2 files changed, 39 insertions, 0 deletions

diff --git a/etc/iridium-browser.profile b/etc/iridium-browser.profile
new file mode 100644
index 000000000..7a2f889dc
--- /dev/null
+++ b/etc/iridium-browser.profile
@@ -0,0 +1,6 @@
+# This file is overwritten during software install.
+# Persistent customizations should go in a .local file.
+include /etc/firejail/iridium-browser.local
+
+include /etc/firejail/iridium.profile
+
diff --git a/etc/iridium.profile b/etc/iridium.profile
new file mode 100644
index 000000000..69ea483aa
--- /dev/null
+++ b/etc/iridium.profile
@@ -0,0 +1,33 @@
+# This file is overwritten during software install.
+# Persistent customizations should go in a .local file.
+include /etc/firejail/iridium.local
+
+# Iridium browser profile
+noblacklist ~/.config/iridium
+noblacklist ~/.cache/iridium
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+
+# chromium/iridium is distributed with a perl script on Arch
+# include /etc/firejail/disable-devel.inc
+#
+
+netfilter
+
+whitelist ${DOWNLOADS}
+mkdir ~/.config/iridium
+whitelist ~/.config/iridium
+mkdir ~/.cache/iridium
+whitelist ~/.cache/iridium
+mkdir ~/.pki
+whitelist ~/.pki
+
+# lastpass, keepass
+# for keepass we additionally need to whitelist our .kdbx password database
+whitelist ~/.keepass
+whitelist ~/.config/keepass
+whitelist ~/.config/KeePass
+whitelist ~/.lastpass
+whitelist ~/.config/lastpass
+
+include /etc/firejail/whitelist-common.inc