Merge pull request #2710 from TheDarkTrumpet/1139-AddTeamsProfile

Add Microsoft Teams for Linux (Electron) profile

etc/disable-programs.inc

@@ -609,6 +609,7 @@ blacklist ${HOME}/.surf
 blacklist ${HOME}/.sword
 blacklist ${HOME}/.sylpheed-2.0
 blacklist ${HOME}/.synfig
+blacklist ${HOME}/.config/teams-for-linux
 blacklist ${HOME}/.tconn
 blacklist ${HOME}/.teeworlds
 blacklist ${HOME}/.thunderbird
@@ -757,3 +758,4 @@ blacklist /var/games/slashem
 blacklist /var/games/vulturesclaw
 blacklist /var/games/vultureseye
 blacklist /var/lib/games/Maelstrom-Scores
+

etc/teams-for-linux.profile

@@ -0,0 +1,42 @@
+# Firejail profile for teams-for-linux
+# Description: Teams for Linux is an Electron application for Microsoft's team collaboration and chat program
+# This file is overwritten after every install/update
+# Persistent local customizations
+include teams-for-linux.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.config/teams-for-linux
+
+include disable-common.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+
+mkdir ${HOME}/.config/teams-for-linux
+whitelist ${HOME}/.config/teams-for-linux
+whitelist ${DOWNLOADS}
+include whitelist-common.inc
+include whitelist-var-common.inc
+
+caps.drop all
+netfilter
+nodvd
+nogroups
+nonewprivs
+noroot
+notv
+nou2f
+novideo
+protocol unix,inet,inet6,netlink
+seccomp
+shell none
+
+disable-mnt
+private-bin sh,xdg-mime,tr,sed,echo,head,cut,xdg-open,grep,egrep,bash,zsh,teams-for-linux
+private-cache
+private-dev
+private-etc fonts,machine-id,localtime,ld.so.cache,ca-certificates,ssl,pki,crypto-policies,resolv.conf
+private-tmp

src/firecfg/firecfg.config

@@ -525,6 +525,7 @@ sylpheed
 synfigstudio
 sysprof
 sysprof-cli
+teams-for-linux
 teamspeak3
 teeworlds
 telegram