From be9c3a479a1bb0226ec8d5d71f33f024884f0d3e Mon Sep 17 00:00:00 2001
From: Pig Monkey <pm@pig-monkey.com>
Date: Sat, 2 Apr 2016 10:17:16 -0700
Subject: [PATCH] add chromium firejail profile

---
 roles/browsers/files/firejail/chromium.profile | 6 ++++++
 roles/browsers/tasks/main.yml                  | 6 ++++++
 2 files changed, 12 insertions(+)
 create mode 100644 roles/browsers/files/firejail/chromium.profile

diff --git a/roles/browsers/files/firejail/chromium.profile b/roles/browsers/files/firejail/chromium.profile
new file mode 100644
index 0000000..d1d9325
--- /dev/null
+++ b/roles/browsers/files/firejail/chromium.profile
@@ -0,0 +1,6 @@
+include /usr/local/etc/firejail/disable-more.inc
+include /etc/firejail/chromium.profile
+
+# Note that localtime should be added to private-etc if you wish Chromium to be
+# able to determine you timezone.
+private-etc passwd,group,hostname,hosts,nsswitch.conf,resolv.conf,gtk-2.0,gtk-3.0,fonts,mime.types,asound.conf,pulse
diff --git a/roles/browsers/tasks/main.yml b/roles/browsers/tasks/main.yml
index 4d6bb1d..797ad47 100644
--- a/roles/browsers/tasks/main.yml
+++ b/roles/browsers/tasks/main.yml
@@ -34,6 +34,12 @@
     - chromium
     - firejail
 
+- name: Push Chromium firejail profile
+  copy: src=firejail/chromium.profile dest=/usr/local/etc/firejail/chromium.profile
+  tags:
+    - chromium
+    - firejail
+
 - name: Install Chromium Pepper Flash
   aur: name=chromium-pepper-flash user={{ user.name }}
   tags: