1 files changed, 49 insertions, 1 deletions

diff --git a/etc/github-desktop.profile b/etc/github-desktop.profile
index 061b44c42..4a969f9ad 100644
--- a/etc/github-desktop.profile
+++ b/etc/github-desktop.profile
@@ -1 +1,49 @@
-]0;firejail /usr/bin/meld ./etc/github-desktop_LOCAL_29017.profile ./etc/github-desktop_BASE_29017.profile ./etc/github-desktop_REMOTE_29017.profile 
\ No newline at end of file
+# Firejail profile for github-desktop
+# Description: Extend your GitHub workflow beyond your browser with GitHub Desktop
+# This file is overwritten after every install/update
+# Persistent local customizations
+include github-desktop.local
+# Persistent global definitions
+include globals.local
+
+noblacklist ${HOME}/.config/GitHub Desktop
+noblacklist ${HOME}/.config/git
+noblacklist ${HOME}/.gitconfig
+noblacklist ${HOME}/.git-credentials
+
+include disable-common.inc
+include disable-passwdmgr.inc
+include disable-programs.inc
+include disable-devel.inc
+include disable-exec.inc
+include disable-interpreters.inc
+
+caps.drop all
+netfilter
+# no3d
+nodvd
+nogroups
+nonewprivs
+noroot
+nosound
+notv
+nou2f
+novideo
+protocol unix,inet,inet6,netlink
+seccomp
+
+# Note: On debian-based distributions the binary might be located in
+# /opt/GitHub Desktop/github-desktop, and therefore not be in PATH.
+# If that's the case you can start GitHub Desktop with firejail via
+# `firejail "/opt/GitHub Desktop/github-desktop"`.
+
+disable-mnt
+# private-bin github-desktop
+private-cache
+?HAS_APPIMAGE: ignore private-dev
+private-dev
+# private-etc alternatives
+# private-lib
+private-tmp
+
+# memory-deny-write-execute