From 7266fdd920ea3a53d703be8aa846d2aec5a06817 Mon Sep 17 00:00:00 2001
From: startx2017 <vradu.startx@yandex.com>
Date: Thu, 29 Jun 2017 07:32:35 -0400
Subject: geary profile

---
 etc/disable-programs.inc |  1 +
 etc/geary.profile        | 28 ++++++++++++++++++++++++++++
 2 files changed, 29 insertions(+)
 create mode 100644 etc/geary.profile

(limited to 'etc')

diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 911a050e5..655a44a04 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -268,6 +268,7 @@ blacklist ${HOME}/.local/share/epiphany
 blacklist ${HOME}/.local/share/evolution
 blacklist ${HOME}/.local/share/feral-interactive
 blacklist ${HOME}/.local/share/gajim
+blacklist ${HOME}/.local/share/geary
 blacklist ${HOME}/.local/share/geeqie
 blacklist ${HOME}/.local/share/gnome-2048
 blacklist ${HOME}/.local/share/gnome-chess
diff --git a/etc/geary.profile b/etc/geary.profile
new file mode 100644
index 000000000..1b702c83c
--- /dev/null
+++ b/etc/geary.profile
@@ -0,0 +1,28 @@
+# Persistent global definitions go here
+include /etc/firejail/globals.local
+
+# This file is overwritten during software install.
+# Persistent customizations should go in a .local file.
+include /etc/firejail/geray.local
+
+# Firejail profile for Gnome Geary
+# Users have Geary set to open a browser by clicking a link in an email
+# We are not allowed to blacklist browser-specific directories
+
+noblacklist ~/.gnupg
+mkdir ~/.gnupg
+whitelist ~/.gnupg
+
+noblacklist ~/.local/share/geary
+mkdir ~/.local/share/geary
+whitelist ~/.local/share/geary
+
+whitelist ~/.config/mimeapps.list
+read-only ~/.config/mimeapps.list
+whitelist ~/.local/share/applications
+read-only ~/.local/share/applications
+
+# allow browsers
+ignore private-tmp
+include /etc/firejail/firefox.profile
+#include /etc/firejail/chromium.profile - chromium runs as suid!
-- 
cgit v1.2.3-70-g09d2