Add disable-xdg.inc to ~15 profiles

18 files changed, 47 insertions, 1 deletions

diff --git a/etc/default.profile b/etc/default.profile
index 42c1056c5..f8e54c8d3 100644
--- a/etc/default.profile
+++ b/etc/default.profile
@@ -13,6 +13,7 @@ include /etc/firejail/disable-common.inc
 # include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+#include /etc/firejail/disable-xdg.inc
 
 caps.drop all
 # ipc-namespace
diff --git a/etc/dosbox.profile b/etc/dosbox.profile
index a2606e7e1..efc0b2d35 100644
--- a/etc/dosbox.profile
+++ b/etc/dosbox.profile
@@ -6,6 +6,7 @@ include /etc/firejail/dosbox.local
 include /etc/firejail/globals.local
 
 noblacklist ${HOME}/.dosbox
+noblacklist ${DOCUMENTS}
 
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
diff --git a/etc/gnome-mplayer.profile b/etc/gnome-mplayer.profile
index f54219174..e85b9dc06 100644
--- a/etc/gnome-mplayer.profile
+++ b/etc/gnome-mplayer.profile
@@ -6,12 +6,15 @@ include /etc/firejail/gnome-mplayer.local
 include /etc/firejail/globals.local
 
 noblacklist ${HOME}/.config/gnome-mplayer
+noblacklist ${MUSIC}
+noblacklist ${VIDEOS}
 
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 caps.drop all
 nogroups
diff --git a/etc/hugin.profile b/etc/hugin.profile
index f92acac66..cacdaa794 100644
--- a/etc/hugin.profile
+++ b/etc/hugin.profile
@@ -6,12 +6,15 @@ include /etc/firejail/hugin.local
 include /etc/firejail/globals.local
 
 noblacklist ${HOME}/.hugin
+noblacklist ${DOCUMENTS}
+noblacklist ${PICTURES}
 
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 caps.drop all
 net none
diff --git a/etc/img2txt.profile b/etc/img2txt.profile
index bbefd8044..c9ee18f80 100644
--- a/etc/img2txt.profile
+++ b/etc/img2txt.profile
@@ -5,11 +5,15 @@ include /etc/firejail/img2txt.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
+noblacklist ${DOCUMENTS}
+noblacklist ${PICTURES}
+
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 caps.drop all
 net none
diff --git a/etc/kaffeine.profile b/etc/kaffeine.profile
index 93e27b7c3..0d63069fe 100644
--- a/etc/kaffeine.profile
+++ b/etc/kaffeine.profile
@@ -11,12 +11,15 @@ noblacklist ${HOME}/.kde/share/config/kaffeinerc
 noblacklist ${HOME}/.kde4/share/apps/kaffeine
 noblacklist ${HOME}/.kde4/share/config/kaffeinerc
 noblacklist ${HOME}/.local/share/kaffeine
+noblacklist ${MUSIC}
+noblacklist ${VIDEOS}
 
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 include /etc/firejail/whitelist-var-common.inc
 
diff --git a/etc/lmms.profile b/etc/lmms.profile
index 58f82726d..3a312a2cf 100644
--- a/etc/lmms.profile
+++ b/etc/lmms.profile
@@ -6,12 +6,15 @@ include /etc/firejail/lmms.local
 include /etc/firejail/globals.local
 
 noblacklist ${HOME}/.lmmsrc.xml
+noblacklist ${DOCUMENTS}
+noblacklist ${MUSIC}
 
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 caps.drop all
 ipc-namespace
diff --git a/etc/macrofusion.profile b/etc/macrofusion.profile
index 6d20d7261..4107d91ad 100644
--- a/etc/macrofusion.profile
+++ b/etc/macrofusion.profile
@@ -6,6 +6,7 @@ include /etc/firejail/macrofusion.local
 include /etc/firejail/globals.local
 
 noblacklist ${HOME}/.config/mfusion
+noblacklist ${PICTURES}
 
 # Allow python (blacklisted by disable-interpreters.inc)
 noblacklist ${PATH}/python2*
@@ -18,6 +19,7 @@ include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 caps.drop all
 ipc-namespace
diff --git a/etc/mplayer.profile b/etc/mplayer.profile
index 8e8d224a9..ddcc8b7bf 100644
--- a/etc/mplayer.profile
+++ b/etc/mplayer.profile
@@ -6,12 +6,15 @@ include /etc/firejail/mplayer.local
 include /etc/firejail/globals.local
 
 noblacklist ${HOME}/.mplayer
+noblacklist ${MUSIC}
+noblacklist ${VIDEOS}
 
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 include /etc/firejail/whitelist-var-common.inc
 
diff --git a/etc/musixmatch.profile b/etc/musixmatch.profile
index fce60e89e..bc8965431 100644
--- a/etc/musixmatch.profile
+++ b/etc/musixmatch.profile
@@ -5,10 +5,13 @@ include /etc/firejail/musixmatch.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
+noblacklist ${MUSIC}
+
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 caps.drop all
 ipc-namespace
diff --git a/etc/odt2txt.profile b/etc/odt2txt.profile
index aea6b79d2..ea49c1a4d 100644
--- a/etc/odt2txt.profile
+++ b/etc/odt2txt.profile
@@ -5,6 +5,8 @@ include /etc/firejail/odt2txt.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
+noblacklist ${DOCUMENTS}
+
 blacklist /tmp/.X11-unix
 
 include /etc/firejail/disable-common.inc
@@ -12,6 +14,7 @@ include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 caps.drop all
 net none
diff --git a/etc/pdftotext.profile b/etc/pdftotext.profile
index 9e672d199..d162f45b5 100644
--- a/etc/pdftotext.profile
+++ b/etc/pdftotext.profile
@@ -5,6 +5,8 @@ include /etc/firejail/pdftotext.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
+noblacklist ${DOCUMENTS}
+
 blacklist /tmp/.X11-unix
 
 include /etc/firejail/disable-common.inc
@@ -12,6 +14,7 @@ include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 include /etc/firejail/whitelist-var-common.inc
 
diff --git a/etc/server.profile b/etc/server.profile
index 94e2d5da9..8d3382dee 100644
--- a/etc/server.profile
+++ b/etc/server.profile
@@ -20,6 +20,7 @@ include /etc/firejail/disable-common.inc
 # include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+#include /etc/firejail/disable-xdg.inc
 
 caps
 # ipc-namespace
diff --git a/etc/tuxguitar.profile b/etc/tuxguitar.profile
index b07c7c359..1f0d2705e 100644
--- a/etc/tuxguitar.profile
+++ b/etc/tuxguitar.profile
@@ -7,6 +7,8 @@ include /etc/firejail/globals.local
 
 noblacklist ${HOME}/.java
 noblacklist ${HOME}/.tuxguitar*
+noblacklist ${DOCUMENTS}
+noblacklist ${MUSIC}
 
 # Allow access to java
 noblacklist ${PATH}/java
@@ -19,6 +21,7 @@ include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 include /etc/firejail/whitelist-var-common.inc
 
diff --git a/etc/xmms.profile b/etc/xmms.profile
index b3e567443..d016e0c23 100644
--- a/etc/xmms.profile
+++ b/etc/xmms.profile
@@ -6,12 +6,14 @@ include /etc/firejail/xmms.local
 include /etc/firejail/globals.local
 
 noblacklist ${HOME}/.xmms
+noblacklist ${MUSIC}
 
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 caps.drop all
 netfilter
diff --git a/etc/xplayer.profile b/etc/xplayer.profile
index e653996c3..46579ead8 100644
--- a/etc/xplayer.profile
+++ b/etc/xplayer.profile
@@ -7,6 +7,8 @@ include /etc/firejail/globals.local
 
 noblacklist ${HOME}/.config/xplayer
 noblacklist ${HOME}/.local/share/xplayer
+noblacklist ${MUSIC}
+noblacklist ${VIDEOS}
 
 # Allow python (blacklisted by disable-interpreters.inc)
 noblacklist ${PATH}/python2*
@@ -19,6 +21,7 @@ include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 include /etc/firejail/whitelist-var-common.inc
 
diff --git a/etc/xreader.profile b/etc/xreader.profile
index b4ab8f83f..6da8957f4 100644
--- a/etc/xreader.profile
+++ b/etc/xreader.profile
@@ -7,13 +7,14 @@ include /etc/firejail/globals.local
 
 noblacklist ${HOME}/.cache/xreader
 noblacklist ${HOME}/.config/xreader
-# noblacklist ${HOME}/.local/share
+noblacklist ${DOCUMENTS}
 
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 # Breaks xreader on Mint 18.3
 # include /etc/firejail/whitelist-var-common.inc
diff --git a/etc/zart.profile b/etc/zart.profile
index e7fb83b29..885fa5021 100644
--- a/etc/zart.profile
+++ b/etc/zart.profile
@@ -5,11 +5,15 @@ include /etc/firejail/zart.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
+noblacklist ${DOCUMENTS}
+noblacklist ${PICTURES}
+
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-xdg.inc
 
 caps.drop all
 ipc-namespace