1 files changed, 15 insertions, 17 deletions

diff --git a/etc/hexchat.profile b/etc/hexchat.profile
index 36ddb9e89..ceebb6d18 100644
--- a/etc/hexchat.profile
+++ b/etc/hexchat.profile
@@ -1,21 +1,23 @@
-# Persistent global definitions go here
-include /etc/firejail/globals.local
-
-# This file is overwritten during software install.
-# Persistent customizations should go in a .local file.
+# Firejail profile for hexchat
+# This file is overwritten after every install/update
+# Persistent local customizations
 include /etc/firejail/hexchat.local
+# Persistent global definitions
+include /etc/firejail/globals.local
 
-# HexChat instant messaging profile
-# Currently in testing (may not work for all users)
 noblacklist ${HOME}/.config/hexchat
-#noblacklist /usr/lib/python2*
-#noblacklist /usr/lib/python3*
+# noblacklist /usr/lib/python2*
+# noblacklist /usr/lib/python3*
+
 include /etc/firejail/disable-common.inc
-include /etc/firejail/disable-programs.inc
 include /etc/firejail/disable-devel.inc
+include /etc/firejail/disable-programs.inc
+
+mkdir ~/.config/hexchat
+whitelist ~/.config/hexchat
+include /etc/firejail/whitelist-common.inc
 
 caps.drop all
-#ipc-namespace
 netfilter
 no3d
 nogroups
@@ -28,15 +30,11 @@ seccomp
 shell none
 tracelog
 
-mkdir ~/.config/hexchat
-whitelist ~/.config/hexchat
-include /etc/firejail/whitelist-common.inc
-
+disable-mnt
+# debug note: private-bin requires perl, python, etc on some systems
 private-bin hexchat
-#debug note: private-bin requires perl, python, etc on some systems
 private-dev
 private-tmp
-disable-mnt
 
 noexec ${HOME}
 noexec /tmp