mupdf and qpdfview profiles

3 files changed, 42 insertions, 0 deletions

diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index fb0f5a669..54c53e794 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -26,6 +26,7 @@ blacklist ${HOME}/.kde/share/config/okularrc
 blacklist ${HOME}/.kde/share/config/okularpartrc
 blacklist ${HOME}/.kde/share/apps/gwenview
 blacklist ${HOME}/.kde/share/config/gwenviewrc
+blacklist ${HOME}/.config/qpdfview
 
 # Media players
 blacklist ${HOME}/.config/cmus
@@ -135,6 +136,7 @@ blacklist ${HOME}/.local/share/totem
 blacklist ${HOME}/.local/share/psi+
 blacklist ${HOME}/.local/share/pix
 blacklist ${HOME}/.local/share/gnome-chess
+blacklist ${HOME}/.local/share/qpdfview
 
 # ssh
 blacklist /tmp/ssh-*
diff --git a/etc/mupdf.profile b/etc/mupdf.profile
new file mode 100644
index 000000000..6f2db511b
--- /dev/null
+++ b/etc/mupdf.profile
@@ -0,0 +1,18 @@
+# mupdf reader profile
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+nogroups
+nonewprivs
+noroot
+nosound
+protocol unix
+seccomp
+shell none
+tracelog
+
+private-tmp
+private-dev
diff --git a/etc/qpdfview.profile b/etc/qpdfview.profile
new file mode 100644
index 000000000..07ea173e6
--- /dev/null
+++ b/etc/qpdfview.profile
@@ -0,0 +1,22 @@
+# qpdfview profile
+noblacklist ${HOME}/.config/qpdfview
+noblacklist ${HOME}/.local/share/qpdfview
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+nogroups
+nonewprivs
+noroot
+nosound
+protocol unix
+seccomp
+shell none
+tracelog
+
+private-bin qpdfview
+private-tmp
+private-dev