fix

1 files changed, 35 insertions, 0 deletions

diff --git a/etc/thunderbird-beta.profile b/etc/thunderbird-beta.profile
new file mode 100644
index 000000000..fb1ee46e2
--- /dev/null
+++ b/etc/thunderbird-beta.profile
@@ -0,0 +1,35 @@
+# Firejail profile for thunderbird
+# This file is overwritten after every install/update
+# Persistent local customizations
+include /etc/firejail/thunderbird.local
+# Persistent global definitions
+include /etc/firejail/globals.local
+
+# Users have thunderbird set to open a browser by clicking a link in an email
+# We are not allowed to blacklist browser-specific directories
+whitelist /opt/thunderbird-beta
+noblacklist ${HOME}/.cache/thunderbird
+noblacklist ${HOME}/.gnupg
+# noblacklist ${HOME}/.icedove
+noblacklist ${HOME}/.thunderbird
+
+mkdir ${HOME}/.cache/thunderbird
+mkdir ${HOME}/.gnupg
+# mkdir ${HOME}/.icedove
+mkdir ${HOME}/.thunderbird
+whitelist ${HOME}/.cache/thunderbird
+whitelist ${HOME}/.gnupg
+# whitelist ${HOME}/.icedove
+whitelist ${HOME}/.thunderbird
+
+# We need the real /tmp for data exchange when xdg-open handles email attachments on KDE
+ignore private-tmp
+# machine-id breaks audio in browsers; enable it when sound is not required
+# machine-id
+read-only ${HOME}/.config/mimeapps.list
+# writable-run-user is needed for signing and encrypting emails
+writable-run-user
+
+# allow browsers
+# Redirect
+include /etc/firejail/firefox.profile