merge #1565

5 files changed, 8 insertions, 1 deletions

diff --git a/README b/README
index 074b98510..875147361 100644
--- a/README
+++ b/README
@@ -274,6 +274,10 @@ jrabe (https://github.com/jrabe)
         - Polari profile
         - qTox profile
         - X11 fixes
+juan (https://github.com/nyancat18)
+        - fixed Kdenlive, Shotcut profiles
+        - new profiles for Cinelerra, Cliqz, Bluefish
+        - profile hardening
 Kaan Genç (https://github.com/SeriousBug)
         - dynamic allocation of noblacklist buffer
 KellerFuchs (https://github.com/KellerFuchs)
diff --git a/etc/atom.profile b/etc/atom.profile
index 34fb3a9b1..db3cbc687 100644
--- a/etc/atom.profile
+++ b/etc/atom.profile
@@ -23,6 +23,7 @@ notv
 novideo
 protocol unix,inet,inet6,netlink
 seccomp
+# net none
 shell none
 
 private-dev
diff --git a/etc/bluefish.profile b/etc/bluefish.profile
index f18dea296..f7e322838 100644
--- a/etc/bluefish.profile
+++ b/etc/bluefish.profile
@@ -1,7 +1,7 @@
 # Firejail profile for bluefish
 # This file is overwritten after every install/update
 # Persistent local customizations
-include /etc/firejail/pluma.local
+include /etc/firejail/bluefish.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
diff --git a/etc/evince.profile b/etc/evince.profile
index f503b9a8e..2c7c754d8 100644
--- a/etc/evince.profile
+++ b/etc/evince.profile
@@ -28,6 +28,7 @@ protocol unix
 seccomp
 shell none
 tracelog
+# net none breaks AppArmor on Ubuntu systems
 
 private-bin evince,evince-previewer,evince-thumbnailer
 private-dev
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index e4a096d81..905a36b0d 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -66,6 +66,7 @@ clamscan
 claws-mail
 clementine
 clipit
+cliqz
 cmus
 conkeror
 conky