jail gimp

roles/mail/meta/main.yml

@@ -3,3 +3,4 @@ dependencies:
   - { role: networkmanager }
   - { role: systemd }
   - { role: cron }
+  - { role: firejail }

roles/mail/tasks/main.yml

@@ -4,6 +4,13 @@
   tags:
     - aur
 
+- name: Jail mutt
+  file: src=/usr/bin/firejail
+        dest=/usr/local/bin/mutt
+        state=link
+  tags:
+    - firejail
+
 - name: Install urlview
   aur: name=urlview user={{ user.name }}
   tags:

roles/media/meta/main.yml

@@ -3,3 +3,4 @@ dependencies:
   - { role: base }
   - { role: x }
   - { role: fonts }
+  - { role: firejail }

roles/media/tasks/feh.yml

@@ -3,3 +3,11 @@
   pacman: name=feh state=present
   tags:
     - feh
+
+- name: Jail feh
+  file: src=/usr/bin/firejail
+        dest=/usr/local/bin/feh
+        state=link
+  tags:
+    - feh
+    - firejail

roles/media/tasks/gimp.yml

@@ -9,6 +9,14 @@
   tags:
     - gimp
 
+- name: Jail GIMP
+  file: src=/usr/bin/firejail
+        dest=/usr/local/bin/gimp
+        state=link
+  tags:
+    - gimp
+    - firejail
+
 - name: Install GIMP raw support
   pacman: name=gimp-ufraw state=present
   tags: