Merge pull request #1427 from SpotComms/pr

Unify all profiles

1 files changed, 15 insertions, 17 deletions

diff --git a/etc/rambox.profile b/etc/rambox.profile
index 2c70fbd13..a5b87e901 100644
--- a/etc/rambox.profile
+++ b/etc/rambox.profile
@@ -1,16 +1,23 @@
-#Persistent global definitions go here
-include /etc/firejail/globals.local
-
-#This file is overwritten during software install.
-#Persistent customizations should go in a .local file.
+# Firejail profile for rambox
+# This file is overwritten after every install/update
+# Persistent local customizations
 include /etc/firejail/rambox.local
+# Persistent global definitions
+include /etc/firejail/globals.local
 
-# Rambox profile for firejail
 noblacklist ~/.config/Rambox
 noblacklist ~/.pki
+
 include /etc/firejail/disable-common.inc
-include /etc/firejail/disable-programs.inc
 include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-programs.inc
+
+mkdir ~/.config/Rambox
+mkdir ~/.pki
+whitelist ${DOWNLOADS}
+whitelist ~/.config/Rambox
+whitelist ~/.pki
+include /etc/firejail/whitelist-common.inc
 
 caps.drop all
 netfilter
@@ -19,13 +26,4 @@ nonewprivs
 noroot
 protocol unix,inet,inet6,netlink
 seccomp
-#tracelog
-
-whitelist ${DOWNLOADS}
-mkdir ~/.config/Rambox
-whitelist ~/.config/Rambox
-mkdir ~/.pki
-whitelist ~/.pki
-
-include /etc/firejail/whitelist-common.inc
-
+# tracelog