4 files changed, 16 insertions, 10 deletions

diff --git a/etc/libreoffice.profile b/etc/libreoffice.profile
index 4b3eb1ac7..18fcc59c6 100644
--- a/etc/libreoffice.profile
+++ b/etc/libreoffice.profile
@@ -23,20 +23,22 @@ include /etc/firejail/disable-programs.inc
 
 include /etc/firejail/whitelist-var-common.inc
 
-apparmor
+# Ubuntu 18.04 uses its own apparmor profile
+# uncomment the next line if you are not on Ubuntu
+#apparmor
 caps.drop all
 machine-id
 netfilter
 nodbus
 nodvd
 nogroups
-nonewprivs
+#nonewprivs - fix for Ubuntu 18.04/Debian 10
 noroot
 notv
-protocol unix,inet,inet6
-seccomp
+#protocol unix,inet,inet6  - fix for Ubuntu 18.04/Debian 10
+#seccomp  - fix for Ubuntu 18.04/Debian 10
 shell none
-tracelog
+#tracelog - problems reported by Ubuntu 18.04 apparmor profile in /var/log/syslog
 
 private-dev
 private-tmp
diff --git a/etc/rhythmbox.profile b/etc/rhythmbox.profile
index 38ccb886f..57e1ce5f0 100644
--- a/etc/rhythmbox.profile
+++ b/etc/rhythmbox.profile
@@ -8,7 +8,8 @@ include /etc/firejail/globals.local
 
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-devel.inc
-include /etc/firejail/disable-interpreters.inc
+# rhythmbox is using Python
+#include /etc/firejail/disable-interpreters.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
 
diff --git a/etc/vlc.profile b/etc/vlc.profile
index 6b0bee7bd..9ccbb7310 100644
--- a/etc/vlc.profile
+++ b/etc/vlc.profile
@@ -17,7 +17,7 @@ include /etc/firejail/disable-programs.inc
 
 include /etc/firejail/whitelist-var-common.inc
 
-apparmor
+#apparmor - on Ubuntu 18.04 it refuses to start without dbus access
 caps.drop all
 netfilter
 # nodbus - problems with KDE
diff --git a/etc/webstorm.profile b/etc/webstorm.profile
index 6da71224f..93bcb50bb 100644
--- a/etc/webstorm.profile
+++ b/etc/webstorm.profile
@@ -6,12 +6,17 @@ include /etc/firejail/webstorm.local
 include /etc/firejail/globals.local
 
 noblacklist ${HOME}/.WebStorm*
+noblacklist ${HOME}/.android
 noblacklist ${HOME}/.gitconfig
+noblacklist ${HOME}/.gradle
 noblacklist ${HOME}/.java
 noblacklist ${HOME}/.local/share/JetBrains
 noblacklist ${HOME}/.ssh
 noblacklist ${HOME}/.tooling
 
+noblacklist ${PATH}/node
+noblacklist ${HOME}/.nvm
+
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-passwdmgr.inc
 include /etc/firejail/disable-programs.inc
@@ -31,6 +36,4 @@ seccomp
 shell none
 
 private-dev
-# private-tmp
-
-noexec /tmp
+private-tmp