add rhythmbox-client.profile

README

@@ -572,7 +572,7 @@ rusty-snake (https://github.com/rusty-snake)
 	- added profiles: oggsplt, flacsplt, cheese, inkview, mp3splt-gtk
 	- added profiles: ktouch, yelp, klatexformula, klatexformula_cmdl
 	- added profiles: pandoc, gnome-sound-recorder, godot, newsbeuter
-	- added profiles: keepassxc-cli, keepassxc-proxy
+	- added profiles: keepassxc-cli, keepassxc-proxy, rhythmbox-client
 	- many profile fixing and hardening
 	- some typo fixes
 	- added profile templates

README.md

@@ -111,4 +111,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe
 
 ## New profiles:
 
-klatexformula, klatexformula_cmdl, links, pandoc, qgis, teams-for-linux, xlinks, OpenArena, gnome-sound-recorder, godot, tcpdump, tshark, keepassxc-cli, keepassxc-proxy, newsbeuter
+klatexformula, klatexformula_cmdl, links, pandoc, qgis, teams-for-linux, xlinks, OpenArena, gnome-sound-recorder, godot, tcpdump, tshark, keepassxc-cli, keepassxc-proxy, newsbeuter, rhythmbox-client

RELNOTES

@@ -4,7 +4,7 @@ firejail (0.9.61) baseline; urgency=low
   * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
   * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
   * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
-  * new profiles: keepassxc-proxy
+  * new profiles: keepassxc-proxy, rhythmbox-client
  -- netblue30 <netblue30@yahoo.com>  Sat, 1 Jun 2019 08:00:00 -0500
 
 firejail (0.9.60) baseline; urgency=low

etc/rhythmbox-client.profile

@@ -0,0 +1,11 @@
+# Firejail profile for rhythmbox-client
+# Description: controls a running instance of rhythmbox
+# This file is overwritten after every install/update
+# Persistent local customizations
+include rhythmbox-client.local
+# Persistent global definitions
+# added by included profile
+#include globals.local
+
+# Redirect
+include rhythmbox.profile

etc/rhythmbox.profile

@@ -26,7 +26,6 @@ include whitelist-var-common.inc
 # apparmor - makes settings immutable
 caps.drop all
 netfilter
-# no3d
 # nodbus - makes settings immutable
 nogroups
 nonewprivs
@@ -39,7 +38,6 @@ seccomp
 shell none
 tracelog
 
-private-bin rhythmbox
+private-bin rhythmbox,rhythmbox-client
 private-dev
 private-tmp
-

src/firecfg/firecfg.config

@@ -475,6 +475,7 @@ redshift
 regextester
 remmina
 rhythmbox
+rhythmbox-client
 ricochet
 riot-desktop
 riot-web