diff --git a/README b/README index a4bc6363e..4d488dbae 100644 --- a/README +++ b/README @@ -572,7 +572,7 @@ rusty-snake (https://github.com/rusty-snake) - added profiles: oggsplt, flacsplt, cheese, inkview, mp3splt-gtk - added profiles: ktouch, yelp, klatexformula, klatexformula_cmdl - added profiles: pandoc, gnome-sound-recorder, godot, newsbeuter - - added profiles: keepassxc-cli, keepassxc-proxy + - added profiles: keepassxc-cli, keepassxc-proxy, rhythmbox-client - many profile fixing and hardening - some typo fixes - added profile templates diff --git a/README.md b/README.md index fea4e9c97..22c81e057 100644 --- a/README.md +++ b/README.md @@ -111,4 +111,4 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe ## New profiles: -klatexformula, klatexformula_cmdl, links, pandoc, qgis, teams-for-linux, xlinks, OpenArena, gnome-sound-recorder, godot, tcpdump, tshark, keepassxc-cli, keepassxc-proxy, newsbeuter +klatexformula, klatexformula_cmdl, links, pandoc, qgis, teams-for-linux, xlinks, OpenArena, gnome-sound-recorder, godot, tcpdump, tshark, keepassxc-cli, keepassxc-proxy, newsbeuter, rhythmbox-client diff --git a/RELNOTES b/RELNOTES index eec446dfe..0a3a0a011 100644 --- a/RELNOTES +++ b/RELNOTES @@ -4,7 +4,7 @@ firejail (0.9.61) baseline; urgency=low * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli - * new profiles: keepassxc-proxy + * new profiles: keepassxc-proxy, rhythmbox-client -- netblue30 Sat, 1 Jun 2019 08:00:00 -0500 firejail (0.9.60) baseline; urgency=low diff --git a/etc/rhythmbox-client.profile b/etc/rhythmbox-client.profile new file mode 100644 index 000000000..29e65d716 --- /dev/null +++ b/etc/rhythmbox-client.profile @@ -0,0 +1,11 @@ +# Firejail profile for rhythmbox-client +# Description: controls a running instance of rhythmbox +# This file is overwritten after every install/update +# Persistent local customizations +include rhythmbox-client.local +# Persistent global definitions +# added by included profile +#include globals.local + +# Redirect +include rhythmbox.profile diff --git a/etc/rhythmbox.profile b/etc/rhythmbox.profile index 1c9f0e4d1..9bcbdb561 100644 --- a/etc/rhythmbox.profile +++ b/etc/rhythmbox.profile @@ -26,7 +26,6 @@ include whitelist-var-common.inc # apparmor - makes settings immutable caps.drop all netfilter -# no3d # nodbus - makes settings immutable nogroups nonewprivs @@ -39,7 +38,6 @@ seccomp shell none tracelog -private-bin rhythmbox +private-bin rhythmbox,rhythmbox-client private-dev private-tmp - diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 0f00ca275..6a4539265 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -475,6 +475,7 @@ redshift regextester remmina rhythmbox +rhythmbox-client ricochet riot-desktop riot-web