1 files changed, 19 insertions, 5 deletions

diff --git a/etc/brave.profile b/etc/brave.profile
index d7678d5d5..a65a3adc8 100644
--- a/etc/brave.profile
+++ b/etc/brave.profile
@@ -4,18 +4,32 @@ include /etc/firejail/brave.local
 
 # Profile for Brave browser
 noblacklist ~/.config/brave
+noblacklist ~/.pki
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-programs.inc
 include /etc/firejail/disable-devel.inc
 
-caps.drop all
+#caps.drop all
 netfilter
-nonewprivs
-noroot
-protocol unix,inet,inet6,netlink
-seccomp
+#nonewprivs
+#noroot
+#protocol unix,inet,inet6,netlink
+#seccomp
 
 whitelist ${DOWNLOADS}
 
 mkdir ~/.config/brave
 whitelist ~/.config/brave
+mkdir ~/.pki
+whitelist ~/.pki
+
+# lastpass, keepass
+# for keepass we additionally need to whitelist our .kdbx password database
+whitelist ~/.keepass
+whitelist ~/.config/keepass
+whitelist ~/.config/KeePass
+whitelist ~/.lastpass
+whitelist ~/.config/lastpass
+
+include /etc/firejail/whitelist-common.inc
+