From 441588e20a49debf4dad9155981081462962f66d Mon Sep 17 00:00:00 2001
From: jtrv <jtrv@tutanota.com>
Date: Sat, 16 Sep 2023 00:35:47 -0700
Subject: New profile: tidal-hifi (#6008)

modified src/firecfg/firecfg.config to add tidal-hifi
created etc/profile-m-z/tidal-hifi.profile

closes: #6008

Apply suggestions from code review

Co-authored-by: rusty-snake <41237666+rusty-snake@users.noreply.github.com>
---
 etc/profile-m-z/tidal-hifi.profile | 39 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100644 etc/profile-m-z/tidal-hifi.profile

(limited to 'etc')

diff --git a/etc/profile-m-z/tidal-hifi.profile b/etc/profile-m-z/tidal-hifi.profile
new file mode 100644
index 000000000..d2e23239e
--- /dev/null
+++ b/etc/profile-m-z/tidal-hifi.profile
@@ -0,0 +1,39 @@
+# Firejail profile for tidal-hifi
+# Description: The web version of Tidal running in electron with hifi support thanks to widevine.
+# This file is overwritten after every install/update
+# Persistent local customizations
+include tidal-hifi.local
+# Persistent global definitions
+include globals.local
+
+ignore noexec ${HOME}
+
+noblacklist ${HOME}/.config/tidal-hifi
+
+include disable-proc.inc
+include disable-shell.inc
+
+whitelist ${HOME}/.config/tidal-hifi
+
+caps.drop all
+no3d
+nonewprivs
+noprinters
+noroot
+protocol unix,inet,inet6
+seccomp !chroot
+seccomp.block-secondary
+tracelog
+
+private-bin chrome-sandbox,tidal-hifi
+private-etc @network,@sound,@tls-ca,@xdg
+private-opt tidal-hifi
+
+ignore dbus-user none
+dbus-user filter
+dbus-user.own org.mpris.MediaPlayer2.tidal-hifi
+dbus-user.talk org.freedesktop.Notifications
+
+join-or-start tidal-hifi
+
+include electron-common.profile
-- 
cgit v1.2.3-54-g00ecf