1 files changed, 18 insertions, 22 deletions

diff --git a/etc/flashpeak-slimjet.profile b/etc/flashpeak-slimjet.profile
index b9bf493b6..be06dc460 100644
--- a/etc/flashpeak-slimjet.profile
+++ b/etc/flashpeak-slimjet.profile
@@ -1,26 +1,32 @@
-# Persistent global definitions go here
-include /etc/firejail/globals.local
-
-# This file is overwritten during software install.
-# Persistent customizations should go in a .local file.
+# Firejail profile for flashpeak-slimjet
+# This file is overwritten after every install/update
+# Persistent local customizations
 include /etc/firejail/flashpeak-slimjet.local
+# Persistent global definitions
+include /etc/firejail/globals.local
 
-# SlimJet browser profile
 # This is a whitelisted profile, the internal browser sandbox
 # is disabled because it requires sudo password. The command
 # to run it is as follows:
-#
 #  firejail flashpeak-slimjet --no-sandbox
-#
-noblacklist ~/.config/slimjet
+
 noblacklist ~/.cache/slimjet
+noblacklist ~/.config/slimjet
 noblacklist ~/.pki
-include /etc/firejail/disable-common.inc
-include /etc/firejail/disable-programs.inc
 
+include /etc/firejail/disable-common.inc
 # chromium is distributed with a perl script on Arch
 # include /etc/firejail/disable-devel.inc
-#
+include /etc/firejail/disable-programs.inc
+
+mkdir ~/.cache/slimjet
+mkdir ~/.config/slimjet
+mkdir ~/.pki
+whitelist ${DOWNLOADS}
+whitelist ~/.cache/slimjet
+whitelist ~/.config/slimjet
+whitelist ~/.pki
+include /etc/firejail/whitelist-common.inc
 
 caps.drop all
 netfilter
@@ -28,13 +34,3 @@ nonewprivs
 noroot
 protocol unix,inet,inet6,netlink
 seccomp
-
-whitelist ${DOWNLOADS}
-mkdir ~/.config/slimjet
-whitelist ~/.config/slimjet
-mkdir ~/.cache/slimjet
-whitelist ~/.cache/slimjet
-mkdir ~/.pki
-whitelist ~/.pki
-
-include /etc/firejail/whitelist-common.inc