diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index 5910d3543e7..cc1fad2df7b 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -50,6 +50,7 @@ blacklist ${HOME}/.asunder_album_title blacklist ${HOME}/.atom blacklist ${HOME}/.attic blacklist ${HOME}/.audacity-data +blacklist ${HOME}/.avidemux6 blacklist ${HOME}/.balsa blacklist ${HOME}/.bcast5 blacklist ${HOME}/.bibletime @@ -158,6 +159,7 @@ blacklist ${HOME}/.config/asunder blacklist ${HOME}/.config/atril blacklist ${HOME}/.config/audacious blacklist ${HOME}/.config/autokey +blacklist ${HOME}/.config/avidemux3_qt5rc blacklist ${HOME}/.config/aweather blacklist ${HOME}/.config/backintime blacklist ${HOME}/.config/baloofilerc diff --git a/etc/profile-a-l/avidemux.profile b/etc/profile-a-l/avidemux.profile new file mode 100644 index 00000000000..b5d662d60cd --- /dev/null +++ b/etc/profile-a-l/avidemux.profile @@ -0,0 +1,53 @@ +# Firejail profile for Avidemux +# Description: Avidemux is a free video editor designed for simple cutting, filtering and encoding tasks. +# Persistent local customizations +include avidemux.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.avidemux6 +noblacklist ${HOME}/.config/avidemux3_qt5rc +noblacklist ${VIDEOS} + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.avidemux6 +mkdir ${HOME}/.config/avidemux3_qt5rc +whitelist ${HOME}/.avidemux6 +whitelist ${HOME}/.config/avidemux3_qt5rc +whitelist ${VIDEOS} +include whitelist-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +net none +nodvd +nogroups +nonewprivs +noroot +notv +nou2f +novideo +protocol unix +seccomp +seccomp.block-secondary +shell none +tracelog + +private-bin avidemux3_cli,avidemux3_jobs_qt5,avidemux3_qt5 +private-cache +private-dev +private-tmp + +dbus-user none +dbus-system none diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index e924ef2ec2b..b10507bcd11 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -69,6 +69,7 @@ autokey-gtk autokey-qt autokey-run autokey-shell +avidemux3_qt5 aweather baloo_file baloo_filemetadata_temp_extractor