blacklist spark program files

roles/browsers/files/firejail/firefox.profile

@@ -1,3 +1,4 @@
+include /usr/local/etc/firejail/disable-more.inc
 include /etc/firejail/firefox.profile
 
 # Note that localtime should be added to private-etc if you wish Firefox to be

roles/firejail/files/disable-more.inc

@@ -0,0 +1,17 @@
+# Passwords
+blacklist ${HOME}/.password-store
+blacklist ${HOME}/.keys
+
+# Ledger
+blacklist ${HOME}/ledger
+
+# Mail
+blacklist ${HOME}/.offlineimaprc
+blacklist ${HOME}/.offlineimap
+blacklist ${HOME}/.mbsyncrc
+
+# PIM
+blacklist ${HOME}/.config/vdirsyncer
+blacklist ${HOME}/.vdirsyncer
+blacklist ${HOME}/.contacts
+blacklist ${HOME}/.calendars

roles/firejail/files/generic.profile

@@ -1,2 +1,4 @@
 include /etc/firejail/generic.profile
 include /etc/firejail/disable-devel.inc
+
+include /usr/local/etc/firejail/disable-more.inc

roles/firejail/tasks/main.yml

@@ -10,6 +10,11 @@
 - name: Create firejail profile directory
   file: path=/usr/local/etc/firejail state=directory
 
+- name: Push firejail blacklist include
+  copy: src=disable-more.inc dest=/usr/local/etc/firejail/disable-more.inc
+  tags:
+    - firejail
+
 - name: Push generic firejail profile
   copy: src=generic.profile dest=/usr/local/etc/firejail/generic.profile
   tags:

roles/rtorrent/files/firejail/rtorrent.profile

@@ -1,4 +1,6 @@
+include /usr/local/etc/firejail/disable-more.inc
 include /etc/firejail/rtorrent.profile
-private-etc passwd,group,hostname,hosts,nsswitch.conf,resolv.conf
+
 private-dev
+private-etc passwd,group,hostname,hosts,nsswitch.conf,resolv.conf
 private-tmp