4 files changed, 13 insertions, 1 deletions

diff --git a/etc/riot-desktop.profile b/etc/riot-desktop.profile
new file mode 100644
index 000000000..d38ab6876
--- /dev/null
+++ b/etc/riot-desktop.profile
@@ -0,0 +1,9 @@
+# Firejail profile for riot-desktop
+# This file is overwritten after every install/update
+# Persistent local customizations
+include /etc/firejail/riot-desktop.local
+# Persistent global definitions
+include /etc/firejail/globals.local
+
+# Redirect
+include /etc/firejail/riot-web.profile
diff --git a/etc/riot-web.profile b/etc/riot-web.profile
index 06dbbe9d9..1779d0b7c 100644
--- a/etc/riot-web.profile
+++ b/etc/riot-web.profile
@@ -7,6 +7,7 @@ include /etc/firejail/globals.local
 
 noblacklist ${HOME}/.config/Riot
 
+mkdir ${HOME}/.config/Riot
 whitelist ${HOME}/.config/Riot
 include /etc/firejail/whitelist-common.inc
 
diff --git a/etc/tor-browser-en.profile b/etc/tor-browser-en.profile
index fb2c2f9c9..75aad1a09 100644
--- a/etc/tor-browser-en.profile
+++ b/etc/tor-browser-en.profile
@@ -2,6 +2,8 @@
 # This file is overwritten after every install/update
 
 noblacklist ${HOME}/.tor-browser-en
+
+mkdir ${HOME}/.tor-browser-en
 whitelist ${HOME}/.tor-browser-en
 
 # Redirect
diff --git a/etc/torbrowser-launcher.profile b/etc/torbrowser-launcher.profile
index a33707ee4..9e3e0ef49 100644
--- a/etc/torbrowser-launcher.profile
+++ b/etc/torbrowser-launcher.profile
@@ -41,7 +41,7 @@ shell none
 tracelog
 
 disable-mnt
-private-bin bash,cp,dirname,env,expr,file,getconf,gpg,grep,id,ln,mkdir,python*,readlink,rm,sed,sh,tail,tclsh,test,tor-browser-en,torbrowser-launcher
+private-bin bash,cp,dirname,env,expr,file,getconf,gpg,grep,id,ln,mkdir,python*,readlink,rm,sed,sh,tail,tar,tclsh,test,tor-browser-en,torbrowser-launcher,xz
 private-dev
 private-etc fonts,hostname,hosts,resolv.conf,pki,ssl,ca-certificates,crypto-policies,alsa,asound.conf,pulse,machine-id,ld.so.cache
 private-tmp