Merge pull request #684 from Fred-Barclay/checkmate

Checkmate

3 files changed, 24 insertions, 3 deletions

diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index ed7710728..01e68506d 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -128,3 +128,4 @@ blacklist ${HOME}/.local/share/xplayer
 blacklist ${HOME}/.local/share/totem
 blacklist ${HOME}/.local/share/psi+
 blacklist ${HOME}/.local/share/pix
+blacklist ${HOME}/.local/share/gnome-chess
diff --git a/etc/gnome-chess.profile b/etc/gnome-chess.profile
new file mode 100644
index 000000000..e93970f7d
--- /dev/null
+++ b/etc/gnome-chess.profile
@@ -0,0 +1,20 @@
+# Firejail profile for gnome-chess
+noblacklist /.local/share/gnome-chess
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+net none
+nogroups
+nonewprivs
+noroot
+nosound
+seccomp
+shell none
+tracelog
+
+private-bin gnome-chess
+private-dev
diff --git a/etc/vlc.profile b/etc/vlc.profile
index 1a6e5a151..c82247dd2 100644
--- a/etc/vlc.profile
+++ b/etc/vlc.profile
@@ -8,12 +8,12 @@ include /etc/firejail/disable-passwdmgr.inc
 
 caps.drop all
 netfilter
+nogroups
 nonewprivs
 noroot
 protocol unix,inet,inet6
 seccomp
-
-
-# to test
 shell none
+tracelog
+
 private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc