Add a profile for DCSS

5 files changed, 56 insertions, 2 deletions

diff --git a/README.md b/README.md
index 652862646..8d061f4bc 100644
--- a/README.md
+++ b/README.md
@@ -102,4 +102,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe
 ## Current development version: 0.9.59
 
 ## New profiles:
-crow, nyx, klavaro, mypaint, celluoid, nano, transgui, sysprof, simplescreenrecorder, geekbench, xfce4-mixer, pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring, regextester, hardinfo, gnome-system-log, gnome-nettool, netactview, redshift, devhelp, assogiate, subdownloader, font-manager, exfalso, gconf-editor, dconf-editor, mpdris2, sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings, code-oss, pragha, Maelstrom, ostrichriders, bzflag, freeciv, lincity-ng, megaglest, openttd
+crow, nyx, klavaro, mypaint, celluoid, nano, transgui, sysprof, simplescreenrecorder, geekbench, xfce4-mixer, pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring, regextester, hardinfo, gnome-system-log, gnome-nettool, netactview, redshift, devhelp, assogiate, subdownloader, font-manager, exfalso, gconf-editor, dconf-editor, mpdris2, sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings, code-oss, pragha, Maelstrom, ostrichriders, bzflag, freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
diff --git a/RELNOTES b/RELNOTES
index 92a6a4109..f3ee1bfab 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -7,7 +7,7 @@ firejail (0.9.59) baseline; urgency=low
   * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
   * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
   * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
-  * new profiles: freeciv, lincity-ng, megaglest, openttd
+  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
   * memory-deny-write-execute now also blocks memfd_create
   * drop support for flatpak/snap packages
 
diff --git a/etc/crawl-tiles.profile b/etc/crawl-tiles.profile
new file mode 100644
index 000000000..39151865e
--- /dev/null
+++ b/etc/crawl-tiles.profile
@@ -0,0 +1,7 @@
+# Firejail profile alias for crawl
+# This file is overwritten after every install/update
+
+ignore no3d
+
+# Redirect
+include crawl.profile
diff --git a/etc/crawl.profile b/etc/crawl.profile
new file mode 100644
index 000000000..af78ac738
--- /dev/null
+++ b/etc/crawl.profile
@@ -0,0 +1,45 @@
+# Firejail profile for crawl-tiles
+# Description: Roguelike dungeon exploration game
+# This file is overwritten after every install/update
+# Persistent local customizations
+include crawl-tiles.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.crawl
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+include disable-xdg.inc
+
+mkdir ${HOME}/.crawl
+whitelist ${HOME}/.crawl
+include whitelist-common.inc
+include whitelist-var-common.inc
+
+caps.drop all
+ipc-namespace
+net none
+no3d
+nodbus
+nodvd
+nogroups
+nonewprivs
+noroot
+nosound
+notv
+nou2f
+novideo
+protocol unix
+seccomp
+shell none
+
+disable-mnt
+private-bin crawl,crawl-tiles
+private-cache
+private-dev
+private-tmp
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 790768290..90dd07dea 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -106,6 +106,8 @@ code-oss
 conkeror
 conky
 corebird
+crawl
+crawl-tiles
 crow
 cryptocat
 cvlc