1 files changed, 9 insertions, 11 deletions

diff --git a/etc/nautilus.profile b/etc/nautilus.profile
index 4f2f50d9f..2da8f32d7 100644
--- a/etc/nautilus.profile
+++ b/etc/nautilus.profile
@@ -1,25 +1,22 @@
-# Persistent global definitions go here
-include /etc/firejail/globals.local
-
-# This file is overwritten during software install.
-# Persistent customizations should go in a .local file.
+# Firejail profile for nautilus
+# This file is overwritten after every install/update
+# Persistent local customizations
 include /etc/firejail/nautilus.local
-
-# nautilus profile
+# Persistent global definitions
+include /etc/firejail/globals.local
 
 # Nautilus is started by systemd on most systems. Therefore it is not firejailed by default. Since there
 # is already a nautilus process running on gnome desktops firejail will have no effect.
 
 noblacklist ~/.config/nautilus
+noblacklist ~/.local/share/Trash
 noblacklist ~/.local/share/nautilus
 noblacklist ~/.local/share/nautilus-python
-noblacklist ~/.local/share/Trash
 
 include /etc/firejail/disable-common.inc
-# nautilus needs to be able to start arbitrary applications so we cannot blacklist their files
-#include /etc/firejail/disable-programs.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
+# include /etc/firejail/disable-programs.inc
 
 caps.drop all
 netfilter
@@ -31,7 +28,8 @@ seccomp
 shell none
 tracelog
 
+# nautilus needs to be able to start arbitrary applications so we cannot blacklist their files
 # private-bin nautilus
-# private-tmp
 # private-dev
 # private-etc fonts
+# private-tmp