Create pngquant.profile

4 files changed, 50 insertions, 2 deletions

diff --git a/README.md b/README.md
index 711a970fb..bd6ba406a 100644
--- a/README.md
+++ b/README.md
@@ -118,4 +118,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe
 
 ## New profiles:
 
-gnome-sound-recorder, godot, jerry, keepassxc-cli, keepassxc-proxy, klatexformula, klatexformula_cmdl, links, newsbeuter, OpenArena, pandoc, qgis, rhythmbox-client, tcpdump, teams-for-linux, tshark, xlinks, zeal, mpg123, conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss, mpg123-portaudio, mpg123-pulse, mpg123-strip, out123, pavucontrol-qt, gnome-characters, gnome-character-map, rsync, Whalebird, tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat, kiwix-desktop, ar, gnome-latex
+gnome-sound-recorder, godot, jerry, keepassxc-cli, keepassxc-proxy, klatexformula, klatexformula_cmdl, links, newsbeuter, OpenArena, pandoc, qgis, rhythmbox-client, tcpdump, teams-for-linux, tshark, xlinks, zeal, mpg123, conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss, mpg123-portaudio, mpg123-pulse, mpg123-strip, out123, pavucontrol-qt, gnome-characters, gnome-character-map, rsync, Whalebird, tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat, kiwix-desktop, ar, gnome-latex, pngquant
diff --git a/RELNOTES b/RELNOTES
index 14b454b87..cad0b974c 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -16,7 +16,7 @@ firejail (0.9.61) baseline; urgency=low
   * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
   * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
   * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
-  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex
+  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant
  -- netblue30 <netblue30@yahoo.com>  Sat, 1 Jun 2019 08:00:00 -0500
 
 firejail (0.9.60) baseline; urgency=low
diff --git a/etc/pngquant.profile b/etc/pngquant.profile
new file mode 100644
index 000000000..8c06cef1a
--- /dev/null
+++ b/etc/pngquant.profile
@@ -0,0 +1,47 @@
+# Firejail profile for pngquant
+# Description: PNG converter and lossy image compressor
+# This file is overwritten after every install/update
+quiet
+# Persistent local customizations
+include pngquant.local
+# Persistent global definitions
+include globals.local
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+
+include whitelist-var-common.inc
+
+apparmor
+caps.drop all
+ipc-namespace
+machine-id
+net none
+no3d
+nodbus
+nodvd
+nogroups
+nonewprivs
+noroot
+nosound
+notv
+nou2f
+novideo
+# protocol can be empty, but this is not yet supported see #639
+protocol inet
+seccomp
+shell none
+tracelog
+x11 none
+
+private-bin pngquant
+private-cache
+private-dev
+private-etc alternatives
+private-tmp
+
+memory-deny-write-execute
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 9c7fd1e4e..f90d6c6bc 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -474,6 +474,7 @@ pitivi
 pix
 playonlinux
 pluma
+pngquant
 polari
 ppsspp
 pragha