2 files changed, 7 insertions, 3 deletions

diff --git a/etc/rhythmbox.profile b/etc/rhythmbox.profile
index df874f378..1c9f0e4d1 100644
--- a/etc/rhythmbox.profile
+++ b/etc/rhythmbox.profile
@@ -9,11 +9,14 @@ include globals.local
 noblacklist ${MUSIC}
 noblacklist ${HOME}/.local/share/rhythmbox
 
+# Allow python (blacklisted by disable-interpreters.inc)
+include allow-python2.inc
+include allow-python3.inc
+
 include disable-common.inc
 include disable-devel.inc
-# rhythmbox is using Python
 include disable-exec.inc
-#include disable-interpreters.inc
+include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
 include disable-xdg.inc
diff --git a/etc/templates/profile.template b/etc/templates/profile.template
index 2c44ee3a9..f2b64ac5d 100644
--- a/etc/templates/profile.template
+++ b/etc/templates/profile.template
@@ -112,7 +112,7 @@
 #novideo
 #protocol unix,inet,inet6,netlink
 #seccomp
-##seccomp.drop SYSCALLS
+##seccomp.drop SYSCALLS (see also syscalls.txt)
 #shell none
 #tracelog
 
@@ -135,5 +135,6 @@
 
 ##env VAR=VALUE
 #memory-deny-write-execute
+##noexec PATH
 ##read-only ${HOME}
 ##join-or-start NAME