1 files changed, 5 insertions, 7 deletions

diff --git a/etc/Xephyr.profile b/etc/Xephyr.profile
index bce6dc6e6..5ef75022b 100644
--- a/etc/Xephyr.profile
+++ b/etc/Xephyr.profile
@@ -7,16 +7,13 @@ include globals.local
 
 #
 # This profile will sandbox Xephyr server itself when used with firejail --x11=xephyr.
-# To enable it, create a firejail-Xephyr  symlink in /usr/local/bin:
+# To enable it, create a firejail-Xephyr symlink in /usr/local/bin:
 #
 #    $ sudo ln -s /usr/bin/firejail /usr/local/bin/Xephyr
 #
 # or run "sudo firecfg"
 #
 
-
-blacklist /media
-
 whitelist /var/lib/xkb
 include whitelist-common.inc
 
@@ -34,10 +31,11 @@ protocol unix
 seccomp
 shell none
 
+disable-mnt
 # using a private home directory
 private
-# private-bin Xephyr,sh,xkbcomp
-# private-bin Xephyr,sh,xkbcomp,strace,bash,cat,ls
+# private-bin sh,Xephyr,xkbcomp
+# private-bin bash,cat,ls,sh,strace,Xephyr,xkbcomp
 private-dev
-# private-etc alternatives,ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname
+# private-etc alternatives,gai.conf,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,nsswitch.conf,resolv.conf
 #private-tmp