3 files changed, 29 insertions, 0 deletions

diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 89abbafd8..ddbc3f1fb 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -95,6 +95,7 @@ blacklist ${HOME}/.config/kateschemarc
 blacklist ${HOME}/.config/katesyntaxhighlightingrc
 blacklist ${HOME}/.config/katevirc
 blacklist ${HOME}/.config/kdeconnect
+blacklist ${HOME}/.config/knotesrc
 blacklist ${HOME}/.config/libreoffice
 blacklist ${HOME}/.config/mate/eom
 blacklist ${HOME}/.config/mate/mate-dictionary
diff --git a/etc/dolphin.profile b/etc/dolphin.profile
index 3c9056f62..1a718c87f 100644
--- a/etc/dolphin.profile
+++ b/etc/dolphin.profile
@@ -10,6 +10,7 @@ noblacklist ~/.config/dolphinrc
 noblacklist ~/.local/share/dolphin
 noblacklist ~/.kde4/share/kde4/services
 noblacklist ~/.kde/share/kde4/services
+noblacklist ${HOME}/.local/share/Trash
 
 include /etc/firejail/disable-common.inc
 # dolphin needs to be able to start arbitrary applications so we cannot blacklist their files
diff --git a/etc/knotes.profile b/etc/knotes.profile
new file mode 100644
index 000000000..8fa88a261
--- /dev/null
+++ b/etc/knotes.profile
@@ -0,0 +1,27 @@
+# This file is overwritten during software install.
+# Persistent customizations should go in a .local file.
+include /etc/firejail/knotes.local
+
+# kate profile
+noblacklist ~/.config/knotesrc
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+#include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+nogroups
+nonewprivs
+noroot
+nosound
+protocol unix
+seccomp
+netfilter
+shell none
+tracelog
+
+# private-bin kate
+private-tmp
+private-dev
+# private-etc fonts