10 files changed, 15 insertions, 0 deletions

diff --git a/etc/QMediathekView.profile b/etc/QMediathekView.profile
index f969cd855..0cc6b6cb6 100644
--- a/etc/QMediathekView.profile
+++ b/etc/QMediathekView.profile
@@ -17,12 +17,14 @@ noblacklist ${HOME}/.config/xplayer
 noblacklist ${HOME}/.local/share/totem
 noblacklist ${HOME}/.local/share/xplayer
 noblacklist ${HOME}/.mplayer
+noblacklist ${VIDEOS}
 
 include disable-common.inc
 include disable-devel.inc
 include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
+include disable-xdg.inc
 
 include whitelist-var-common.inc
 
diff --git a/etc/audacious.profile b/etc/audacious.profile
index 93a2f4b3e..4ca886579 100644
--- a/etc/audacious.profile
+++ b/etc/audacious.profile
@@ -34,6 +34,7 @@ seccomp
 shell none
 tracelog
 
+private-cache
 # private-bin audacious
 private-dev
 private-tmp
diff --git a/etc/baloo_file.profile b/etc/baloo_file.profile
index e094945b7..875bc7989 100644
--- a/etc/baloo_file.profile
+++ b/etc/baloo_file.profile
@@ -26,6 +26,7 @@ include disable-programs.inc
 include whitelist-var-common.inc
 
 caps.drop all
+netfilter
 no3d
 nodvd
 nogroups
@@ -41,6 +42,7 @@ seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fano
 shell none
 # x11 xorg
 
+private-cache
 private-bin baloo_file,baloo_file_extractor,baloo_filemetadata_temp_extractor,kbuildsycoca4
 private-dev
 private-tmp
diff --git a/etc/calligra.profile b/etc/calligra.profile
index 84a60a196..7054739c8 100644
--- a/etc/calligra.profile
+++ b/etc/calligra.profile
@@ -15,6 +15,7 @@ include disable-programs.inc
 caps.drop all
 ipc-namespace
 # net none
+netfilter
 # nodbus
 nodvd
 nogroups
diff --git a/etc/gwenview.profile b/etc/gwenview.profile
index 6deabbd8b..e90578333 100644
--- a/etc/gwenview.profile
+++ b/etc/gwenview.profile
@@ -28,6 +28,7 @@ include whitelist-var-common.inc
 apparmor
 caps.drop all
 # net none
+netfilter
 # nodbus
 nodvd
 nogroups
diff --git a/etc/k3b.profile b/etc/k3b.profile
index 8c599d0ca..60da458ab 100644
--- a/etc/k3b.profile
+++ b/etc/k3b.profile
@@ -21,6 +21,7 @@ include disable-xdg.inc
 include whitelist-var-common.inc
 
 caps.drop all
+netfilter
 no3d
 nonewprivs
 noroot
diff --git a/etc/konversation.profile b/etc/konversation.profile
index aead198b0..77e09fafb 100644
--- a/etc/konversation.profile
+++ b/etc/konversation.profile
@@ -15,6 +15,7 @@ include disable-devel.inc
 include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
+include disable-xdg.inc
 
 include whitelist-var-common.inc
 
@@ -32,6 +33,7 @@ seccomp
 shell none
 tracelog
 
+private-cache
 private-bin konversation,kbuildsycoca4
 private-dev
 private-tmp
diff --git a/etc/krita.profile b/etc/krita.profile
index bd02522f6..3313106a2 100644
--- a/etc/krita.profile
+++ b/etc/krita.profile
@@ -28,6 +28,7 @@ apparmor
 caps.drop all
 ipc-namespace
 # net none
+netfilter
 # nodbus
 nodvd
 nogroups
diff --git a/etc/kwin_x11.profile b/etc/kwin_x11.profile
index 4cb489577..653283150 100644
--- a/etc/kwin_x11.profile
+++ b/etc/kwin_x11.profile
@@ -15,6 +15,7 @@ include disable-devel.inc
 include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
+include disable-xdg.inc
 
 include whitelist-var-common.inc
 
diff --git a/etc/mediathekview.profile b/etc/mediathekview.profile
index 06e140990..a438634f3 100644
--- a/etc/mediathekview.profile
+++ b/etc/mediathekview.profile
@@ -16,6 +16,7 @@ noblacklist ${HOME}/.local/share/totem
 noblacklist ${HOME}/.local/share/xplayer
 noblacklist ${HOME}/.mediathek3
 noblacklist ${HOME}/.mplayer
+noblacklist ${VIDEOS}
 
 # Allow access to java
 noblacklist ${PATH}/java
@@ -28,6 +29,7 @@ include disable-devel.inc
 include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
+include disable-xdg.inc
 
 include whitelist-var-common.inc
 
@@ -44,6 +46,7 @@ protocol unix,inet,inet6
 seccomp
 tracelog
 
+private-cache
 private-dev
 private-tmp