5 files changed, 12 insertions, 5 deletions

diff --git a/etc/mpv.profile b/etc/mpv.profile
index abf6f1668..0cda3e4e1 100644
--- a/etc/mpv.profile
+++ b/etc/mpv.profile
@@ -16,11 +16,15 @@ include /etc/firejail/disable-passwdmgr.inc
 
 caps.drop all
 netfilter
+nogroups
 nonewprivs
 noroot
 protocol unix,inet,inet6
 seccomp
+tracelog
 
 # to test
+# ipc-namespace
 shell none
 private-bin mpv,youtube-dl,python,python2.7,python3.6,env
+private-dev
diff --git a/etc/qbittorrent.profile b/etc/qbittorrent.profile
index 5dc0eb4c8..7ae8a22d4 100644
--- a/etc/qbittorrent.profile
+++ b/etc/qbittorrent.profile
@@ -34,11 +34,12 @@ nogroups
 nonewprivs
 noroot
 nosound
-protocol unix,inet,inet6
+protocol unix,inet,inet6,netlink
 seccomp
 
 # there are some problems with "Open destination folder", see bug #536
 #shell none
 #private-bin qbittorrent
 private-dev
+# private-etc X11,fonts,xdg,resolv.conf
 private-tmp
diff --git a/etc/vlc.profile b/etc/vlc.profile
index 34f4aa5ff..6ae8b0d15 100644
--- a/etc/vlc.profile
+++ b/etc/vlc.profile
@@ -27,6 +27,6 @@ private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc
 private-dev
 private-tmp
 
-memory-deny-write-execute
+# memory-deny-write-execute - breaks playing videos
 noexec ${HOME}
 noexec /tmp
diff --git a/etc/wine.profile b/etc/wine.profile
index 8985071f3..5ee8bae38 100644
--- a/etc/wine.profile
+++ b/etc/wine.profile
@@ -18,6 +18,7 @@ include /etc/firejail/disable-devel.inc
 
 caps.drop all
 netfilter
+nogroups
 nonewprivs
 noroot
 seccomp
diff --git a/etc/wireshark.profile b/etc/wireshark.profile
index 98a4f3a9d..d5f3b8c4b 100644
--- a/etc/wireshark.profile
+++ b/etc/wireshark.profile
@@ -23,14 +23,15 @@ include /etc/firejail/disable-passwdmgr.inc
 #ipc-namespace
 netfilter
 no3d
-nogroups
-nonewprivs
+# nogroups - breaks unprivileged wireshark usage
+# nonewprivs - breaks unprivileged wireshark usage
 nosound
-seccomp
+# seccomp - breaks unprivileged wireshark usage
 shell none
 tracelog
 
 #private-bin wireshark
+# private-etc fonts,group,hosts,machine-id,passwd
 private-dev
 private-tmp