# Firejail profile for thunderbird
# This file is overwritten after every install/update
# Persistent local customizations
include /etc/firejail/thunderbird.local
# Persistent global definitions
include /etc/firejail/globals.local

# Users have thunderbird set to open a browser by clicking a link in an email
# We are not allowed to blacklist browser-specific directories

noblacklist ${HOME}/.cache/thunderbird
noblacklist ${HOME}/.gnupg
noblacklist ${HOME}/.icedove
noblacklist ${HOME}/.thunderbird

mkdir ${HOME}/.cache/thunderbird
mkdir ${HOME}/.gnupg
mkdir ${HOME}/.icedove
mkdir ${HOME}/.thunderbird
whitelist ${HOME}/.cache/thunderbird
whitelist ${HOME}/.gnupg
whitelist ${HOME}/.icedove
whitelist ${HOME}/.thunderbird
include /etc/firejail/whitelist-common.inc
include /etc/firejail/whitelist-var-common.inc

# We need the real /tmp for data exchange when xdg-open handles email attachments on KDE
ignore private-tmp
machine-id
disable-mnt
read-only ${HOME}/.config/mimeapps.list

# allow browsers
# Redirect
include /etc/firejail/firefox.profile