summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--README.md3
-rw-r--r--RELNOTES2
-rw-r--r--etc/QOwnNotes.profile56
-rw-r--r--etc/disable-programs.inc3
-rw-r--r--src/firecfg/firecfg.config1
5 files changed, 62 insertions, 3 deletions
diff --git a/README.md b/README.md
index 8ce9a84fa..dc2c44ff6 100644
--- a/README.md
+++ b/README.md
@@ -137,5 +137,4 @@ QMediathekView, aria2c, Authenticator, checkbashisms, devilspie, devilspie2, eas
137bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat, lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep, 137bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat, lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep,
138lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat, xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore, 138lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat, xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore,
139lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh, nirtoshare-send, nitroshare-ui, mencoder, gnome-pie, 139lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh, nirtoshare-send, nitroshare-ui, mencoder, gnome-pie,
140masterpdfeditor 140masterpdfeditor, QOwnNotes
141
diff --git a/RELNOTES b/RELNOTES
index 85f0c2b7a..74bdd3d2b 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -9,7 +9,7 @@ firejail (0.9.56.1) baseline; urgency=low
9 * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore 9 * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
10 * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh 10 * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
11 * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie 11 * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
12 * new profiles: masterpdfeditor 12 * new profiles: masterpdfeditor, QOwnNotes
13 -- netblue30 <netblue30@yahoo.com> Thu, 11 Oct 2018 08:00:00 -0500 13 -- netblue30 <netblue30@yahoo.com> Thu, 11 Oct 2018 08:00:00 -0500
14 14
15firejail (0.9.56) baseline; urgency=low 15firejail (0.9.56) baseline; urgency=low
diff --git a/etc/QOwnNotes.profile b/etc/QOwnNotes.profile
new file mode 100644
index 000000000..1135b850b
--- /dev/null
+++ b/etc/QOwnNotes.profile
@@ -0,0 +1,56 @@
1# Firejail profile for QOwnNotes
2# Description: Plain-text file notepad with markdown support and ownCloud integration
3# This file is overwritten after every install/update
4# Persistent local customizations
5include QOwnNotes.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${DOCUMENTS}
10noblacklist ${HOME}/Nextcloud/Notes
11noblacklist ${HOME}/.config/PBE
12noblacklist ${HOME}/.local/share/PBE
13
14mkdir ${DOCUMENTS}
15mkdir ${HOME}/Nextcloud/Notes
16mkdir ${HOME}.config/PBE
17mkdir ${HOME}/.local/share/PBE
18whitelist ${DOCUMENTS}
19whitelist ${HOME}/Nextcloud/Notes
20whitelist ${HOME}/.config/PBE
21whitelist ${HOME}/.local/share/PBE
22include whitelist-common.inc
23include whitelist-var-common.inc
24
25include disable-common.inc
26include disable-devel.inc
27include disable-interpreters.inc
28include disable-passwdmgr.inc
29include disable-programs.inc
30include disable-xdg.inc
31
32caps.drop all
33machine-id
34netfilter
35no3d
36nodvd
37nogroups
38nonewprivs
39noroot
40nosound
41notv
42nou2f
43novideo
44protocol unix,inet,inet6,netlink
45seccomp
46shell none
47tracelog
48
49disable-mnt
50private-bin QOwnNotes,gio
51private-dev
52private-etc fonts,ld.so.cache,pulse,resolv.conf,hosts,nsswitch.conf,host.conf,ca-certificates,ssl,pki,crypto-policies
53private-tmp
54
55noexec ${HOME}
56noexec /tmp
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 46e60b9f4..edf3c7be5 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -3,6 +3,7 @@
3include disable-programs.local 3include disable-programs.local
4 4
5blacklist ${HOME}/Monero/wallets 5blacklist ${HOME}/Monero/wallets
6blacklist ${HOME}/Nextcloud/Notes
6blacklist ${HOME}/Standard Notes Backups 7blacklist ${HOME}/Standard Notes Backups
7blacklist ${HOME}/snap 8blacklist ${HOME}/snap
8blacklist ${HOME}/.*coin 9blacklist ${HOME}/.*coin
@@ -75,6 +76,7 @@ blacklist ${HOME}/.config/MuseScore
75blacklist ${HOME}/.config/MusicBrainz 76blacklist ${HOME}/.config/MusicBrainz
76blacklist ${HOME}/.config/Nathan Osman 77blacklist ${HOME}/.config/Nathan Osman
77blacklist ${HOME}/.config/Nylas Mail 78blacklist ${HOME}/.config/Nylas Mail
79blacklist ${HOME}/.config/PBE
78blacklist ${HOME}/.config/Qlipper 80blacklist ${HOME}/.config/Qlipper
79blacklist ${HOME}/.config/QMediathekView 81blacklist ${HOME}/.config/QMediathekView
80blacklist ${HOME}/.config/QuiteRss 82blacklist ${HOME}/.config/QuiteRss
@@ -373,6 +375,7 @@ blacklist ${HOME}/.local/share/3909/PapersPlease
373blacklist ${HOME}/.local/share/Empathy 375blacklist ${HOME}/.local/share/Empathy
374blacklist ${HOME}/.local/share/JetBrains 376blacklist ${HOME}/.local/share/JetBrains
375blacklist ${HOME}/.local/share/Mumble 377blacklist ${HOME}/.local/share/Mumble
378blacklist ${HOME}/.local/share/PBE
376blacklist ${HOME}/.local/share/QMediathekView 379blacklist ${HOME}/.local/share/QMediathekView
377blacklist ${HOME}/.local/share/QuiteRss 380blacklist ${HOME}/.local/share/QuiteRss
378blacklist ${HOME}/.local/share/Ricochet 381blacklist ${HOME}/.local/share/Ricochet
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index dba078ca2..62dc8ae10 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -15,6 +15,7 @@ JDownloader
15Mathematica 15Mathematica
16Natron 16Natron
17QMediathekView 17QMediathekView
18QOwnNotes
18Telegram 19Telegram
19Viber 20Viber
20VirtualBox 21VirtualBox