Add a profile for PDFMod

an alternative to PDFSam

3 files changed, 41 insertions, 0 deletions

diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 40bca578f..064e60294 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -143,6 +143,7 @@ blacklist ${HOME}/.config/opera-beta
 blacklist ${HOME}/.config/orage
 blacklist ${HOME}/.config/org.kde.gwenviewrc
 blacklist ${HOME}/.config/pcmanfm
+blacklist ${HOME}/.config/pdfmod
 blacklist ${HOME}/.config/Pinta
 blacklist ${HOME}/.config/pix
 blacklist ${HOME}/.config/pluma
@@ -435,6 +436,7 @@ blacklist ${HOME}/.cache/netsurf
 blacklist ${HOME}/.cache/opera
 blacklist ${HOME}/.cache/opera-beta
 blacklist ${HOME}/.cache/org.gnome.Books
+blacklist ${HOME}/.cache/pdfmod
 blacklist ${HOME}/.cache/peek
 blacklist ${HOME}/.cache/qBittorrent
 blacklist ${HOME}/.cache/qupzilla
diff --git a/etc/pdfmod.profile b/etc/pdfmod.profile
new file mode 100644
index 000000000..8489e79a6
--- /dev/null
+++ b/etc/pdfmod.profile
@@ -0,0 +1,38 @@
+# Firejail profile for pdfmod
+# This file is overwritten after every install/update
+# Persistent local customizations
+include /etc/firejail/pdfmod.local
+# Persistent global definitions
+include /etc/firejail/globals.local
+
+
+noblacklist ${HOME}/.cache/pdfmod
+noblacklist ${HOME}/.config/pdfmod
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+include /etc/firejail/disable-programs.inc
+
+include /etc/firejail/whitelist-var-common.inc
+
+caps.drop all
+ipc-namespace
+net none
+no3d
+nodvd
+nogroups
+nonewprivs
+noroot
+nosound
+notv
+novideo
+protocol unix
+seccomp
+shell none
+
+private-dev
+private-tmp
+
+noexec ${HOME}
+noexec /tmp
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 905a36b0d..9baa6a6e4 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -250,6 +250,7 @@ opera-beta
 orage
 palemoon
 parole
+pdfmod
 pdfsam
 pdftotext
 peek