2 files changed, 32 insertions, 1 deletions

diff --git a/etc/arduino.profile b/etc/arduino.profile
new file mode 100644
index 000000000..e80222bb6
--- /dev/null
+++ b/etc/arduino.profile
@@ -0,0 +1,28 @@
+# This file is overwritten during software install.
+# Persistent customizations should go in a .local file.
+include /etc/firejail/arduino.local
+
+# Firejail profile for arduino
+noblacklist ${HOME}/.arduino15
+noblacklist ${HOME}/Arduino
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-programs.inc
+include /etc/firejail/disable-passwdmgr.inc
+include /etc/firejail/disable-devel.inc
+
+caps.drop all
+netfilter
+no3d
+nogroups
+nonewprivs
+noroot
+nosound
+protocol unix,inet,inet6
+seccomp
+shell none
+
+private-tmp
+
+noexec ${HOME}
+noexec /tmp
diff --git a/etc/qtox.profile b/etc/qtox.profile
index 40a959d05..f3158b206 100644
--- a/etc/qtox.profile
+++ b/etc/qtox.profile
@@ -3,7 +3,8 @@
 include /etc/firejail/qtox.local
 
 # qTox instant messaging profile
-noblacklist ${HOME}/.config/tox
+noblacklist ~/.config/tox
+noblacklist ~/.config/qt5ct
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-programs.inc
 include /etc/firejail/disable-devel.inc
@@ -11,6 +12,8 @@ include /etc/firejail/disable-passwdmgr.inc
 
 mkdir ${HOME}/.config/tox
 whitelist ${HOME}/.config/tox
+mkdir ${HOME}/.config/qt5ct
+whitelist ${HOME}/.config/qt5ct
 whitelist ${DOWNLOADS}
 
 caps.drop all