2 files changed, 66 insertions, 6 deletions

diff --git a/etc/bnox.profile b/etc/bnox.profile
index bd458e1db..4270755c8 100644
--- a/etc/bnox.profile
+++ b/etc/bnox.profile
@@ -1,6 +1,36 @@
-# Firejail profile alias for inox
+# Firejail profile for bnox
 # This file is overwritten after every install/update
+# Persistent local customizations
+include /etc/firejail/bnox.local
+# Persistent global definitions
+include /etc/firejail/globals.local
 
+noblacklist ${HOME}/.cache/bnox
+noblacklist ${HOME}/.config/bnox
+noblacklist ${HOME}/.pki
 
-# Redirect
-include /etc/firejail/inox.profile
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+
+mkdir ${HOME}/.cache/bnox
+mkdir ${HOME}/.config/bnox
+mkdir ${HOME}/.pki
+whitelist ${DOWNLOADS}
+whitelist ${HOME}/.cache/bnox
+whitelist ${HOME}/.config/bnox
+whitelist ${HOME}/.pki
+include /etc/firejail/whitelist-common.inc
+include /etc/firejail/whitelist-var-common.inc
+
+caps.keep sys_chroot,sys_admin
+netfilter
+nodvd
+nogroups
+notv
+shell none
+
+private-dev
+# private-tmp - problems with multiple browser sessions
+
+noexec ${HOME}
+noexec /tmp
diff --git a/etc/dnox.profile b/etc/dnox.profile
index bd458e1db..d6626c048 100644
--- a/etc/dnox.profile
+++ b/etc/dnox.profile
@@ -1,6 +1,36 @@
-# Firejail profile alias for inox
+# Firejail profile for dnox
 # This file is overwritten after every install/update
+# Persistent local customizations
+include /etc/firejail/dnox.local
+# Persistent global definitions
+include /etc/firejail/globals.local
 
+noblacklist ${HOME}/.cache/dnox
+noblacklist ${HOME}/.config/dnox
+noblacklist ${HOME}/.pki
 
-# Redirect
-include /etc/firejail/inox.profile
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+
+mkdir ${HOME}/.cache/dnox
+mkdir ${HOME}/.config/dnox
+mkdir ${HOME}/.pki
+whitelist ${DOWNLOADS}
+whitelist ${HOME}/.cache/dnox
+whitelist ${HOME}/.config/dnox
+whitelist ${HOME}/.pki
+include /etc/firejail/whitelist-common.inc
+include /etc/firejail/whitelist-var-common.inc
+
+caps.keep sys_chroot,sys_admin
+netfilter
+nodvd
+nogroups
+notv
+shell none
+
+private-dev
+# private-tmp - problems with multiple browser sessions
+
+noexec ${HOME}
+noexec /tmp