Unify last 8 profiles

1 files changed, 16 insertions, 16 deletions

diff --git a/etc/Xephyr.profile b/etc/Xephyr.profile
index 22c0202ee..db3b3858c 100644
--- a/etc/Xephyr.profile
+++ b/etc/Xephyr.profile
@@ -1,9 +1,9 @@
-# Persistent global definitions go here
-include /etc/firejail/globals.local
-
-# This file is overwritten during software install.
-# Persistent customizations should go in a .local file.
+# Firejail profile for Xephyr
+# This file is overwritten after every install/update
+# Persistent local customizations
 include /etc/firejail/Xephyr.local
+# Persistent global definitions
+include /etc/firejail/globals.local
 
 #
 # This profile will sandbox Xephyr server itself when used with firejail --x11=xephyr.
@@ -15,26 +15,26 @@ include /etc/firejail/Xephyr.local
 #
 
 
-# using a private home directory
-private
+blacklist /media
 
+whitelist /var/lib/xkb
+include /etc/firejail/whitelist-common.inc
 
 caps.drop all
 # Xephyr needs to be allowed access to the abstract Unix socket namespace.
 nogroups
 nonewprivs
 # In noroot mode, Xephyr cannot create a socket in the real /tmp/.X11-unix.
-#noroot
+# noroot
 nosound
-shell none
-seccomp
 protocol unix
+seccomp
+shell none
 
+# using a private home directory
+private
+# private-bin Xephyr,sh,xkbcomp
+# private-bin Xephyr,sh,xkbcomp,strace,bash,cat,ls
 private-dev
+# private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname
 private-tmp
-#private-bin Xephyr,sh,xkbcomp,strace,bash,cat,ls
-#private-bin Xephyr,sh,xkbcomp
-#private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname
-
-blacklist /media
-whitelist /var/lib/xkb