Add pycharm-community profile

4 files changed, 35 insertions, 1 deletions

diff --git a/README.md b/README.md
index f2cde391b..92256ab5d 100644
--- a/README.md
+++ b/README.md
@@ -100,4 +100,5 @@ Use this issue to request new profiles: [#1139](https://github.com/netblue30/fir
 
 ## New profiles
 
-Basilisk browser, Tor Browser language packs, PlayOnLinux, sylpheed, discord-canary
+Basilisk browser, Tor Browser language packs, PlayOnLinux, sylpheed, discord-canary,
+pycharm-community
diff --git a/RELNOTES b/RELNOTES
index 2c6e535ef..ffc247d61 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -1,6 +1,7 @@
 firejail (0.9.53) baseline; urgency=low
   * work in progress
   * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed, discord-canary
+  * new profiles: pycharm-community
  -- netblue30 <netblue30@yahoo.com>  Tue, 12 Dec 2017 08:00:00 -0500
 
 firejail (0.9.52) baseline; urgency=low
diff --git a/etc/pycharm-community.profile b/etc/pycharm-community.profile
new file mode 100644
index 000000000..f678da6d0
--- /dev/null
+++ b/etc/pycharm-community.profile
@@ -0,0 +1,31 @@
+# Firejail profile for pycharm-community
+# This file is overwritten after every install/update
+# Persistent local customizations
+include /etc/firejail/pycharm-community.local
+# Persistent global definitions
+include /etc/firejail/globals.local
+
+noblacklist ${HOME}/snap
+noblacklist ${HOME}/.java
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-passwdmgr.inc
+include /etc/firejail/disable-programs.inc
+
+caps.drop all
+machine-id
+nodvd
+nogroups
+nosound
+notv
+novideo
+shell none
+tracelog
+
+# private-etc fonts,passwd - minimal required to run but will probably break
+# program!
+private-dev
+private-tmp
+
+noexec /tmp
diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config
index 852351d51..276bbeb61 100644
--- a/src/firecfg/firecfg.config
+++ b/src/firecfg/firecfg.config
@@ -280,6 +280,7 @@ playonlinux
 pluma
 polari
 psi-plus
+# pycharm-community - FB note: may enable later
 qbittorrent
 qemu-launcher
 qlipper