1 files changed, 17 insertions, 3 deletions

diff --git a/etc/wget.profile b/etc/wget.profile
index 4bf354652..c1f7dfc3f 100644
--- a/etc/wget.profile
+++ b/etc/wget.profile
@@ -7,18 +7,28 @@ include wget.local
 # Persistent global definitions
 include globals.local
 
+noblacklist ${HOME}/.netrc
 noblacklist ${HOME}/.wget-hsts
 noblacklist ${HOME}/.wgetrc
 
+blacklist /tmp/.X11-unix
+
 include disable-common.inc
+include disable-devel.inc
 include disable-exec.inc
+include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
+# depending on workflow you can uncomment the below or put 'include disable-xdg.inc' in your wget.local
+#include disable-xdg.inc
 
 include whitelist-usr-share-common.inc
 include whitelist-var-common.inc
 
 caps.drop all
+ipc-namespace
+machine-id
+nodbus
 netfilter
 no3d
 nodvd
@@ -32,9 +42,13 @@ novideo
 protocol unix,inet,inet6
 seccomp
 shell none
+tracelog
 
-# private-bin wget
+private-bin wget
+private-cache
 private-dev
-# private-etc alternatives,ca-certificates,crypto-policie,pki,resolv.conf,ssl
-# private-tmp
+# depending on workflow you can uncomment the below or put this private-etc in your wget.local
+#private-etc alternatives,ca-certificates,crypto-policies,pki,resolv.conf,ssl,wgetrc
+#private-tmp
 
+memory-deny-write-execute