From 9e3ba319be6b9546d7e8f450ca419ee2f3f4040b Mon Sep 17 00:00:00 2001
From: Tad <tad@spotco.us>
Date: Mon, 7 Aug 2017 01:22:08 -0400
Subject: Unify all profiles

---
 etc/unknown-horizons.profile | 39 ++++++++++++++++-----------------------
 1 file changed, 16 insertions(+), 23 deletions(-)

(limited to 'etc/unknown-horizons.profile')

diff --git a/etc/unknown-horizons.profile b/etc/unknown-horizons.profile
index c4e535070..fc24fc04d 100644
--- a/etc/unknown-horizons.profile
+++ b/etc/unknown-horizons.profile
@@ -1,40 +1,33 @@
-# Persistent global definitions go here
+# Firejail profile for unknown-horizons
+# This file is overwritten after every install/update
+# Persistent local customizations
+include /etc/firejail/unknown-horizons.local
+# Persistent global definitions
 include /etc/firejail/globals.local
 
-# This file is overwritten during software install.
-# Persistent customizations should go in a .local file.
-include /etc/firejail/unknown-horizons.local
+noblacklist ~/.unknown-horizons
 
-################################
-# Extreme Tux Racer profile
-################################
+include /etc/firejail/disable-common.inc
+include /etc/firejail/disable-passwdmgr.inc
+include /etc/firejail/disable-programs.inc
 
-noblacklist ~/.unknown-horizons
 mkdir ~/.unknown-horizons
 whitelist ~/.unknown-horizons
 include /etc/firejail/whitelist-common.inc
 
-include /etc/firejail/disable-common.inc
-include /etc/firejail/disable-programs.inc
-include /etc/firejail/disable-passwdmgr.inc
-
 caps.drop all
+nogroups
 nonewprivs
 noroot
 protocol unix,netlink,inet,inet6
 seccomp
-
-#
-# depending on your usage, you can enable some of the commands below:
-#
-nogroups
 shell none
-#private-bin unknown-horizons
-# private-etc none
+
+# private-bin unknown-horizons
 private-dev
+# private-etc none
 private-tmp
-# nosound
-
-
-
 
+# CLOBBERED COMMENTS
+# depending on your usage, you can enable some of the commands below:
+# nosound
-- 
cgit v1.2.3-54-g00ecf