Add QOwnNotes profile

README.md

@@ -137,5 +137,4 @@ QMediathekView, aria2c, Authenticator, checkbashisms, devilspie, devilspie2, eas
 bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat, lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep,
 lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat, xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore,
 lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh, nirtoshare-send, nitroshare-ui, mencoder, gnome-pie,
-masterpdfeditor
-
+masterpdfeditor, QOwnNotes

RELNOTES

@@ -9,7 +9,7 @@ firejail (0.9.56.1) baseline; urgency=low
   * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
   * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
   * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
-  * new profiles: masterpdfeditor
+  * new profiles: masterpdfeditor, QOwnNotes
  -- netblue30 <netblue30@yahoo.com>  Thu, 11 Oct 2018 08:00:00 -0500
 
 firejail (0.9.56) baseline; urgency=low

etc/QOwnNotes.profile

@@ -0,0 +1,56 @@
+# Firejail profile for QOwnNotes
+# Description: Plain-text file notepad with markdown support and ownCloud integration
+# This file is overwritten after every install/update
+# Persistent local customizations
+include QOwnNotes.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${DOCUMENTS}
+noblacklist ${HOME}/Nextcloud/Notes
+noblacklist ${HOME}/.config/PBE
+noblacklist ${HOME}/.local/share/PBE
+
+mkdir ${DOCUMENTS}
+mkdir ${HOME}/Nextcloud/Notes
+mkdir ${HOME}.config/PBE
+mkdir ${HOME}/.local/share/PBE
+whitelist ${DOCUMENTS}
+whitelist ${HOME}/Nextcloud/Notes
+whitelist ${HOME}/.config/PBE
+whitelist ${HOME}/.local/share/PBE
+include whitelist-common.inc
+include whitelist-var-common.inc
+
+include disable-common.inc
+include disable-devel.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+include disable-xdg.inc
+
+caps.drop all
+machine-id
+netfilter
+no3d
+nodvd
+nogroups
+nonewprivs
+noroot
+nosound
+notv
+nou2f
+novideo
+protocol unix,inet,inet6,netlink
+seccomp
+shell none
+tracelog
+
+disable-mnt
+private-bin QOwnNotes,gio
+private-dev
+private-etc fonts,ld.so.cache,pulse,resolv.conf,hosts,nsswitch.conf,host.conf,ca-certificates,ssl,pki,crypto-policies
+private-tmp
+
+noexec ${HOME}
+noexec /tmp

etc/disable-programs.inc

@@ -3,6 +3,7 @@
 include disable-programs.local
 
 blacklist ${HOME}/Monero/wallets
+blacklist ${HOME}/Nextcloud/Notes
 blacklist ${HOME}/Standard Notes Backups
 blacklist ${HOME}/snap
 blacklist ${HOME}/.*coin
@@ -75,6 +76,7 @@ blacklist ${HOME}/.config/MuseScore
 blacklist ${HOME}/.config/MusicBrainz
 blacklist ${HOME}/.config/Nathan Osman
 blacklist ${HOME}/.config/Nylas Mail
+blacklist ${HOME}/.config/PBE
 blacklist ${HOME}/.config/Qlipper
 blacklist ${HOME}/.config/QMediathekView
 blacklist ${HOME}/.config/QuiteRss
@@ -373,6 +375,7 @@ blacklist ${HOME}/.local/share/3909/PapersPlease
 blacklist ${HOME}/.local/share/Empathy
 blacklist ${HOME}/.local/share/JetBrains
 blacklist ${HOME}/.local/share/Mumble
+blacklist ${HOME}/.local/share/PBE
 blacklist ${HOME}/.local/share/QMediathekView
 blacklist ${HOME}/.local/share/QuiteRss
 blacklist ${HOME}/.local/share/Ricochet

src/firecfg/firecfg.config

@@ -15,6 +15,7 @@ JDownloader
 Mathematica
 Natron
 QMediathekView
+QOwnNotes
 Telegram
 Viber
 VirtualBox