add rhythmbox-client.profile

6 files changed, 16 insertions, 6 deletions

diff --git a/README b/README
index a4bc6363e..4d488dbae 100644
--- a/README
+++ b/README
@@ -572,7 +572,7 @@ rusty-snake (https://github.com/rusty-snake)
         - added profiles: oggsplt, flacsplt, cheese, inkview, mp3splt-gtk
         - added profiles: ktouch, yelp, klatexformula, klatexformula_cmdl
         - added profiles: pandoc, gnome-sound-recorder, godot, newsbeuter
-        - added profiles: keepassxc-cli, keepassxc-proxy
+        - added profiles: keepassxc-cli, keepassxc-proxy, rhythmbox-client
         - many profile fixing and hardening
         - some typo fixes
         - added profile templates
diff --git a/README.md b/README.md
index fea4e9c97..22c81e057 100644
--- a/README.md
+++ b/README.md
@@ -111,4 +111,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe
 
 ## New profiles:
 
-klatexformula, klatexformula_cmdl, links, pandoc, qgis, teams-for-linux, xlinks, OpenArena, gnome-sound-recorder, godot, tcpdump, tshark, keepassxc-cli, keepassxc-proxy, newsbeuter
+klatexformula, klatexformula_cmdl, links, pandoc, qgis, teams-for-linux, xlinks, OpenArena, gnome-sound-recorder, godot, tcpdump, tshark, keepassxc-cli, keepassxc-proxy, newsbeuter, rhythmbox-client
diff --git a/RELNOTES b/RELNOTES
index eec446dfe..0a3a0a011 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -4,7 +4,7 @@ firejail (0.9.61) baseline; urgency=low
   * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
   * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
   * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
-  * new profiles: keepassxc-proxy
+  * new profiles: keepassxc-proxy, rhythmbox-client
  -- netblue30 <netblue30@yahoo.com>  Sat, 1 Jun 2019 08:00:00 -0500
 
 firejail (0.9.60) baseline; urgency=low
diff --git a/etc/rhythmbox-client.profile b/etc/rhythmbox-client.profile
new file mode 100644
index 000000000..29e65d716
--- /dev/null
+++ b/etc/rhythmbox-client.profile
@@ -0,0 +1,11 @@
+# Firejail profile for rhythmbox-client
+# Description: controls a running instance of rhythmbox
+# This file is overwritten after every install/update
+# Persistent local customizations
+include rhythmbox-client.local
+# Persistent global definitions
+# added by included profile
+#include globals.local
+
+# Redirect
+include rhythmbox.profile
diff --git a/etc/rhythmbox.profile b/etc/rhythmbox.profile
index 1c9f0e4d1..9bcbdb561 100644
--- a/etc/rhythmbox.profile
+++ b/etc/rhythmbox.profile
@@ -26,7 +26,6 @@ include whitelist-var-common.inc
 # apparmor - makes settings immutable
 caps.drop all
 netfilter
-# no3d
 # nodbus - makes settings immutable
 nogroups
 nonewprivs
@@ -39,7 +38,6 @@ seccomp
 shell none
 tracelog
 
-private-bin rhythmbox
+private-bin rhythmbox,rhythmbox-client
 private-dev
 private-tmp
-
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 0f00ca275..6a4539265 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -475,6 +475,7 @@ redshift
 regextester
 remmina
 rhythmbox
+rhythmbox-client
 ricochet
 riot-desktop
 riot-web