1 files changed, 15 insertions, 19 deletions

diff --git a/etc/chromium.profile b/etc/chromium.profile
index 8266770d7..cec5366d9 100644
--- a/etc/chromium.profile
+++ b/etc/chromium.profile
@@ -1,41 +1,37 @@
-# Persistent global definitions go here
-include /etc/firejail/globals.local
-
-# This file is overwritten during software install.
-# Persistent customizations should go in a .local file.
+# Firejail profile for chromium
+# This file is overwritten after every install/update
+# Persistent local customizations
 include /etc/firejail/chromium.local
+# Persistent global definitions
+include /etc/firejail/globals.local
 
-# Chromium browser profile
-noblacklist ~/.config/chromium
 noblacklist ~/.cache/chromium
-noblacklist ~/.pki
-# specific to Arch
+noblacklist ~/.config/chromium
 noblacklist ~/.config/chromium-flags.conf
+noblacklist ~/.pki
+
 include /etc/firejail/disable-common.inc
-include /etc/firejail/disable-programs.inc
 # chromium is distributed with a perl script on Arch
 # include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-programs.inc
 
-whitelist ${DOWNLOADS}
-mkdir ~/.config/chromium
-whitelist ~/.config/chromium
 mkdir ~/.cache/chromium
-whitelist ~/.cache/chromium
+mkdir ~/.config/chromium
 mkdir ~/.pki
-whitelist ~/.pki
+whitelist ${DOWNLOADS}
+whitelist ~/.cache/chromium
+whitelist ~/.config/chromium
 whitelist ~/.config/chromium-flags.conf
-
+whitelist ~/.pki
 include /etc/firejail/whitelist-common.inc
 
 caps.keep sys_chroot,sys_admin
-#ipc-namespace
 netfilter
 nogroups
 shell none
 
 private-dev
-#private-tmp - problems with multiple browser sessions
-#disable-mnt
+# private-tmp - problems with multiple browser sessions
 
 noexec ${HOME}
 noexec /tmp