2 files changed, 3 insertions, 1 deletions

diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index ae82d72b5..7ca5a6b89 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -134,6 +134,8 @@ blacklist ${RUNUSER}/kdesud_*
 # gnome
 # contains extensions, last used times of applications, and notifications
 blacklist ${HOME}/.local/share/gnome-shell
+# no direct modification of dconf database
+read-only ${HOME}/.config/dconf
 
 # systemd
 blacklist ${HOME}/.config/systemd
diff --git a/etc/obs.profile b/etc/obs.profile
index 038242cae..2a7ed1ec2 100644
--- a/etc/obs.profile
+++ b/etc/obs.profile
@@ -36,7 +36,7 @@ seccomp
 shell none
 tracelog
 
-private-bin obs,python*
+private-bin obs,python*,obs-ffmpeg-mux,sh,bash
 private-cache
 private-dev
 private-tmp