From 7c481eb43c3a737eeb5a0e4fc089efa281549e4c Mon Sep 17 00:00:00 2001 From: Fred-Barclay Date: Sat, 20 Oct 2018 22:13:13 -0500 Subject: Add QOwnNotes profile --- README.md | 3 +-- RELNOTES | 2 +- etc/QOwnNotes.profile | 56 ++++++++++++++++++++++++++++++++++++++++++++++ etc/disable-programs.inc | 3 +++ src/firecfg/firecfg.config | 1 + 5 files changed, 62 insertions(+), 3 deletions(-) create mode 100644 etc/QOwnNotes.profile diff --git a/README.md b/README.md index 8ce9a84fa..dc2c44ff6 100644 --- a/README.md +++ b/README.md @@ -137,5 +137,4 @@ QMediathekView, aria2c, Authenticator, checkbashisms, devilspie, devilspie2, eas bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat, lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep, lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat, xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore, lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh, nirtoshare-send, nitroshare-ui, mencoder, gnome-pie, -masterpdfeditor - +masterpdfeditor, QOwnNotes diff --git a/RELNOTES b/RELNOTES index 85f0c2b7a..74bdd3d2b 100644 --- a/RELNOTES +++ b/RELNOTES @@ -9,7 +9,7 @@ firejail (0.9.56.1) baseline; urgency=low * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie - * new profiles: masterpdfeditor + * new profiles: masterpdfeditor, QOwnNotes -- netblue30 Thu, 11 Oct 2018 08:00:00 -0500 firejail (0.9.56) baseline; urgency=low diff --git a/etc/QOwnNotes.profile b/etc/QOwnNotes.profile new file mode 100644 index 000000000..1135b850b --- /dev/null +++ b/etc/QOwnNotes.profile @@ -0,0 +1,56 @@ +# Firejail profile for QOwnNotes +# Description: Plain-text file notepad with markdown support and ownCloud integration +# This file is overwritten after every install/update +# Persistent local customizations +include QOwnNotes.local +# Persistent global definitions +include globals.local + +noblacklist ${DOCUMENTS} +noblacklist ${HOME}/Nextcloud/Notes +noblacklist ${HOME}/.config/PBE +noblacklist ${HOME}/.local/share/PBE + +mkdir ${DOCUMENTS} +mkdir ${HOME}/Nextcloud/Notes +mkdir ${HOME}.config/PBE +mkdir ${HOME}/.local/share/PBE +whitelist ${DOCUMENTS} +whitelist ${HOME}/Nextcloud/Notes +whitelist ${HOME}/.config/PBE +whitelist ${HOME}/.local/share/PBE +include whitelist-common.inc +include whitelist-var-common.inc + +include disable-common.inc +include disable-devel.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-xdg.inc + +caps.drop all +machine-id +netfilter +no3d +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix,inet,inet6,netlink +seccomp +shell none +tracelog + +disable-mnt +private-bin QOwnNotes,gio +private-dev +private-etc fonts,ld.so.cache,pulse,resolv.conf,hosts,nsswitch.conf,host.conf,ca-certificates,ssl,pki,crypto-policies +private-tmp + +noexec ${HOME} +noexec /tmp diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 46e60b9f4..edf3c7be5 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc @@ -3,6 +3,7 @@ include disable-programs.local blacklist ${HOME}/Monero/wallets +blacklist ${HOME}/Nextcloud/Notes blacklist ${HOME}/Standard Notes Backups blacklist ${HOME}/snap blacklist ${HOME}/.*coin @@ -75,6 +76,7 @@ blacklist ${HOME}/.config/MuseScore blacklist ${HOME}/.config/MusicBrainz blacklist ${HOME}/.config/Nathan Osman blacklist ${HOME}/.config/Nylas Mail +blacklist ${HOME}/.config/PBE blacklist ${HOME}/.config/Qlipper blacklist ${HOME}/.config/QMediathekView blacklist ${HOME}/.config/QuiteRss @@ -373,6 +375,7 @@ blacklist ${HOME}/.local/share/3909/PapersPlease blacklist ${HOME}/.local/share/Empathy blacklist ${HOME}/.local/share/JetBrains blacklist ${HOME}/.local/share/Mumble +blacklist ${HOME}/.local/share/PBE blacklist ${HOME}/.local/share/QMediathekView blacklist ${HOME}/.local/share/QuiteRss blacklist ${HOME}/.local/share/Ricochet diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index dba078ca2..62dc8ae10 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -15,6 +15,7 @@ JDownloader Mathematica Natron QMediathekView +QOwnNotes Telegram Viber VirtualBox -- cgit v1.2.3-70-g09d2