aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLibravatar Fred-Barclay <Fred-Barclay@users.noreply.github.com>2017-08-08 15:47:22 -0500
committerLibravatar Fred-Barclay <Fred-Barclay@users.noreply.github.com>2017-08-08 15:47:22 -0500
commit1370979c25877ff9998f32d8aa457a95f27258f5 (patch)
tree741098bdd15c728336b6eedaaae642eee1965a51
parentvarious little profile fixes and enhancements (#1442) (diff)
downloadfirejail-1370979c25877ff9998f32d8aa457a95f27258f5.tar.gz
firejail-1370979c25877ff9998f32d8aa457a95f27258f5.tar.zst
firejail-1370979c25877ff9998f32d8aa457a95f27258f5.zip
Sorting
-rw-r--r--etc/disable-common.inc270
-rw-r--r--etc/disable-devel.inc34
-rw-r--r--etc/disable-passwdmgr.inc6
-rw-r--r--etc/disable-programs.inc68
4 files changed, 189 insertions, 189 deletions
diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index f23a03876..103399f7d 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -3,102 +3,102 @@
3include /etc/firejail/disable-common.local 3include /etc/firejail/disable-common.local
4 4
5# History files in $HOME 5# History files in $HOME
6blacklist-nolog ${HOME}/.history
7blacklist-nolog ${HOME}/.*_history 6blacklist-nolog ${HOME}/.*_history
7blacklist-nolog ${HOME}/.adobe
8blacklist-nolog ${HOME}/.bash_history 8blacklist-nolog ${HOME}/.bash_history
9blacklist-nolog ${HOME}/.history
9blacklist-nolog ${HOME}/.local/share/fish/fish_history 10blacklist-nolog ${HOME}/.local/share/fish/fish_history
10blacklist-nolog ${HOME}/.adobe
11blacklist-nolog ${HOME}/.macromedia 11blacklist-nolog ${HOME}/.macromedia
12 12
13# X11 session autostart 13# X11 session autostart
14blacklist ${HOME}/.xinitrc 14# blacklist ${HOME}/.xpra - this will kill --x11=xpra cmdline option for all programs
15blacklist ${HOME}/.xserverrc
16blacklist /etc/X11/Xsession.d
17blacklist ${HOME}/.Xsession 15blacklist ${HOME}/.Xsession
18blacklist ${HOME}/.xsession
19blacklist ${HOME}/.xsessionrc
20blacklist ${HOME}/.xprofile
21blacklist ${HOME}/.gnomerc
22blacklist /etc/xdg/autostart
23blacklist ${HOME}/.config/autostart 16blacklist ${HOME}/.config/autostart
24blacklist ${HOME}/.local/share/autostart
25blacklist ${HOME}/.kde4/share/config/startupconfig
26blacklist ${HOME}/.kde4/env
27blacklist ${HOME}/.kde4/Autostart
28blacklist ${HOME}/.kde4/share/autostart
29blacklist ${HOME}/.kde4/shutdown
30blacklist ${HOME}/.kde/share/config/startupconfig
31blacklist ${HOME}/.kde/env
32blacklist ${HOME}/.kde/Autostart
33blacklist ${HOME}/.kde/share/autostart
34blacklist ${HOME}/.kde/shutdown
35blacklist ${HOME}/.config/startupconfig
36blacklist ${HOME}/.config/autostart-scripts 17blacklist ${HOME}/.config/autostart-scripts
37blacklist ${HOME}/.config/plasma-workspace/env
38blacklist ${HOME}/.config/plasma-workspace/shutdown
39blacklist ${HOME}/.config/lxsession/LXDE/autostart 18blacklist ${HOME}/.config/lxsession/LXDE/autostart
40blacklist ${HOME}/.config/openbox/autostart 19blacklist ${HOME}/.config/openbox/autostart
41blacklist ${HOME}/.config/openbox/environment 20blacklist ${HOME}/.config/openbox/environment
21blacklist ${HOME}/.config/plasma-workspace/env
22blacklist ${HOME}/.config/plasma-workspace/shutdown
23blacklist ${HOME}/.config/startupconfig
42blacklist ${HOME}/.fluxbox/startup 24blacklist ${HOME}/.fluxbox/startup
43# blacklist ${HOME}/.xpra - this will kill --x11=xpra cmdline option for all programs 25blacklist ${HOME}/.gnomerc
26blacklist ${HOME}/.kde/Autostart
27blacklist ${HOME}/.kde/env
28blacklist ${HOME}/.kde/share/autostart
29blacklist ${HOME}/.kde/share/config/startupconfig
30blacklist ${HOME}/.kde/shutdown
31blacklist ${HOME}/.kde4/env
32blacklist ${HOME}/.kde4/Autostart
33blacklist ${HOME}/.kde4/share/autostart
34blacklist ${HOME}/.kde4/shutdown
35blacklist ${HOME}/.kde4/share/config/startupconfig
36blacklist ${HOME}/.local/share/autostart
37blacklist ${HOME}/.xinitrc
38blacklist ${HOME}/.xprofile
39blacklist ${HOME}/.xserverrc
40blacklist ${HOME}/.xsession
41blacklist ${HOME}/.xsessionrc
42blacklist /etc/X11/Xsession.d
43blacklist /etc/xdg/autostart
44 44
45# KDE config 45# KDE config
46blacklist ${HOME}/.kde4/share/apps/konsole 46blacklist ${HOME}/.config/*.notifyrc
47blacklist ${HOME}/.kde4/share/apps/kwin 47blacklist ${HOME}/.config/khotkeysrc
48blacklist ${HOME}/.kde4/share/apps/plasma 48blacklist ${HOME}/.config/krunnerrc
49blacklist ${HOME}/.kde4/share/apps/solid 49blacklist ${HOME}/.config/plasma-org.kde.plasma.desktop-appletsrc
50blacklist ${HOME}/.kde4/share/config/*.notifyrc
51read-only ${HOME}/.kde4/share/config/kdeglobals
52blacklist ${HOME}/.kde4/share/config/khotkeysrc
53blacklist ${HOME}/.kde4/share/config/krunnerrc
54blacklist ${HOME}/.kde4/share/config/plasma-desktop-appletsrc
55read-only ${HOME}/.kde4/share/kde4/services
56blacklist ${HOME}/.kde/share/apps/konsole 50blacklist ${HOME}/.kde/share/apps/konsole
57blacklist ${HOME}/.kde/share/apps/kwin 51blacklist ${HOME}/.kde/share/apps/kwin
58blacklist ${HOME}/.kde/share/apps/plasma 52blacklist ${HOME}/.kde/share/apps/plasma
59blacklist ${HOME}/.kde/share/apps/solid 53blacklist ${HOME}/.kde/share/apps/solid
60blacklist ${HOME}/.kde/share/config/*.notifyrc 54blacklist ${HOME}/.kde/share/config/*.notifyrc
61read-only ${HOME}/.kde/share/config/kdeglobals
62blacklist ${HOME}/.kde/share/config/khotkeysrc 55blacklist ${HOME}/.kde/share/config/khotkeysrc
63blacklist ${HOME}/.kde/share/config/krunnerrc 56blacklist ${HOME}/.kde/share/config/krunnerrc
64blacklist ${HOME}/.kde/share/config/plasma-desktop-appletsrc 57blacklist ${HOME}/.kde/share/config/plasma-desktop-appletsrc
65read-only ${HOME}/.kde/share/kde4/services 58blacklist ${HOME}/.kde4/share/apps/plasma
66blacklist ${HOME}/.config/*.notifyrc 59blacklist ${HOME}/.kde4/share/apps/konsole
67read-only ${HOME}/.config/kdeglobals 60blacklist ${HOME}/.kde4/share/apps/kwin
68blacklist ${HOME}/.config/khotkeysrc 61blacklist ${HOME}/.kde4/share/config/krunnerrc
69blacklist ${HOME}/.config/krunnerrc 62blacklist ${HOME}/.kde4/share/config/plasma-desktop-appletsrc
70blacklist ${HOME}/.config/plasma-org.kde.plasma.desktop-appletsrc 63blacklist ${HOME}/.kde4/share/config/khotkeysrc
64blacklist ${HOME}/.kde4/share/apps/solid
65blacklist ${HOME}/.kde4/share/config/*.notifyrc
71blacklist ${HOME}/.local/share/kglobalaccel 66blacklist ${HOME}/.local/share/kglobalaccel
72blacklist ${HOME}/.local/share/konsole 67blacklist ${HOME}/.local/share/konsole
73read-only ${HOME}/.local/share/kservices5
74blacklist ${HOME}/.local/share/kwin 68blacklist ${HOME}/.local/share/kwin
75blacklist ${HOME}/.local/share/plasma 69blacklist ${HOME}/.local/share/plasma
76blacklist ${HOME}/.local/share/solid 70blacklist ${HOME}/.local/share/solid
71read-only ${HOME}/.config/kdeglobals
72read-only ${HOME}/.kde/share/config/kdeglobals
73read-only ${HOME}/.kde/share/kde4/services
74read-only ${HOME}/.kde4/share/kde4/services
75read-only ${HOME}/.kde4/share/config/kdeglobals
76read-only ${HOME}/.local/share/kservices5
77 77
78# systemd 78# systemd
79blacklist ${HOME}/.local/share/systemd
80blacklist ${HOME}/.config/systemd 79blacklist ${HOME}/.config/systemd
80blacklist ${HOME}/.local/share/systemd
81 81
82# VirtualBox 82# VirtualBox
83blacklist ${HOME}/.VirtualBox 83blacklist ${HOME}/.VirtualBox
84blacklist ${HOME}/VirtualBox VMs
85blacklist ${HOME}/.config/VirtualBox 84blacklist ${HOME}/.config/VirtualBox
85blacklist ${HOME}/VirtualBox VMs
86 86
87# VeraCrypt 87# VeraCrypt
88blacklist ${HOME}/.VeraCrypt
88blacklist ${PATH}/veracrypt 89blacklist ${PATH}/veracrypt
89blacklist ${PATH}/veracrypt-uninstall.sh 90blacklist ${PATH}/veracrypt-uninstall.sh
90blacklist /usr/share/veracrypt
91blacklist /usr/share/applications/veracrypt.* 91blacklist /usr/share/applications/veracrypt.*
92blacklist /usr/share/pixmaps/veracrypt.* 92blacklist /usr/share/pixmaps/veracrypt.*
93blacklist ${HOME}/.VeraCrypt 93blacklist /usr/share/veracrypt
94 94
95# TrueCrypt 95# TrueCrypt
96blacklist ${HOME}/.TrueCrypt
96blacklist ${PATH}/truecrypt 97blacklist ${PATH}/truecrypt
97blacklist ${PATH}/truecrypt-uninstall.sh 98blacklist ${PATH}/truecrypt-uninstall.sh
98blacklist /usr/share/truecrypt
99blacklist /usr/share/applications/truecrypt.* 99blacklist /usr/share/applications/truecrypt.*
100blacklist /usr/share/pixmaps/truecrypt.* 100blacklist /usr/share/pixmaps/truecrypt.*
101blacklist ${HOME}/.TrueCrypt 101blacklist /usr/share/truecrypt
102 102
103# zuluCrypt 103# zuluCrypt
104blacklist ${HOME}/.zuluCrypt 104blacklist ${HOME}/.zuluCrypt
@@ -107,162 +107,162 @@ blacklist ${PATH}/zuluCrypt-cli
107blacklist ${PATH}/zuluMount-cli 107blacklist ${PATH}/zuluMount-cli
108 108
109# var 109# var
110blacklist /var/spool/cron 110blacklist /var/lib/mysql/mysql.sock
111blacklist /var/spool/anacron 111blacklist /var/lib/mysqld/mysql.sock
112blacklist /var/mail 112blacklist /var/mail
113blacklist /var/run/acpid.socket 113blacklist /var/run/acpid.socket
114blacklist /var/run/docker.sock
114blacklist /var/run/minissdpd.sock 115blacklist /var/run/minissdpd.sock
115blacklist /var/run/rpcbind.sock
116blacklist /var/run/mysqld/mysqld.sock
117blacklist /var/run/mysql/mysqld.sock 116blacklist /var/run/mysql/mysqld.sock
118blacklist /var/lib/mysqld/mysql.sock 117blacklist /var/run/mysqld/mysqld.sock
119blacklist /var/lib/mysql/mysql.sock 118blacklist /var/run/rpcbind.sock
120blacklist /var/run/docker.sock 119blacklist /var/spool/anacron
120blacklist /var/spool/cron
121 121
122# etc 122# etc
123blacklist /etc/anacrontab
123blacklist /etc/cron* 124blacklist /etc/cron*
124blacklist /etc/profile.d 125blacklist /etc/profile.d
125blacklist /etc/rc.local 126blacklist /etc/rc.local
126blacklist /etc/anacrontab
127 127
128# Startup files 128# Startup files
129read-only ${HOME}/.antigen 129read-only ${HOME}/.antigen
130read-only ${HOME}/.bash_login
131read-only ${HOME}/.bashrc
132read-only ${HOME}/.bash_aliases 130read-only ${HOME}/.bash_aliases
133read-only ${HOME}/.bash_profile 131read-only ${HOME}/.bash_login
134read-only ${HOME}/.bash_logout 132read-only ${HOME}/.bash_logout
135read-only ${HOME}/.zsh.d 133read-only ${HOME}/.bash_profile
136read-only ${HOME}/.zshenv 134read-only ${HOME}/.bashrc
137read-only ${HOME}/.zshrc
138read-only ${HOME}/.zshrc.local
139read-only ${HOME}/.zlogin
140read-only ${HOME}/.zprofile
141read-only ${HOME}/.zlogout
142read-only ${HOME}/.zsh_files
143read-only ${HOME}/.tcshrc
144read-only ${HOME}/.cshrc
145read-only ${HOME}/.csh_files
146read-only ${HOME}/.config/fish 135read-only ${HOME}/.config/fish
147read-only ${HOME}/.local/share/fish 136read-only ${HOME}/.csh_files
148read-only ${HOME}/.profile 137read-only ${HOME}/.cshrc
149read-only ${HOME}/.forward 138read-only ${HOME}/.forward
139read-only ${HOME}/.local/share/fish
150read-only ${HOME}/.login 140read-only ${HOME}/.login
151read-only ${HOME}/.logout 141read-only ${HOME}/.logout
142read-only ${HOME}/.pam_environment
152read-only ${HOME}/.pgpkey 143read-only ${HOME}/.pgpkey
153read-only ${HOME}/.plan 144read-only ${HOME}/.plan
145read-only ${HOME}/.profile
154read-only ${HOME}/.project 146read-only ${HOME}/.project
155read-only ${HOME}/.pam_environment 147read-only ${HOME}/.tcshrc
148read-only ${HOME}/.zlogin
149read-only ${HOME}/.zlogout
150read-only ${HOME}/.zprofile
151read-only ${HOME}/.zsh.d
152read-only ${HOME}/.zsh_files
153read-only ${HOME}/.zshenv
154read-only ${HOME}/.zshrc
155read-only ${HOME}/.zshrc.local
156 156
157# Initialization files that allow arbitrary command execution 157# Initialization files that allow arbitrary command execution
158read-only ${HOME}/.caffrc 158read-only ${HOME}/.caffrc
159read-only ${HOME}/.dotfiles 159read-only ${HOME}/.dotfiles
160read-only ${HOME}/dotfiles
161read-only ${HOME}/.mailcap
162read-only ${HOME}/.muttrc
163read-only ${HOME}/.mutt/muttrc
164read-only ${HOME}/.msmtprc
165read-only ${HOME}/.exrc
166read-only ${HOME}/_exrc
167read-only ${HOME}/.vimrc
168read-only ${HOME}/_vimrc
169read-only ${HOME}/.gvimrc
170read-only ${HOME}/_gvimrc
171read-only ${HOME}/.vim
172read-only ${HOME}/.emacs 160read-only ${HOME}/.emacs
173read-only ${HOME}/.emacs.d 161read-only ${HOME}/.emacs.d
174read-only ${HOME}/.nano 162read-only ${HOME}/.exrc
175read-only ${HOME}/.tmux.conf 163read-only ${HOME}/.gvimrc
176read-only ${HOME}/.iscreenrc 164read-only ${HOME}/.iscreenrc
165read-only ${HOME}/.mailcap
166read-only ${HOME}/.msmtprc
167read-only ${HOME}/.mutt/muttrc
168read-only ${HOME}/.muttrc
169read-only ${HOME}/.nano
177read-only ${HOME}/.reportbugrc 170read-only ${HOME}/.reportbugrc
171read-only ${HOME}/.tmux.conf
172read-only ${HOME}/.vim
173read-only ${HOME}/.vimrc
178read-only ${HOME}/.xmonad 174read-only ${HOME}/.xmonad
179read-only ${HOME}/.xscreensaver 175read-only ${HOME}/.xscreensaver
176read-only ${HOME}/_exrc
177read-only ${HOME}/_gvimrc
178read-only ${HOME}/_vimrc
179read-only ${HOME}/dotfiles
180 180
181# Make directories commonly found in $PATH read-only 181# Make directories commonly found in $PATH read-only
182read-only ${HOME}/bin
183read-only ${HOME}/.gem 182read-only ${HOME}/.gem
184read-only ${HOME}/.luarocks 183read-only ${HOME}/.luarocks
185read-only ${HOME}/.npm-packages 184read-only ${HOME}/.npm-packages
185read-only ${HOME}/bin
186 186
187# The following block breaks trash functionality in file managers 187# The following block breaks trash functionality in file managers
188#noexec ${HOME}/.local/share
188#read-only ${HOME}/.local 189#read-only ${HOME}/.local
189#read-write ${HOME}/.local/share 190#read-write ${HOME}/.local/share
190#noexec ${HOME}/.local/share
191blacklist ${HOME}/.local/share/Trash 191blacklist ${HOME}/.local/share/Trash
192 192
193# Write-protection for desktop entries 193# Write-protection for desktop entries
194read-only ${HOME}/.local/share/applications 194read-only ${HOME}/.local/share/applications
195 195
196# top secret 196# top secret
197blacklist ${HOME}/.ecryptfs 197blacklist ${HOME}/*.kdb
198blacklist ${HOME}/*.kdbx
199blacklist ${HOME}/*.key
198blacklist ${HOME}/.Private 200blacklist ${HOME}/.Private
199blacklist ${HOME}/.ssh 201blacklist ${HOME}/.caff
200blacklist ${HOME}/.cert 202blacklist ${HOME}/.cert
203blacklist ${HOME}/.config/keybase
204blacklist ${HOME}/.ecryptfs
201blacklist ${HOME}/.gnome2/keyrings 205blacklist ${HOME}/.gnome2/keyrings
202blacklist ${HOME}/.local/share/keyrings 206blacklist ${HOME}/.gnupg
203blacklist ${HOME}/.kde4/share/apps/kwallet
204blacklist ${HOME}/.kde/share/apps/kwallet 207blacklist ${HOME}/.kde/share/apps/kwallet
208blacklist ${HOME}/.kde4/share/apps/kwallet
209blacklist ${HOME}/.local/share/keyrings
205blacklist ${HOME}/.local/share/kwalletd 210blacklist ${HOME}/.local/share/kwalletd
206blacklist ${HOME}/.config/keybase
207blacklist ${HOME}/.netrc
208blacklist ${HOME}/.gnupg
209blacklist ${HOME}/.caff
210blacklist ${HOME}/.smbcredentials
211blacklist ${HOME}/*.kdbx
212blacklist ${HOME}/*.kdb
213blacklist ${HOME}/*.key
214blacklist ${HOME}/.muttrc
215blacklist ${HOME}/.mutt/muttrc
216blacklist ${HOME}/.msmtprc 211blacklist ${HOME}/.msmtprc
212blacklist ${HOME}/.mutt/muttrc
213blacklist ${HOME}/.muttrc
214blacklist ${HOME}/.netrc
217blacklist ${HOME}/.pki 215blacklist ${HOME}/.pki
218blacklist /etc/shadow 216blacklist ${HOME}/.smbcredentials
219blacklist /etc/gshadow 217blacklist ${HOME}/.ssh
220blacklist /etc/passwd- 218blacklist /etc/group+
221blacklist /etc/group- 219blacklist /etc/group-
222blacklist /etc/shadow- 220blacklist /etc/gshadow
221blacklist /etc/gshadow+
223blacklist /etc/gshadow- 222blacklist /etc/gshadow-
224blacklist /etc/passwd+ 223blacklist /etc/passwd+
225blacklist /etc/group+ 224blacklist /etc/passwd-
225blacklist /etc/shadow
226blacklist /etc/shadow+ 226blacklist /etc/shadow+
227blacklist /etc/gshadow+ 227blacklist /etc/shadow-
228blacklist /etc/ssh 228blacklist /etc/ssh
229blacklist /var/backup
230blacklist /home/.ecryptfs 229blacklist /home/.ecryptfs
230blacklist /var/backup
231 231
232# system directories 232# system directories
233blacklist /sbin 233blacklist /sbin
234blacklist /usr/sbin
235blacklist /usr/local/sbin 234blacklist /usr/local/sbin
235blacklist /usr/sbin
236 236
237# system management 237# system management
238blacklist ${PATH}/umount
239blacklist ${PATH}/mount
240blacklist ${PATH}/fusermount
241blacklist ${PATH}/ntfs-3g
242blacklist ${PATH}/at 238blacklist ${PATH}/at
243blacklist ${PATH}/su 239blacklist ${PATH}/chage
244blacklist ${PATH}/sudo 240blacklist ${PATH}/chfn
245blacklist ${PATH}/xinput 241blacklist ${PATH}/chsh
242blacklist ${PATH}/crontab
246blacklist ${PATH}/evtest 243blacklist ${PATH}/evtest
247blacklist ${PATH}/xev 244blacklist ${PATH}/expiry
248blacklist ${PATH}/strace 245blacklist ${PATH}/fusermount
246blacklist ${PATH}/gpasswd
247blacklist ${PATH}/ksu
248blacklist ${PATH}/mount
249blacklist ${PATH}/mount.ecryptfs_private
249blacklist ${PATH}/nc 250blacklist ${PATH}/nc
250blacklist ${PATH}/ncat 251blacklist ${PATH}/ncat
251blacklist ${PATH}/gpasswd
252blacklist ${PATH}/newgidmap 252blacklist ${PATH}/newgidmap
253blacklist ${PATH}/newgrp 253blacklist ${PATH}/newgrp
254blacklist ${PATH}/newuidmap 254blacklist ${PATH}/newuidmap
255blacklist ${PATH}/ntfs-3g
255blacklist ${PATH}/pkexec 256blacklist ${PATH}/pkexec
257blacklist ${PATH}/procmail
256blacklist ${PATH}/sg 258blacklist ${PATH}/sg
257blacklist ${PATH}/crontab 259blacklist ${PATH}/strace
258blacklist ${PATH}/ksu 260blacklist ${PATH}/su
259blacklist ${PATH}/chsh 261blacklist ${PATH}/sudo
260blacklist ${PATH}/chfn 262blacklist ${PATH}/umount
261blacklist ${PATH}/chage
262blacklist ${PATH}/expiry
263blacklist ${PATH}/unix_chkpwd 263blacklist ${PATH}/unix_chkpwd
264blacklist ${PATH}/procmail 264blacklist ${PATH}/xev
265blacklist ${PATH}/mount.ecryptfs_private 265blacklist ${PATH}/xinput
266 266
267# other SUID binaries 267# other SUID binaries
268blacklist /usr/lib/virtualbox 268blacklist /usr/lib/virtualbox
@@ -276,11 +276,9 @@ blacklist /tmp/tmux-*
276# disable terminals running as server resulting in sandbox escape 276# disable terminals running as server resulting in sandbox escape
277blacklist ${PATH}/gnome-terminal 277blacklist ${PATH}/gnome-terminal
278blacklist ${PATH}/gnome-terminal.wrapper 278blacklist ${PATH}/gnome-terminal.wrapper
279blacklist ${PATH}/xfce4-terminal 279blacklist ${PATH}/lilyterm
280blacklist ${PATH}/xfce4-terminal.wrapper
281blacklist ${PATH}/mate-terminal 280blacklist ${PATH}/mate-terminal
282blacklist ${PATH}/mate-terminal.wrapper 281blacklist ${PATH}/mate-terminal.wrapper
283blacklist ${PATH}/lilyterm
284blacklist ${PATH}/pantheon-terminal 282blacklist ${PATH}/pantheon-terminal
285blacklist ${PATH}/roxterm 283blacklist ${PATH}/roxterm
286blacklist ${PATH}/roxterm-config 284blacklist ${PATH}/roxterm-config
@@ -288,12 +286,14 @@ blacklist ${PATH}/terminix
288blacklist ${PATH}/tilix 286blacklist ${PATH}/tilix
289blacklist ${PATH}/urxvtc 287blacklist ${PATH}/urxvtc
290blacklist ${PATH}/urxvtcd 288blacklist ${PATH}/urxvtcd
291# konsole doesn't seem to have this problem - last tested on Ubuntu 16.04 289blacklist ${PATH}/xfce4-terminal
290blacklist ${PATH}/xfce4-terminal.wrapper
292# blacklist ${PATH}/konsole 291# blacklist ${PATH}/konsole
292# konsole doesn't seem to have this problem - last tested on Ubuntu 16.04
293 293
294# kernel files 294# kernel files
295blacklist /vmlinuz*
296blacklist /initrd* 295blacklist /initrd*
296blacklist /vmlinuz*
297 297
298# complement noexec ${HOME} and noexec /tmp 298# complement noexec ${HOME} and noexec /tmp
299noexec ${HOME}/.config/pulse 299noexec ${HOME}/.config/pulse
diff --git a/etc/disable-devel.inc b/etc/disable-devel.inc
index a546847f7..9ff58ae2a 100644
--- a/etc/disable-devel.inc
+++ b/etc/disable-devel.inc
@@ -1,30 +1,30 @@
1# This file is overwritten during software install. 1# This file is overwritten during software install.
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include /etc/firejail/disable-devel.local 3include /etc/firejail/disable-devel.local
4 4
5# development tools 5# development tools
6 6
7# GCC 7# GCC
8blacklist /usr/include
9#blacklist /usr/lib/gcc - seems to create problems on Gentoo 8#blacklist /usr/lib/gcc - seems to create problems on Gentoo
10blacklist /usr/bin/gcc*
11blacklist /usr/bin/cpp*
12blacklist /usr/bin/c9*
13blacklist /usr/bin/c8*
14blacklist /usr/bin/c++*
15blacklist /usr/bin/as 9blacklist /usr/bin/as
16blacklist /usr/bin/ld 10blacklist /usr/bin/c++*
17blacklist /usr/bin/gdb 11blacklist /usr/bin/c8*
12blacklist /usr/bin/c9*
13blacklist /usr/bin/cpp*
18blacklist /usr/bin/g++* 14blacklist /usr/bin/g++*
15blacklist /usr/bin/gcc*
16blacklist /usr/bin/gdb
17blacklist /usr/bin/ld
18blacklist /usr/bin/x86_64-unknown-linux-gnu-gcc*
19blacklist /usr/bin/x86_64-linux-gnu-g++* 19blacklist /usr/bin/x86_64-linux-gnu-g++*
20blacklist /usr/bin/x86_64-linux-gnu-gcc* 20blacklist /usr/bin/x86_64-linux-gnu-gcc*
21blacklist /usr/bin/x86_64-unknown-linux-gnu-g++* 21blacklist /usr/bin/x86_64-unknown-linux-gnu-g++*
22blacklist /usr/bin/x86_64-unknown-linux-gnu-gcc* 22blacklist /usr/include
23 23
24# clang/llvm 24# clang/llvm
25blacklist /usr/bin/clang* 25blacklist /usr/bin/clang*
26blacklist /usr/bin/llvm*
27blacklist /usr/bin/lldb* 26blacklist /usr/bin/lldb*
27blacklist /usr/bin/llvm*
28blacklist /usr/lib/llvm* 28blacklist /usr/lib/llvm*
29 29
30# tcc - Tiny C Compiler 30# tcc - Tiny C Compiler
@@ -37,15 +37,15 @@ blacklist /usr/bin/valgrind*
37blacklist /usr/lib/valgrind 37blacklist /usr/lib/valgrind
38 38
39# Perl 39# Perl
40blacklist /usr/bin/perl
41blacklist /usr/bin/cpan* 40blacklist /usr/bin/cpan*
42blacklist /usr/share/perl* 41blacklist /usr/bin/perl
43blacklist /usr/lib/perl* 42blacklist /usr/lib/perl*
43blacklist /usr/share/perl*
44 44
45# PHP 45# PHP
46blacklist /usr/bin/php* 46blacklist /usr/bin/php*
47blacklist /usr/share/php*
48blacklist /usr/lib/php* 47blacklist /usr/lib/php*
48blacklist /usr/share/php*
49 49
50# Ruby 50# Ruby
51blacklist /usr/bin/ruby 51blacklist /usr/bin/ruby
@@ -54,22 +54,22 @@ blacklist /usr/lib/ruby
54# Programs using python: deluge, firefox addons, filezilla, cherrytree, xchat, hexchat, libreoffice, scribus 54# Programs using python: deluge, firefox addons, filezilla, cherrytree, xchat, hexchat, libreoffice, scribus
55# Python 2 55# Python 2
56#blacklist /usr/bin/python2* 56#blacklist /usr/bin/python2*
57#blacklist /usr/include/python2*
57#blacklist /usr/lib/python2* 58#blacklist /usr/lib/python2*
58#blacklist /usr/local/lib/python2* 59#blacklist /usr/local/lib/python2*
59#blacklist /usr/include/python2*
60#blacklist /usr/share/python2* 60#blacklist /usr/share/python2*
61# 61#
62# Python 3 62# Python 3
63#blacklist /usr/bin/python3* 63#blacklist /usr/bin/python3*
64#blacklist /usr/include/python3*
64#blacklist /usr/lib/python3* 65#blacklist /usr/lib/python3*
65#blacklist /usr/local/lib/python3* 66#blacklist /usr/local/lib/python3*
66#blacklist /usr/share/python3* 67#blacklist /usr/share/python3*
67#blacklist /usr/include/python3*
68 68
69#Go 69#Go
70blacklist /usr/bin/gccgo
70blacklist /usr/bin/go 71blacklist /usr/bin/go
71blacklist /usr/bin/gofmt 72blacklist /usr/bin/gofmt
72blacklist /usr/bin/gccgo
73 73
74#Rust 74#Rust
75blacklist /usr/bin/rust-gdb 75blacklist /usr/bin/rust-gdb
diff --git a/etc/disable-passwdmgr.inc b/etc/disable-passwdmgr.inc
index ae485c4c5..9507d3feb 100644
--- a/etc/disable-passwdmgr.inc
+++ b/etc/disable-passwdmgr.inc
@@ -1,9 +1,7 @@
1# This file is overwritten during software install. 1# This file is overwritten during software install.
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include /etc/firejail/disable-passwdmgr.local 3include /etc/firejail/disable-passwdmgr.local
4 4
5blacklist ${HOME}/.local/share/KeePass
6blacklist ${HOME}/.local/share/keepass
7blacklist ${HOME}/.config/KeePass 5blacklist ${HOME}/.config/KeePass
8blacklist ${HOME}/.config/keepass 6blacklist ${HOME}/.config/keepass
9blacklist ${HOME}/.config/keepassx 7blacklist ${HOME}/.config/keepassx
@@ -12,4 +10,6 @@ blacklist ${HOME}/.keepass
12blacklist ${HOME}/.keepassx 10blacklist ${HOME}/.keepassx
13blacklist ${HOME}/.keepassxc 11blacklist ${HOME}/.keepassxc
14blacklist ${HOME}/.lastpass 12blacklist ${HOME}/.lastpass
13blacklist ${HOME}/.local/share/KeePass
14blacklist ${HOME}/.local/share/keepass
15blacklist ${HOME}/.password-store 15blacklist ${HOME}/.password-store
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc
index 0868fa10b..470a607d9 100644
--- a/etc/disable-programs.inc
+++ b/etc/disable-programs.inc
@@ -7,6 +7,7 @@ blacklist ${HOME}/.8pecxstudios
7blacklist ${HOME}/.AndroidStudio* 7blacklist ${HOME}/.AndroidStudio*
8blacklist ${HOME}/.Atom 8blacklist ${HOME}/.Atom
9blacklist ${HOME}/.FBReader 9blacklist ${HOME}/.FBReader
10blacklist ${HOME}/.FontForge
10blacklist ${HOME}/.IdeaIC* 11blacklist ${HOME}/.IdeaIC*
11blacklist ${HOME}/.LuminanceHDR 12blacklist ${HOME}/.LuminanceHDR
12blacklist ${HOME}/.Mathematica 13blacklist ${HOME}/.Mathematica
@@ -28,7 +29,6 @@ blacklist ${HOME}/.bibletime
28blacklist ${HOME}/.claws-mail 29blacklist ${HOME}/.claws-mail
29blacklist ${HOME}/.config/0ad 30blacklist ${HOME}/.config/0ad
30blacklist ${HOME}/.config/2048-qt 31blacklist ${HOME}/.config/2048-qt
31blacklist ${HOME}/.config/akregatorrc
32blacklist ${HOME}/.config/Atom 32blacklist ${HOME}/.config/Atom
33blacklist ${HOME}/.config/Audaciousrc 33blacklist ${HOME}/.config/Audaciousrc
34blacklist ${HOME}/.config/Brackets 34blacklist ${HOME}/.config/Brackets
@@ -53,6 +53,7 @@ blacklist ${HOME}/.config/Slack
53blacklist ${HOME}/.config/Thunar 53blacklist ${HOME}/.config/Thunar
54blacklist ${HOME}/.config/VirtualBox 54blacklist ${HOME}/.config/VirtualBox
55blacklist ${HOME}/.config/Wire 55blacklist ${HOME}/.config/Wire
56blacklist ${HOME}/.config/akregatorrc
56blacklist ${HOME}/.config/ardour4 57blacklist ${HOME}/.config/ardour4
57blacklist ${HOME}/.config/ardour5 58blacklist ${HOME}/.config/ardour5
58blacklist ${HOME}/.config/arkrc 59blacklist ${HOME}/.config/arkrc
@@ -91,8 +92,8 @@ blacklist ${HOME}/.config/flowblade
91blacklist ${HOME}/.config/gajim 92blacklist ${HOME}/.config/gajim
92blacklist ${HOME}/.config/galculator 93blacklist ${HOME}/.config/galculator
93blacklist ${HOME}/.config/geany 94blacklist ${HOME}/.config/geany
94blacklist ${HOME}/.config/geeqie
95blacklist ${HOME}/.config/gedit 95blacklist ${HOME}/.config/gedit
96blacklist ${HOME}/.config/geeqie
96blacklist ${HOME}/.config/ghb 97blacklist ${HOME}/.config/ghb
97blacklist ${HOME}/.config/globaltime 98blacklist ${HOME}/.config/globaltime
98blacklist ${HOME}/.config/google-chrome 99blacklist ${HOME}/.config/google-chrome
@@ -116,9 +117,9 @@ blacklist ${HOME}/.config/ktorrentrc
116blacklist ${HOME}/.config/leafpad 117blacklist ${HOME}/.config/leafpad
117blacklist ${HOME}/.config/libreoffice 118blacklist ${HOME}/.config/libreoffice
118blacklist ${HOME}/.config/lximage-qt 119blacklist ${HOME}/.config/lximage-qt
120blacklist ${HOME}/.config/mate-calc
119blacklist ${HOME}/.config/mate/eom 121blacklist ${HOME}/.config/mate/eom
120blacklist ${HOME}/.config/mate/mate-dictionary 122blacklist ${HOME}/.config/mate/mate-dictionary
121blacklist ${HOME}/.config/mate-calc
122blacklist ${HOME}/.config/midori 123blacklist ${HOME}/.config/midori
123blacklist ${HOME}/.config/mpv 124blacklist ${HOME}/.config/mpv
124blacklist ${HOME}/.config/mupen64plus 125blacklist ${HOME}/.config/mupen64plus
@@ -135,7 +136,6 @@ blacklist ${HOME}/.config/pcmanfm
135blacklist ${HOME}/.config/pix 136blacklist ${HOME}/.config/pix
136blacklist ${HOME}/.config/pluma 137blacklist ${HOME}/.config/pluma
137blacklist ${HOME}/.config/psi+ 138blacklist ${HOME}/.config/psi+
138blacklist ${HOME}/.config/ristretto
139blacklist ${HOME}/.config/qBittorrent 139blacklist ${HOME}/.config/qBittorrent
140blacklist ${HOME}/.config/qBittorrentrc 140blacklist ${HOME}/.config/qBittorrentrc
141blacklist ${HOME}/.config/qpdfview 141blacklist ${HOME}/.config/qpdfview
@@ -144,6 +144,7 @@ blacklist ${HOME}/.config/qupzilla
144blacklist ${HOME}/.config/qutebrowser 144blacklist ${HOME}/.config/qutebrowser
145blacklist ${HOME}/.config/ranger 145blacklist ${HOME}/.config/ranger
146blacklist ${HOME}/.config/redshift.conf 146blacklist ${HOME}/.config/redshift.conf
147blacklist ${HOME}/.config/ristretto
147blacklist ${HOME}/.config/scribus 148blacklist ${HOME}/.config/scribus
148blacklist ${HOME}/.config/skypeforlinux 149blacklist ${HOME}/.config/skypeforlinux
149blacklist ${HOME}/.config/slimjet 150blacklist ${HOME}/.config/slimjet
@@ -166,9 +167,9 @@ blacklist ${HOME}/.config/wireshark
166blacklist ${HOME}/.config/xchat 167blacklist ${HOME}/.config/xchat
167blacklist ${HOME}/.config/xed 168blacklist ${HOME}/.config/xed
168blacklist ${HOME}/.config/xfburn 169blacklist ${HOME}/.config/xfburn
169blacklist ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml
170blacklist ${HOME}/.config/xfce4/xfce4-notes.rc
171blacklist ${HOME}/.config/xfce4/xfce4-notes.gtkrc 170blacklist ${HOME}/.config/xfce4/xfce4-notes.gtkrc
171blacklist ${HOME}/.config/xfce4/xfce4-notes.rc
172blacklist ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml
172blacklist ${HOME}/.config/xfce4-dict 173blacklist ${HOME}/.config/xfce4-dict
173blacklist ${HOME}/.config/xiaoyong 174blacklist ${HOME}/.config/xiaoyong
174blacklist ${HOME}/.config/xmms2 175blacklist ${HOME}/.config/xmms2
@@ -186,13 +187,12 @@ blacklist ${HOME}/.dropbox-dist
186blacklist ${HOME}/.electrum* 187blacklist ${HOME}/.electrum*
187blacklist ${HOME}/.elinks 188blacklist ${HOME}/.elinks
188blacklist ${HOME}/.emacs 189blacklist ${HOME}/.emacs
189blacklist ${HOME}/.emacs.d
190blacklist ${HOME}/.filezilla
191blacklist ${HOME}/.emacs 190blacklist ${HOME}/.emacs
191blacklist ${HOME}/.emacs.d
192blacklist ${HOME}/.etr 192blacklist ${HOME}/.etr
193blacklist ${HOME}/.filezilla
193blacklist ${HOME}/.flowblade 194blacklist ${HOME}/.flowblade
194blacklist ${HOME}/.fltk 195blacklist ${HOME}/.fltk
195blacklist ${HOME}/.FontForge
196blacklist ${HOME}/.frozen-bubble 196blacklist ${HOME}/.frozen-bubble
197blacklist ${HOME}/.gimp* 197blacklist ${HOME}/.gimp*
198blacklist ${HOME}/.git-credential-cache 198blacklist ${HOME}/.git-credential-cache
@@ -209,25 +209,6 @@ blacklist ${HOME}/.icedove
209blacklist ${HOME}/.inkscape 209blacklist ${HOME}/.inkscape
210blacklist ${HOME}/.java 210blacklist ${HOME}/.java
211blacklist ${HOME}/.jitsi 211blacklist ${HOME}/.jitsi
212blacklist ${HOME}/.kde4/share/apps/gwenview
213blacklist ${HOME}/.kde4/share/apps/kcookiejar
214blacklist ${HOME}/.kde4/share/apps/khtml
215blacklist ${HOME}/.kde4/share/apps/konqsidebartng
216blacklist ${HOME}/.kde4/share/apps/konqueror
217blacklist ${HOME}/.kde4/share/apps/okular
218blacklist ${HOME}/.kde4/share/config/baloofilerc
219blacklist ${HOME}/.kde4/share/config/baloorc
220blacklist ${HOME}/.kde4/share/config/gwenviewrc
221blacklist ${HOME}/.kde4/share/config/digikam
222blacklist ${HOME}/.kde4/share/config/k3brc
223blacklist ${HOME}/.kde4/share/config/kcookiejarrc
224blacklist ${HOME}/.kde4/share/config/khtmlrc
225blacklist ${HOME}/.kde4/share/config/konq_history
226blacklist ${HOME}/.kde4/share/config/konqsidebartngrc
227blacklist ${HOME}/.kde4/share/config/konquerorrc
228blacklist ${HOME}/.kde4/share/config/okularpartrc
229blacklist ${HOME}/.kde4/share/config/okularrc
230blacklist ${HOME}/.kde4/share/config/ktorrentrc
231blacklist ${HOME}/.kde/share/apps/gwenview 212blacklist ${HOME}/.kde/share/apps/gwenview
232blacklist ${HOME}/.kde/share/apps/kcookiejar 213blacklist ${HOME}/.kde/share/apps/kcookiejar
233blacklist ${HOME}/.kde/share/apps/khtml 214blacklist ${HOME}/.kde/share/apps/khtml
@@ -244,9 +225,28 @@ blacklist ${HOME}/.kde/share/config/khtmlrc
244blacklist ${HOME}/.kde/share/config/konq_history 225blacklist ${HOME}/.kde/share/config/konq_history
245blacklist ${HOME}/.kde/share/config/konqsidebartngrc 226blacklist ${HOME}/.kde/share/config/konqsidebartngrc
246blacklist ${HOME}/.kde/share/config/konquerorrc 227blacklist ${HOME}/.kde/share/config/konquerorrc
228blacklist ${HOME}/.kde/share/config/ktorrentrc
247blacklist ${HOME}/.kde/share/config/okularpartrc 229blacklist ${HOME}/.kde/share/config/okularpartrc
248blacklist ${HOME}/.kde/share/config/okularrc 230blacklist ${HOME}/.kde/share/config/okularrc
249blacklist ${HOME}/.kde/share/config/ktorrentrc 231blacklist ${HOME}/.kde4/share/config/baloorc
232blacklist ${HOME}/.kde4/share/config/baloofilerc
233blacklist ${HOME}/.kde4/share/apps/okular
234blacklist ${HOME}/.kde4/share/apps/konqueror
235blacklist ${HOME}/.kde4/share/apps/konqsidebartng
236blacklist ${HOME}/.kde4/share/apps/khtml
237blacklist ${HOME}/.kde4/share/apps/kcookiejar
238blacklist ${HOME}/.kde4/share/config/digikam
239blacklist ${HOME}/.kde4/share/apps/gwenview
240blacklist ${HOME}/.kde4/share/config/kcookiejarrc
241blacklist ${HOME}/.kde4/share/config/khtmlrc
242blacklist ${HOME}/.kde4/share/config/konq_history
243blacklist ${HOME}/.kde4/share/config/konqsidebartngrc
244blacklist ${HOME}/.kde4/share/config/konquerorrc
245blacklist ${HOME}/.kde4/share/config/okularpartrc
246blacklist ${HOME}/.kde4/share/config/okularrc
247blacklist ${HOME}/.kde4/share/config/ktorrentrc
248blacklist ${HOME}/.kde4/share/config/gwenviewrc
249blacklist ${HOME}/.kde4/share/config/k3brc
250blacklist ${HOME}/.killingfloor 250blacklist ${HOME}/.killingfloor
251blacklist ${HOME}/.kino-history 251blacklist ${HOME}/.kino-history
252blacklist ${HOME}/.kinorc 252blacklist ${HOME}/.kinorc
@@ -258,7 +258,6 @@ blacklist ${HOME}/.local/.share/maps-places.json
258blacklist ${HOME}/.local/lib/python2.7/site-packages 258blacklist ${HOME}/.local/lib/python2.7/site-packages
259blacklist ${HOME}/.local/share/0ad 259blacklist ${HOME}/.local/share/0ad
260blacklist ${HOME}/.local/share/3909/PapersPlease 260blacklist ${HOME}/.local/share/3909/PapersPlease
261blacklist ${HOME}/.local/share/akregator
262blacklist ${HOME}/.local/share/Empathy 261blacklist ${HOME}/.local/share/Empathy
263blacklist ${HOME}/.local/share/JetBrains 262blacklist ${HOME}/.local/share/JetBrains
264blacklist ${HOME}/.local/share/Mumble 263blacklist ${HOME}/.local/share/Mumble
@@ -268,6 +267,7 @@ blacklist ${HOME}/.local/share/Steam
268blacklist ${HOME}/.local/share/SuperHexagon 267blacklist ${HOME}/.local/share/SuperHexagon
269blacklist ${HOME}/.local/share/Terraria 268blacklist ${HOME}/.local/share/Terraria
270blacklist ${HOME}/.local/share/TpLogger 269blacklist ${HOME}/.local/share/TpLogger
270blacklist ${HOME}/.local/share/akregator
271blacklist ${HOME}/.local/share/aspyr-media 271blacklist ${HOME}/.local/share/aspyr-media
272blacklist ${HOME}/.local/share/baloo 272blacklist ${HOME}/.local/share/baloo
273blacklist ${HOME}/.local/share/caja-python 273blacklist ${HOME}/.local/share/caja-python
@@ -288,8 +288,8 @@ blacklist ${HOME}/.local/share/gnome-music
288blacklist ${HOME}/.local/share/gnome-photos 288blacklist ${HOME}/.local/share/gnome-photos
289blacklist ${HOME}/.local/share/gwenview 289blacklist ${HOME}/.local/share/gwenview
290blacklist ${HOME}/.local/share/kate 290blacklist ${HOME}/.local/share/kate
291blacklist ${HOME}/.local/share/kwrite
292blacklist ${HOME}/.local/share/ktorrentrc 291blacklist ${HOME}/.local/share/ktorrentrc
292blacklist ${HOME}/.local/share/kwrite
293blacklist ${HOME}/.local/share/lollypop 293blacklist ${HOME}/.local/share/lollypop
294blacklist ${HOME}/.local/share/meld 294blacklist ${HOME}/.local/share/meld
295blacklist ${HOME}/.local/share/multimc5 295blacklist ${HOME}/.local/share/multimc5
@@ -298,6 +298,7 @@ blacklist ${HOME}/.local/share/nautilus
298blacklist ${HOME}/.local/share/nautilus-python 298blacklist ${HOME}/.local/share/nautilus-python
299blacklist ${HOME}/.local/share/nemo 299blacklist ${HOME}/.local/share/nemo
300blacklist ${HOME}/.local/share/nemo-python 300blacklist ${HOME}/.local/share/nemo-python
301blacklist ${HOME}/.local/share/notes
301blacklist ${HOME}/.local/share/okular 302blacklist ${HOME}/.local/share/okular
302blacklist ${HOME}/.local/share/orage 303blacklist ${HOME}/.local/share/orage
303blacklist ${HOME}/.local/share/org.kde.gwenview 304blacklist ${HOME}/.local/share/org.kde.gwenview
@@ -315,7 +316,6 @@ blacklist ${HOME}/.local/share/vpltd
315blacklist ${HOME}/.local/share/vulkan 316blacklist ${HOME}/.local/share/vulkan
316blacklist ${HOME}/.local/share/wesnoth 317blacklist ${HOME}/.local/share/wesnoth
317blacklist ${HOME}/.local/share/xplayer 318blacklist ${HOME}/.local/share/xplayer
318blacklist ${HOME}/.local/share/notes
319blacklist ${HOME}/.local/share/xreader 319blacklist ${HOME}/.local/share/xreader
320blacklist ${HOME}/.local/share/zathura 320blacklist ${HOME}/.local/share/zathura
321blacklist ${HOME}/.lv2 321blacklist ${HOME}/.lv2
@@ -386,7 +386,6 @@ blacklist ${HOME}/.cache/borg
386blacklist ${HOME}/.cache/calibre 386blacklist ${HOME}/.cache/calibre
387blacklist ${HOME}/.cache/champlain 387blacklist ${HOME}/.cache/champlain
388blacklist ${HOME}/.cache/chromium 388blacklist ${HOME}/.cache/chromium
389blacklist ${HOME}/.cache/qupzilla
390blacklist ${HOME}/.cache/chromium-dev 389blacklist ${HOME}/.cache/chromium-dev
391blacklist ${HOME}/.cache/darktable 390blacklist ${HOME}/.cache/darktable
392blacklist ${HOME}/.cache/epiphany 391blacklist ${HOME}/.cache/epiphany
@@ -408,6 +407,7 @@ blacklist ${HOME}/.cache/opera-beta
408blacklist ${HOME}/.cache/org.gnome.Books 407blacklist ${HOME}/.cache/org.gnome.Books
409blacklist ${HOME}/.cache/peek 408blacklist ${HOME}/.cache/peek
410blacklist ${HOME}/.cache/qBittorrent 409blacklist ${HOME}/.cache/qBittorrent
410blacklist ${HOME}/.cache/qupzilla
411blacklist ${HOME}/.cache/qutebrowser 411blacklist ${HOME}/.cache/qutebrowser
412blacklist ${HOME}/.cache/simple-scan 412blacklist ${HOME}/.cache/simple-scan
413blacklist ${HOME}/.cache/slimjet 413blacklist ${HOME}/.cache/slimjet
@@ -418,5 +418,5 @@ blacklist ${HOME}/.cache/torbrowser
418blacklist ${HOME}/.cache/transmission 418blacklist ${HOME}/.cache/transmission
419blacklist ${HOME}/.cache/vivaldi 419blacklist ${HOME}/.cache/vivaldi
420blacklist ${HOME}/.cache/wesnoth 420blacklist ${HOME}/.cache/wesnoth
421blacklist ${HOME}/.cache/xreader
422blacklist ${HOME}/.cache/xmms2 421blacklist ${HOME}/.cache/xmms2
422blacklist ${HOME}/.cache/xreader