Refactor electron.profile and electron based programs

[rusty-snake]

• Allow chrome-sandbox

Add caps.keep sys_admin,sys_chroot to electron.profile and remove the following.
Additional add #include chromium-common-hardened.inc with a note.

caps.drop all
nonewprivs
noroot
protocol unix,inet,inet6,netlink
seccomp

• Move include whitelist-common.inc to electron.profile
• Discover which command are common enough to be part of electron.profile. Consider these:
  • include disable-devel.inc
  • include disable-exec.inc
  • include disable-interpreters.inc
  • include disable-xdg.inc
  • shell none
  • private-bin electron[0-9],electron[0-9][0-9]
  • nou2f
  • novideo
  • private-tmp
  • include whitelist-var-common.inc
  • include whitelist-usr-share-common.inc
  • include whitelist-runuser-common.inc
  • disable-mnt
  • private-cache
  • private-dev
• consistent include globals.local
• Make all electron based programs, electron redirect profiles. Current redirect profiles are below. If you know any missing post it.

$ grep -l "include electron.profile" /etc/firejail/*.profile
/etc/firejail/beaker.profile
/etc/firejail/freetube.profile
/etc/firejail/jitsi-meet-desktop.profile
/etc/firejail/nuclear.profile
/etc/firejail/riot-web.profile
/etc/firejail/rocketchat.profile
/etc/firejail/teams-for-linux.profile
/etc/firejail/teams.profile
/etc/firejail/twitch.profile
/etc/firejail/whalebird.profile
/etc/firejail/wire-desktop.profile
/etc/firejail/youtubemusic-nativefier.profile
/etc/firejail/youtube.profile
/etc/firejail/ytmdesktop.profile

Needs update:

• beaker.profile
• freetube.profile
• jitsi-meet-desktop.profile
• nuclear.profile
• riot-web.profile
• rocketchat.profile
• teams-for-linux.profile
• teams.profile
• twitch.profile
• whalebird.profile
• wire-desktop.profile
• youtubemusic-nativefier.profile
• youtube.profile
• ytmdesktop.profile

[rusty-snake]

• atom
• slack
• signal-desktop
• skypeforlinux
• github-desktop
• discord-common
• zoom

[glitsj16]

Very nice idea 👍, love it.

[rusty-snake]

• bitwarden
• code
• mattermost-desktop