3 files changed, 32 insertions, 2 deletions

diff --git a/etc-fixes/0.9.56/brave-browser.profile b/etc-fixes/0.9.56/brave-browser.profile
new file mode 100644
index 000000000..6e3a5df28
--- /dev/null
+++ b/etc-fixes/0.9.56/brave-browser.profile
@@ -0,0 +1,6 @@
+# Firejail profile alias for brave
+# This file is overwritten after every install/update
+
+
+# Redirect
+include /etc/firejail/brave.profile
diff --git a/etc-fixes/0.9.56/brave.profile b/etc-fixes/0.9.56/brave.profile
new file mode 100644
index 000000000..4c59c103f
--- /dev/null
+++ b/etc-fixes/0.9.56/brave.profile
@@ -0,0 +1,24 @@
+# Firejail profile for brave
+# This file is overwritten after every install/update
+# Description: Web browser that blocks ads and trackers by default.
+# Persistent local customizations
+include brave.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.config/brave
+noblacklist ${HOME}/.config/BraveSoftware
+# brave uses gpg for built-in password manager
+noblacklist ${HOME}/.gnupg
+
+mkdir ${HOME}/.config/brave
+mkdir ${HOME}/.config/BraveSoftware
+whitelist ${HOME}/.config/brave
+whitelist ${HOME}/.config/BraveSoftware
+whitelist ${HOME}/.gnupg
+
+# noexec /tmp is included in chromium-common.profile and breaks Brave
+ignore noexec /tmp
+
+# Redirect
+include /etc/firejail/chromium-common.profile
diff --git a/etc/cherrytree.profile b/etc/cherrytree.profile
index 134a06c48..d7dcf87dd 100644
--- a/etc/cherrytree.profile
+++ b/etc/cherrytree.profile
@@ -23,7 +23,7 @@ include disable-programs.inc
 include disable-xdg.inc
 
 caps.drop all
-netfilter
+net none
 no3d
 nodvd
 nogroups
@@ -33,7 +33,7 @@ nosound
 notv
 nou2f
 novideo
-protocol unix,inet,inet6,netlink
+protocol unix
 seccomp
 shell none
 tracelog