mupdf refactoring cfr. https://github.com/netblue30/firejail/discussions/4993 (#5042)

* refactor mupdf

* refactor mupdf

* refactor mupdf

* refactor mupdf

* add mupdf-gl blacklist

* move history file back to mupdf-gl

* refactor mupdf-gl

* add no3d to mupdf.profile

* add suggestions from review

* drop unix from protocol [accumulates]

* fix protocol

etc/inc/disable-common.inc

@@ -13,6 +13,7 @@ blacklist-nolog ${HOME}/.*_history_*
 blacklist-nolog ${HOME}/.adobe
 blacklist-nolog ${HOME}/.ammonite/history
 blacklist-nolog ${HOME}/.cache/greenclip*
+blacklist-nolog ${HOME}/.cache/mupdf.history
 blacklist-nolog ${HOME}/.histfile
 blacklist-nolog ${HOME}/.history
 blacklist-nolog ${HOME}/.kde/share/apps/klipper

etc/profile-m-z/mupdf-gl.profile

@@ -7,7 +7,10 @@ include mupdf-gl.local
 # added by included profile
 #include globals.local
 
+noblacklist ${HOME}/.cache/mupdf.history
 noblacklist ${HOME}/.mupdf.history
 
+ignore no3d
+
 # Redirect
 include mupdf.profile

etc/profile-m-z/mupdf-x11.profile

@@ -7,8 +7,5 @@ include mupdf-x11.local
 # added by included profile
 #include globals.local
 
-memory-deny-write-execute
-read-only ${HOME}
-
 # Redirect
 include mupdf.profile

etc/profile-m-z/mupdf.profile

@@ -21,6 +21,7 @@ apparmor
 caps.drop all
 machine-id
 net none
+no3d
 nodvd
 nogroups
 noinput
@@ -41,3 +42,6 @@ private-tmp
 
 dbus-user none
 dbus-system none
+
+memory-deny-write-execute
+read-only ${HOME}