landlock: sort options in man pages

src/man/firejail-profile.5.in

@@ -514,27 +514,27 @@ Enforce the Landlock ruleset.
 .PP
 Without it, the other Landlock commands have no effect.
 .TP
-\fBlandlock.read path
-Create a Landlock ruleset (if it doesn't already exist) and add a read access
-rule for path.
+\fBlandlock.execute path
+Create a Landlock ruleset (if it doesn't already exist) and add an execution
+permission rule for path.
 .TP
-\fBlandlock.write path
-Create a Landlock ruleset (if it doesn't already exist) and add a write access
-rule for path.
+\fBlandlock.makedev path
+Create a Landlock ruleset (if it doesn't already exist) and add a rule that
+allows the creation of block devices and character devices beneath the given
+path.
 .TP
 \fBlandlock.makeipc path
 Create a Landlock ruleset (if it doesn't already exist) and add a rule that
 allows the creation of named pipes (FIFOs) and Unix domain sockets beneath
 the given path.
 .TP
-\fBlandlock.makedev path
-Create a Landlock ruleset (if it doesn't already exist) and add a rule that
-allows the creation of block devices and character devices beneath the given
-path.
+\fBlandlock.read path
+Create a Landlock ruleset (if it doesn't already exist) and add a read access
+rule for path.
 .TP
-\fBlandlock.execute path
-Create a Landlock ruleset (if it doesn't already exist) and add an execution
-permission rule for path.
+\fBlandlock.write path
+Create a Landlock ruleset (if it doesn't already exist) and add a write access
+rule for path.
 #endif
 .TP
 \fBmemory-deny-write-execute

src/man/firejail.1.in

@@ -1241,24 +1241,6 @@ Enforce the Landlock ruleset.
 Without it, the other Landlock commands have no effect.
 See the \fBLANDLOCK\fR section for more information.
 .TP
-\fB\-\-landlock.read=path
-Create a Landlock ruleset (if it doesn't already exist) and add a read access
-rule for path.
-.TP
-\fB\-\-landlock.write=path
-Create a Landlock ruleset (if it doesn't already exist) and add a write access
-rule for path.
-.TP
-\fB\-\-landlock.makeipc=path
-Create a Landlock ruleset (if it doesn't already exist) and add a rule that
-allows the creation of named pipes (FIFOs) and Unix domain sockets beneath
-the given path.
-.TP
-\fB\-\-landlock.makedev=path
-Create a Landlock ruleset (if it doesn't already exist) and add a rule that
-allows the creation of block devices and character devices beneath the given
-path.
-.TP
 \fB\-\-landlock.execute=path
 Create a Landlock ruleset (if it doesn't already exist) and add an execution
 permission rule for path.
@@ -1270,6 +1252,24 @@ Example:
 $ firejail \-\-landlock.read=/ \-\-landlock.write=/home
 \-\-landlock.execute=/usr \-\-landlock.enforce
 .PP
+.TP
+\fB\-\-landlock.makedev=path
+Create a Landlock ruleset (if it doesn't already exist) and add a rule that
+allows the creation of block devices and character devices beneath the given
+path.
+.TP
+\fB\-\-landlock.makeipc=path
+Create a Landlock ruleset (if it doesn't already exist) and add a rule that
+allows the creation of named pipes (FIFOs) and Unix domain sockets beneath
+the given path.
+.TP
+\fB\-\-landlock.read=path
+Create a Landlock ruleset (if it doesn't already exist) and add a read access
+rule for path.
+.TP
+\fB\-\-landlock.write=path
+Create a Landlock ruleset (if it doesn't already exist) and add a write access
+rule for path.
 #endif
 .TP
 \fB\-\-list