From 7ebabb7145d20f80d1dd8254458ecc038ea6d4da Mon Sep 17 00:00:00 2001
From: Ryan <ryan@andthensome.nl>
Date: Tue, 3 Jan 2017 20:46:47 +0100
Subject: [PATCH] Added firejail profiles for cmus with cmusfm

---
 bin/bin/backup.sh                        | 20 ++++++++++++++++++++
 firejail/.config/firejail/cmus.profile   | 18 ++++++++++++++++++
 firejail/.config/firejail/cmusfm.profile | 18 ++++++++++++++++++
 oh-my-zsh/.oh-my-zsh                     |  2 +-
 4 files changed, 57 insertions(+), 1 deletion(-)
 create mode 100755 bin/bin/backup.sh
 create mode 100644 firejail/.config/firejail/cmus.profile
 create mode 100644 firejail/.config/firejail/cmusfm.profile

diff --git a/bin/bin/backup.sh b/bin/bin/backup.sh
new file mode 100755
index 0000000..00ab1d1
--- /dev/null
+++ b/bin/bin/backup.sh
@@ -0,0 +1,20 @@
+#!/bin/sh
+REPOSITORY=~/stackdav/thinkpadbackup
+
+# Backup all of /home and /var/www except a few
+# excluded directories
+borg create -v --stats                          \
+    $REPOSITORY::'{hostname}-{now:%Y-%m-%d}'    \
+    /home/alrayyes                              \
+    --exclude '/home/alrayyes/.cache' \
+    --exclude '/home/alrayyes/stackdav' \
+    --exclude '/home/alrayyes/music'            \
+    --exclude '/home/alrayyes/Dropbox'            \
+    --exclude '/home/alrayyes/gPodder/Downloads'
+
+# Use the `prune` subcommand to maintain 7 daily, 4 weekly and 6 monthly
+# archives of THIS machine. The '{hostname}-' prefix is very important to
+# limit prune's operation to this machine's archives and not apply to
+# other machine's archives also.
+borg prune -v --list $REPOSITORY --prefix '{hostname}-' \
+    --keep-daily=7 --keep-weekly=4 --keep-monthly=6
diff --git a/firejail/.config/firejail/cmus.profile b/firejail/.config/firejail/cmus.profile
new file mode 100644
index 0000000..35aa3ed
--- /dev/null
+++ b/firejail/.config/firejail/cmus.profile
@@ -0,0 +1,18 @@
+# cmus profile
+noblacklist ${HOME}/.config/cmus
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+netfilter
+nonewprivs
+noroot
+protocol unix,inet,inet6
+seccomp
+
+private-bin cmus,cmusfm
+private-etc group
+shell none
diff --git a/firejail/.config/firejail/cmusfm.profile b/firejail/.config/firejail/cmusfm.profile
new file mode 100644
index 0000000..5070f1c
--- /dev/null
+++ b/firejail/.config/firejail/cmusfm.profile
@@ -0,0 +1,18 @@
+# cmusfm profile
+noblacklist ${HOME}/.config/cmus
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+
+caps.drop all
+netfilter
+nonewprivs
+noroot
+protocol unix,inet,inet6
+seccomp
+
+private-bin cmusfm
+private-etc group
+shell none
diff --git a/oh-my-zsh/.oh-my-zsh b/oh-my-zsh/.oh-my-zsh
index 97c0384..ff5629e 160000
--- a/oh-my-zsh/.oh-my-zsh
+++ b/oh-my-zsh/.oh-my-zsh
@@ -1 +1 @@
-Subproject commit 97c03841691021f916c46b2fd2d089d7970400aa
+Subproject commit ff5629e60b815b3c21ef216d5ba5943932589758