7 files changed, 14 insertions, 13 deletions

diff --git a/README b/README
index 84f600ba1..1b1cda252 100644
--- a/README
+++ b/README
@@ -354,6 +354,7 @@ SpotComms (https://github.com/SpotComms)
         - added Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5 profiles
         - added PDFSam, Pithos, and Xonotic profiles
         - disabled Go, Rust, and OpenSSL in disable-devel.conf
+    - added dino profile
 SYN-cook (https://github.com/SYN-cook)
         - keepass/keepassx browser fixes
         - disable-common.inc fixes
diff --git a/README.md b/README.md
index 2dcdcc0cb..7fcf0e540 100644
--- a/README.md
+++ b/README.md
@@ -196,4 +196,4 @@ simple-scan, skanlite, ssh-agent, tracker, transmission-cli, transmission-show,
 xed, pluma, Cryptocat, Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5,
 PDFSam, Pithos, Xonotic, wireshark, keepassx2, QupZilla, FossaMail, Uzbl browser, xmms, iridium browser,
 Kino, Thunar, Geeqie, Engrampa, Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView, baloo_file,
-Nylas
+Nylas,dino
diff --git a/RELNOTES b/RELNOTES
index a3571b630..8736a8e34 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -36,7 +36,7 @@ firejail (0.9.46-rc1) baseline; urgency=low
   * new profiles: Xonotic, wireshark, keepassx2, QupZilla, FossaMail,
   * new profiles: Uzbl browser, iridium browser, Thunar, Geeqie, Engrampa,
   * new profiles: Scribus, mousepad, gpicview, keepassxc, cvlc, MediathekView,
-  * new profiles: baloo_file, Nylas
+  * new profiles: baloo_file, Nylas,dino
   * bugfixes
  -- netblue30 <netblue30@yahoo.com>  Fri, 7 Apr 2017 08:00:00 -0500
 
diff --git a/etc/dino.profile b/etc/dino.profile
index 7634eae91..a71ab27d7 100644
--- a/etc/dino.profile
+++ b/etc/dino.profile
@@ -5,22 +5,23 @@ include /etc/firejail/dino.local
 # Firejail profile for Dino
 noblacklist ${HOME}/.local/share/dino
 
-mkdir ${HOME}/.local/share/dino
-mkdir ${HOME}/Downloads
-
-whitelist ${HOME}/.local/share/dino
-whitelist ${HOME}/Downloads
-
 include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
-include /etc/firejail/disable-devel.inc
+
+whitelist ${HOME}/Downloads
+mkdir ${HOME}/.local/share/dino
+whitelist ${HOME}/.local/share/dino
 
 caps.drop all
+machine-id
 netfilter
+no3d
 nogroups
 nonewprivs
 noroot
+nosound
 protocol unix,inet,inet6
 seccomp
 shell none
@@ -29,7 +30,3 @@ private-bin dino
 #private-etc fonts #breaks server connection
 private-dev
 private-tmp
-machine-id
-
-no3d
-nosound
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index c8777ea08..87f8e13b9 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -215,6 +215,7 @@ blacklist ${HOME}/.local/share/aspyr-media
 blacklist ${HOME}/.local/share/baloo
 blacklist ${HOME}/.local/share/cdprojektred
 blacklist ${HOME}/.local/share/data/Mumble
+blacklist ${HOME}./local/share/dino
 blacklist ${HOME}/.local/share/dolphin
 blacklist ${HOME}/.local/share/epiphany
 blacklist ${HOME}/.local/share/evolution
diff --git a/platform/debian/conffiles b/platform/debian/conffiles
index 84557cd1f..4e6904b6a 100644
--- a/platform/debian/conffiles
+++ b/platform/debian/conffiles
@@ -36,6 +36,7 @@
 /etc/firejail/default.profile
 /etc/firejail/deluge.profile
 /etc/firejail/dillo.profile
+/etc/firejail/dino.profile
 /etc/firejail/disable-common.inc
 /etc/firejail/disable-devel.inc
 /etc/firejail/disable-passwdmgr.inc
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 826de6260..7fb64144a 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -63,6 +63,7 @@ w3m
 bitlbee
 corebird
 # Cryptocat is added but commented since isn't installed to a */bin... keep an eye on this
+dino
 empathy
 gitter
 hexchat