Merge pull request #684 from Fred-Barclay/checkmate

Checkmate

README

@@ -83,6 +83,7 @@ Fred-Barclay (https://github.com/Fred-Barclay)
 	- added jitsi profile
 	- pidgin private-bin conversion
 	- added eom profile
+	- added gnome-chess profile
 Jaykishan Mutkawoa (https://github.com/jmutkawoa)
 	- cpio profile
 Paupiah Yash (https://github.com/CaffeinatedStud)

README.md

@@ -186,7 +186,7 @@ Office: evince, gthumb, fbreader, pix, atril, xreader,
 
 Chat/messaging: qtox, gitter, pidgin
 
-Games: warzone2100
+Games: warzone2100, gnome-chess
 
 Weather/climate: aweather
 
@@ -197,5 +197,5 @@ Browsers: Palemoon
 ## New security profiles
 
 Gitter, gThumb, mpv, Franz messenger, LibreOffice, pix, audacity, strings, xz, xzdec, gzip, cpio, less, Atom Beta, Atom, jitsi, eom, uudeview
-tar (gtar), unzip, unrar, file, skypeforlinux
+tar (gtar), unzip, unrar, file, skypeforlinux, gnome-chess
 

etc/disable-programs.inc

@@ -128,3 +128,4 @@ blacklist ${HOME}/.local/share/xplayer
 blacklist ${HOME}/.local/share/totem
 blacklist ${HOME}/.local/share/psi+
 blacklist ${HOME}/.local/share/pix
+blacklist ${HOME}/.local/share/gnome-chess

etc/gnome-chess.profile

@@ -0,0 +1,20 @@
+# Firejail profile for gnome-chess
+noblacklist /.local/share/gnome-chess
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+net none
+nogroups
+nonewprivs
+noroot
+nosound
+seccomp
+shell none
+tracelog
+
+private-bin gnome-chess
+private-dev

etc/vlc.profile

@@ -8,12 +8,12 @@ include /etc/firejail/disable-passwdmgr.inc
 
 caps.drop all
 netfilter
+nogroups
 nonewprivs
 noroot
 protocol unix,inet,inet6
 seccomp
-
-
-# to test
 shell none
+tracelog
+
 private-bin vlc,cvlc,nvlc,rvlc,qvlc,svlc

platform/debian/conffiles

@@ -44,6 +44,7 @@
 /etc/firejail/flashpeak-slimjet.profile
 /etc/firejail/franz.profile
 /etc/firejail/gitter.profile
+/etc/firejail/gnome-chess.profile
 /etc/firejail/gnome-mplayer.profile
 /etc/firejail/google-chrome-beta.profile
 /etc/firejail/google-chrome-stable.profile

src/firecfg/firecfg.config

@@ -78,6 +78,7 @@ wine
 
 # games
 0ad
+gnome-chess
 hedgewars
 steam
 wesnot