Harden PPSSPP and add a PPSSPPSDL alias

etc/profile-a-l/dolphin-emu.profile

@@ -18,6 +18,7 @@ include disable-exec.inc
 include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
+include disable-write-mnt.inc
 include disable-xdg.inc
 
 mkdir ${HOME}/.cache/dolphin-emu

etc/profile-m-z/PPSSPPSDL.profile

@@ -0,0 +1,9 @@
+# Firejail profile for PPSSPPSDL
+# This file is overwritten after every install/update
+# Persistent local customizations
+include PPSSPPSDL.local
+# added by included profile
+#include globals.local
+
+# Redirect
+include ppsspp.profile

etc/profile-m-z/ppsspp.profile

@@ -7,7 +7,6 @@ include ppsspp.local
 include globals.local
 
 noblacklist ${HOME}/.config/ppsspp
-noblacklist ${DOCUMENTS}
 
 include disable-common.inc
 include disable-devel.inc
@@ -15,8 +14,15 @@ include disable-exec.inc
 include disable-interpreters.inc
 include disable-passwdmgr.inc
 include disable-programs.inc
+include disable-write-mnt.inc
 include disable-xdg.inc
 
+#mkdir ${HOME}/.config/ppsspp
+#whitelist ${HOME}/.config/ppsspp
+whitelist /usr/share/ppsspp
+#include whitelist-common.inc
+include whitelist-runuser-common.inc
+include whitelist-usr-share-common.inc
 include whitelist-var-common.inc
 
 caps.drop all
@@ -27,11 +33,13 @@ nogroups
 nonewprivs
 noroot
 notv
+nou2f
 novideo
 protocol unix,netlink
 seccomp
 shell none
 
+private-bin ppsspp,PPSSPP,PPSSPPQt,PPSSPPSDL
 # uncomment the following line if you do not need controller support
 #private-dev
 private-etc alternatives,asound.conf,ca-certificates,crypto-policies,drirc,fonts,group,host.conf,hostname,hosts,ld.so.cache,ld.so.preload,localtime,machine-id,nsswitch.conf,passwd,pki,pulse,resolv.conf,ssl