1 files changed, 11 insertions, 17 deletions

diff --git a/etc/wireshark.profile b/etc/wireshark.profile
index d5f3b8c4b..8a25ec011 100644
--- a/etc/wireshark.profile
+++ b/etc/wireshark.profile
@@ -1,38 +1,32 @@
-# Persistent global definitions go here
-include /etc/firejail/globals.local
-
-# This file is overwritten during software install.
-# Persistent customizations should go in a .local file.
+# Firejail profile for wireshark
+# This file is overwritten after every install/update
+# Persistent local customizations
 include /etc/firejail/wireshark.local
+# Persistent global definitions
+include /etc/firejail/globals.local
 
-# Firejail profile for
 noblacklist ${HOME}/.config/wireshark
 
 include /etc/firejail/disable-common.inc
-include /etc/firejail/disable-programs.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
+include /etc/firejail/disable-programs.inc
 
-#
-# The profile allows users to run wireshark as root
-#
-#caps.drop all
-#noroot
-#protocol unix,inet,inet6,netlink
-
-#ipc-namespace
+# caps.drop all
 netfilter
 no3d
 # nogroups - breaks unprivileged wireshark usage
 # nonewprivs - breaks unprivileged wireshark usage
+# noroot
 nosound
+# protocol unix,inet,inet6,netlink
 # seccomp - breaks unprivileged wireshark usage
 shell none
 tracelog
 
-#private-bin wireshark
-# private-etc fonts,group,hosts,machine-id,passwd
+# private-bin wireshark
 private-dev
+# private-etc fonts,group,hosts,machine-id,passwd
 private-tmp
 
 noexec ${HOME}