Merge pull request #1108 from Fred-Barclay/thunar

Thunar

README

@@ -98,6 +98,7 @@ Fred-Barclay (https://github.com/Fred-Barclay)
 	- fixed palemoon and qbittorrent profiles
 	- compile/install scripts for --git-install/--git-uninstall commands
 	- tighten keepassx
+	- added Thunar profile
 valoq (https://github.com/valoq)
 	- lots of profile fixes
 	- added support for /srv in --whitelist feature
@@ -407,4 +408,4 @@ pstn (https://github.com/pstn)
 Alexey Kuznetsov (kuznet@ms2.inr.ac.ru)
 	- src/lib/libnetlink.c extracted from iproute2 software package
 	
-Copyright (C) 2014-2016 Firejail Authors
+Copyright (C) 2014-2017 Firejail Authors

README.md

@@ -155,6 +155,4 @@ goobox, gpa, gpg, gpg-agent, highlight, img2txt, k3b, kate, lynx, mediainfo, nau
 simple-scan, skanlite, ssh-agent, tracker, transmission-cli, transmission-show, w3m, xfburn, xpra, wget,
 xed, pluma, Cryptocat, Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI, Lollypop, MultiMC5,
 PDFSam, Pithos, Xonotic, wireshark, keepassx2, QupZilla, FossaMail, Uzbl browser, xmms, iridium browser,
-Kino
-
-
+Kino, Thunar

RELNOTES

@@ -36,7 +36,7 @@ firejail (0.9.45) baseline; urgency=low
   * new profiles: Cryptocat, Bless, Gnome 2048, Gnome Calculator,
   * new profiles: Gnome Contacts, JD-GUI, Lollypop, MultiMC5, PDFSam, Pithos,
   * new profies: Xonotic, wireshark, keepassx2, QupZilla, FossaMail,
-  * new profiles: Uzbl browser, iridium browser
+  * new profiles: Uzbl browser, iridium browser, Thunar
   * bugfixes
  -- netblue30 <netblue30@yahoo.com>  Sun, 23 Oct 2016 08:00:00 -0500
 

etc/Thunar.profile

@@ -0,0 +1,23 @@
+# This file is overwritten during software install.
+# Persistent customizations should go in a .local file.
+include /etc/firejail/Thunar.local
+
+# Firejail profile for thunar
+noblacklist ~/.config/Thunar
+noblacklist ~/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+netfilter
+nogroups
+nonewprivs
+noroot
+nosound
+protocol unix
+seccomp
+shell none
+tracelog

etc/disable-programs.inc

@@ -70,6 +70,7 @@ blacklist ${HOME}/.config/Mumble
 blacklist ${HOME}/.config/QuiteRss
 blacklist ${HOME}/.config/QuiteRssrc
 blacklist ${HOME}/.config/Slack
+blacklist ${HOME}/.config/Thunar
 blacklist ${HOME}/.config/VirtualBox
 blacklist ${HOME}/.config/Wire
 blacklist ${HOME}/.config/ardour4
@@ -149,6 +150,7 @@ blacklist ${HOME}/.config/wireshark
 blacklist ${HOME}/.config/xchat
 blacklist ${HOME}/.config/xed
 blacklist ${HOME}/.config/xfburn
+blacklist ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml
 blacklist ${HOME}/.config/xplayer
 blacklist ${HOME}/.config/xreader
 blacklist ${HOME}/.config/xviewer

etc/thunar.profile

@@ -0,0 +1 @@
+include /etc/firejail/Thunar.profile

platform/debian/conffiles

@@ -247,3 +247,5 @@
 /etc/firejail/iridium-browser.profile
 /etc/firejail/iridium.profile
 /etc/firejail/kino.profile
+/etc/firejail/Thunar.profile
+/etc/firejail/thunar.profile

src/firecfg/firecfg.config

@@ -191,6 +191,8 @@ keepass2
 keepassx
 keepassx2
 pluma
+Thunar
+thunar
 tracker
 wireshark
 xiphos