profile.template: update private-opt instructions

netblue30 · Sep 27, 2023 · b18677a · b18677a
1 parent bb7fc15
commit b18677a
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/etc/templates/profile.template b/etc/templates/profile.template
@@ -196,10 +196,14 @@ include globals.local
 #    Extra: gai.conf,proxychains.conf
 #  Qt: Trolltech.conf
 ##private-lib LIBS
-## private-opt breaks file-copy-limit, use a whitelist instead of draining RAM
+## private-opt can break file-copy-limit (500MB)
 ## https://github.com/netblue30/firejail/discussions/5307
+## for sizeable apps:
+## - never use 'private-opt NAME'
+## - place 'whitelist /opt/NAME' in the whitelist section above
+## for acceptable apps:
 ##private-opt NAME
-##whitelist /opt/NAME
+## - place 'whitelist /opt/NAME' in the whitelist section above
 #private-tmp
 ##writable-etc
 ##writable-run-user