13 files changed, 253 insertions, 4 deletions

diff --git a/README.md b/README.md
index 1f7af9149..652862646 100644
--- a/README.md
+++ b/README.md
@@ -102,4 +102,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe
 ## Current development version: 0.9.59
 
 ## New profiles:
-crow, nyx, klavaro, mypaint, celluoid, nano, transgui, sysprof, simplescreenrecorder, geekbench, xfce4-mixer, pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring, regextester, hardinfo, gnome-system-log, gnome-nettool, netactview, redshift, devhelp, assogiate, subdownloader, font-manager, exfalso, gconf-editor, dconf-editor, mpdris2, sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings, code-oss, pragha, Maelstrom, ostrichriders
+crow, nyx, klavaro, mypaint, celluoid, nano, transgui, sysprof, simplescreenrecorder, geekbench, xfce4-mixer, pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring, regextester, hardinfo, gnome-system-log, gnome-nettool, netactview, redshift, devhelp, assogiate, subdownloader, font-manager, exfalso, gconf-editor, dconf-editor, mpdris2, sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings, code-oss, pragha, Maelstrom, ostrichriders, bzflag, freeciv, lincity-ng, megaglest, openttd
diff --git a/RELNOTES b/RELNOTES
index cd300a3f1..92a6a4109 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -6,7 +6,8 @@ firejail (0.9.59) baseline; urgency=low
   * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
   * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
   * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
-  * new profiles: code-oss, pragha, Maelstrom, ostrichriders
+  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
+  * new profiles: freeciv, lincity-ng, megaglest, openttd
   * memory-deny-write-execute now also blocks memfd_create
   * drop support for flatpak/snap packages
 
diff --git a/etc/bzflag.profile b/etc/bzflag.profile
new file mode 100644
index 000000000..94cd40899
--- /dev/null
+++ b/etc/bzflag.profile
@@ -0,0 +1,44 @@
+# Firejail profile for bzflag
+# Description: 3D multi-player tank battle game
+# This file is overwritten after every install/update
+# Persistent local customizations
+include bzflag.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.bzf
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+include disable-xdg.inc
+
+mkdir ${HOME}/.bzf
+whitelist ${HOME}/.bzf
+include whitelist-common.inc
+include whitelist-var-common.inc
+
+caps.drop all
+ipc-namespace
+netfilter
+nodbus
+nodvd
+nogroups
+nonewprivs
+noroot
+notv
+nou2f
+novideo
+protocol unix,inet,inet6
+seccomp
+shell none
+tracelog
+
+disable-mnt
+private-bin bzflag,bzflag-wrapper,bzfs,bzadmin
+private-cache
+private-dev
+private-tmp
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index b8ecd4b13..0237ad2ba 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -48,6 +48,7 @@ blacklist ${HOME}/.bcast5
 blacklist ${HOME}/.bibletime
 blacklist ${HOME}/.bitcoin
 blacklist ${HOME}/.bogofilter
+blacklist ${HOME}/.bzf
 blacklist ${HOME}/.claws-mail
 blacklist ${HOME}/.cliqz
 blacklist ${HOME}/.config/0ad
@@ -296,6 +297,7 @@ blacklist ${HOME}/.config/yandex-browser-beta
 blacklist ${HOME}/.config/zathura
 blacklist ${HOME}/.config/zoomus.conf
 blacklist ${HOME}/.conkeror.mozdev.org
+blacklist ${HOME}/.crawl
 blacklist ${HOME}/.curlrc
 blacklist ${HOME}/.dashcore
 blacklist ${HOME}/.devilspie
@@ -318,6 +320,7 @@ blacklist ${HOME}/.filezilla
 blacklist ${HOME}/.flowblade
 blacklist ${HOME}/.fltk
 blacklist ${HOME}/.fossamail
+blacklist ${HOME}/.freeciv
 blacklist ${HOME}/.frozen-bubble
 blacklist ${HOME}/.gimp*
 blacklist ${HOME}/.git-credential-cache
@@ -404,6 +407,7 @@ blacklist ${HOME}/.killingfloor
 blacklist ${HOME}/.kino-history
 blacklist ${HOME}/.kinorc
 blacklist ${HOME}/.kodi
+blacklist ${HOME}/.lincity-ng
 blacklist ${HOME}/.linphone-history.db
 blacklist ${HOME}/.linphonerc
 blacklist ${HOME}/.lmmsrc.xml
@@ -519,6 +523,7 @@ blacklist ${HOME}/.masterpdfeditor
 blacklist ${HOME}/.mcabber
 blacklist ${HOME}/.mcabberrc
 blacklist ${HOME}/.mediathek3
+blacklist ${HOME}/.megaglest
 blacklist ${HOME}/.minetest
 blacklist ${HOME}/.moonchild productions/basilisk
 blacklist ${HOME}/.moonchild productions/pale moon
@@ -536,6 +541,7 @@ blacklist ${HOME}/.nylas-mail
 blacklist ${HOME}/.openinvaders
 blacklist ${HOME}/.openshot
 blacklist ${HOME}/.openshot_qt
+blacklist ${HOME}/.openttd
 blacklist ${HOME}/.opera
 blacklist ${HOME}/.opera-beta
 blacklist ${HOME}/.ostrichriders
diff --git a/etc/freeciv-gtk3.profile b/etc/freeciv-gtk3.profile
new file mode 100644
index 000000000..fa36459e7
--- /dev/null
+++ b/etc/freeciv-gtk3.profile
@@ -0,0 +1,5 @@
+# Firejail profile alias for freeciv
+# This file is overwritten after every install/update
+
+# Redirect
+include freeciv.profile
diff --git a/etc/freeciv-mp-gtk3.profile b/etc/freeciv-mp-gtk3.profile
new file mode 100644
index 000000000..fa36459e7
--- /dev/null
+++ b/etc/freeciv-mp-gtk3.profile
@@ -0,0 +1,5 @@
+# Firejail profile alias for freeciv
+# This file is overwritten after every install/update
+
+# Redirect
+include freeciv.profile
diff --git a/etc/freeciv.profile b/etc/freeciv.profile
new file mode 100644
index 000000000..4813379a7
--- /dev/null
+++ b/etc/freeciv.profile
@@ -0,0 +1,44 @@
+# Firejail profile for freeciv
+# Description: A multi-player strategy game
+# This file is overwritten after every install/update
+# Persistent local customizations
+include freeciv.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.freeciv
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+include disable-xdg.inc
+
+mkdir ${HOME}/.freeciv
+whitelist ${HOME}/.freeciv
+include whitelist-common.inc
+include whitelist-var-common.inc
+
+caps.drop all
+ipc-namespace
+netfilter
+nodbus
+nodvd
+nogroups
+nonewprivs
+noroot
+notv
+nou2f
+novideo
+protocol unix,inet,inet6
+seccomp
+shell none
+tracelog
+
+disable-mnt
+private-bin freeciv-gtk3,freeciv-mp-gtk3,freeciv-server,freeciv-manual
+private-cache
+private-dev
+private-tmp
diff --git a/etc/lincity-ng.profile b/etc/lincity-ng.profile
new file mode 100644
index 000000000..b55ac9a15
--- /dev/null
+++ b/etc/lincity-ng.profile
@@ -0,0 +1,44 @@
+# Firejail profile for lincity-ng
+# Description: City simulation game
+# This file is overwritten after every install/update
+# Persistent local customizations
+include lincity-ng.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.lincity-ng
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+include disable-xdg.inc
+
+mkdir ${HOME}/.lincity-ng
+whitelist ${HOME}/.lincity-ng
+include whitelist-common.inc
+include whitelist-var-common.inc
+
+caps.drop all
+ipc-namespace
+net none
+nodbus
+nodvd
+nogroups
+nonewprivs
+noroot
+notv
+nou2f
+novideo
+protocol unix
+seccomp
+shell none
+tracelog
+
+disable-mnt
+private-bin lincity-ng
+private-cache
+private-dev
+private-tmp
diff --git a/etc/megaglest.profile b/etc/megaglest.profile
new file mode 100644
index 000000000..08eae6dfc
--- /dev/null
+++ b/etc/megaglest.profile
@@ -0,0 +1,44 @@
+# Firejail profile for megaglest
+# Description: 3D multi-player real time strategy game
+# This file is overwritten after every install/update
+# Persistent local customizations
+include megaglest.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.megaglest
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+include disable-xdg.inc
+
+mkdir ${HOME}/.megaglest
+whitelist ${HOME}/.megaglest
+include whitelist-common.inc
+include whitelist-var-common.inc
+
+caps.drop all
+ipc-namespace
+netfilter
+nodbus
+nodvd
+nogroups
+nonewprivs
+noroot
+notv
+nou2f
+novideo
+protocol unix,inet,inet6,netlink
+seccomp
+shell none
+tracelog
+
+disable-mnt
+private-bin megaglest,megaglest_editor,megaglest_g3dviewer
+private-cache
+private-dev
+private-tmp
diff --git a/etc/megaglest_editor.profile b/etc/megaglest_editor.profile
new file mode 100644
index 000000000..02aad8084
--- /dev/null
+++ b/etc/megaglest_editor.profile
@@ -0,0 +1,5 @@
+# Firejail profile alias for megaglest
+# This file is overwritten after every install/update
+
+# Redirect
+include megaglest.profile
diff --git a/etc/openttd.profile b/etc/openttd.profile
new file mode 100644
index 000000000..5de4d325d
--- /dev/null
+++ b/etc/openttd.profile
@@ -0,0 +1,44 @@
+# Firejail profile for openttd
+# Description: Transport system simulation game
+# This file is overwritten after every install/update
+# Persistent local customizations
+include openttd.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.openttd
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+include disable-xdg.inc
+
+mkdir ${HOME}/.openttd
+whitelist ${HOME}/.openttd
+include whitelist-common.inc
+include whitelist-var-common.inc
+
+caps.drop all
+ipc-namespace
+netfilter
+nodbus
+nodvd
+nogroups
+nonewprivs
+noroot
+notv
+nou2f
+novideo
+protocol unix,inet,inet6
+seccomp
+shell none
+tracelog
+
+disable-mnt
+private-bin openttd
+private-cache
+private-dev
+private-tmp
diff --git a/etc/ostrichriders.profile b/etc/ostrichriders.profile
index 4eedddefd..bef784126 100644
--- a/etc/ostrichriders.profile
+++ b/etc/ostrichriders.profile
@@ -32,8 +32,7 @@ noroot
 notv
 nou2f
 novideo
-# protocol seems to have a huge impact on performance
-#protocol unix
+protocol unix,netlink
 seccomp
 shell none
 tracelog
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 1e59bbb4f..790768290 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -70,6 +70,7 @@ brasero
 brave
 brave-browser
 bunzip2
+bzflag
 bzip2
 calibre
 calligra
@@ -180,6 +181,9 @@ fossamail
 franz
 freecad
 freecadcmd
+freeciv
+freeciv-gtk3
+freeciv-mp-gtk3
 freshclam
 frozen-bubble
 gajim
@@ -291,6 +295,7 @@ leafpad
 less
 libreoffice
 liferea
+lincity-ng
 linphone
 lmms
 lobase
@@ -325,6 +330,8 @@ mathematica
 mcabber
 mediainfo
 mediathekview
+megaglest
+megaglest_editor
 meld
 mencoder
 mendeleydesktop
@@ -375,6 +382,7 @@ onionshare-gui
 open-invaders
 openshot
 openshot-qt
+openttd
 opera
 opera-beta
 orage