Unify last 8 profiles

1 files changed, 21 insertions, 9 deletions

diff --git a/etc/server.profile b/etc/server.profile
index 2d79fa1c8..b0dd13f80 100644
--- a/etc/server.profile
+++ b/etc/server.profile
@@ -1,25 +1,37 @@
-# Persistent global definitions go here
-include /etc/firejail/globals.local
-
-# This file is overwritten during software install.
-# Persistent customizations should go in a .local file.
+# Firejail profile for server
+# This file is overwritten after every install/update
+# Persistent local customizations
 include /etc/firejail/server.local
+# Persistent global definitions
+include /etc/firejail/globals.local
 
 # generic server profile
 # it allows /sbin and /usr/sbin directories - this is where servers are installed
+# depending on your usage, you can enable some of the commands below:
+
+blacklist /tmp/.X11-unix
+
 noblacklist /sbin
 noblacklist /usr/sbin
+
 include /etc/firejail/disable-common.inc
-include /etc/firejail/disable-programs.inc
+# include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
+include /etc/firejail/disable-programs.inc
 
-blacklist /tmp/.X11-unix
-
+caps
 no3d
 nosound
 seccomp
-caps
 
+# disable-mnt
 private
+# private-bin program
 private-dev
+# private-etc none
+# private-lib
 private-tmp
+
+# memory-deny-write-execute
+# noexec ${HOME}
+# noexec /tmp