Merge pull request #881 from valoq/master

Added profiles for display (imagemagick) and wire

3 files changed, 46 insertions, 0 deletions

diff --git a/etc/Wire.profile b/etc/Wire.profile
new file mode 100644
index 000000000..b488d75e4
--- /dev/null
+++ b/etc/Wire.profile
@@ -0,0 +1,22 @@
+# wire messenger profile
+
+noblacklist ~/.config/Wire
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+netfilter
+nonewprivs
+nogroups
+noroot
+protocol unix,inet,inet6,netlink
+seccomp
+shell none
+
+private-tmp
+private-dev
+
+# please note: the wire binary is currently identified with a capital W. This might change in future versions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 6e22fe04d..0d9bd1bb4 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -106,6 +106,7 @@ blacklist ${HOME}/.config/Slack
 blacklist ${HOME}/.cache/gajim
 blacklist ${HOME}/.local/share/gajim
 blacklist ${HOME}/.config/gajim
+blacklist ${HOME}/.config/Wire
 
 # Games
 blacklist ${HOME}/.hedgewars
diff --git a/etc/display.profile b/etc/display.profile
new file mode 100644
index 000000000..ec041bff7
--- /dev/null
+++ b/etc/display.profile
@@ -0,0 +1,23 @@
+# display (ImageMagick tool) image viewer profile
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+seccomp
+protocol unix
+netfilter
+net none
+nonewprivs
+noroot
+nogroups
+nosound
+shell none
+x11 xorg
+
+private-bin display 
+private-tmp
+private-dev
+private-etc none
+