diff --git a/etc/profile-a-l/daisy.profile b/etc/profile-a-l/daisy.profile index 4f1c80f2381..40b29a1f533 100644 --- a/etc/profile-a-l/daisy.profile +++ b/etc/profile-a-l/daisy.profile @@ -15,7 +15,7 @@ include disable-interpreters.inc include disable-proc.inc include disable-programs.inc include disable-shell.inc -#include disable-X11.inc - x11 none +#include disable-X11.inc # x11 none include disable-xdg.inc include whitelist-common.inc @@ -47,7 +47,6 @@ tracelog x11 none disable-mnt -private private-bin daisy private-cache private-dev diff --git a/etc/profile-a-l/dbus-send.profile b/etc/profile-a-l/dbus-send.profile index 80790bb0c42..70bd7370d5e 100644 --- a/etc/profile-a-l/dbus-send.profile +++ b/etc/profile-a-l/dbus-send.profile @@ -19,7 +19,7 @@ include disable-shell.inc include disable-write-mnt.inc include disable-xdg.inc -include whitelist-common.inc +#include whitelist-common.inc # see #903 include whitelist-runuser-common.inc include whitelist-usr-share-common.inc include whitelist-var-common.inc @@ -28,8 +28,7 @@ apparmor caps.drop all ipc-namespace machine-id -# Breaks abstract sockets -#net none +#net none # breaks abstract sockets netfilter no3d nodvd diff --git a/etc/profile-a-l/drill.profile b/etc/profile-a-l/drill.profile index bd6fb6dcc3c..bea114dd617 100644 --- a/etc/profile-a-l/drill.profile +++ b/etc/profile-a-l/drill.profile @@ -19,7 +19,7 @@ include disable-exec.inc include disable-programs.inc include disable-xdg.inc -include whitelist-common.inc +#include whitelist-common.inc # see #903 include whitelist-usr-share-common.inc include whitelist-var-common.inc diff --git a/etc/profile-a-l/gapplication.profile b/etc/profile-a-l/gapplication.profile index baf8f614e77..2d0511cf6d9 100644 --- a/etc/profile-a-l/gapplication.profile +++ b/etc/profile-a-l/gapplication.profile @@ -17,7 +17,7 @@ include disable-programs.inc include disable-shell.inc include disable-xdg.inc -include whitelist-common.inc +#include whitelist-common.inc # see #903 include whitelist-runuser-common.inc include whitelist-usr-share-common.inc include whitelist-var-common.inc diff --git a/etc/profile-a-l/gnome-calendar.profile b/etc/profile-a-l/gnome-calendar.profile index ddfe5787922..e6fe2777457 100644 --- a/etc/profile-a-l/gnome-calendar.profile +++ b/etc/profile-a-l/gnome-calendar.profile @@ -15,7 +15,7 @@ include disable-shell.inc include disable-xdg.inc whitelist /usr/share/libgweather -include whitelist-common.inc +#include whitelist-common.inc # see #903 include whitelist-runuser-common.inc include whitelist-usr-share-common.inc include whitelist-var-common.inc diff --git a/etc/profile-a-l/gnubik.profile b/etc/profile-a-l/gnubik.profile index 025cb74b633..0c4ca35ac65 100644 --- a/etc/profile-a-l/gnubik.profile +++ b/etc/profile-a-l/gnubik.profile @@ -15,7 +15,7 @@ include disable-shell.inc include disable-xdg.inc whitelist /usr/share/gnubik -include whitelist-common.inc +#include whitelist-common.inc # see #903 include whitelist-runuser-common.inc include whitelist-usr-share-common.inc include whitelist-var-common.inc diff --git a/etc/profile-a-l/gravity-beams-and-evaporating-stars.profile b/etc/profile-a-l/gravity-beams-and-evaporating-stars.profile index 19af7c0b963..5ccce844734 100644 --- a/etc/profile-a-l/gravity-beams-and-evaporating-stars.profile +++ b/etc/profile-a-l/gravity-beams-and-evaporating-stars.profile @@ -15,7 +15,7 @@ include disable-shell.inc include disable-xdg.inc whitelist /usr/share/gravity-beams-and-evaporating-stars -include whitelist-common.inc +#include whitelist-common.inc # see #903 include whitelist-usr-share-common.inc include whitelist-var-common.inc diff --git a/etc/profile-a-l/ipcalc.profile b/etc/profile-a-l/ipcalc.profile index 7eabbca8480..e73ca44a800 100644 --- a/etc/profile-a-l/ipcalc.profile +++ b/etc/profile-a-l/ipcalc.profile @@ -18,7 +18,7 @@ include disable-programs.inc include disable-write-mnt.inc include disable-xdg.inc -# include whitelist-common.inc +#include whitelist-common.inc # see #903 include whitelist-runuser-common.inc include whitelist-usr-share-common.inc include whitelist-var-common.inc diff --git a/etc/profile-m-z/Xephyr.profile b/etc/profile-m-z/Xephyr.profile index 2fc1d1b8aa4..0c3d4c1da42 100644 --- a/etc/profile-m-z/Xephyr.profile +++ b/etc/profile-m-z/Xephyr.profile @@ -16,7 +16,7 @@ include globals.local # whitelist /var/lib/xkb -include whitelist-common.inc +#include whitelist-common.inc # see #903 caps.drop all # Xephyr needs to be allowed access to the abstract Unix socket namespace. diff --git a/etc/profile-m-z/Xvfb.profile b/etc/profile-m-z/Xvfb.profile index ee19fa3b0c2..2bb9f171a93 100644 --- a/etc/profile-m-z/Xvfb.profile +++ b/etc/profile-m-z/Xvfb.profile @@ -19,7 +19,7 @@ include globals.local # whitelist /var/lib/xkb -include whitelist-common.inc +#include whitelist-common.inc # see #903 caps.drop all # Xvfb needs to be allowed access to the abstract Unix socket namespace. diff --git a/etc/profile-m-z/mirrormagic.profile b/etc/profile-m-z/mirrormagic.profile index 4943a80aff8..a8c6e353390 100644 --- a/etc/profile-m-z/mirrormagic.profile +++ b/etc/profile-m-z/mirrormagic.profile @@ -39,7 +39,6 @@ seccomp tracelog disable-mnt -private private-bin mirrormagic private-cache private-dev diff --git a/etc/profile-m-z/notify-send.profile b/etc/profile-m-z/notify-send.profile index f0f2cca2e58..5ec81c2ac44 100644 --- a/etc/profile-m-z/notify-send.profile +++ b/etc/profile-m-z/notify-send.profile @@ -18,7 +18,7 @@ include disable-shell.inc include disable-write-mnt.inc include disable-xdg.inc -include whitelist-common.inc +#include whitelist-common.inc # see #903 include whitelist-runuser-common.inc include whitelist-usr-share-common.inc include whitelist-var-common.inc diff --git a/etc/profile-m-z/ping.profile b/etc/profile-m-z/ping.profile index 4520ac2fa76..d563064e174 100644 --- a/etc/profile-m-z/ping.profile +++ b/etc/profile-m-z/ping.profile @@ -18,7 +18,7 @@ include disable-programs.inc include disable-X11.inc include disable-xdg.inc -include whitelist-common.inc +#include whitelist-common.inc # see #903 include whitelist-run-common.inc include whitelist-runuser-common.inc include whitelist-usr-share-common.inc diff --git a/etc/profile-m-z/reader.profile b/etc/profile-m-z/reader.profile index 050c46d53cc..31c45fe8485 100644 --- a/etc/profile-m-z/reader.profile +++ b/etc/profile-m-z/reader.profile @@ -17,7 +17,7 @@ include disable-programs.inc include disable-shell.inc include disable-xdg.inc -include whitelist-common.inc +#include whitelist-common.inc # see #903 include whitelist-run-common.inc include whitelist-runuser-common.inc include whitelist-usr-share-common.inc diff --git a/etc/profile-m-z/seahorse-adventures.profile b/etc/profile-m-z/seahorse-adventures.profile index 5985e0da345..49d98d9f526 100644 --- a/etc/profile-m-z/seahorse-adventures.profile +++ b/etc/profile-m-z/seahorse-adventures.profile @@ -23,7 +23,7 @@ include disable-xdg.inc whitelist /usr/share/seahorse-adventures whitelist /usr/share/games/seahorse-adventures -include whitelist-common.inc +#include whitelist-common.inc # see #903 include whitelist-usr-share-common.inc include whitelist-var-common.inc diff --git a/etc/profile-m-z/wordwarvi.profile b/etc/profile-m-z/wordwarvi.profile index 310e8b47000..970063f9315 100644 --- a/etc/profile-m-z/wordwarvi.profile +++ b/etc/profile-m-z/wordwarvi.profile @@ -40,7 +40,6 @@ seccomp tracelog disable-mnt -private private-bin wordwarvi private-cache private-dev diff --git a/etc/profile-m-z/xbill.profile b/etc/profile-m-z/xbill.profile index e85bb9f1893..46e3e81bc42 100644 --- a/etc/profile-m-z/xbill.profile +++ b/etc/profile-m-z/xbill.profile @@ -16,7 +16,7 @@ include disable-xdg.inc whitelist /usr/share/xbill whitelist /var/games/xbill/scores -include whitelist-common.inc +#include whitelist-common.inc # see #903 include whitelist-usr-share-common.inc include whitelist-var-common.inc