Another five more game profiles

9 files changed, 243 insertions, 2 deletions

diff --git a/README.md b/README.md
index 4a858f843..a0050d65f 100644
--- a/README.md
+++ b/README.md
@@ -102,4 +102,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe
 ## Current development version: 0.9.59
 
 ## New profiles:
-crow, nyx, klavaro, mypaint, celluoid, nano, transgui, sysprof, simplescreenrecorder, geekbench, xfce4-mixer, pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring, regextester, hardinfo, gnome-system-log, gnome-nettool, netactview, redshift, devhelp, assogiate, subdownloader, font-manager, exfalso, gconf-editor, dconf-editor, mpdris2, sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings, code-oss, pragha, Maelstrom, ostrichriders, bzflag, freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles, teeworlds, torcs, tremulous, warsow
+crow, nyx, klavaro, mypaint, celluoid, nano, transgui, sysprof, simplescreenrecorder, geekbench, xfce4-mixer, pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring, regextester, hardinfo, gnome-system-log, gnome-nettool, netactview, redshift, devhelp, assogiate, subdownloader, font-manager, exfalso, gconf-editor, dconf-editor, mpdris2, sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings, code-oss, pragha, Maelstrom, ostrichriders, bzflag, freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles, teeworlds, torcs, tremulous, warsow, lugaru, manaplus, pioneer, scorched3d, widelands
diff --git a/RELNOTES b/RELNOTES
index dd9513931..d9411d808 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -8,7 +8,8 @@ firejail (0.9.59) baseline; urgency=low
   * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
   * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
   * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
-  * new profiles: teeworlds, torcs, tremulous, warsow
+  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
+  * new profiles: pioneer, scorched3d, widelands
   * memory-deny-write-execute now also blocks memfd_create
   * drop support for flatpak/snap packages
 
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 69ffb5d45..faf8def79 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -203,8 +203,10 @@ blacklist ${HOME}/.config/ktorrentrc
 blacklist ${HOME}/.config/leafpad
 blacklist ${HOME}/.config/libreoffice
 blacklist ${HOME}/.config/liferea
+blacklist ${HOME}/.config/lugaru
 blacklist ${HOME}/.config/lximage-qt
 blacklist ${HOME}/.config/mailtransports
+blacklist ${HOME}/.config/mana
 blacklist ${HOME}/.config/mate-calc
 blacklist ${HOME}/.config/mate/eom
 blacklist ${HOME}/.config/mate/mate-dictionary
@@ -477,6 +479,8 @@ blacklist ${HOME}/.local/share/kwrite
 blacklist ${HOME}/.local/share/liferea
 blacklist ${HOME}/.local/share/local-mail
 blacklist ${HOME}/.local/share/lollypop
+blacklist ${HOME}/.local/share/lugaru
+blacklist ${HOME}/.local/share/mana
 blacklist ${HOME}/.local/share/maps-places.json
 blacklist ${HOME}/.local/share/meld
 blacklist ${HOME}/.local/share/midori
@@ -547,6 +551,7 @@ blacklist ${HOME}/.opera
 blacklist ${HOME}/.opera-beta
 blacklist ${HOME}/.ostrichriders
 blacklist ${HOME}/.pingus
+blacklist ${HOME}/.pioneer
 blacklist ${HOME}/.purple
 blacklist ${HOME}/.qemu-launcher
 blacklist ${HOME}/.qmmp
@@ -556,6 +561,7 @@ blacklist ${HOME}/.remmina
 blacklist ${HOME}/.repo_.gitconfig.json
 blacklist ${HOME}/.repoconfig
 blacklist ${HOME}/.retroshare
+blacklist ${HOME}/.scorched3d
 blacklist ${HOME}/.scribus
 blacklist ${HOME}/.scribusrc
 blacklist ${HOME}/.simutrans
@@ -592,6 +598,7 @@ blacklist ${HOME}/.waterfox
 blacklist ${HOME}/.weechat
 blacklist ${HOME}/.wget-hsts
 blacklist ${HOME}/.wgetrc
+blacklist ${HOME}/.widelands
 blacklist ${HOME}/.wine
 blacklist ${HOME}/.wireshark
 blacklist ${HOME}/.wine64
diff --git a/etc/lugaru.profile b/etc/lugaru.profile
new file mode 100644
index 000000000..d81441572
--- /dev/null
+++ b/etc/lugaru.profile
@@ -0,0 +1,49 @@
+# Firejail profile for lugaru
+# Description: Ninja rabbit fighting game
+# This file is overwritten after every install/update
+# Persistent local customizations
+include lugaru.local
+# Persistent global definitions
+include globals.local
+
+# note: crashes after entering
+
+noblacklist ${HOME}/.config/lugaru
+noblacklist ${HOME}/.local/share/lugaru
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+include disable-xdg.inc
+
+mkdir ${HOME}/.config/lugaru
+mkdir ${HOME}/.local/share/lugaru
+whitelist ${HOME}/.config/lugaru
+whitelist ${HOME}/.local/share/lugaru
+include whitelist-common.inc
+include whitelist-var-common.inc
+
+caps.drop all
+ipc-namespace
+net none
+nodbus
+nodvd
+nogroups
+nonewprivs
+noroot
+notv
+nou2f
+novideo
+protocol unix,netlink
+seccomp
+shell none
+tracelog
+
+disable-mnt
+private-bin lugaru
+private-cache
+private-dev
+private-tmp
diff --git a/etc/manaplus.profile b/etc/manaplus.profile
new file mode 100644
index 000000000..93d409bf8
--- /dev/null
+++ b/etc/manaplus.profile
@@ -0,0 +1,48 @@
+# Firejail profile for manaplus
+# Description: 2D MMORPG client for Evol Online and The Mana World
+# This file is overwritten after every install/update
+# Persistent local customizations
+include manaplus.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.config/mana
+noblacklist ${HOME}/.local/share/mana
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+include disable-xdg.inc
+
+mkdir ${HOME}/.config/mana
+mkdir ${HOME}/.config/mana/mana
+mkdir ${HOME}/.local/share/mana
+whitelist ${HOME}/.config/mana
+whitelist ${HOME}/.local/share/mana
+include whitelist-common.inc
+include whitelist-var-common.inc
+
+caps.drop all
+ipc-namespace
+netfilter
+nodbus
+nodvd
+nogroups
+nonewprivs
+noroot
+notv
+nou2f
+novideo
+protocol unix,inet,inet6
+seccomp
+shell none
+tracelog
+
+disable-mnt
+private-bin manaplus
+private-cache
+private-dev
+private-tmp
diff --git a/etc/pioneer.profile b/etc/pioneer.profile
new file mode 100644
index 000000000..a240aa5fc
--- /dev/null
+++ b/etc/pioneer.profile
@@ -0,0 +1,44 @@
+# Firejail profile for pioneer
+# Description: A game of lonely space adventure
+# This file is overwritten after every install/update
+# Persistent local customizations
+include pioneer.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.pioneer
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+include disable-xdg.inc
+
+mkdir ${HOME}/.pioneer
+whitelist ${HOME}/.pioneer
+include whitelist-common.inc
+include whitelist-var-common.inc
+
+caps.drop all
+ipc-namespace
+net none
+nodbus
+nodvd
+nogroups
+nonewprivs
+noroot
+notv
+nou2f
+novideo
+protocol unix,netlink
+seccomp
+shell none
+tracelog
+
+disable-mnt
+private-bin pioneer,modelcompiler,savegamedump
+private-cache
+private-dev
+private-tmp
diff --git a/etc/scorched3d.profile b/etc/scorched3d.profile
new file mode 100644
index 000000000..e94d436cf
--- /dev/null
+++ b/etc/scorched3d.profile
@@ -0,0 +1,44 @@
+# Firejail profile for scorched3d
+# Description: Game based loosely on the classic DOS game Scorched Earth
+# This file is overwritten after every install/update
+# Persistent local customizations
+include scorched3d.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.scorched3d
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+include disable-xdg.inc
+
+mkdir ${HOME}/.scorched3d
+whitelist ${HOME}/.scorched3d
+include whitelist-common.inc
+include whitelist-var-common.inc
+
+caps.drop all
+ipc-namespace
+netfilter
+nodbus
+nodvd
+nogroups
+nonewprivs
+noroot
+notv
+nou2f
+novideo
+protocol unix,inet,inet6
+seccomp
+shell none
+tracelog
+
+disable-mnt
+private-bin scorched3d,scorched3d-wrapper,scorched3dc,scorched3ds
+private-cache
+private-dev
+private-tmp
diff --git a/etc/widelands.profile b/etc/widelands.profile
new file mode 100644
index 000000000..c6b5f27da
--- /dev/null
+++ b/etc/widelands.profile
@@ -0,0 +1,44 @@
+# Firejail profile for widelands
+# Description: Open source realtime-strategy game
+# This file is overwritten after every install/update
+# Persistent local customizations
+include widelands.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.widelands
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+include disable-xdg.inc
+
+mkdir ${HOME}/.widelands
+whitelist ${HOME}/.widelands
+include whitelist-common.inc
+include whitelist-var-common.inc
+
+caps.drop all
+ipc-namespace
+netfilter
+nodbus
+nodvd
+nogroups
+nonewprivs
+noroot
+notv
+nou2f
+novideo
+protocol unix,inet,inet6,netlink
+seccomp
+shell none
+tracelog
+
+disable-mnt
+private-bin widelands
+private-cache
+private-dev
+private-tmp
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index a2edd7c3a..4a1bcb4e1 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -321,6 +321,7 @@ lximage-qt
 lxmusic
 lynx
 macrofusion
+manaplus
 masterpdfeditor
 masterpdfeditor4
 masterpdfeditor5
@@ -403,6 +404,7 @@ pidgin
 #ping - disabled until we fix  #1912
 pingus
 pinta
+pioneer
 pithos
 pitivi
 pix
@@ -441,6 +443,7 @@ rtorrent
 runenpass.sh
 sayonara
 scallion
+scorched3d
 scribus
 sdat2img
 seahorse
@@ -569,6 +572,7 @@ weechat-curses
 wesnoth
 wget
 whois
+widelands
 wine
 wire-desktop
 wireshark