From ef5c6c3f9afe11fe72c572299864e83b4f9115bd Mon Sep 17 00:00:00 2001
From: glitsj16 <glitsj16@users.noreply.github.com>
Date: Tue, 5 Jan 2021 12:43:22 +0000
Subject: new profile: tutanota-desktop (#3870)

* new profile: tutanota-desktop

* add tutanota-desktop to firecfg

* blacklist tutanota-desktop files

* Create tutanota-desktop.profile
---
 etc/inc/disable-programs.inc             |  2 ++
 etc/profile-m-z/tutanota-desktop.profile | 32 ++++++++++++++++++++++++++++++++
 2 files changed, 34 insertions(+)
 create mode 100644 etc/profile-m-z/tutanota-desktop.profile

(limited to 'etc')

diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc
index 7ab11e620..74d45c4ca 100644
--- a/etc/inc/disable-programs.inc
+++ b/etc/inc/disable-programs.inc
@@ -395,6 +395,8 @@ blacklist ${HOME}/.config/tox
 blacklist ${HOME}/.config/transgui
 blacklist ${HOME}/.config/transmission
 blacklist ${HOME}/.config/truecraft
+blacklist ${HOME}/.config/tuta_integration
+blacklist ${HOME}/.config/tutanota-desktop
 blacklist ${HOME}/.config/tvbrowser
 blacklist ${HOME}/.config/uGet
 blacklist ${HOME}/.config/ungoogled-chromium
diff --git a/etc/profile-m-z/tutanota-desktop.profile b/etc/profile-m-z/tutanota-desktop.profile
new file mode 100644
index 000000000..ab83dfa5b
--- /dev/null
+++ b/etc/profile-m-z/tutanota-desktop.profile
@@ -0,0 +1,32 @@
+# Firejail profile for tutanota-desktop
+# Description: Encrypted email client
+# This file is overwritten after every install/update
+# Persistent local customizations
+include tutanota-desktop.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.config/tuta_integration
+noblacklist ${HOME}/.config/tutanota-desktop
+
+ignore noexec /tmp
+
+include disable-shell.inc
+
+mkdir ${HOME}/.config/tuta_integration
+mkdir ${HOME}/.config/tutanota-desktop
+whitelist ${HOME}/.config/tuta_integration
+whitelist ${HOME}/.config/tutanota-desktop
+
+# These lines are needed to allow Firefox to open links
+noblacklist ${HOME}/.mozilla
+whitelist ${HOME}/.mozilla/firefox/profiles.ini
+read-only ${HOME}/.mozilla/firefox/profiles.ini
+
+disable-mnt
+?HAS_APPIMAGE: ignore private-dev
+private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id,nsswitch.conf,pki,resolv.conf,ssl
+private-opt tutanota-desktop
+
+# Redirect
+include electron.profile
-- 
cgit v1.2.3-70-g09d2