7 files changed, 53 insertions, 0 deletions

diff --git a/README.md b/README.md
index 64a67bf63..9db50d5ba 100644
--- a/README.md
+++ b/README.md
@@ -64,3 +64,8 @@ FAQ: https://firejail.wordpress.com/support/frequently-asked-questions/
 ## New profile commands
 
 x11 xpra, x11 xephyr, x11 block, allusers, join-or-start
+
+## New profiles
+
+qpdfview, mupdf
+
diff --git a/RELNOTES b/RELNOTES
index f0528b28c..492bd007a 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -10,6 +10,7 @@ firejail (0.9.43) baseline; urgency=low
   * feature: add files to sandbox container (--put)
   * feature: blocking x11 (--x11=block)
   * feature: x11 xpra, x11 xephyr, x11 block, allusers profile commands
+  * new profiles: qpdfview, mupdf
   * bugfixes
  -- netblue30 <netblue30@yahoo.com>  Fri, 9 Sept 2016 08:00:00 -0500
 
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index fb0f5a669..54c53e794 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -26,6 +26,7 @@ blacklist ${HOME}/.kde/share/config/okularrc
 blacklist ${HOME}/.kde/share/config/okularpartrc
 blacklist ${HOME}/.kde/share/apps/gwenview
 blacklist ${HOME}/.kde/share/config/gwenviewrc
+blacklist ${HOME}/.config/qpdfview
 
 # Media players
 blacklist ${HOME}/.config/cmus
@@ -135,6 +136,7 @@ blacklist ${HOME}/.local/share/totem
 blacklist ${HOME}/.local/share/psi+
 blacklist ${HOME}/.local/share/pix
 blacklist ${HOME}/.local/share/gnome-chess
+blacklist ${HOME}/.local/share/qpdfview
 
 # ssh
 blacklist /tmp/ssh-*
diff --git a/etc/mupdf.profile b/etc/mupdf.profile
new file mode 100644
index 000000000..6f2db511b
--- /dev/null
+++ b/etc/mupdf.profile
@@ -0,0 +1,18 @@
+# mupdf reader profile
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+nogroups
+nonewprivs
+noroot
+nosound
+protocol unix
+seccomp
+shell none
+tracelog
+
+private-tmp
+private-dev
diff --git a/etc/qpdfview.profile b/etc/qpdfview.profile
new file mode 100644
index 000000000..07ea173e6
--- /dev/null
+++ b/etc/qpdfview.profile
@@ -0,0 +1,22 @@
+# qpdfview profile
+noblacklist ${HOME}/.config/qpdfview
+noblacklist ${HOME}/.local/share/qpdfview
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+nogroups
+nonewprivs
+noroot
+nosound
+protocol unix
+seccomp
+shell none
+tracelog
+
+private-bin qpdfview
+private-tmp
+private-dev
diff --git a/platform/debian/conffiles b/platform/debian/conffiles
index 691c536df..0c494c042 100644
--- a/platform/debian/conffiles
+++ b/platform/debian/conffiles
@@ -143,3 +143,6 @@
 /etc/firejail/xzdec.profile
 /etc/firejail/strings.profile
 /etc/firejail/dosbox.profile
+/etc/firejail/mupdf.profile
+/etc/firejail/qpdfview.profile
+
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index dd876c87c..ca28d025b 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -128,6 +128,8 @@ mathematica
 okular
 pix
 xreader
+mupdf
+qpdfview
 
 # other
 ssh