Unify all profiles

1 files changed, 13 insertions, 14 deletions

diff --git a/etc/nautilus.profile b/etc/nautilus.profile
index 4f2f50d9f..350e7f9b6 100644
--- a/etc/nautilus.profile
+++ b/etc/nautilus.profile
@@ -1,25 +1,19 @@
-# Persistent global definitions go here
-include /etc/firejail/globals.local
-
-# This file is overwritten during software install.
-# Persistent customizations should go in a .local file.
+# Firejail profile for nautilus
+# This file is overwritten after every install/update
+# Persistent local customizations
 include /etc/firejail/nautilus.local
-
-# nautilus profile
-
-# Nautilus is started by systemd on most systems. Therefore it is not firejailed by default. Since there
-# is already a nautilus process running on gnome desktops firejail will have no effect.
+# Persistent global definitions
+include /etc/firejail/globals.local
 
 noblacklist ~/.config/nautilus
+noblacklist ~/.local/share/Trash
 noblacklist ~/.local/share/nautilus
 noblacklist ~/.local/share/nautilus-python
-noblacklist ~/.local/share/Trash
 
 include /etc/firejail/disable-common.inc
-# nautilus needs to be able to start arbitrary applications so we cannot blacklist their files
-#include /etc/firejail/disable-programs.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
+# include /etc/firejail/disable-programs.inc
 
 caps.drop all
 netfilter
@@ -32,6 +26,11 @@ shell none
 tracelog
 
 # private-bin nautilus
-# private-tmp
 # private-dev
 # private-etc fonts
+# private-tmp
+
+# CLOBBERED COMMENTS
+# Nautilus is started by systemd on most systems. Therefore it is not firejailed by default. Since there
+# is already a nautilus process running on gnome desktops firejail will have no effect.
+# nautilus needs to be able to start arbitrary applications so we cannot blacklist their files