diff --git a/etc/cherrytree.profile b/etc/cherrytree.profile
new file mode 100644
index 000000000..fb8437a2d
--- /dev/null
+++ b/etc/cherrytree.profile
@@ -0,0 +1,14 @@
+whitelist ${HOME}/cherrytree
+whitelist ${HOME}/.config/cherrytree/
+whitelist ${HOME}/.local/share/
+include /etc/firejail/disable-mgmt.inc
+include /etc/firejail/disable-secret.inc
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-devel.inc
+caps.drop all
+seccomp
+protocol unix,inet,inet6,netlink
+netfilter
+tracelog
+noroot
+include /etc/firejail/whitelist-common.inc