mplayer and smplayer profiles

5 files changed, 70 insertions, 1 deletions

diff --git a/README b/README
index 22f835a10..2c3fbf67b 100644
--- a/README
+++ b/README
@@ -401,9 +401,11 @@ startx2017 (https://github.com/startx2017)
         - firecfg fix: create ~/.local/share/applications directory if it doesn't exist
         - firejail.config cleanup
         - --quiet fixes
-        - 0.9.38-LTS branch maintainer
+        - bugfixes branches maintainer
         - firemon --top speed-up
         - Blender and 2048-qt profiles
+        - handbrake profile
+        - mplayer and smplayer profiles
 thewisenerd (https://github.com/thewisenerd)
         - allow multiple private-home commands
         - use $SHELL variable if the shell is not specified
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 4d77218de..3b2c150fc 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -140,6 +140,7 @@ blacklist ${HOME}/.config/redshift.conf
 blacklist ${HOME}/.config/scribus
 blacklist ${HOME}/.config/skypeforlinux
 blacklist ${HOME}/.config/slimjet
+blacklist ${HOME}/.config/smplayer
 blacklist ${HOME}/.config/spotify
 blacklist ${HOME}/.config/stellarium
 blacklist ${HOME}/.config/synfig
@@ -306,6 +307,7 @@ blacklist ${HOME}/.mcabberrc
 blacklist ${HOME}/.mediathek3
 blacklist ${HOME}/.mozilla
 blacklist ${HOME}/.mpdconf
+blacklist ${HOME}/.mplayer
 blacklist ${HOME}/.msmtprc
 blacklist ${HOME}/.multimc5
 blacklist ${HOME}/.mutt
diff --git a/etc/mplayer.profile b/etc/mplayer.profile
new file mode 100644
index 000000000..879223e1a
--- /dev/null
+++ b/etc/mplayer.profile
@@ -0,0 +1,31 @@
+# Persistent global definitions go here
+include /etc/firejail/globals.local
+
+# This file is overwritten during software install.
+# Persistent customizations should go in a .local file.
+include /etc/firejail/mplayer.local
+
+# mplayer profile
+noblacklist ${HOME}/.mplayer
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+#ipc-namespace
+netfilter
+# nogroups
+nonewprivs
+noroot
+protocol unix,inet,inet6,netlink
+seccomp
+shell none
+
+private-dev
+private-tmp
+private-bin mplayer
+
+noexec ${HOME}
+noexec /tmp
diff --git a/etc/smplayer.profile b/etc/smplayer.profile
new file mode 100644
index 000000000..6a5c115b7
--- /dev/null
+++ b/etc/smplayer.profile
@@ -0,0 +1,32 @@
+# Persistent global definitions go here
+include /etc/firejail/globals.local
+
+# This file is overwritten during software install.
+# Persistent customizations should go in a .local file.
+include /etc/firejail/smplayer.local
+
+# smplayer profile
+noblacklist ${HOME}/.config/smplayer
+noblacklist ${HOME}/.mplayer
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+#ipc-namespace
+netfilter
+# nogroups
+nonewprivs
+noroot
+protocol unix,inet,inet6,netlink
+seccomp
+shell none
+
+private-dev
+private-tmp
+private-bin smplayer,mplayer
+
+noexec ${HOME}
+noexec /tmp
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 444b304ab..7bac70887 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -153,6 +153,7 @@ mediathekview
 meld
 midori
 mousepad
+mplayer
 mpv
 multimc5
 mumble
@@ -199,6 +200,7 @@ skanlite
 skype
 skypeforlinux
 slack
+smplayer
 soffice
 spectacle
 spotify