Update brave.profile to support native sandboxing

1 files changed, 9 insertions, 4 deletions

diff --git a/etc/brave.profile b/etc/brave.profile
index 7cd925a4c..35c59f5a3 100644
--- a/etc/brave.profile
+++ b/etc/brave.profile
@@ -1,6 +1,6 @@
 # Firejail profile for brave
-# This file is overwritten after every install/update
 # Description: Web browser that blocks ads and trackers by default.
+# This file is overwritten after every install/update
 # Persistent local customizations
 include brave.local
 # Persistent global definitions
@@ -9,15 +9,20 @@ include globals.local
 # noexec /tmp is included in chromium-common.profile and breaks Brave
 ignore noexec /tmp
 
-noblacklist ${HOME}/.config/brave
+noblacklist ${HOME}/.cache/BraveSoftware
 noblacklist ${HOME}/.config/BraveSoftware
+noblacklist ${HOME}/.config/brave
+noblacklist ${HOME}/.config/brave-flags.conf
 # brave uses gpg for built-in password manager
 noblacklist ${HOME}/.gnupg
 
-mkdir ${HOME}/.config/brave
+mkdir ${HOME}/.cache/BraveSoftware
 mkdir ${HOME}/.config/BraveSoftware
-whitelist ${HOME}/.config/brave
+mkdir ${HOME}/.config/brave
+whitelist ${HOME}/.cache/BraveSoftware
 whitelist ${HOME}/.config/BraveSoftware
+whitelist ${HOME}/.config/brave
+whitelist ${HOME}/.config/brave-flags.conf
 whitelist ${HOME}/.gnupg
 
 # Brave sandbox needs read access to /proc/config.gz