2 files changed, 27 insertions, 1 deletions

diff --git a/etc/gnome-builder.profile b/etc/gnome-builder.profile
new file mode 100644
index 000000000..a5a48e97a
--- /dev/null
+++ b/etc/gnome-builder.profile
@@ -0,0 +1,25 @@
+# Firejail profile for gnome-builder
+# This file is overwritten after every install/update
+# Persistent local customizations
+include /etc/firejail/gnome-builder.local
+# Persistent global definitions
+include /etc/firejail/globals.local
+
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-passwdmgr.inc
+include /etc/firejail/disable-programs.inc
+
+caps.drop all
+ipc-namespace
+netfilter
+nodvd
+nogroups
+nonewprivs
+noroot
+notv
+novideo
+protocol unix,inet,inet6
+seccomp
+shell none
+
+private-dev
diff --git a/etc/viewnior.profile b/etc/viewnior.profile
index 4df71f728..39bf3f7ce 100644
--- a/etc/viewnior.profile
+++ b/etc/viewnior.profile
@@ -37,6 +37,7 @@ private-dev
 private-etc fonts
 private-tmp
 
-memory-deny-write-execute
+# memory-deny-write-executes breaks on Arch - see issue #1808
+#memory-deny-write-execute
 noexec ${HOME}
 noexec /tmp