From 9e3ba319be6b9546d7e8f450ca419ee2f3f4040b Mon Sep 17 00:00:00 2001
From: Tad <tad@spotco.us>
Date: Mon, 7 Aug 2017 01:22:08 -0400
Subject: Unify all profiles

---
 etc/gnome-weather.profile | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

(limited to 'etc/gnome-weather.profile')

diff --git a/etc/gnome-weather.profile b/etc/gnome-weather.profile
index 815fba7ca..77538ad6e 100644
--- a/etc/gnome-weather.profile
+++ b/etc/gnome-weather.profile
@@ -1,21 +1,19 @@
-# Persistent global definitions go here
-include /etc/firejail/globals.local
-
-# This file is overwritten during software install.
-# Persistent customizations should go in a .local file.
+# Firejail profile for gnome-weather
+# This file is overwritten after every install/update
+# Persistent local customizations
 include /etc/firejail/gnome-weather.local
+# Persistent global definitions
+include /etc/firejail/globals.local
 
-# gnome-weather profile
-
-# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
 noblacklist ~/.cache/libgweather
 
 include /etc/firejail/disable-common.inc
-include /etc/firejail/disable-programs.inc
 include /etc/firejail/disable-devel.inc
 include /etc/firejail/disable-passwdmgr.inc
+include /etc/firejail/disable-programs.inc
 
 caps.drop all
+netfilter
 no3d
 nogroups
 nonewprivs
@@ -24,15 +22,17 @@ nosound
 novideo
 protocol unix,inet,inet6
 seccomp
-netfilter
 shell none
 tracelog
 
+disable-mnt
 # private-bin gjs gnome-weather
-private-tmp
 private-dev
 # private-etc fonts
-disable-mnt
+private-tmp
 
 noexec ${HOME}
 noexec /tmp
+
+# CLOBBERED COMMENTS
+# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
-- 
cgit v1.2.3-70-g09d2