27 files changed, 55 insertions, 25 deletions

diff --git a/etc/audacious.profile b/etc/audacious.profile
index f9a48f33c..b9ce11c0e 100644
--- a/etc/audacious.profile
+++ b/etc/audacious.profile
@@ -1,4 +1,4 @@
-# Audacious profile
+# Audacious media player profile
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
 include /etc/firejail/disable-common.inc
diff --git a/etc/bitlbee.profile b/etc/bitlbee.profile
index 5eeddb815..ca9e87818 100644
--- a/etc/bitlbee.profile
+++ b/etc/bitlbee.profile
@@ -1,4 +1,4 @@
-# BitlBee profile
+# BitlBee instant messaging profile
 noblacklist /sbin
 noblacklist /usr/sbin
 include /etc/firejail/disable-mgmt.inc
@@ -8,3 +8,4 @@ protocol unix,inet,inet6
 private
 private-dev
 seccomp
+netfilter
diff --git a/etc/cherrytree.profile b/etc/cherrytree.profile
index 7502e9d15..d1e1c71d9 100644
--- a/etc/cherrytree.profile
+++ b/etc/cherrytree.profile
@@ -1,3 +1,9 @@
+# cherrytree note taking application
+include /etc/firejail/disable-mgmt.inc
+include /etc/firejail/disable-secret.inc
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-devel.inc
+
 whitelist ${HOME}/cherrytree
 mkdir ~/.config
 mkdir ~/.config/cherrytree
@@ -5,10 +11,6 @@ whitelist ${HOME}/.config/cherrytree/
 mkdir ~/.local
 mkdir ~/.local/share
 whitelist ${HOME}/.local/share/
-include /etc/firejail/disable-mgmt.inc
-include /etc/firejail/disable-secret.inc
-include /etc/firejail/disable-common.inc
-include /etc/firejail/disable-devel.inc
 caps.drop all
 seccomp
 protocol unix,inet,inet6,netlink
@@ -16,3 +18,4 @@ netfilter
 tracelog
 noroot
 include /etc/firejail/whitelist-common.inc
+nosound
diff --git a/etc/clementine.profile b/etc/clementine.profile
index c9c0ca724..21b5a58ab 100644
--- a/etc/clementine.profile
+++ b/etc/clementine.profile
@@ -1,4 +1,4 @@
-# Clementine profile
+# Clementine media player profile
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
 include /etc/firejail/disable-common.inc
diff --git a/etc/conkeror.profile b/etc/conkeror.profile
index 09f491c61..2d6323d3b 100644
--- a/etc/conkeror.profile
+++ b/etc/conkeror.profile
@@ -1,4 +1,4 @@
-# Firejail profile for Mozilla Firefox (Iceweasel in Debian)
+# Firejail profile for Conkeror web browser profile
 noblacklist ${HOME}/.conkeror.mozdev.org
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
diff --git a/etc/deadbeef.profile b/etc/deadbeef.profile
index 35760bf13..ec9fcd0f0 100644
--- a/etc/deadbeef.profile
+++ b/etc/deadbeef.profile
@@ -1,4 +1,4 @@
-# DeaDBeeF profile
+# DeaDBeeF media player profile
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
 include /etc/firejail/disable-common.inc
diff --git a/etc/deluge.profile b/etc/deluge.profile
index 30e9f91ad..bcd754952 100644
--- a/etc/deluge.profile
+++ b/etc/deluge.profile
@@ -1,4 +1,4 @@
-# deluge profile
+# deluge bittorernt client profile
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
 include /etc/firejail/disable-common.inc
@@ -14,5 +14,6 @@ seccomp
 protocol unix,inet,inet6
 netfilter
 noroot
+nosound
 
 
diff --git a/etc/empathy.profile b/etc/empathy.profile
index 7c96dc6fa..adaf03e23 100644
--- a/etc/empathy.profile
+++ b/etc/empathy.profile
@@ -1,4 +1,4 @@
-# Empathy profile
+# Empathy instant messaging profile
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
 include /etc/firejail/disable-common.inc
@@ -8,3 +8,5 @@ blacklist ${HOME}/.wine
 caps.drop all
 seccomp
 protocol unix,inet,inet6
+netfilter
+
diff --git a/etc/evince.profile b/etc/evince.profile
index 070dc7be7..81878462b 100644
--- a/etc/evince.profile
+++ b/etc/evince.profile
@@ -1,4 +1,4 @@
-# evince profile
+# evince pdf reader profile
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
 include /etc/firejail/disable-common.inc
@@ -13,3 +13,5 @@ caps.drop all
 seccomp
 protocol unix,inet,inet6
 noroot
+nosound
+
diff --git a/etc/fbreader.profile b/etc/fbreader.profile
index a79f36398..4ed942138 100644
--- a/etc/fbreader.profile
+++ b/etc/fbreader.profile
@@ -1,4 +1,4 @@
-# fbreader profile
+# fbreader ebook reader profile
 noblacklist ${HOME}/.FBReader
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
@@ -15,4 +15,5 @@ seccomp
 protocol unix,inet,inet6
 netfilter
 noroot
+nosound
 
diff --git a/etc/filezilla.profile b/etc/filezilla.profile
index 1462d134e..0eabf9a88 100644
--- a/etc/filezilla.profile
+++ b/etc/filezilla.profile
@@ -1,4 +1,4 @@
-# FileZilla profile
+# FileZilla ftp profile
 noblacklist ${HOME}/.filezilla
 noblacklist ${HOME}/.config/filezilla
 include /etc/firejail/disable-mgmt.inc
@@ -12,5 +12,7 @@ seccomp
 protocol unix,inet,inet6
 noroot
 netfilter
+nosound
+
 
 
diff --git a/etc/hedgewars.profile b/etc/hedgewars.profile
index 03a376e2f..ab0e067c7 100644
--- a/etc/hedgewars.profile
+++ b/etc/hedgewars.profile
@@ -12,6 +12,7 @@ private-dev
 whitelist /tmp/.X11-unix
 seccomp
 tracelog
+netfilter
 
 mkdir     ~/.hedgewars
 whitelist ~/.hedgewars
diff --git a/etc/hexchat.profile b/etc/hexchat.profile
index 35b98fde6..8f9e71b44 100644
--- a/etc/hexchat.profile
+++ b/etc/hexchat.profile
@@ -1,4 +1,4 @@
-# HexChat profile
+# HexChat instant messaging profile
 noblacklist ${HOME}/.config/hexchat
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
diff --git a/etc/polari.profile b/etc/polari.profile
index 389ce3d12..26d5ff27b 100644
--- a/etc/polari.profile
+++ b/etc/polari.profile
@@ -25,3 +25,5 @@ caps.drop all
 seccomp
 protocol unix,inet,inet6
 noroot
+netfilter
+
diff --git a/etc/qbittorrent.profile b/etc/qbittorrent.profile
index c68eb716b..f067aaa99 100644
--- a/etc/qbittorrent.profile
+++ b/etc/qbittorrent.profile
@@ -1,4 +1,4 @@
-# qbittorrent profile
+# qbittorrent bittorrent profile
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
 include /etc/firejail/disable-common.inc
@@ -14,4 +14,6 @@ seccomp
 protocol unix,inet,inet6
 netfilter
 noroot
+nosound
+
 
diff --git a/etc/quassel.profile b/etc/quassel.profile
index e8db77973..bc8c76915 100644
--- a/etc/quassel.profile
+++ b/etc/quassel.profile
@@ -9,3 +9,5 @@ caps.drop all
 seccomp
 protocol unix,inet,inet6
 noroot
+netfilter
+
diff --git a/etc/rhythmbox.profile b/etc/rhythmbox.profile
index 3326a34ed..a1a20a863 100644
--- a/etc/rhythmbox.profile
+++ b/etc/rhythmbox.profile
@@ -1,4 +1,4 @@
-# Rhythmbox profile
+# Rhythmbox media player profile
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
 include /etc/firejail/disable-common.inc
@@ -13,3 +13,5 @@ caps.drop all
 seccomp
 protocol unix,inet,inet6
 noroot
+netfilter
+
diff --git a/etc/rtorrent.profile b/etc/rtorrent.profile
index 7ba5677e9..6041052af 100644
--- a/etc/rtorrent.profile
+++ b/etc/rtorrent.profile
@@ -1,4 +1,4 @@
-# rtorrent profile
+# rtorrent bittorrent profile
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
 include /etc/firejail/disable-common.inc
@@ -9,3 +9,4 @@ seccomp
 protocol unix,inet,inet6
 netfilter
 noroot
+nosound
diff --git a/etc/spotify.profile b/etc/spotify.profile
index f5ec36431..1986a513c 100644
--- a/etc/spotify.profile
+++ b/etc/spotify.profile
@@ -1,4 +1,4 @@
-# Spotify profile
+# Spotify media player profile
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
 include /etc/firejail/disable-common.inc
diff --git a/etc/telegram.profile b/etc/telegram.profile
index 4920b94d8..94167675c 100644
--- a/etc/telegram.profile
+++ b/etc/telegram.profile
@@ -1,4 +1,4 @@
-# Telegram profile
+# Telegram IRC profile
 noblacklist ${HOME}/.TelegramDesktop
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
@@ -10,6 +10,7 @@ caps.drop all
 seccomp
 protocol unix,inet,inet6
 noroot
+netfilter
 
 whitelist ~/Downloads/Telegram Desktop
 mkdir ${HOME}/.TelegramDesktop
diff --git a/etc/totem.profile b/etc/totem.profile
index 65c62695e..f2485a2d0 100644
--- a/etc/totem.profile
+++ b/etc/totem.profile
@@ -1,4 +1,4 @@
-# Totem profile
+# Totem media player profile
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
 include /etc/firejail/disable-common.inc
@@ -13,3 +13,4 @@ caps.drop all
 seccomp
 protocol unix,inet,inet6
 noroot
+netfilter
diff --git a/etc/transmission-gtk.profile b/etc/transmission-gtk.profile
index 290de9445..18356a91e 100644
--- a/etc/transmission-gtk.profile
+++ b/etc/transmission-gtk.profile
@@ -15,6 +15,8 @@ protocol unix,inet,inet6
 netfilter
 noroot
 tracelog
+nosound
+
 
 
 
diff --git a/etc/transmission-qt.profile b/etc/transmission-qt.profile
index 6ff49e476..cd07f35c7 100644
--- a/etc/transmission-qt.profile
+++ b/etc/transmission-qt.profile
@@ -15,4 +15,6 @@ protocol unix,inet,inet6
 netfilter
 noroot
 tracelog
+nosound
+
 
diff --git a/etc/vlc.profile b/etc/vlc.profile
index dd0a70353..adcfbb119 100644
--- a/etc/vlc.profile
+++ b/etc/vlc.profile
@@ -1,4 +1,4 @@
-# VLC profile
+# VLC media player profile
 noblacklist ${HOME}/.config/vlc
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc
@@ -14,3 +14,4 @@ caps.drop all
 seccomp
 protocol unix,inet,inet6
 noroot
+netfilter
diff --git a/etc/weechat-curses.profile b/etc/weechat-curses.profile
index f7c1b6590..4a92f0b34 100644
--- a/etc/weechat-curses.profile
+++ b/etc/weechat-curses.profile
@@ -1,2 +1,2 @@
-# Weechat profile (Debian)
+# Weechat IRC profile (Debian)
 include /etc/firejail/weechat.profile
diff --git a/etc/weechat.profile b/etc/weechat.profile
index 218df3b33..3fbce62ca 100644
--- a/etc/weechat.profile
+++ b/etc/weechat.profile
@@ -1,4 +1,4 @@
-# Weechat profile
+# Weechat IRC profile
 noblacklist ${HOME}/.weechat
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-common.inc
@@ -9,3 +9,4 @@ seccomp
 protocol unix,inet,inet6
 netfilter
 noroot
+netfilter
diff --git a/etc/xchat.profile b/etc/xchat.profile
index be68e0add..e2dcadc0e 100644
--- a/etc/xchat.profile
+++ b/etc/xchat.profile
@@ -1,4 +1,4 @@
-# XChat profile
+# XChat IRC profile
 noblacklist ${HOME}/.config/xchat
 include /etc/firejail/disable-mgmt.inc
 include /etc/firejail/disable-secret.inc