile
@@ -22,6 +22,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/synfigstudio.profile b/etc/synfigstudio.profile
index ca0969a3b..9ce1bb183 100644
--- a/etc/synfigstudio.profile
+++ b/etc/synfigstudio.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/tar.profile b/etc/tar.profile
index ff49fba47..cbf421914 100644
--- a/etc/tar.profile
+++ b/etc/tar.profile
@@ -18,6 +18,7 @@ nodbus
 nodvd
 nosound
 notv
+nou2f
 novideo
 shell none
 tracelog
diff --git a/etc/teamspeak3.profile b/etc/teamspeak3.profile
index 196ec7437..25928882b 100644
--- a/etc/teamspeak3.profile
+++ b/etc/teamspeak3.profile
@@ -29,6 +29,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
diff --git a/etc/terasology.profile b/etc/terasology.profile
index dff5391f7..22038e0b4 100644
--- a/etc/terasology.profile
+++ b/etc/terasology.profile
@@ -36,6 +36,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/tor.profile b/etc/tor.profile
index c455f1864..04a6c3abb 100644
--- a/etc/tor.profile
+++ b/etc/tor.profile
@@ -34,6 +34,7 @@ nogroups
 nonewprivs
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/torbrowser-launcher.profile b/etc/torbrowser-launcher.profile
index 617518eeb..a9244683f 100644
--- a/etc/torbrowser-launcher.profile
+++ b/etc/torbrowser-launcher.profile
@@ -38,6 +38,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
diff --git a/etc/totem.profile b/etc/totem.profile
index e5be49084..3055ea542 100644
--- a/etc/totem.profile
+++ b/etc/totem.profile
@@ -27,6 +27,7 @@ netfilter
 nogroups
 nonewprivs
 noroot
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/transmission-cli.profile b/etc/transmission-cli.profile
index bcd1bacb0..cc2e4467e 100644
--- a/etc/transmission-cli.profile
+++ b/etc/transmission-cli.profile
@@ -23,6 +23,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/transmission-gtk.profile b/etc/transmission-gtk.profile
index 134232460..867f9f113 100644
--- a/etc/transmission-gtk.profile
+++ b/etc/transmission-gtk.profile
@@ -33,6 +33,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/transmission-qt.profile b/etc/transmission-qt.profile
index 5679229e9..81b8f38cf 100644
--- a/etc/transmission-qt.profile
+++ b/etc/transmission-qt.profile
@@ -33,6 +33,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/transmission-show.profile b/etc/transmission-show.profile
index e0bc9e309..248eb977e 100644
--- a/etc/transmission-show.profile
+++ b/etc/transmission-show.profile
@@ -23,6 +23,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/truecraft.profile b/etc/truecraft.profile
index 7151e62f8..ae1d85473 100644
--- a/etc/truecraft.profile
+++ b/etc/truecraft.profile
@@ -26,6 +26,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/tuxguitar.profile b/etc/tuxguitar.profile
index d6243720a..1b657d083 100644
--- a/etc/tuxguitar.profile
+++ b/etc/tuxguitar.profile
@@ -34,6 +34,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/uefitool.profile b/etc/uefitool.profile
index ec0adef3a..218b41e15 100644
--- a/etc/uefitool.profile
+++ b/etc/uefitool.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/uget-gtk.profile b/etc/uget-gtk.profile
index 7e718d4e5..09821b411 100644
--- a/etc/uget-gtk.profile
+++ b/etc/uget-gtk.profile
@@ -24,6 +24,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/unbound.profile b/etc/unbound.profile
index 05f24ea99..6e4b5ed1c 100644
--- a/etc/unbound.profile
+++ b/etc/unbound.profile
@@ -27,6 +27,7 @@ nodvd
 nonewprivs
 nosound
 notv
+nou2f
 novideo
 seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open
 writable-var
diff --git a/etc/unknown-horizons.profile b/etc/unknown-horizons.profile
index 3f2f395c4..f62f018a6 100644
--- a/etc/unknown-horizons.profile
+++ b/etc/unknown-horizons.profile
@@ -22,6 +22,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,netlink,inet,inet6
 seccomp
 shell none
diff --git a/etc/unrar.profile b/etc/unrar.profile
index 7a2a73cd8..00fe0887b 100644
--- a/etc/unrar.profile
+++ b/etc/unrar.profile
@@ -18,6 +18,7 @@ nodbus
 nodvd
 nosound
 notv
+nou2f
 novideo
 shell none
 tracelog
diff --git a/etc/unzip.profile b/etc/unzip.profile
index 549a239d0..8e659c256 100644
--- a/etc/unzip.profile
+++ b/etc/unzip.profile
@@ -18,6 +18,7 @@ nodbus
 nodvd
 nosound
 notv
+nou2f
 novideo
 shell none
 tracelog
diff --git a/etc/uudeview.profile b/etc/uudeview.profile
index ec123a3f6..3bd0ebe70 100644
--- a/etc/uudeview.profile
+++ b/etc/uudeview.profile
@@ -15,6 +15,7 @@ nodbus
 nodvd
 nosound
 notv
+nou2f
 novideo
 shell none
 tracelog
diff --git a/etc/viewnior.profile b/etc/viewnior.profile
index d459d5b88..4c22f8e6f 100644
--- a/etc/viewnior.profile
+++ b/etc/viewnior.profile
@@ -28,6 +28,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/viking.profile b/etc/viking.profile
index 2f3ac8edb..baf268691 100644
--- a/etc/viking.profile
+++ b/etc/viking.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/vim.profile b/etc/vim.profile
index 623aa39ff..e4e759b86 100644
--- a/etc/vim.profile
+++ b/etc/vim.profile
@@ -21,6 +21,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/vlc.profile b/etc/vlc.profile
index d9e8dc338..0395a5a59 100644
--- a/etc/vlc.profile
+++ b/etc/vlc.profile
@@ -28,6 +28,7 @@ netfilter
 nogroups
 nonewprivs
 noroot
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/vym.profile b/etc/vym.profile
index a7b86e355..bb3f6ac56 100644
--- a/etc/vym.profile
+++ b/etc/vym.profile
@@ -23,6 +23,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/w3m.profile b/etc/w3m.profile
index af39afd89..c03df49cd 100644
--- a/etc/w3m.profile
+++ b/etc/w3m.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/warzone2100.profile b/etc/warzone2100.profile
index a5f1f27b2..816f2236c 100644
--- a/etc/warzone2100.profile
+++ b/etc/warzone2100.profile
@@ -28,6 +28,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/webstorm.profile b/etc/webstorm.profile
index ef582808b..9a25727a9 100644
--- a/etc/webstorm.profile
+++ b/etc/webstorm.profile
@@ -30,6 +30,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/wesnoth.profile b/etc/wesnoth.profile
index 1261ea2c2..a67d3a1b8 100644
--- a/etc/wesnoth.profile
+++ b/etc/wesnoth.profile
@@ -29,6 +29,7 @@ nodvd
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6
 seccomp
 
diff --git a/etc/wget.profile b/etc/wget.profile
index 9ecae527e..213840726 100644
--- a/etc/wget.profile
+++ b/etc/wget.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/whois.profile b/etc/whois.profile
index ee95dda39..368f8b5bb 100644
--- a/etc/whois.profile
+++ b/etc/whois.profile
@@ -26,6 +26,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol inet,inet6
 seccomp
diff --git a/etc/wire-desktop.profile b/etc/wire-desktop.profile
index e6c77ae15..f464a2fb9 100644
--- a/etc/wire-desktop.profile
+++ b/etc/wire-desktop.profile
@@ -26,6 +26,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix,inet,inet6,netlink
 seccomp
 shell none
diff --git a/etc/wireshark.profile b/etc/wireshark.profile
index cbfe9af48..4f1142826 100644
--- a/etc/wireshark.profile
+++ b/etc/wireshark.profile
@@ -36,6 +36,7 @@ no3d
 nodvd
 nosound
 notv
+nou2f
 novideo
 # protocol unix,inet,inet6,netlink
 # seccomp - breaks network traffic capture for unprivileged users
diff --git a/etc/x-terminal-emulator.profile b/etc/x-terminal-emulator.profile
index 497a8b87c..e21b74030 100644
--- a/etc/x-terminal-emulator.profile
+++ b/etc/x-terminal-emulator.profile
@@ -12,6 +12,7 @@ netfilter
 nodbus
 nogroups
 noroot
+nou2f
 protocol unix
 seccomp
 
diff --git a/etc/xcalc.profile b/etc/xcalc.profile
index 038e006d0..1941787b1 100644
--- a/etc/xcalc.profile
+++ b/etc/xcalc.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/xed.profile b/etc/xed.profile
index b949f4549..7dffae05a 100644
--- a/etc/xed.profile
+++ b/etc/xed.profile
@@ -33,6 +33,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/xfce4-dict.profile b/etc/xfce4-dict.profile
index 104249be4..0dc021ef3 100644
--- a/etc/xfce4-dict.profile
+++ b/etc/xfce4-dict.profile
@@ -23,6 +23,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/xfce4-notes.profile b/etc/xfce4-notes.profile
index 73e7d0625..df1b575b2 100644
--- a/etc/xfce4-notes.profile
+++ b/etc/xfce4-notes.profile
@@ -25,6 +25,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/xiphos.profile b/etc/xiphos.profile
index 4cdf39af3..6adfcd819 100644
--- a/etc/xiphos.profile
+++ b/etc/xiphos.profile
@@ -29,6 +29,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/xmms.profile b/etc/xmms.profile
index e6fe72e94..7a11e1244 100644
--- a/etc/xmms.profile
+++ b/etc/xmms.profile
@@ -21,6 +21,7 @@ no3d
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/xmr-stak.profile b/etc/xmr-stak.profile
index df4252578..25b2b8c91 100644
--- a/etc/xmr-stak.profile
+++ b/etc/xmr-stak.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/xonotic.profile b/etc/xonotic.profile
index 4987d9ba7..054cf4896 100644
--- a/etc/xonotic.profile
+++ b/etc/xonotic.profile
@@ -27,6 +27,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/xpdf.profile b/etc/xpdf.profile
index ec76060fa..4a82942ad 100644
--- a/etc/xpdf.profile
+++ b/etc/xpdf.profile
@@ -29,6 +29,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/xplayer.profile b/etc/xplayer.profile
index 8d4dcf1e3..b8297295a 100644
--- a/etc/xplayer.profile
+++ b/etc/xplayer.profile
@@ -32,6 +32,7 @@ netfilter
 nogroups
 nonewprivs
 noroot
+nou2f
 protocol unix,inet,inet6
 seccomp
 shell none
diff --git a/etc/xpra.profile b/etc/xpra.profile
index 241b64497..23f3294bd 100644
--- a/etc/xpra.profile
+++ b/etc/xpra.profile
@@ -41,6 +41,7 @@ nonewprivs
 #noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/xreader.profile b/etc/xreader.profile
index 6120ac19b..a879e8b04 100644
--- a/etc/xreader.profile
+++ b/etc/xreader.profile
@@ -29,6 +29,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/xviewer.profile b/etc/xviewer.profile
index 2ead137d4..e6185807e 100644
--- a/etc/xviewer.profile
+++ b/etc/xviewer.profile
@@ -29,6 +29,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix
 seccomp
diff --git a/etc/xzdec.profile b/etc/xzdec.profile
index 85d84f215..6c12f7d55 100644
--- a/etc/xzdec.profile
+++ b/etc/xzdec.profile
@@ -17,6 +17,7 @@ nodbus
 nodvd
 nosound
 notv
+nou2f
 novideo
 shell none
 tracelog
diff --git a/etc/youtube-dl.profile b/etc/youtube-dl.profile
index 4eb5349b0..a9868b5ac 100644
--- a/etc/youtube-dl.profile
+++ b/etc/youtube-dl.profile
@@ -36,6 +36,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/zaproxy.profile b/etc/zaproxy.profile
index daa0d9e52..cc572cbfe 100644
--- a/etc/zaproxy.profile
+++ b/etc/zaproxy.profile
@@ -37,6 +37,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 novideo
 protocol unix,inet,inet6
 seccomp
diff --git a/etc/zart.profile b/etc/zart.profile
index eb9e4d671..32df94841 100644
--- a/etc/zart.profile
+++ b/etc/zart.profile
@@ -25,6 +25,7 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 protocol unix
 seccomp
 shell none
diff --git a/etc/zathura.profile b/etc/zathura.profile
index 6f86310d7..2eee47fa0 100644
--- a/etc/zathura.profile
+++ b/etc/zathura.profile
@@ -27,6 +27,7 @@ nonewprivs
 noroot
 nosound
 notv
+nou2f
 protocol unix
 seccomp
 shell none