added Geeqie profile

7 files changed, 35 insertions, 3 deletions

diff --git a/README.md b/README.md
index 20d624243..c8d6cf735 100644
--- a/README.md
+++ b/README.md
@@ -192,4 +192,4 @@ goobox, gpa, gpg, gpg-agent, highlight, img2txt, k3b, kate, lynx, mediainfo, nau
 simple-scan, skanlite, ssh-agent, tracker, transmission-cli, transmission-show, w3m, xfburn, xpra, wget,
 xed, pluma, Cryptocat, Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5,
 PDFSam, Pithos, Xonotic, wireshark, keepassx2, QupZilla, FossaMail, Uzbl browser, xmms, iridium browser,
-Kino, Thunar
+Kino, Thunar, Geeqie
diff --git a/RELNOTES b/RELNOTES
index 80bede268..471b8c6cb 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -37,7 +37,7 @@ firejail (0.9.45) baseline; urgency=low
   * new profiles: Cryptocat, Bless, Gnome 2048, Gnome Calculator,
   * new profiles: Gnome Contacts, JD-GUI, Lollypop, MultiMC5, PDFSam, Pithos,
   * new profies: Xonotic, wireshark, keepassx2, QupZilla, FossaMail,
-  * new profiles: Uzbl browser, iridium browser, Thunar
+  * new profiles: Uzbl browser, iridium browser, Thunar, Geeqie
   * bugfixes
  -- netblue30 <netblue30@yahoo.com>  Sun, 23 Oct 2016 08:00:00 -0500
 
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index c59285e85..98983bd72 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -30,6 +30,7 @@ blacklist ${HOME}/.cache/darktable
 blacklist ${HOME}/.cache/epiphany
 blacklist ${HOME}/.cache/evolution
 blacklist ${HOME}/.cache/gajim
+blacklist ${HOME}/.cache/geeqie
 blacklist ${HOME}/.cache/google-chrome
 blacklist ${HOME}/.cache/google-chrome-beta
 blacklist ${HOME}/.cache/google-chrome-unstable
@@ -103,6 +104,7 @@ blacklist ${HOME}/.config/evolution
 blacklist ${HOME}/.config/filezilla
 blacklist ${HOME}/.config/flowblade
 blacklist ${HOME}/.config/gajim
+blacklist ${HOME}/.config/geeqie
 blacklist ${HOME}/.config/gedit
 blacklist ${HOME}/.config/google-chrome
 blacklist ${HOME}/.config/google-chrome-beta
@@ -218,6 +220,7 @@ blacklist ${HOME}/.local/share/epiphany
 blacklist ${HOME}/.local/share/evolution
 blacklist ${HOME}/.local/share/feral-interactive
 blacklist ${HOME}/.local/share/gajim
+blacklist ${HOME}/.local/share/geeqie
 blacklist ${HOME}/.local/share/gnome-2048
 blacklist ${HOME}/.local/share/gnome-chess
 blacklist ${HOME}/.local/share/gnome-music
diff --git a/etc/geeqie.profile b/etc/geeqie.profile
new file mode 100644
index 000000000..57f942a50
--- /dev/null
+++ b/etc/geeqie.profile
@@ -0,0 +1,27 @@
+# This file is overwritten during software install.
+# Persistent customizations should go in a .local file.
+include /etc/firejail/geeqie.local
+
+# Firejail profile for Geeqie
+noblacklist ~/.cache/geeqie
+noblacklist ~/.config/geeqie
+noblacklist ~/.local/share/geeqie
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+nogroups
+nonewprivs
+noroot
+protocol unix
+seccomp
+nosound
+
+private-dev
+
+#Experimental:
+shell none
+#private-bin geeqie
+#private-etc X11
diff --git a/etc/vlc.profile b/etc/vlc.profile
index 9d1cdb4c8..0c96f0108 100644
--- a/etc/vlc.profile
+++ b/etc/vlc.profile
@@ -20,5 +20,5 @@ seccomp
 shell none
 
 private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc
-private-dev
+# private-dev
 private-tmp
diff --git a/platform/debian/conffiles b/platform/debian/conffiles
index edaf1781b..ed04ed7c0 100644
--- a/platform/debian/conffiles
+++ b/platform/debian/conffiles
@@ -249,3 +249,4 @@
 /etc/firejail/kino.profile
 /etc/firejail/Thunar.profile
 /etc/firejail/thunar.profile
+/etc/firejail/geeqie.profile
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 7c959cd04..3c1ecc573 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -113,6 +113,7 @@ dolphin
 dragon
 exiftool
 feh
+geeqie
 gjs
 gnome-books
 gnome-clocks