diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc index 92d6d49d5..d3803ec2a 100644 --- a/etc/inc/disable-common.inc +++ b/etc/inc/disable-common.inc @@ -390,6 +390,7 @@ read-only ${HOME}/.w3m read-only ${HOME}/.xmonad read-only ${HOME}/.xscreensaver read-only ${HOME}/.yarnrc +read-only ${HOME}/.zen/profiles.ini read-only ${HOME}/_exrc read-only ${HOME}/_gvimrc read-only ${HOME}/_vimrc diff --git a/etc/profile-m-z/zen-bin.profile b/etc/profile-m-z/zen-bin.profile new file mode 100644 index 000000000..4f688aaeb --- /dev/null +++ b/etc/profile-m-z/zen-bin.profile @@ -0,0 +1,10 @@ +# Firejail profile alias for zen-bin +# This file is overwritten after every install/update +# Persistent local customizations +include zen-bin.local +# Persistent global definitions +# added by included profile +#include globals.local + +# Redirect +include zen-browser.profile diff --git a/etc/profile-m-z/zen-browser.profile b/etc/profile-m-z/zen-browser.profile new file mode 100644 index 000000000..c0f41e5f7 --- /dev/null +++ b/etc/profile-m-z/zen-browser.profile @@ -0,0 +1,40 @@ +# Firejail profile for zen-browser +# Description: A beautifully designed, privacy-focused Firefox fork +# This file is overwritten after every install/update +# Persistent local customizations +include zen-browser.local +# Persistent global definitions +include globals.local + +# (Ignore entry from disable-common.inc) +ignore read-only ${HOME}/.zen/profiles.ini + +noblacklist ${HOME}/.cache/zen +noblacklist ${HOME}/.zen + +# uses libgdk-pixbuf and/or glycin - see #6906 +#blacklist /usr/libexec + +mkdir ${HOME}/.cache/zen +mkdir ${HOME}/.zen +whitelist ${HOME}/.cache/zen +whitelist ${HOME}/.zen + +# Add the following lines to allow access to the .mozilla directory, +# required by some extensions (like KeePassXC-Browser) to work properly +#noblacklist ${HOME}/.mozilla +#mkdir ${HOME}/.mozilla +#whitelist ${HOME}/.mozilla + +# Note: Zen Browser requires a shell to launch on Arch and Fedora. +# Add the next lines to zen-browser.local to enable private-bin. +#private-bin bash,dbus-launch,dbus-send,env,zen-browser,sh,which +#private-bin basename,bash,cat,dirname,expr,false,zen,zen-bin,zen-browser,getenforce,ln,mkdir,pidof,restorecon,rm,rmdir,sed,sh,tclsh,true,uname + +dbus-user filter +dbus-user.own org.mozilla.zen.* +dbus-user.own org.mpris.MediaPlayer2.firefox.* +ignore dbus-user none + +# Redirect +include firefox-common.profile diff --git a/etc/profile-m-z/zen.profile b/etc/profile-m-z/zen.profile new file mode 100644 index 000000000..70a8dee7a --- /dev/null +++ b/etc/profile-m-z/zen.profile @@ -0,0 +1,10 @@ +# Firejail profile alias for zen +# This file is overwritten after every install/update +# Persistent local customizations +include zen.local +# Persistent global definitions +# added by included profile +#include globals.local + +# Redirect +include zen-browser.profile diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index 94959daf9..62b1bc39f 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -1063,6 +1063,9 @@ zaproxy zart zathura zeal +zen +zen-bin +zen-browser zim zlib-flate zoom