6 files changed, 32 insertions, 2 deletions

diff --git a/RELNOTES b/RELNOTES
index f023c0290..dc7811dab 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -1,6 +1,9 @@
 firejail (0.9.69) baseline; urgency=low
   * work in progress
   * bugfix: --private-cwd not expanding macros, broken hyperrogue (#4910)
+  * bugfix: nogroups + wrc prints confusing messages (#4930 #4933)
+  * ci: replace centos (EOL) with almalinux (#4912)
+  * docs: Refer to firejail.config in configuration files (#4916)
  -- netblue30 <netblue30@yahoo.com>  Mon, 7 Feb 2022 09:00:00 -0500
 
 firejail (0.9.68) baseline; urgency=low
diff --git a/etc/profile-m-z/man.profile b/etc/profile-m-z/man.profile
index 9c5959091..2e28423f7 100644
--- a/etc/profile-m-z/man.profile
+++ b/etc/profile-m-z/man.profile
@@ -66,4 +66,4 @@ dbus-system none
 
 memory-deny-write-execute
 read-only ${HOME}
-read-only /tmp
+#read-only /tmp # breaks mandoc (see #4927)
diff --git a/etc/profile-m-z/onionshare-cli.profile b/etc/profile-m-z/onionshare-cli.profile
new file mode 100644
index 000000000..2e2331351
--- /dev/null
+++ b/etc/profile-m-z/onionshare-cli.profile
@@ -0,0 +1,12 @@
+# Firejail profile for onionshare-cli
+# Description: Share a file over Tor Hidden Services anonymously and securely (CLI)
+# This file is overwritten after every install/update
+quiet
+# Persistent local customizations
+include onionshare-cli.local
+# Persistent global definitions
+# added by included profile
+#include globals.local
+
+# Redirect
+include onionshare-gui.profile
diff --git a/etc/profile-m-z/onionshare.profile b/etc/profile-m-z/onionshare.profile
new file mode 100644
index 000000000..b0390d392
--- /dev/null
+++ b/etc/profile-m-z/onionshare.profile
@@ -0,0 +1,11 @@
+# Firejail profile for onionshare
+# Description: Share a file over Tor Hidden Services anonymously and securely (GUI)
+# This file is overwritten after every install/update
+# Persistent local customizations
+include onionshare.local
+# Persistent global definitions
+# added by included profile
+#include globals.local
+
+# Redirect
+include onionshare-gui.profile
diff --git a/etc/profile-m-z/wireshark.profile b/etc/profile-m-z/wireshark.profile
index 16875ad9b..8806695f6 100644
--- a/etc/profile-m-z/wireshark.profile
+++ b/etc/profile-m-z/wireshark.profile
@@ -45,7 +45,9 @@ tracelog
 
 # private-bin wireshark
 private-cache
-private-dev
+# private-dev prevents (some) interfaces from being shown.
+# Add the below line to your wirehsark.local if you only want to inspect pcap files.
+#private-dev
 # private-etc alternatives,ca-certificates,crypto-policies,fonts,group,hosts,machine-id,passwd,pki,ssl
 private-tmp
 
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 77f233bce..21fcbe1f4 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -608,6 +608,8 @@ odt2txt
 oggsplt
 okular
 onboard
+onionshare
+onionshare-cli
 onionshare-gui
 ooffice
 ooviewdoc