1 files changed, 16 insertions, 2 deletions

diff --git a/etc/evince.profile b/etc/evince.profile
index c390dcaf3..1ec384947 100644
--- a/etc/evince.profile
+++ b/etc/evince.profile
@@ -1,11 +1,25 @@
 # evince pdf reader profile
+noblacklist ~/.config/evince
+
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-programs.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
 
 caps.drop all
-seccomp
-protocol unix,inet,inet6
+netfilter
+#net none - creates some problems on some distributions
+nogroups
+nonewprivs
 noroot
 nosound
+protocol unix
+seccomp
+shell none
+tracelog
+
+private-bin evince,evince-previewer,evince-thumbnailer
+private-dev
+private-etc fonts
+# evince needs access to /tmp/mozilla* to work in firefox
+# private-tmp