7 files changed, 53 insertions, 10 deletions

diff --git a/README.md b/README.md
index 26f3dc3c5..ef4a18310 100644
--- a/README.md
+++ b/README.md
@@ -180,4 +180,4 @@ calligraflow, calligraplan, calligraplanwork, calligrasheets, calligrastage,
 calligrawords, cin, dooble, dooble-qt4, fetchmail, freecad, freecadcmd, google-earth,
 imagej, karbon, kdenlive, krita, linphone, lmms, macrofusion, mpd, natron, Natron,
 ricochet, shotcut, teamspeak3, tor, tor-browser-en, Viber, x-terminal-emulator, zart,
-conky, arch-audit, ffmpeg
+conky, arch-audit, ffmpeg, bluefish, cliqz, cinelerra, openshot-qt, pinta, uefitool
diff --git a/etc/bluefish.profile b/etc/bluefish.profile
index a0bceabbe..f18dea296 100644
--- a/etc/bluefish.profile
+++ b/etc/bluefish.profile
@@ -1,11 +1,10 @@
-# Firejail profile for pluma
+# Firejail profile for bluefish
 # This file is overwritten after every install/update
 # Persistent local customizations
 include /etc/firejail/pluma.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
-noblacklist ${HOME}/.config/pluma
 
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
@@ -29,7 +28,6 @@ tracelog
 
 private-bin bluefish
 private-dev
-# private-etc fonts
 private-tmp
 
 noexec ${HOME}
diff --git a/etc/cliqz.profile b/etc/cliqz.profile
index 9c0f44e97..a7c791a02 100644
--- a/etc/cliqz.profile
+++ b/etc/cliqz.profile
@@ -1,7 +1,7 @@
-# Firejail profile for firefox
+# Firejail profile for cliqz
 # This file is overwritten after every install/update
 # Persistent local customizations
-include /etc/firejail/firefox.local
+include /etc/firejail/cliqz.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 615e28172..ad589890c 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -81,6 +81,7 @@ blacklist ${HOME}/.config/chromium
 blacklist ${HOME}/.config/chromium-dev
 blacklist ${HOME}/.config/chromium-flags.conf
 blacklist ${HOME}/.config/clipit
+blacklist ${HOME}/.config/cliqz
 blacklist ${HOME}/.config/cmus
 blacklist ${HOME}/.config/corebird
 blacklist ${HOME}/.config/darktable
@@ -142,6 +143,7 @@ blacklist ${HOME}/.config/opera-beta
 blacklist ${HOME}/.config/orage
 blacklist ${HOME}/.config/org.kde.gwenviewrc
 blacklist ${HOME}/.config/pcmanfm
+blacklist ${HOME}/.config/Pinta
 blacklist ${HOME}/.config/pix
 blacklist ${HOME}/.config/pluma
 blacklist ${HOME}/.config/psi+
@@ -408,6 +410,7 @@ blacklist ${HOME}/.cache/calibre
 blacklist ${HOME}/.cache/champlain
 blacklist ${HOME}/.cache/chromium
 blacklist ${HOME}/.cache/chromium-dev
+blacklist ${HOME}/.cache/cliqz
 blacklist ${HOME}/.cache/darktable
 blacklist ${HOME}/.cache/epiphany
 blacklist ${HOME}/.cache/evolution
diff --git a/etc/pinta.profile b/etc/pinta.profile
index 2562e1b80..4228e5880 100644
--- a/etc/pinta.profile
+++ b/etc/pinta.profile
@@ -1,15 +1,21 @@
-# Firejail profile for krita
+# Firejail profile for pinta
 # This file is overwritten after every install/update
 # Persistent local customizations
-include /etc/firejail/krita.local
+include /etc/firejail/pinta.local
 # Persistent global definitions
 include /etc/firejail/globals.local
 
+
+noblacklist ${HOME}/.config/Pinta
+
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
 
+whitelist ${HOME}/.config/Pinta
+include /etc/firejail/whitelist-common.inc
+
 caps.drop all
 ipc-namespace
 net none
@@ -27,7 +33,5 @@ shell none
 private-dev
 private-tmp
 
-
-whitelist  ~/.config/Pinta
 noexec ${HOME}
 noexec /tmp
diff --git a/etc/uefitool.profile b/etc/uefitool.profile
new file mode 100644
index 000000000..138f69aa8
--- /dev/null
+++ b/etc/uefitool.profile
@@ -0,0 +1,33 @@
+# Firejail profile for uefitool
+# This file is overwritten after every install/update
+# Persistent local customizations
+include /etc/firejail/uefitool.local
+# Persistent global definitions
+include /etc/firejail/globals.local
+
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+include /etc/firejail/disable-programs.inc
+
+caps.drop all
+ipc-namespace
+net none
+no3d
+nodvd
+nogroups
+nonewprivs
+noroot
+nosound
+notv
+novideo
+protocol unix
+seccomp
+shell none
+
+private-dev
+private-tmp
+
+noexec ${HOME}
+noexec /tmp
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 5a36f5e3e..e4a096d81 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -40,6 +40,7 @@ bitlbee
 bleachbit
 blender
 bless
+bluefish
 brackets
 brasero
 brave
@@ -58,6 +59,7 @@ cherrytree
 chromium
 chromium-browser
 cin
+cinelerra
 clamdscan
 clamdtop
 clamscan
@@ -241,6 +243,7 @@ odt2txt
 okular
 open-invaders
 openshot
+openshot-qt
 opera
 opera-beta
 orage
@@ -252,6 +255,7 @@ peek
 picard
 pidgin
 pingus
+pinta
 pithos
 pix
 pluma
@@ -314,6 +318,7 @@ transmission-qt
 transmission-show
 truecraft
 tuxguitar
+uefitool
 uget-gtk
 unbound
 unknown-horizons