6 files changed, 40 insertions, 1 deletions

diff --git a/README b/README
index 542be6ed1..6a52717d0 100644
--- a/README
+++ b/README
@@ -411,6 +411,7 @@ startx2017 (https://github.com/startx2017)
         - Blender and 2048-qt profiles
         - handbrake profile
         - mplayer and smplayer profiles
+        - kwrite profile
 thewisenerd (https://github.com/thewisenerd)
         - allow multiple private-home commands
         - use $SHELL variable if the shell is not specified
diff --git a/RELNOTES b/RELNOTES
index b7a0c49e7..c45ecc0fc 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -1,6 +1,6 @@
 firejail (0.9.49) baseline; urgency=low
   * work in progress!
-  * new profiles: curl
+  * new profiles: curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite
   * bugfixes
  -- netblue30 <netblue30@yahoo.com>  Mon, 12 Jun 2017 20:00:00 -0500
 
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 7a3ca37ed..911a050e5 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -274,6 +274,7 @@ blacklist ${HOME}/.local/share/gnome-chess
 blacklist ${HOME}/.local/share/gnome-music
 blacklist ${HOME}/.local/share/gnome-photos
 blacklist ${HOME}/.local/share/kate
+blacklist ${HOME}/.local/share/kwrite
 blacklist ${HOME}/.local/share/ktorrentrc
 blacklist ${HOME}/.local/share/lollypop
 blacklist ${HOME}/.local/share/meld
diff --git a/etc/kwrite.profile b/etc/kwrite.profile
new file mode 100644
index 000000000..1c4d09f67
--- /dev/null
+++ b/etc/kwrite.profile
@@ -0,0 +1,35 @@
+# Persistent global definitions go here
+include /etc/firejail/globals.local
+
+# This file is overwritten during software install.
+# Persistent customizations should go in a .local file.
+include /etc/firejail/kwrite.local
+
+# kate profile
+noblacklist ~/.local/share/kwrite
+noblacklist ~/.config/katerc
+noblacklist ~/.config/katepartrc
+noblacklist ~/.config/kateschemarc
+noblacklist ~/.config/katesyntaxhighlightingrc
+noblacklist ~/.config/katevirc
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+#include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+nogroups
+nonewprivs
+noroot
+#nosound - KWrite is using ALSA!
+protocol unix
+seccomp
+netfilter
+shell none
+tracelog
+
+# private-bin kwrite
+private-tmp
+private-dev
+# private-etc fonts
diff --git a/platform/debian/conffiles b/platform/debian/conffiles
index f35168735..a47b0a7f1 100644
--- a/platform/debian/conffiles
+++ b/platform/debian/conffiles
@@ -314,3 +314,4 @@
 /etc/firejail/calibre.profile
 /etc/firejail/handbrake-gtk.profile
 /etc/firejail/ghb.profile
+/etc/firejail/kwrite
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 4d64e3887..e9883cb68 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -137,6 +137,7 @@ knotes
 kodi
 konversation
 ktorrent
+kwrite
 leafpad
 less
 libreoffice