Fixup blender-2.8 and thunderbird-beta

2 files changed, 6 insertions, 57 deletions

diff --git a/etc/blender-2.8.profile b/etc/blender-2.8.profile
index 29df27759..4b907018e 100644
--- a/etc/blender-2.8.profile
+++ b/etc/blender-2.8.profile
@@ -1,30 +1,6 @@
-# Firejail profile for blender
+# Firejail profile alias for blender
 # This file is overwritten after every install/update
-# Persistent local customizations
-include /etc/firejail/blender.local
-# Persistent global definitions
-include /etc/firejail/globals.local
 
-noblacklist ${HOME}/.config/blender
 
-include /etc/firejail/disable-common.inc
-include /etc/firejail/disable-devel.inc
-include /etc/firejail/disable-passwdmgr.inc
-include /etc/firejail/disable-programs.inc
-
-caps.drop all
-netfilter
-nodvd
-nogroups
-nonewprivs
-noroot
-notv
-protocol unix,inet,inet6,netlink
-seccomp
-shell none
-
-private-dev
-private-tmp
-
-noexec ${HOME}
-noexec /tmp
+# Redirect
+include /etc/firejail/blender.profile
diff --git a/etc/thunderbird-beta.profile b/etc/thunderbird-beta.profile
index fb1ee46e2..73d2419da 100644
--- a/etc/thunderbird-beta.profile
+++ b/etc/thunderbird-beta.profile
@@ -1,35 +1,8 @@
-# Firejail profile for thunderbird
+# Firejail profile alias for thunderbird-beta
 # This file is overwritten after every install/update
-# Persistent local customizations
-include /etc/firejail/thunderbird.local
-# Persistent global definitions
-include /etc/firejail/globals.local
 
-# Users have thunderbird set to open a browser by clicking a link in an email
-# We are not allowed to blacklist browser-specific directories
-whitelist /opt/thunderbird-beta
-noblacklist ${HOME}/.cache/thunderbird
-noblacklist ${HOME}/.gnupg
-# noblacklist ${HOME}/.icedove
-noblacklist ${HOME}/.thunderbird
-
-mkdir ${HOME}/.cache/thunderbird
-mkdir ${HOME}/.gnupg
-# mkdir ${HOME}/.icedove
-mkdir ${HOME}/.thunderbird
-whitelist ${HOME}/.cache/thunderbird
-whitelist ${HOME}/.gnupg
-# whitelist ${HOME}/.icedove
-whitelist ${HOME}/.thunderbird
 
-# We need the real /tmp for data exchange when xdg-open handles email attachments on KDE
-ignore private-tmp
-# machine-id breaks audio in browsers; enable it when sound is not required
-# machine-id
-read-only ${HOME}/.config/mimeapps.list
-# writable-run-user is needed for signing and encrypting emails
-writable-run-user
+whitelist /opt/thunderbird-beta
 
-# allow browsers
 # Redirect
-include /etc/firejail/firefox.profile
+include /etc/firejail/thunderbird.profile