adding fluxbox, blackbox, awesome, i3 profiles

5 files changed, 77 insertions, 1 deletions

diff --git a/etc/awesome.profile b/etc/awesome.profile
new file mode 100644
index 000000000..49c1a4aad
--- /dev/null
+++ b/etc/awesome.profile
@@ -0,0 +1,19 @@
+# Firejail profile for awesome
+# Description: Standards-compliant, fast, light-weight and extensible window manager
+# This file is overwritten after every install/update
+# Persistent local customizations
+include /etc/firejail/awesome.local
+# Persistent global definitions
+include /etc/firejail/globals.local
+
+# all applications started in awesome will run in this profile
+noblacklist ${HOME}/.config/awesome
+include /etc/firejail/disable-common.inc
+
+caps.drop all
+netfilter
+noroot
+protocol unix,inet,inet6
+seccomp
+
+read-only ${HOME}/.config/awesome/autorun.sh
diff --git a/etc/blackbox.profile b/etc/blackbox.profile
new file mode 100644
index 000000000..2672c812a
--- /dev/null
+++ b/etc/blackbox.profile
@@ -0,0 +1,18 @@
+# Firejail profile for blackbox
+# Description: Standards-compliant, fast, light-weight and extensible window manager
+# This file is overwritten after every install/update
+# Persistent local customizations
+include /etc/firejail/blackbox.local
+# Persistent global definitions
+include /etc/firejail/globals.local
+
+# all applications started in awesome will run in this profile
+noblacklist ${HOME}/.blackbox
+include /etc/firejail/disable-common.inc
+
+caps.drop all
+netfilter
+noroot
+protocol unix,inet,inet6
+seccomp
+
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 0c295ae6d..94254931e 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -17,14 +17,17 @@ blacklist-nolog /tmp/clipmenu*
 # X11 session autostart
 # blacklist ${HOME}/.xpra - this will kill --x11=xpra cmdline option for all programs
 blacklist ${HOME}/.Xsession
+blacklist ${HOME}/.blackbox
 blacklist ${HOME}/.config/autostart
 blacklist ${HOME}/.config/autostart-scripts
+blacklist ${HOME}/.config/awesome
+blacklist ${HOME}/.config/i3
 blacklist ${HOME}/.config/lxsession/LXDE/autostart
 blacklist ${HOME}/.config/openbox
 blacklist ${HOME}/.config/plasma-workspace
 blacklist ${HOME}/.config/startupconfig
 blacklist ${HOME}/.config/startupconfigkeys
-blacklist ${HOME}/.fluxbox/startup
+blacklist ${HOME}/.fluxbox
 blacklist ${HOME}/.gnomerc
 blacklist ${HOME}/.kde/Autostart
 blacklist ${HOME}/.kde/env
diff --git a/etc/fluxbox.profile b/etc/fluxbox.profile
new file mode 100644
index 000000000..5fafef95a
--- /dev/null
+++ b/etc/fluxbox.profile
@@ -0,0 +1,18 @@
+# Firejail profile for fluxbox
+# Description: Standards-compliant, fast, light-weight and extensible window manager
+# This file is overwritten after every install/update
+# Persistent local customizations
+include /etc/firejail/fluxbox.local
+# Persistent global definitions
+include /etc/firejail/globals.local
+
+# all applications started in awesome will run in this profile
+noblacklist ${HOME}/.fluxbox
+include /etc/firejail/disable-common.inc
+
+caps.drop all
+netfilter
+noroot
+protocol unix,inet,inet6
+seccomp
+
diff --git a/etc/i3.profile b/etc/i3.profile
new file mode 100644
index 000000000..efbc1f6e7
--- /dev/null
+++ b/etc/i3.profile
@@ -0,0 +1,18 @@
+# Firejail profile for i3
+# Description: Standards-compliant, fast, light-weight and extensible window manager
+# This file is overwritten after every install/update
+# Persistent local customizations
+include /etc/firejail/i3.local
+# Persistent global definitions
+include /etc/firejail/globals.local
+
+# all applications started in awesome will run in this profile
+noblacklist ${HOME}/.config/i3
+include /etc/firejail/disable-common.inc
+
+caps.drop all
+netfilter
+noroot
+protocol unix,inet,inet6
+seccomp
+