Add --build comments to default.profile

[cameronj86]

The --build format is useful and teaches users above each option, especially highlighting important ones. The default profile would do well to include it:

Snippet of default.profile

# generic GUI profile
# depending on your usage, you can enable some of the commands below:

include disable-common.inc
#include disable-devel.inc
#include disable-exec.inc
#include disable-interpreters.inc
include disable-programs.inc
#include disable-shell.inc
#include disable-write-mnt.inc
#include disable-xdg.inc

#include whitelist-common.inc
#include whitelist-runuser-common.inc
#include whitelist-usr-share-common.inc
#include whitelist-var-common.inc

versus

Snippet of Build example

### Basic Blacklisting ###
### Enable as many of them as you can! A very important one is
### "disable-exec.inc". This will make among other things your home
### and /tmp directories non-executable.
include disable-common.inc      # dangerous directories like ~/.ssh and ~/.gnupg
#include disable-devel.inc      # development tools such as gcc and gdb
#include disable-exec.inc       # non-executable directories such as /var, /tmp, and /home
#include disable-interpreters.inc       # perl, python, lua etc.
include disable-programs.inc    # user configuration for programs such as firefox, vlc etc.
#include disable-shell.inc      # sh, bash, zsh etc.
#include disable-xdg.inc        # standard user directories: Documents, Pictures, Videos, Music

Manpages/wiki could then nudge users towards playing around w/ the default profile

[cameronj86]

Just realized that /usr/share/doc/firejail/profile.template is what should be used for new profiles. It has different-but-also-useful explanations of the firejail config as well