aboutsummaryrefslogtreecommitdiffstats
path: root/etc/inc
diff options
context:
space:
mode:
authorLibravatar smitsohu <smitsohu@gmail.com>2021-07-24 15:31:40 +0200
committerLibravatar smitsohu <smitsohu@gmail.com>2021-07-24 15:31:40 +0200
commit1ba2024d8a833eaf93436218fb25943600f303bc (patch)
treeb247db3bde21484c4ce9f5e85db655d9b32c8286 /etc/inc
parentorganize program startup (diff)
parentComplete 42a03511d0877690276da83bf548635d7e8ca693 (diff)
downloadfirejail-1ba2024d8a833eaf93436218fb25943600f303bc.tar.gz
firejail-1ba2024d8a833eaf93436218fb25943600f303bc.tar.zst
firejail-1ba2024d8a833eaf93436218fb25943600f303bc.zip
Merge branch 'master' of https://github.com/netblue30/firejail
Diffstat (limited to 'etc/inc')
-rw-r--r--etc/inc/allow-bin-sh.inc6
-rw-r--r--etc/inc/allow-common-devel.inc36
-rw-r--r--etc/inc/allow-gjs.inc16
-rw-r--r--etc/inc/allow-java.inc10
-rw-r--r--etc/inc/allow-lua.inc16
-rw-r--r--etc/inc/allow-nodejs.inc4
-rw-r--r--etc/inc/allow-opengl-game.inc8
-rw-r--r--etc/inc/allow-perl.inc16
-rw-r--r--etc/inc/allow-php.inc6
-rw-r--r--etc/inc/allow-python2.inc10
-rw-r--r--etc/inc/allow-python3.inc12
-rw-r--r--etc/inc/allow-ruby.inc4
-rw-r--r--etc/inc/allow-ssh.inc8
-rw-r--r--etc/inc/disable-common.inc699
-rw-r--r--etc/inc/disable-devel.inc80
-rw-r--r--etc/inc/disable-interpreters.inc84
-rw-r--r--etc/inc/disable-passwdmgr.inc30
-rw-r--r--etc/inc/disable-programs.inc2189
-rw-r--r--etc/inc/disable-shell.inc22
-rw-r--r--etc/inc/disable-xdg.inc8
-rw-r--r--etc/inc/whitelist-1793-workaround.inc46
-rw-r--r--etc/inc/whitelist-common.inc129
-rw-r--r--etc/inc/whitelist-player-common.inc10
-rw-r--r--etc/inc/whitelist-run-common.inc9
-rw-r--r--etc/inc/whitelist-runuser-common.inc20
-rw-r--r--etc/inc/whitelist-usr-share-common.inc126
-rw-r--r--etc/inc/whitelist-var-common.inc18
27 files changed, 1831 insertions, 1791 deletions
diff --git a/etc/inc/allow-bin-sh.inc b/etc/inc/allow-bin-sh.inc
index d6c295414..59cd40878 100644
--- a/etc/inc/allow-bin-sh.inc
+++ b/etc/inc/allow-bin-sh.inc
@@ -2,6 +2,6 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-bin-sh.local 3include allow-bin-sh.local
4 4
5noblacklist ${PATH}/bash 5nodeny ${PATH}/bash
6noblacklist ${PATH}/dash 6nodeny ${PATH}/dash
7noblacklist ${PATH}/sh 7nodeny ${PATH}/sh
diff --git a/etc/inc/allow-common-devel.inc b/etc/inc/allow-common-devel.inc
index 011bbe226..71b1483cd 100644
--- a/etc/inc/allow-common-devel.inc
+++ b/etc/inc/allow-common-devel.inc
@@ -3,29 +3,29 @@
3include allow-common-devel.local 3include allow-common-devel.local
4 4
5# Git 5# Git
6noblacklist ${HOME}/.config/git 6nodeny ${HOME}/.config/git
7noblacklist ${HOME}/.gitconfig 7nodeny ${HOME}/.gitconfig
8noblacklist ${HOME}/.git-credentials 8nodeny ${HOME}/.git-credentials
9 9
10# Java 10# Java
11noblacklist ${HOME}/.gradle 11nodeny ${HOME}/.gradle
12noblacklist ${HOME}/.java 12nodeny ${HOME}/.java
13 13
14# Node.js 14# Node.js
15noblacklist ${HOME}/.node-gyp 15nodeny ${HOME}/.node-gyp
16noblacklist ${HOME}/.npm 16nodeny ${HOME}/.npm
17noblacklist ${HOME}/.npmrc 17nodeny ${HOME}/.npmrc
18noblacklist ${HOME}/.nvm 18nodeny ${HOME}/.nvm
19noblacklist ${HOME}/.yarn 19nodeny ${HOME}/.yarn
20noblacklist ${HOME}/.yarn-config 20nodeny ${HOME}/.yarn-config
21noblacklist ${HOME}/.yarncache 21nodeny ${HOME}/.yarncache
22noblacklist ${HOME}/.yarnrc 22nodeny ${HOME}/.yarnrc
23 23
24# Python 24# Python
25noblacklist ${HOME}/.pylint.d 25nodeny ${HOME}/.pylint.d
26noblacklist ${HOME}/.python-history 26nodeny ${HOME}/.python-history
27noblacklist ${HOME}/.python_history 27nodeny ${HOME}/.python_history
28noblacklist ${HOME}/.pythonhist 28nodeny ${HOME}/.pythonhist
29 29
30# Rust 30# Rust
31noblacklist ${HOME}/.cargo/* 31nodeny ${HOME}/.cargo/*
diff --git a/etc/inc/allow-gjs.inc b/etc/inc/allow-gjs.inc
index c1366e093..2e2490079 100644
--- a/etc/inc/allow-gjs.inc
+++ b/etc/inc/allow-gjs.inc
@@ -2,11 +2,11 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-gjs.local 3include allow-gjs.local
4 4
5noblacklist ${PATH}/gjs 5nodeny ${PATH}/gjs
6noblacklist ${PATH}/gjs-console 6nodeny ${PATH}/gjs-console
7noblacklist /usr/lib/gjs 7nodeny /usr/lib/gjs
8noblacklist /usr/lib/libgjs* 8nodeny /usr/lib/libgjs*
9noblacklist /usr/lib/libmozjs-* 9nodeny /usr/lib/libmozjs-*
10noblacklist /usr/lib64/gjs 10nodeny /usr/lib64/gjs
11noblacklist /usr/lib64/libgjs* 11nodeny /usr/lib64/libgjs*
12noblacklist /usr/lib64/libmozjs-* 12nodeny /usr/lib64/libmozjs-*
diff --git a/etc/inc/allow-java.inc b/etc/inc/allow-java.inc
index 24d18fb77..af44f3664 100644
--- a/etc/inc/allow-java.inc
+++ b/etc/inc/allow-java.inc
@@ -2,8 +2,8 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-java.local 3include allow-java.local
4 4
5noblacklist ${HOME}/.java 5nodeny ${HOME}/.java
6noblacklist ${PATH}/java 6nodeny ${PATH}/java
7noblacklist /etc/java 7nodeny /etc/java
8noblacklist /usr/lib/java 8nodeny /usr/lib/java
9noblacklist /usr/share/java 9nodeny /usr/share/java
diff --git a/etc/inc/allow-lua.inc b/etc/inc/allow-lua.inc
index 9c47e7a3b..3d0a1997b 100644
--- a/etc/inc/allow-lua.inc
+++ b/etc/inc/allow-lua.inc
@@ -2,11 +2,11 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-lua.local 3include allow-lua.local
4 4
5noblacklist ${PATH}/lua* 5nodeny ${PATH}/lua*
6noblacklist /usr/include 6nodeny /usr/include
7noblacklist /usr/lib/liblua* 7nodeny /usr/lib/liblua*
8noblacklist /usr/lib/lua 8nodeny /usr/lib/lua
9noblacklist /usr/lib64/liblua* 9nodeny /usr/lib64/liblua*
10noblacklist /usr/lib64/lua 10nodeny /usr/lib64/lua
11noblacklist /usr/share/lua 11nodeny /usr/share/lua
12noblacklist /usr/share/lua* 12nodeny /usr/share/lua*
diff --git a/etc/inc/allow-nodejs.inc b/etc/inc/allow-nodejs.inc
index 351c94ab8..e915b3866 100644
--- a/etc/inc/allow-nodejs.inc
+++ b/etc/inc/allow-nodejs.inc
@@ -2,8 +2,8 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-nodejs.local 3include allow-nodejs.local
4 4
5noblacklist ${PATH}/node 5nodeny ${PATH}/node
6noblacklist /usr/include/node 6nodeny /usr/include/node
7 7
8# Allow python for node-gyp (blacklisted by disable-interpreters.inc) 8# Allow python for node-gyp (blacklisted by disable-interpreters.inc)
9include allow-python2.inc 9include allow-python2.inc
diff --git a/etc/inc/allow-opengl-game.inc b/etc/inc/allow-opengl-game.inc
index b5ff1bd50..00e35e983 100644
--- a/etc/inc/allow-opengl-game.inc
+++ b/etc/inc/allow-opengl-game.inc
@@ -1,3 +1,7 @@
1noblacklist ${PATH}/bash 1# This file is overwritten during software install.
2whitelist /usr/share/opengl-games-utils/opengl-game-functions.sh 2# Persistent customizations should go in a .local file.
3include allow-opengl-game.local
4
5nodeny ${PATH}/bash
6allow /usr/share/opengl-games-utils/opengl-game-functions.sh
3private-bin basename,bash,cut,glxinfo,grep,head,sed,zenity 7private-bin basename,bash,cut,glxinfo,grep,head,sed,zenity
diff --git a/etc/inc/allow-perl.inc b/etc/inc/allow-perl.inc
index 5a1952c94..134d27239 100644
--- a/etc/inc/allow-perl.inc
+++ b/etc/inc/allow-perl.inc
@@ -2,11 +2,11 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-perl.local 3include allow-perl.local
4 4
5noblacklist ${PATH}/core_perl 5nodeny ${PATH}/core_perl
6noblacklist ${PATH}/cpan* 6nodeny ${PATH}/cpan*
7noblacklist ${PATH}/perl 7nodeny ${PATH}/perl
8noblacklist ${PATH}/site_perl 8nodeny ${PATH}/site_perl
9noblacklist ${PATH}/vendor_perl 9nodeny ${PATH}/vendor_perl
10noblacklist /usr/lib/perl* 10nodeny /usr/lib/perl*
11noblacklist /usr/lib64/perl* 11nodeny /usr/lib64/perl*
12noblacklist /usr/share/perl* 12nodeny /usr/share/perl*
diff --git a/etc/inc/allow-php.inc b/etc/inc/allow-php.inc
index a0950dc26..520c2019e 100644
--- a/etc/inc/allow-php.inc
+++ b/etc/inc/allow-php.inc
@@ -2,6 +2,6 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-php.local 3include allow-php.local
4 4
5noblacklist ${PATH}/php* 5nodeny ${PATH}/php*
6noblacklist /usr/lib/php* 6nodeny /usr/lib/php*
7noblacklist /usr/share/php* 7nodeny /usr/share/php*
diff --git a/etc/inc/allow-python2.inc b/etc/inc/allow-python2.inc
index b0525e2e1..f1830043a 100644
--- a/etc/inc/allow-python2.inc
+++ b/etc/inc/allow-python2.inc
@@ -2,8 +2,8 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-python2.local 3include allow-python2.local
4 4
5noblacklist ${PATH}/python2* 5nodeny ${PATH}/python2*
6noblacklist /usr/include/python2* 6nodeny /usr/include/python2*
7noblacklist /usr/lib/python2* 7nodeny /usr/lib/python2*
8noblacklist /usr/local/lib/python2* 8nodeny /usr/local/lib/python2*
9noblacklist /usr/share/python2* 9nodeny /usr/share/python2*
diff --git a/etc/inc/allow-python3.inc b/etc/inc/allow-python3.inc
index d968886b0..e4b6ed1a9 100644
--- a/etc/inc/allow-python3.inc
+++ b/etc/inc/allow-python3.inc
@@ -2,9 +2,9 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-python3.local 3include allow-python3.local
4 4
5noblacklist ${PATH}/python3* 5nodeny ${PATH}/python3*
6noblacklist /usr/include/python3* 6nodeny /usr/include/python3*
7noblacklist /usr/lib/python3* 7nodeny /usr/lib/python3*
8noblacklist /usr/lib64/python3* 8nodeny /usr/lib64/python3*
9noblacklist /usr/local/lib/python3* 9nodeny /usr/local/lib/python3*
10noblacklist /usr/share/python3* 10nodeny /usr/share/python3*
diff --git a/etc/inc/allow-ruby.inc b/etc/inc/allow-ruby.inc
index a8c701219..d949bbc84 100644
--- a/etc/inc/allow-ruby.inc
+++ b/etc/inc/allow-ruby.inc
@@ -2,5 +2,5 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-ruby.local 3include allow-ruby.local
4 4
5noblacklist ${PATH}/ruby 5nodeny ${PATH}/ruby
6noblacklist /usr/lib/ruby 6nodeny /usr/lib/ruby
diff --git a/etc/inc/allow-ssh.inc b/etc/inc/allow-ssh.inc
index 67c78a483..44957bf32 100644
--- a/etc/inc/allow-ssh.inc
+++ b/etc/inc/allow-ssh.inc
@@ -2,7 +2,7 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-ssh.local 3include allow-ssh.local
4 4
5noblacklist ${HOME}/.ssh 5nodeny ${HOME}/.ssh
6noblacklist /etc/ssh 6nodeny /etc/ssh
7noblacklist /etc/ssh/ssh_config 7nodeny /etc/ssh/ssh_config
8noblacklist /tmp/ssh-* 8nodeny /tmp/ssh-*
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc
index 2dc53d311..1283a3a3d 100644
--- a/etc/inc/disable-common.inc
+++ b/etc/inc/disable-common.inc
@@ -5,63 +5,63 @@ include disable-common.local
5# The following block breaks trash functionality in file managers 5# The following block breaks trash functionality in file managers
6#read-only ${HOME}/.local 6#read-only ${HOME}/.local
7#read-write ${HOME}/.local/share 7#read-write ${HOME}/.local/share
8blacklist ${HOME}/.local/share/Trash 8deny ${HOME}/.local/share/Trash
9 9
10# History files in $HOME and clipboard managers 10# History files in $HOME and clipboard managers
11blacklist-nolog ${HOME}/.*_history 11deny-nolog ${HOME}/.*_history
12blacklist-nolog ${HOME}/.adobe 12deny-nolog ${HOME}/.adobe
13blacklist-nolog ${HOME}/.cache/greenclip* 13deny-nolog ${HOME}/.cache/greenclip*
14blacklist-nolog ${HOME}/.histfile 14deny-nolog ${HOME}/.histfile
15blacklist-nolog ${HOME}/.history 15deny-nolog ${HOME}/.history
16blacklist-nolog ${HOME}/.kde/share/apps/klipper 16deny-nolog ${HOME}/.kde/share/apps/klipper
17blacklist-nolog ${HOME}/.kde4/share/apps/klipper 17deny-nolog ${HOME}/.kde4/share/apps/klipper
18blacklist-nolog ${HOME}/.local/share/fish/fish_history 18deny-nolog ${HOME}/.local/share/fish/fish_history
19blacklist-nolog ${HOME}/.local/share/klipper 19deny-nolog ${HOME}/.local/share/klipper
20blacklist-nolog ${HOME}/.macromedia 20deny-nolog ${HOME}/.macromedia
21blacklist-nolog ${HOME}/.mupdf.history 21deny-nolog ${HOME}/.mupdf.history
22blacklist-nolog ${HOME}/.python-history 22deny-nolog ${HOME}/.python-history
23blacklist-nolog ${HOME}/.python_history 23deny-nolog ${HOME}/.python_history
24blacklist-nolog ${HOME}/.pythonhist 24deny-nolog ${HOME}/.pythonhist
25blacklist-nolog ${HOME}/.lesshst 25deny-nolog ${HOME}/.lesshst
26blacklist-nolog ${HOME}/.viminfo 26deny-nolog ${HOME}/.viminfo
27blacklist-nolog /tmp/clipmenu* 27deny-nolog /tmp/clipmenu*
28 28
29# X11 session autostart 29# X11 session autostart
30# blacklist ${HOME}/.xpra - this will kill --x11=xpra cmdline option for all programs 30# blacklist ${HOME}/.xpra - this will kill --x11=xpra cmdline option for all programs
31blacklist ${HOME}/.Xsession 31deny ${HOME}/.Xsession
32blacklist ${HOME}/.blackbox 32deny ${HOME}/.blackbox
33blacklist ${HOME}/.config/autostart 33deny ${HOME}/.config/autostart
34blacklist ${HOME}/.config/autostart-scripts 34deny ${HOME}/.config/autostart-scripts
35blacklist ${HOME}/.config/awesome 35deny ${HOME}/.config/awesome
36blacklist ${HOME}/.config/i3 36deny ${HOME}/.config/i3
37blacklist ${HOME}/.config/sway 37deny ${HOME}/.config/sway
38blacklist ${HOME}/.config/lxsession/LXDE/autostart 38deny ${HOME}/.config/lxsession/LXDE/autostart
39blacklist ${HOME}/.config/openbox 39deny ${HOME}/.config/openbox
40blacklist ${HOME}/.config/plasma-workspace 40deny ${HOME}/.config/plasma-workspace
41blacklist ${HOME}/.config/startupconfig 41deny ${HOME}/.config/startupconfig
42blacklist ${HOME}/.config/startupconfigkeys 42deny ${HOME}/.config/startupconfigkeys
43blacklist ${HOME}/.fluxbox 43deny ${HOME}/.fluxbox
44blacklist ${HOME}/.gnomerc 44deny ${HOME}/.gnomerc
45blacklist ${HOME}/.kde/Autostart 45deny ${HOME}/.kde/Autostart
46blacklist ${HOME}/.kde/env 46deny ${HOME}/.kde/env
47blacklist ${HOME}/.kde/share/autostart 47deny ${HOME}/.kde/share/autostart
48blacklist ${HOME}/.kde/share/config/startupconfig 48deny ${HOME}/.kde/share/config/startupconfig
49blacklist ${HOME}/.kde/share/config/startupconfigkeys 49deny ${HOME}/.kde/share/config/startupconfigkeys
50blacklist ${HOME}/.kde/shutdown 50deny ${HOME}/.kde/shutdown
51blacklist ${HOME}/.kde4/env 51deny ${HOME}/.kde4/env
52blacklist ${HOME}/.kde4/Autostart 52deny ${HOME}/.kde4/Autostart
53blacklist ${HOME}/.kde4/share/autostart 53deny ${HOME}/.kde4/share/autostart
54blacklist ${HOME}/.kde4/shutdown 54deny ${HOME}/.kde4/shutdown
55blacklist ${HOME}/.kde4/share/config/startupconfig 55deny ${HOME}/.kde4/share/config/startupconfig
56blacklist ${HOME}/.kde4/share/config/startupconfigkeys 56deny ${HOME}/.kde4/share/config/startupconfigkeys
57blacklist ${HOME}/.local/share/autostart 57deny ${HOME}/.local/share/autostart
58blacklist ${HOME}/.xinitrc 58deny ${HOME}/.xinitrc
59blacklist ${HOME}/.xprofile 59deny ${HOME}/.xprofile
60blacklist ${HOME}/.xserverrc 60deny ${HOME}/.xserverrc
61blacklist ${HOME}/.xsession 61deny ${HOME}/.xsession
62blacklist ${HOME}/.xsessionrc 62deny ${HOME}/.xsessionrc
63blacklist /etc/X11/Xsession.d 63deny /etc/X11/Xsession.d
64blacklist /etc/xdg/autostart 64deny /etc/xdg/autostart
65read-only ${HOME}/.Xauthority 65read-only ${HOME}/.Xauthority
66 66
67# Session manager 67# Session manager
@@ -70,46 +70,46 @@ read-only ${HOME}/.Xauthority
70#?HAS_X11: blacklist /tmp/.ICE-unix 70#?HAS_X11: blacklist /tmp/.ICE-unix
71 71
72# KDE config 72# KDE config
73blacklist ${HOME}/.cache/konsole 73deny ${HOME}/.cache/konsole
74blacklist ${HOME}/.config/khotkeysrc 74deny ${HOME}/.config/khotkeysrc
75blacklist ${HOME}/.config/krunnerrc 75deny ${HOME}/.config/krunnerrc
76blacklist ${HOME}/.config/kscreenlockerrc 76deny ${HOME}/.config/kscreenlockerrc
77blacklist ${HOME}/.config/ksslcertificatemanager 77deny ${HOME}/.config/ksslcertificatemanager
78blacklist ${HOME}/.config/kwalletrc 78deny ${HOME}/.config/kwalletrc
79blacklist ${HOME}/.config/kwinrc 79deny ${HOME}/.config/kwinrc
80blacklist ${HOME}/.config/kwinrulesrc 80deny ${HOME}/.config/kwinrulesrc
81blacklist ${HOME}/.config/plasma-locale-settings.sh 81deny ${HOME}/.config/plasma-locale-settings.sh
82blacklist ${HOME}/.config/plasma-org.kde.plasma.desktop-appletsrc 82deny ${HOME}/.config/plasma-org.kde.plasma.desktop-appletsrc
83blacklist ${HOME}/.config/plasmashellrc 83deny ${HOME}/.config/plasmashellrc
84blacklist ${HOME}/.config/plasmavaultrc 84deny ${HOME}/.config/plasmavaultrc
85blacklist ${HOME}/.kde/share/apps/kwin 85deny ${HOME}/.kde/share/apps/kwin
86blacklist ${HOME}/.kde/share/apps/plasma 86deny ${HOME}/.kde/share/apps/plasma
87blacklist ${HOME}/.kde/share/apps/solid 87deny ${HOME}/.kde/share/apps/solid
88blacklist ${HOME}/.kde/share/config/khotkeysrc 88deny ${HOME}/.kde/share/config/khotkeysrc
89blacklist ${HOME}/.kde/share/config/krunnerrc 89deny ${HOME}/.kde/share/config/krunnerrc
90blacklist ${HOME}/.kde/share/config/kscreensaverrc 90deny ${HOME}/.kde/share/config/kscreensaverrc
91blacklist ${HOME}/.kde/share/config/ksslcertificatemanager 91deny ${HOME}/.kde/share/config/ksslcertificatemanager
92blacklist ${HOME}/.kde/share/config/kwalletrc 92deny ${HOME}/.kde/share/config/kwalletrc
93blacklist ${HOME}/.kde/share/config/kwinrc 93deny ${HOME}/.kde/share/config/kwinrc
94blacklist ${HOME}/.kde/share/config/kwinrulesrc 94deny ${HOME}/.kde/share/config/kwinrulesrc
95blacklist ${HOME}/.kde/share/config/plasma-desktop-appletsrc 95deny ${HOME}/.kde/share/config/plasma-desktop-appletsrc
96blacklist ${HOME}/.kde4/share/apps/kwin 96deny ${HOME}/.kde4/share/apps/kwin
97blacklist ${HOME}/.kde4/share/apps/plasma 97deny ${HOME}/.kde4/share/apps/plasma
98blacklist ${HOME}/.kde4/share/apps/solid 98deny ${HOME}/.kde4/share/apps/solid
99blacklist ${HOME}/.kde4/share/config/khotkeysrc 99deny ${HOME}/.kde4/share/config/khotkeysrc
100blacklist ${HOME}/.kde4/share/config/krunnerrc 100deny ${HOME}/.kde4/share/config/krunnerrc
101blacklist ${HOME}/.kde4/share/config/kscreensaverrc 101deny ${HOME}/.kde4/share/config/kscreensaverrc
102blacklist ${HOME}/.kde4/share/config/ksslcertificatemanager 102deny ${HOME}/.kde4/share/config/ksslcertificatemanager
103blacklist ${HOME}/.kde4/share/config/kwalletrc 103deny ${HOME}/.kde4/share/config/kwalletrc
104blacklist ${HOME}/.kde4/share/config/kwinrc 104deny ${HOME}/.kde4/share/config/kwinrc
105blacklist ${HOME}/.kde4/share/config/kwinrulesrc 105deny ${HOME}/.kde4/share/config/kwinrulesrc
106blacklist ${HOME}/.kde4/share/config/plasma-desktop-appletsrc 106deny ${HOME}/.kde4/share/config/plasma-desktop-appletsrc
107blacklist ${HOME}/.local/share/kglobalaccel 107deny ${HOME}/.local/share/kglobalaccel
108blacklist ${HOME}/.local/share/kwin 108deny ${HOME}/.local/share/kwin
109blacklist ${HOME}/.local/share/plasma 109deny ${HOME}/.local/share/plasma
110blacklist ${HOME}/.local/share/plasmashell 110deny ${HOME}/.local/share/plasmashell
111blacklist ${HOME}/.local/share/solid 111deny ${HOME}/.local/share/solid
112blacklist /tmp/konsole-*.history 112deny /tmp/konsole-*.history
113read-only ${HOME}/.cache/ksycoca5_* 113read-only ${HOME}/.cache/ksycoca5_*
114read-only ${HOME}/.config/*notifyrc 114read-only ${HOME}/.config/*notifyrc
115read-only ${HOME}/.config/kdeglobals 115read-only ${HOME}/.config/kdeglobals
@@ -138,124 +138,139 @@ read-only ${HOME}/.local/share/kservices5
138read-only ${HOME}/.local/share/kssl 138read-only ${HOME}/.local/share/kssl
139 139
140# KDE sockets 140# KDE sockets
141blacklist ${RUNUSER}/*.slave-socket 141deny ${RUNUSER}/*.slave-socket
142blacklist ${RUNUSER}/kdeinit5__* 142deny ${RUNUSER}/kdeinit5__*
143blacklist ${RUNUSER}/kdesud_* 143deny ${RUNUSER}/kdesud_*
144# see #3358 144# see #3358
145#?HAS_NODBUS: blacklist ${RUNUSER}/ksocket-* 145#?HAS_NODBUS: blacklist ${RUNUSER}/ksocket-*
146#?HAS_NODBUS: blacklist /tmp/ksocket-* 146#?HAS_NODBUS: blacklist /tmp/ksocket-*
147 147
148# gnome 148# gnome
149# contains extensions, last used times of applications, and notifications 149# contains extensions, last used times of applications, and notifications
150blacklist ${HOME}/.local/share/gnome-shell 150deny ${HOME}/.local/share/gnome-shell
151# contains recently used files and serials of static/removable storage 151# contains recently used files and serials of static/removable storage
152blacklist ${HOME}/.local/share/gvfs-metadata 152deny ${HOME}/.local/share/gvfs-metadata
153# no direct modification of dconf database 153# no direct modification of dconf database
154read-only ${HOME}/.config/dconf 154read-only ${HOME}/.config/dconf
155blacklist ${RUNUSER}/gnome-session-leader-fifo 155deny ${RUNUSER}/gnome-session-leader-fifo
156blacklist ${RUNUSER}/gnome-shell 156deny ${RUNUSER}/gnome-shell
157blacklist ${RUNUSER}/gsconnect 157deny ${RUNUSER}/gsconnect
158 158
159# systemd 159# systemd
160blacklist ${HOME}/.config/systemd 160deny ${HOME}/.config/systemd
161blacklist ${HOME}/.local/share/systemd 161deny ${HOME}/.local/share/systemd
162blacklist /var/lib/systemd 162deny /var/lib/systemd
163blacklist ${PATH}/systemd-run 163deny ${PATH}/systemd-run
164blacklist ${RUNUSER}/systemd 164deny ${RUNUSER}/systemd
165deny ${PATH}/systemctl
166deny /etc/systemd/system
167deny /etc/systemd/network
165# creates problems on Arch where /etc/resolv.conf is a symlink to /var/run/systemd/resolve/resolv.conf 168# creates problems on Arch where /etc/resolv.conf is a symlink to /var/run/systemd/resolve/resolv.conf
166#blacklist /var/run/systemd 169#blacklist /var/run/systemd
167 170
168# openrc 171# openrc
169blacklist /etc/runlevels/ 172deny /etc/runlevels/
170blacklist /etc/init.d/ 173deny /etc/init.d/
171blacklist /etc/rc.conf 174deny /etc/rc.conf
172 175
173# VirtualBox 176# VirtualBox
174blacklist ${HOME}/.VirtualBox 177deny ${HOME}/.VirtualBox
175blacklist ${HOME}/.config/VirtualBox 178deny ${HOME}/.config/VirtualBox
176blacklist ${HOME}/VirtualBox VMs 179deny ${HOME}/VirtualBox VMs
177 180
178# GNOME Boxes 181# GNOME Boxes
179blacklist ${HOME}/.config/gnome-boxes 182deny ${HOME}/.config/gnome-boxes
180blacklist ${HOME}/.local/share/gnome-boxes 183deny ${HOME}/.local/share/gnome-boxes
181 184
182# libvirt 185# libvirt
183blacklist ${HOME}/.cache/libvirt 186deny ${HOME}/.cache/libvirt
184blacklist ${HOME}/.config/libvirt 187deny ${HOME}/.config/libvirt
185blacklist ${RUNUSER}/libvirt 188deny ${RUNUSER}/libvirt
186blacklist /var/cache/libvirt 189deny /var/cache/libvirt
187blacklist /var/lib/libvirt 190deny /var/lib/libvirt
188blacklist /var/log/libvirt 191deny /var/log/libvirt
189 192
190# OCI-Containers / Podman 193# OCI-Containers / Podman
191blacklist ${RUNUSER}/containers 194deny ${RUNUSER}/containers
192blacklist ${RUNUSER}/crun 195deny ${RUNUSER}/crun
193blacklist ${RUNUSER}/libpod 196deny ${RUNUSER}/libpod
194blacklist ${RUNUSER}/runc 197deny ${RUNUSER}/runc
195blacklist ${RUNUSER}/toolbox 198deny ${RUNUSER}/toolbox
196 199
197# VeraCrypt 200# VeraCrypt
198blacklist ${HOME}/.VeraCrypt 201deny ${HOME}/.VeraCrypt
199blacklist ${PATH}/veracrypt 202deny ${PATH}/veracrypt
200blacklist ${PATH}/veracrypt-uninstall.sh 203deny ${PATH}/veracrypt-uninstall.sh
201blacklist /usr/share/applications/veracrypt.* 204deny /usr/share/applications/veracrypt.*
202blacklist /usr/share/pixmaps/veracrypt.* 205deny /usr/share/pixmaps/veracrypt.*
203blacklist /usr/share/veracrypt 206deny /usr/share/veracrypt
204 207
205# TrueCrypt 208# TrueCrypt
206blacklist ${HOME}/.TrueCrypt 209deny ${HOME}/.TrueCrypt
207blacklist ${PATH}/truecrypt 210deny ${PATH}/truecrypt
208blacklist ${PATH}/truecrypt-uninstall.sh 211deny ${PATH}/truecrypt-uninstall.sh
209blacklist /usr/share/applications/truecrypt.* 212deny /usr/share/applications/truecrypt.*
210blacklist /usr/share/pixmaps/truecrypt.* 213deny /usr/share/pixmaps/truecrypt.*
211blacklist /usr/share/truecrypt 214deny /usr/share/truecrypt
212 215
213# zuluCrypt 216# zuluCrypt
214blacklist ${HOME}/.zuluCrypt 217deny ${HOME}/.zuluCrypt
215blacklist ${HOME}/.zuluCrypt-socket 218deny ${HOME}/.zuluCrypt-socket
216blacklist ${PATH}/zuluCrypt-cli 219deny ${PATH}/zuluCrypt-cli
217blacklist ${PATH}/zuluMount-cli 220deny ${PATH}/zuluMount-cli
218 221
219# var 222# var
220blacklist /var/cache/apt 223deny /var/cache/apt
221blacklist /var/cache/pacman 224deny /var/cache/pacman
222blacklist /var/lib/apt 225deny /var/lib/apt
223blacklist /var/lib/clamav 226deny /var/lib/clamav
224blacklist /var/lib/dkms 227deny /var/lib/dkms
225blacklist /var/lib/mysql/mysql.sock 228deny /var/lib/mysql/mysql.sock
226blacklist /var/lib/mysqld/mysql.sock 229deny /var/lib/mysqld/mysql.sock
227blacklist /var/lib/pacman 230deny /var/lib/pacman
228blacklist /var/lib/upower 231deny /var/lib/upower
229# blacklist /var/log - a virtual /var/log directory (mostly empty) is build up by default for 232# blacklist /var/log - a virtual /var/log directory (mostly empty) is build up by default for
230# every sandbox, unless --writable-var-log switch is activated 233# every sandbox, unless --writable-var-log switch is activated
231blacklist /var/mail 234deny /var/mail
232blacklist /var/opt 235deny /var/opt
233blacklist /var/run/acpid.socket 236deny /var/run/acpid.socket
234blacklist /var/run/docker.sock 237deny /var/run/docker.sock
235blacklist /var/run/minissdpd.sock 238deny /var/run/minissdpd.sock
236blacklist /var/run/mysql/mysqld.sock 239deny /var/run/mysql/mysqld.sock
237blacklist /var/run/mysqld/mysqld.sock 240deny /var/run/mysqld/mysqld.sock
238blacklist /var/run/rpcbind.sock 241deny /var/run/rpcbind.sock
239blacklist /var/run/screens 242deny /var/run/screens
240blacklist /var/spool/anacron 243deny /var/spool/anacron
241blacklist /var/spool/cron 244deny /var/spool/cron
242blacklist /var/spool/mail 245deny /var/spool/mail
243 246
244# etc 247# etc
245blacklist /etc/anacrontab 248deny /etc/anacrontab
246blacklist /etc/cron* 249deny /etc/cron*
247blacklist /etc/profile.d 250deny /etc/profile.d
248blacklist /etc/rc.local 251deny /etc/rc.local
249# rc1.d, rc2.d, ... 252# rc1.d, rc2.d, ...
250blacklist /etc/rc?.d 253deny /etc/rc?.d
251blacklist /etc/kernel* 254deny /etc/kernel*
252blacklist /etc/grub* 255deny /etc/grub*
253blacklist /etc/dkms 256deny /etc/dkms
254blacklist /etc/apparmor* 257deny /etc/apparmor*
255blacklist /etc/selinux 258deny /etc/selinux
256blacklist /etc/modules* 259deny /etc/modules*
257blacklist /etc/logrotate* 260deny /etc/logrotate*
258blacklist /etc/adduser.conf 261deny /etc/adduser.conf
262
263# hide config for various intrusion detection systems
264deny /etc/rkhunter.conf
265deny /var/lib/rkhunter
266deny /etc/chkrootkit.conf
267deny /etc/lynis
268deny /etc/aide
269deny /etc/logcheck
270deny /etc/tripwire
271deny /etc/snort
272deny /etc/fail2ban.conf
273deny /etc/suricata
259 274
260# Startup files 275# Startup files
261read-only ${HOME}/.antigen 276read-only ${HOME}/.antigen
@@ -292,13 +307,13 @@ read-only ${HOME}/.zshrc
292read-only ${HOME}/.zshrc.local 307read-only ${HOME}/.zshrc.local
293 308
294# Remote access 309# Remote access
295blacklist ${HOME}/.rhosts 310deny ${HOME}/.rhosts
296blacklist ${HOME}/.shosts 311deny ${HOME}/.shosts
297blacklist ${HOME}/.ssh/authorized_keys 312deny ${HOME}/.ssh/authorized_keys
298blacklist ${HOME}/.ssh/authorized_keys2 313deny ${HOME}/.ssh/authorized_keys2
299blacklist ${HOME}/.ssh/environment 314deny ${HOME}/.ssh/environment
300blacklist ${HOME}/.ssh/rc 315deny ${HOME}/.ssh/rc
301blacklist /etc/hosts.equiv 316deny /etc/hosts.equiv
302read-only ${HOME}/.ssh/config 317read-only ${HOME}/.ssh/config
303read-only ${HOME}/.ssh/config.d 318read-only ${HOME}/.ssh/config.d
304 319
@@ -359,200 +374,200 @@ read-only ${HOME}/.local/share/mime
359read-only ${HOME}/.local/share/thumbnailers 374read-only ${HOME}/.local/share/thumbnailers
360 375
361# prevent access to ssh-agent 376# prevent access to ssh-agent
362blacklist /tmp/ssh-* 377deny /tmp/ssh-*
363 378
364# top secret 379# top secret
365blacklist ${HOME}/*.kdb 380deny ${HOME}/*.kdb
366blacklist ${HOME}/*.kdbx 381deny ${HOME}/*.kdbx
367blacklist ${HOME}/*.key 382deny ${HOME}/*.key
368blacklist ${HOME}/.Private 383deny ${HOME}/.Private
369blacklist ${HOME}/.caff 384deny ${HOME}/.caff
370blacklist ${HOME}/.cargo/credentials 385deny ${HOME}/.cargo/credentials
371blacklist ${HOME}/.cargo/credentials.toml 386deny ${HOME}/.cargo/credentials.toml
372blacklist ${HOME}/.cert 387deny ${HOME}/.cert
373blacklist ${HOME}/.config/keybase 388deny ${HOME}/.config/keybase
374blacklist ${HOME}/.davfs2/secrets 389deny ${HOME}/.davfs2/secrets
375blacklist ${HOME}/.ecryptfs 390deny ${HOME}/.ecryptfs
376blacklist ${HOME}/.fetchmailrc 391deny ${HOME}/.fetchmailrc
377blacklist ${HOME}/.fscrypt 392deny ${HOME}/.fscrypt
378blacklist ${HOME}/.git-credential-cache 393deny ${HOME}/.git-credential-cache
379blacklist ${HOME}/.git-credentials 394deny ${HOME}/.git-credentials
380blacklist ${HOME}/.gnome2/keyrings 395deny ${HOME}/.gnome2/keyrings
381blacklist ${HOME}/.gnupg 396deny ${HOME}/.gnupg
382blacklist ${HOME}/.config/hub 397deny ${HOME}/.config/hub
383blacklist ${HOME}/.kde/share/apps/kwallet 398deny ${HOME}/.kde/share/apps/kwallet
384blacklist ${HOME}/.kde4/share/apps/kwallet 399deny ${HOME}/.kde4/share/apps/kwallet
385blacklist ${HOME}/.local/share/keyrings 400deny ${HOME}/.local/share/keyrings
386blacklist ${HOME}/.local/share/kwalletd 401deny ${HOME}/.local/share/kwalletd
387blacklist ${HOME}/.local/share/plasma-vault 402deny ${HOME}/.local/share/plasma-vault
388blacklist ${HOME}/.msmtprc 403deny ${HOME}/.msmtprc
389blacklist ${HOME}/.mutt 404deny ${HOME}/.mutt
390blacklist ${HOME}/.muttrc 405deny ${HOME}/.muttrc
391blacklist ${HOME}/.netrc 406deny ${HOME}/.netrc
392blacklist ${HOME}/.nyx 407deny ${HOME}/.nyx
393blacklist ${HOME}/.pki 408deny ${HOME}/.pki
394blacklist ${HOME}/.local/share/pki 409deny ${HOME}/.local/share/pki
395blacklist ${HOME}/.smbcredentials 410deny ${HOME}/.smbcredentials
396blacklist ${HOME}/.ssh 411deny ${HOME}/.ssh
397blacklist ${HOME}/.vaults 412deny ${HOME}/.vaults
398blacklist /.fscrypt 413deny /.fscrypt
399blacklist /etc/davfs2/secrets 414deny /etc/davfs2/secrets
400blacklist /etc/group+ 415deny /etc/group+
401blacklist /etc/group- 416deny /etc/group-
402blacklist /etc/gshadow 417deny /etc/gshadow
403blacklist /etc/gshadow+ 418deny /etc/gshadow+
404blacklist /etc/gshadow- 419deny /etc/gshadow-
405blacklist /etc/passwd+ 420deny /etc/passwd+
406blacklist /etc/passwd- 421deny /etc/passwd-
407blacklist /etc/shadow 422deny /etc/shadow
408blacklist /etc/shadow+ 423deny /etc/shadow+
409blacklist /etc/shadow- 424deny /etc/shadow-
410blacklist /etc/ssh 425deny /etc/ssh
411blacklist /etc/ssh/* 426deny /etc/ssh/*
412blacklist /home/.ecryptfs 427deny /home/.ecryptfs
413blacklist /home/.fscrypt 428deny /home/.fscrypt
414blacklist /var/backup 429deny /var/backup
415 430
416# cloud provider configuration 431# cloud provider configuration
417blacklist ${HOME}/.aws 432deny ${HOME}/.aws
418blacklist ${HOME}/.boto 433deny ${HOME}/.boto
419blacklist ${HOME}/.config/gcloud 434deny ${HOME}/.config/gcloud
420blacklist ${HOME}/.kube 435deny ${HOME}/.kube
421blacklist ${HOME}/.passwd-s3fs 436deny ${HOME}/.passwd-s3fs
422blacklist ${HOME}/.s3cmd 437deny ${HOME}/.s3cmd
423blacklist /etc/boto.cfg 438deny /etc/boto.cfg
424 439
425# system directories 440# system directories
426blacklist /sbin 441deny /sbin
427blacklist /usr/local/sbin 442deny /usr/local/sbin
428blacklist /usr/sbin 443deny /usr/sbin
429 444
430# system management 445# system management
431blacklist ${PATH}/at 446deny ${PATH}/at
432blacklist ${PATH}/busybox 447deny ${PATH}/busybox
433blacklist ${PATH}/chage 448deny ${PATH}/chage
434blacklist ${PATH}/chfn 449deny ${PATH}/chfn
435blacklist ${PATH}/chsh 450deny ${PATH}/chsh
436blacklist ${PATH}/crontab 451deny ${PATH}/crontab
437blacklist ${PATH}/evtest 452deny ${PATH}/evtest
438blacklist ${PATH}/expiry 453deny ${PATH}/expiry
439blacklist ${PATH}/fusermount 454deny ${PATH}/fusermount
440blacklist ${PATH}/gksu 455deny ${PATH}/gksu
441blacklist ${PATH}/gksudo 456deny ${PATH}/gksudo
442blacklist ${PATH}/gpasswd 457deny ${PATH}/gpasswd
443blacklist ${PATH}/kdesudo 458deny ${PATH}/kdesudo
444blacklist ${PATH}/ksu 459deny ${PATH}/ksu
445blacklist ${PATH}/mount 460deny ${PATH}/mount
446blacklist ${PATH}/mount.ecryptfs_private 461deny ${PATH}/mount.ecryptfs_private
447blacklist ${PATH}/nc 462deny ${PATH}/nc
448blacklist ${PATH}/ncat 463deny ${PATH}/ncat
449blacklist ${PATH}/nmap 464deny ${PATH}/nmap
450blacklist ${PATH}/newgidmap 465deny ${PATH}/newgidmap
451blacklist ${PATH}/newgrp 466deny ${PATH}/newgrp
452blacklist ${PATH}/newuidmap 467deny ${PATH}/newuidmap
453blacklist ${PATH}/ntfs-3g 468deny ${PATH}/ntfs-3g
454blacklist ${PATH}/pkexec 469deny ${PATH}/pkexec
455blacklist ${PATH}/procmail 470deny ${PATH}/procmail
456blacklist ${PATH}/sg 471deny ${PATH}/sg
457blacklist ${PATH}/strace 472deny ${PATH}/strace
458blacklist ${PATH}/su 473deny ${PATH}/su
459blacklist ${PATH}/sudo 474deny ${PATH}/sudo
460blacklist ${PATH}/tcpdump 475deny ${PATH}/tcpdump
461blacklist ${PATH}/umount 476deny ${PATH}/umount
462blacklist ${PATH}/unix_chkpwd 477deny ${PATH}/unix_chkpwd
463blacklist ${PATH}/xev 478deny ${PATH}/xev
464blacklist ${PATH}/xinput 479deny ${PATH}/xinput
465 480
466# other SUID binaries 481# other SUID binaries
467blacklist /usr/lib/virtualbox 482deny /usr/lib/virtualbox
468blacklist /usr/lib64/virtualbox 483deny /usr/lib64/virtualbox
469 484
470# prevent lxterminal connecting to an existing lxterminal session 485# prevent lxterminal connecting to an existing lxterminal session
471blacklist /tmp/.lxterminal-socket* 486deny /tmp/.lxterminal-socket*
472# prevent tmux connecting to an existing session 487# prevent tmux connecting to an existing session
473blacklist /tmp/tmux-* 488deny /tmp/tmux-*
474 489
475# disable terminals running as server resulting in sandbox escape 490# disable terminals running as server resulting in sandbox escape
476blacklist ${PATH}/lxterminal 491deny ${PATH}/lxterminal
477blacklist ${PATH}/gnome-terminal 492deny ${PATH}/gnome-terminal
478blacklist ${PATH}/gnome-terminal.wrapper 493deny ${PATH}/gnome-terminal.wrapper
479blacklist ${PATH}/lilyterm 494deny ${PATH}/lilyterm
480blacklist ${PATH}/mate-terminal 495deny ${PATH}/mate-terminal
481blacklist ${PATH}/mate-terminal.wrapper 496deny ${PATH}/mate-terminal.wrapper
482blacklist ${PATH}/pantheon-terminal 497deny ${PATH}/pantheon-terminal
483blacklist ${PATH}/roxterm 498deny ${PATH}/roxterm
484blacklist ${PATH}/roxterm-config 499deny ${PATH}/roxterm-config
485blacklist ${PATH}/terminix 500deny ${PATH}/terminix
486blacklist ${PATH}/tilix 501deny ${PATH}/tilix
487blacklist ${PATH}/urxvtc 502deny ${PATH}/urxvtc
488blacklist ${PATH}/urxvtcd 503deny ${PATH}/urxvtcd
489blacklist ${PATH}/xfce4-terminal 504deny ${PATH}/xfce4-terminal
490blacklist ${PATH}/xfce4-terminal.wrapper 505deny ${PATH}/xfce4-terminal.wrapper
491# blacklist ${PATH}/konsole 506# blacklist ${PATH}/konsole
492# konsole doesn't seem to have this problem - last tested on Ubuntu 16.04 507# konsole doesn't seem to have this problem - last tested on Ubuntu 16.04
493 508
494# kernel files 509# kernel files
495blacklist /initrd* 510deny /initrd*
496blacklist /vmlinuz* 511deny /vmlinuz*
497 512
498# snapshot files 513# snapshot files
499blacklist /.snapshots 514deny /.snapshots
500 515
501# flatpak 516# flatpak
502blacklist ${HOME}/.cache/flatpak 517deny ${HOME}/.cache/flatpak
503blacklist ${HOME}/.config/flatpak 518deny ${HOME}/.config/flatpak
504noblacklist ${HOME}/.local/share/flatpak/exports 519nodeny ${HOME}/.local/share/flatpak/exports
505read-only ${HOME}/.local/share/flatpak/exports 520read-only ${HOME}/.local/share/flatpak/exports
506blacklist ${HOME}/.local/share/flatpak/* 521deny ${HOME}/.local/share/flatpak/*
507blacklist ${HOME}/.var 522deny ${HOME}/.var
508blacklist ${RUNUSER}/app 523deny ${RUNUSER}/app
509blacklist ${RUNUSER}/doc 524deny ${RUNUSER}/doc
510blacklist ${RUNUSER}/.dbus-proxy 525deny ${RUNUSER}/.dbus-proxy
511blacklist ${RUNUSER}/.flatpak 526deny ${RUNUSER}/.flatpak
512blacklist ${RUNUSER}/.flatpak-cache 527deny ${RUNUSER}/.flatpak-cache
513blacklist ${RUNUSER}/.flatpak-helper 528deny ${RUNUSER}/.flatpak-helper
514blacklist /usr/share/flatpak 529deny /usr/share/flatpak
515noblacklist /var/lib/flatpak/exports 530nodeny /var/lib/flatpak/exports
516blacklist /var/lib/flatpak/* 531deny /var/lib/flatpak/*
517# most of the time bwrap is SUID binary 532# most of the time bwrap is SUID binary
518blacklist ${PATH}/bwrap 533deny ${PATH}/bwrap
519 534
520# snap 535# snap
521blacklist ${RUNUSER}/snapd-session-agent.socket 536deny ${RUNUSER}/snapd-session-agent.socket
522 537
523# mail directories used by mutt 538# mail directories used by mutt
524blacklist ${HOME}/.Mail 539deny ${HOME}/.Mail
525blacklist ${HOME}/.mail 540deny ${HOME}/.mail
526blacklist ${HOME}/.signature 541deny ${HOME}/.signature
527blacklist ${HOME}/Mail 542deny ${HOME}/Mail
528blacklist ${HOME}/mail 543deny ${HOME}/mail
529blacklist ${HOME}/postponed 544deny ${HOME}/postponed
530blacklist ${HOME}/sent 545deny ${HOME}/sent
531 546
532# kernel configuration 547# kernel configuration
533blacklist /proc/config.gz 548deny /proc/config.gz
534 549
535# prevent DNS malware attempting to communicate with the server 550# prevent DNS malware attempting to communicate with the server
536# using regular DNS tools 551# using regular DNS tools
537blacklist ${PATH}/dig 552deny ${PATH}/dig
538blacklist ${PATH}/dlint 553deny ${PATH}/dlint
539blacklist ${PATH}/dns2tcp 554deny ${PATH}/dns2tcp
540blacklist ${PATH}/dnssec-* 555deny ${PATH}/dnssec-*
541blacklist ${PATH}/dnswalk 556deny ${PATH}/dnswalk
542blacklist ${PATH}/drill 557deny ${PATH}/drill
543blacklist ${PATH}/host 558deny ${PATH}/host
544blacklist ${PATH}/iodine 559deny ${PATH}/iodine
545blacklist ${PATH}/kdig 560deny ${PATH}/kdig
546blacklist ${PATH}/khost 561deny ${PATH}/khost
547blacklist ${PATH}/knsupdate 562deny ${PATH}/knsupdate
548blacklist ${PATH}/ldns-* 563deny ${PATH}/ldns-*
549blacklist ${PATH}/ldnsd 564deny ${PATH}/ldnsd
550blacklist ${PATH}/nslookup 565deny ${PATH}/nslookup
551blacklist ${PATH}/resolvectl 566deny ${PATH}/resolvectl
552blacklist ${PATH}/unbound-host 567deny ${PATH}/unbound-host
553 568
554# rest of ${RUNUSER} 569# rest of ${RUNUSER}
555blacklist ${RUNUSER}/*.lock 570deny ${RUNUSER}/*.lock
556blacklist ${RUNUSER}/inaccessible 571deny ${RUNUSER}/inaccessible
557blacklist ${RUNUSER}/pk-debconf-socket 572deny ${RUNUSER}/pk-debconf-socket
558blacklist ${RUNUSER}/update-notifier.pid 573deny ${RUNUSER}/update-notifier.pid
diff --git a/etc/inc/disable-devel.inc b/etc/inc/disable-devel.inc
index e74b1b40b..a893eb3f3 100644
--- a/etc/inc/disable-devel.inc
+++ b/etc/inc/disable-devel.inc
@@ -5,65 +5,65 @@ include disable-devel.local
5# development tools 5# development tools
6 6
7# clang/llvm 7# clang/llvm
8blacklist ${PATH}/clang* 8deny ${PATH}/clang*
9blacklist ${PATH}/lldb* 9deny ${PATH}/lldb*
10blacklist ${PATH}/llvm* 10deny ${PATH}/llvm*
11# see issue #2106 - it disables hardware acceleration in Firefox on Radeon GPU 11# see issue #2106 - it disables hardware acceleration in Firefox on Radeon GPU
12# blacklist /usr/lib/llvm* 12# blacklist /usr/lib/llvm*
13 13
14# GCC 14# GCC
15blacklist ${PATH}/as 15deny ${PATH}/as
16blacklist ${PATH}/cc 16deny ${PATH}/cc
17blacklist ${PATH}/c++* 17deny ${PATH}/c++*
18blacklist ${PATH}/c8* 18deny ${PATH}/c8*
19blacklist ${PATH}/c9* 19deny ${PATH}/c9*
20blacklist ${PATH}/cpp* 20deny ${PATH}/cpp*
21blacklist ${PATH}/g++* 21deny ${PATH}/g++*
22blacklist ${PATH}/gcc* 22deny ${PATH}/gcc*
23blacklist ${PATH}/gdb 23deny ${PATH}/gdb
24blacklist ${PATH}/ld 24deny ${PATH}/ld
25blacklist ${PATH}/*-gcc* 25deny ${PATH}/*-gcc*
26blacklist ${PATH}/*-g++* 26deny ${PATH}/*-g++*
27blacklist ${PATH}/*-gcc* 27deny ${PATH}/*-gcc*
28blacklist ${PATH}/*-g++* 28deny ${PATH}/*-g++*
29# seems to create problems on Gentoo 29# seems to create problems on Gentoo
30#blacklist /usr/lib/gcc 30#blacklist /usr/lib/gcc
31 31
32#Go 32#Go
33blacklist ${PATH}/gccgo 33deny ${PATH}/gccgo
34blacklist ${PATH}/go 34deny ${PATH}/go
35blacklist ${PATH}/gofmt 35deny ${PATH}/gofmt
36 36
37# Java 37# Java
38blacklist ${PATH}/java 38deny ${PATH}/java
39blacklist ${PATH}/javac 39deny ${PATH}/javac
40blacklist /etc/java 40deny /etc/java
41blacklist /usr/lib/java 41deny /usr/lib/java
42blacklist /usr/share/java 42deny /usr/share/java
43 43
44#OpenSSL 44#OpenSSL
45blacklist ${PATH}/openssl 45deny ${PATH}/openssl
46blacklist ${PATH}/openssl-1.0 46deny ${PATH}/openssl-1.0
47 47
48#Rust 48#Rust
49blacklist ${PATH}/rust-gdb 49deny ${PATH}/rust-gdb
50blacklist ${PATH}/rust-lldb 50deny ${PATH}/rust-lldb
51blacklist ${PATH}/rustc 51deny ${PATH}/rustc
52blacklist ${HOME}/.rustup 52deny ${HOME}/.rustup
53 53
54# tcc - Tiny C Compiler 54# tcc - Tiny C Compiler
55blacklist ${PATH}/tcc 55deny ${PATH}/tcc
56blacklist ${PATH}/x86_64-tcc 56deny ${PATH}/x86_64-tcc
57blacklist /usr/lib/tcc 57deny /usr/lib/tcc
58 58
59# Valgrind 59# Valgrind
60blacklist ${PATH}/valgrind* 60deny ${PATH}/valgrind*
61blacklist /usr/lib/valgrind 61deny /usr/lib/valgrind
62 62
63 63
64# Source-Code 64# Source-Code
65 65
66blacklist /usr/src 66deny /usr/src
67blacklist /usr/local/src 67deny /usr/local/src
68blacklist /usr/include 68deny /usr/include
69blacklist /usr/local/include 69deny /usr/local/include
diff --git a/etc/inc/disable-interpreters.inc b/etc/inc/disable-interpreters.inc
index 5d8a236fb..c77d9a490 100644
--- a/etc/inc/disable-interpreters.inc
+++ b/etc/inc/disable-interpreters.inc
@@ -3,66 +3,66 @@
3include disable-interpreters.local 3include disable-interpreters.local
4 4
5# gjs 5# gjs
6blacklist ${PATH}/gjs 6deny ${PATH}/gjs
7blacklist ${PATH}/gjs-console 7deny ${PATH}/gjs-console
8blacklist /usr/lib/gjs 8deny /usr/lib/gjs
9blacklist /usr/lib/libgjs* 9deny /usr/lib/libgjs*
10blacklist /usr/lib64/gjs 10deny /usr/lib64/gjs
11blacklist /usr/lib64/libgjs* 11deny /usr/lib64/libgjs*
12 12
13# Lua 13# Lua
14blacklist ${PATH}/lua* 14deny ${PATH}/lua*
15blacklist /usr/include/lua* 15deny /usr/include/lua*
16blacklist /usr/lib/liblua* 16deny /usr/lib/liblua*
17blacklist /usr/lib/lua 17deny /usr/lib/lua
18blacklist /usr/lib64/liblua* 18deny /usr/lib64/liblua*
19blacklist /usr/lib64/lua 19deny /usr/lib64/lua
20blacklist /usr/share/lua* 20deny /usr/share/lua*
21 21
22# mozjs 22# mozjs
23blacklist /usr/lib/libmozjs-* 23deny /usr/lib/libmozjs-*
24blacklist /usr/lib64/libmozjs-* 24deny /usr/lib64/libmozjs-*
25 25
26# Node.js 26# Node.js
27blacklist ${PATH}/node 27deny ${PATH}/node
28blacklist /usr/include/node 28deny /usr/include/node
29 29
30# nvm 30# nvm
31blacklist ${HOME}/.nvm 31deny ${HOME}/.nvm
32 32
33# Perl 33# Perl
34blacklist ${PATH}/core_perl 34deny ${PATH}/core_perl
35blacklist ${PATH}/cpan* 35deny ${PATH}/cpan*
36blacklist ${PATH}/perl 36deny ${PATH}/perl
37blacklist ${PATH}/site_perl 37deny ${PATH}/site_perl
38blacklist ${PATH}/vendor_perl 38deny ${PATH}/vendor_perl
39blacklist /usr/lib/perl* 39deny /usr/lib/perl*
40blacklist /usr/lib64/perl* 40deny /usr/lib64/perl*
41blacklist /usr/share/perl* 41deny /usr/share/perl*
42 42
43# PHP 43# PHP
44blacklist ${PATH}/php* 44deny ${PATH}/php*
45blacklist /usr/lib/php* 45deny /usr/lib/php*
46blacklist /usr/share/php* 46deny /usr/share/php*
47 47
48# Ruby 48# Ruby
49blacklist ${PATH}/ruby 49deny ${PATH}/ruby
50blacklist /usr/lib/ruby 50deny /usr/lib/ruby
51 51
52# Programs using python: deluge, firefox addons, filezilla, cherrytree, xchat, hexchat, libreoffice, scribus 52# Programs using python: deluge, firefox addons, filezilla, cherrytree, xchat, hexchat, libreoffice, scribus
53# Python 2 53# Python 2
54blacklist ${PATH}/python2* 54deny ${PATH}/python2*
55blacklist /usr/include/python2* 55deny /usr/include/python2*
56blacklist /usr/lib/python2* 56deny /usr/lib/python2*
57blacklist /usr/local/lib/python2* 57deny /usr/local/lib/python2*
58blacklist /usr/share/python2* 58deny /usr/share/python2*
59 59
60# You will want to add noblacklist for python3 stuff in the firefox and/or chromium profiles if you use the Gnome connector (see Issue #2026) 60# You will want to add noblacklist for python3 stuff in the firefox and/or chromium profiles if you use the Gnome connector (see Issue #2026)
61 61
62# Python 3 62# Python 3
63blacklist ${PATH}/python3* 63deny ${PATH}/python3*
64blacklist /usr/include/python3* 64deny /usr/include/python3*
65blacklist /usr/lib/python3* 65deny /usr/lib/python3*
66blacklist /usr/lib64/python3* 66deny /usr/lib64/python3*
67blacklist /usr/local/lib/python3* 67deny /usr/local/lib/python3*
68blacklist /usr/share/python3* 68deny /usr/share/python3*
diff --git a/etc/inc/disable-passwdmgr.inc b/etc/inc/disable-passwdmgr.inc
index 3ed9a1b14..0a61bc46f 100644
--- a/etc/inc/disable-passwdmgr.inc
+++ b/etc/inc/disable-passwdmgr.inc
@@ -2,18 +2,18 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include disable-passwdmgr.local 3include disable-passwdmgr.local
4 4
5blacklist ${HOME}/.config/Bitwarden 5deny ${HOME}/.config/Bitwarden
6blacklist ${HOME}/.config/KeePass 6deny ${HOME}/.config/KeePass
7blacklist ${HOME}/.config/keepass 7deny ${HOME}/.config/keepass
8blacklist ${HOME}/.config/keepassx 8deny ${HOME}/.config/keepassx
9blacklist ${HOME}/.config/keepassxc 9deny ${HOME}/.config/keepassxc
10blacklist ${HOME}/.config/KeePassXCrc 10deny ${HOME}/.config/KeePassXCrc
11blacklist ${HOME}/.config/Sinew Software Systems 11deny ${HOME}/.config/Sinew Software Systems
12blacklist ${HOME}/.fpm 12deny ${HOME}/.fpm
13blacklist ${HOME}/.keepass 13deny ${HOME}/.keepass
14blacklist ${HOME}/.keepassx 14deny ${HOME}/.keepassx
15blacklist ${HOME}/.keepassxc 15deny ${HOME}/.keepassxc
16blacklist ${HOME}/.lastpass 16deny ${HOME}/.lastpass
17blacklist ${HOME}/.local/share/KeePass 17deny ${HOME}/.local/share/KeePass
18blacklist ${HOME}/.local/share/keepass 18deny ${HOME}/.local/share/keepass
19blacklist ${HOME}/.password-store 19deny ${HOME}/.password-store
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc
index 0e575e5eb..7b5bd0387 100644
--- a/etc/inc/disable-programs.inc
+++ b/etc/inc/disable-programs.inc
@@ -2,1094 +2,1105 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include disable-programs.local 3include disable-programs.local
4 4
5blacklist ${HOME}/Arduino 5deny ${HOME}/.*coin
6blacklist ${HOME}/i2p 6deny ${HOME}/.8pecxstudios
7blacklist ${HOME}/Monero/wallets 7deny ${HOME}/.AndroidStudio*
8blacklist ${HOME}/Nextcloud 8deny ${HOME}/.Atom
9blacklist ${HOME}/Nextcloud/Notes 9deny ${HOME}/.CLion*
10blacklist ${HOME}/SoftMaker 10deny ${HOME}/.FBReader
11blacklist ${HOME}/Standard Notes Backups 11deny ${HOME}/.FontForge
12blacklist ${HOME}/TeamSpeak3-Client-linux_x86 12deny ${HOME}/.IdeaIC*
13blacklist ${HOME}/TeamSpeak3-Client-linux_amd64 13deny ${HOME}/.LuminanceHDR
14blacklist ${HOME}/hyperrogue.ini 14deny ${HOME}/.Mathematica
15blacklist ${HOME}/mps 15deny ${HOME}/.Natron
16blacklist ${HOME}/wallet.dat 16deny ${HOME}/.PlayOnLinux
17blacklist ${HOME}/.*coin 17deny ${HOME}/.PyCharm*
18blacklist ${HOME}/.8pecxstudios 18deny ${HOME}/.Sayonara
19blacklist ${HOME}/.AndroidStudio* 19deny ${HOME}/.Steam
20blacklist ${HOME}/.Atom 20deny ${HOME}/.Steampath
21blacklist ${HOME}/.CLion* 21deny ${HOME}/.Steampid
22blacklist ${HOME}/.FBReader 22deny ${HOME}/.TelegramDesktop
23blacklist ${HOME}/.FontForge 23deny ${HOME}/.VSCodium
24blacklist ${HOME}/.IdeaIC* 24deny ${HOME}/.ViberPC
25blacklist ${HOME}/.LuminanceHDR 25deny ${HOME}/.VirtualBox
26blacklist ${HOME}/.Mathematica 26deny ${HOME}/.WebStorm*
27blacklist ${HOME}/.Natron 27deny ${HOME}/.Wolfram Research
28blacklist ${HOME}/.PlayOnLinux 28deny ${HOME}/.ZAP
29blacklist ${HOME}/.PyCharm* 29deny ${HOME}/.aMule
30blacklist ${HOME}/.Sayonara 30deny ${HOME}/.abook
31blacklist ${HOME}/.Steam 31deny ${HOME}/.addressbook
32blacklist ${HOME}/.Steampath 32deny ${HOME}/.alpine-smime
33blacklist ${HOME}/.Steampid 33deny ${HOME}/.android
34blacklist ${HOME}/.TelegramDesktop 34deny ${HOME}/.anydesk
35blacklist ${HOME}/.VSCodium 35deny ${HOME}/.arduino15
36blacklist ${HOME}/.ViberPC 36deny ${HOME}/.aria2
37blacklist ${HOME}/.VirtualBox 37deny ${HOME}/.arm
38blacklist ${HOME}/.WebStorm* 38deny ${HOME}/.asunder_album_artist
39blacklist ${HOME}/.Wolfram Research 39deny ${HOME}/.asunder_album_genre
40blacklist ${HOME}/.ZAP 40deny ${HOME}/.asunder_album_title
41blacklist ${HOME}/.abook 41deny ${HOME}/.atom
42blacklist ${HOME}/.addressbook 42deny ${HOME}/.attic
43blacklist ${HOME}/.alpine-smime 43deny ${HOME}/.audacity-data
44blacklist ${HOME}/.aMule 44deny ${HOME}/.avidemux6
45blacklist ${HOME}/.android 45deny ${HOME}/.ballbuster.hs
46blacklist ${HOME}/.anydesk 46deny ${HOME}/.balsa
47blacklist ${HOME}/.arduino15 47deny ${HOME}/.bcast5
48blacklist ${HOME}/.aria2 48deny ${HOME}/.bibletime
49blacklist ${HOME}/.arm 49deny ${HOME}/.bitcoin
50blacklist ${HOME}/.asunder_album_artist 50deny ${HOME}/.blobby
51blacklist ${HOME}/.asunder_album_genre 51deny ${HOME}/.bogofilter
52blacklist ${HOME}/.asunder_album_title 52deny ${HOME}/.bzf
53blacklist ${HOME}/.atom 53deny ${HOME}/.cargo/*
54blacklist ${HOME}/.attic 54deny ${HOME}/.claws-mail
55blacklist ${HOME}/.audacity-data 55deny ${HOME}/.cliqz
56blacklist ${HOME}/.avidemux6 56deny ${HOME}/.clion*
57blacklist ${HOME}/.ballbuster.hs 57deny ${HOME}/.clonk
58blacklist ${HOME}/.balsa 58deny ${HOME}/.config/0ad
59blacklist ${HOME}/.bcast5 59deny ${HOME}/.config/2048-qt
60blacklist ${HOME}/.bibletime 60deny ${HOME}/.config/Atom
61blacklist ${HOME}/.bitcoin 61deny ${HOME}/.config/Audaciousrc
62blacklist ${HOME}/.blobby 62deny ${HOME}/.config/Authenticator
63blacklist ${HOME}/.bogofilter 63deny ${HOME}/.config/Beaker Browser
64blacklist ${HOME}/.bzf 64deny ${HOME}/.config/Bitcoin
65blacklist ${HOME}/.cargo/* 65deny ${HOME}/.config/Bitwarden
66blacklist ${HOME}/.claws-mail 66deny ${HOME}/.config/Brackets
67blacklist ${HOME}/.cliqz 67deny ${HOME}/.config/BraveSoftware
68blacklist ${HOME}/.clonk 68deny ${HOME}/.config/Clementine
69blacklist ${HOME}/.config/0ad 69deny ${HOME}/.config/Code
70blacklist ${HOME}/.config/2048-qt 70deny ${HOME}/.config/Code - OSS
71blacklist ${HOME}/.config/Atom 71deny ${HOME}/.config/Code Industry
72blacklist ${HOME}/.config/Audaciousrc 72deny ${HOME}/.config/Cryptocat
73blacklist ${HOME}/.config/Authenticator 73deny ${HOME}/.config/Debauchee/Barrier.conf
74blacklist ${HOME}/.config/Beaker Browser 74deny ${HOME}/.config/Dharkael
75blacklist ${HOME}/.config/Bitcoin 75deny ${HOME}/.config/ENCOM
76blacklist ${HOME}/.config/Bitwarden 76deny ${HOME}/.config/Element
77blacklist ${HOME}/.config/Brackets 77deny ${HOME}/.config/Element (Riot)
78blacklist ${HOME}/.config/BraveSoftware 78deny ${HOME}/.config/Enox
79blacklist ${HOME}/.config/Clementine 79deny ${HOME}/.config/Epic
80blacklist ${HOME}/.config/Code 80deny ${HOME}/.config/Ferdi
81blacklist ${HOME}/.config/Code - OSS 81deny ${HOME}/.config/Flavio Tordini
82blacklist ${HOME}/.config/Code Industry 82deny ${HOME}/.config/Franz
83blacklist ${HOME}/.config/Cryptocat 83deny ${HOME}/.config/FreeCAD
84blacklist ${HOME}/.config/Debauchee/Barrier.conf 84deny ${HOME}/.config/FreeTube
85blacklist ${HOME}/.config/Dharkael 85deny ${HOME}/.config/Fritzing
86blacklist ${HOME}/.config/Element 86deny ${HOME}/.config/GIMP
87blacklist ${HOME}/.config/Element (Riot) 87deny ${HOME}/.config/GitHub Desktop
88blacklist ${HOME}/.config/ENCOM 88deny ${HOME}/.config/Gitter
89blacklist ${HOME}/.config/Enox 89deny ${HOME}/.config/Google
90blacklist ${HOME}/.config/Epic 90deny ${HOME}/.config/Google Play Music Desktop Player
91blacklist ${HOME}/.config/Ferdi 91deny ${HOME}/.config/Gpredict
92blacklist ${HOME}/.config/Flavio Tordini 92deny ${HOME}/.config/INRIA
93blacklist ${HOME}/.config/Franz 93deny ${HOME}/.config/InSilmaril
94blacklist ${HOME}/.config/FreeCAD 94deny ${HOME}/.config/Jitsi Meet
95blacklist ${HOME}/.config/FreeTube 95deny ${HOME}/.config/JetBrains/CLion*
96blacklist ${HOME}/.config/Fritzing 96deny ${HOME}/.config/KDE/neochat
97blacklist ${HOME}/.config/GIMP 97deny ${HOME}/.config/Kid3
98blacklist ${HOME}/.config/GitHub Desktop 98deny ${HOME}/.config/Kingsoft
99blacklist ${HOME}/.config/Gitter 99deny ${HOME}/.config/LibreCAD
100blacklist ${HOME}/.config/Google 100deny ${HOME}/.config/Loop_Hero
101blacklist ${HOME}/.config/Google Play Music Desktop Player 101deny ${HOME}/.config/Luminance
102blacklist ${HOME}/.config/Gpredict 102deny ${HOME}/.config/LyX
103blacklist ${HOME}/.config/INRIA 103deny ${HOME}/.config/Mattermost
104blacklist ${HOME}/.config/InSilmaril 104deny ${HOME}/.config/Meltytech
105blacklist ${HOME}/.config/Jitsi Meet 105deny ${HOME}/.config/Mendeley Ltd.
106blacklist ${HOME}/.config/KDE/neochat 106deny ${HOME}/.config/Microsoft
107blacklist ${HOME}/.config/Kid3 107deny ${HOME}/.config/Min
108blacklist ${HOME}/.config/Kingsoft 108deny ${HOME}/.config/ModTheSpire
109blacklist ${HOME}/.config/LibreCAD 109deny ${HOME}/.config/Mousepad
110blacklist ${HOME}/.config/Loop_Hero 110deny ${HOME}/.config/Mumble
111blacklist ${HOME}/.config/Luminance 111deny ${HOME}/.config/MusE
112blacklist ${HOME}/.config/LyX 112deny ${HOME}/.config/MuseScore
113blacklist ${HOME}/.config/Mattermost 113deny ${HOME}/.config/MusicBrainz
114blacklist ${HOME}/.config/Meltytech 114deny ${HOME}/.config/Nathan Osman
115blacklist ${HOME}/.config/Mendeley Ltd. 115deny ${HOME}/.config/Nextcloud
116blacklist ${HOME}/.config/Min 116deny ${HOME}/.config/NitroShare
117blacklist ${HOME}/.config/ModTheSpire 117deny ${HOME}/.config/Nylas Mail
118blacklist ${HOME}/.config/Mousepad 118deny ${HOME}/.config/PBE
119blacklist ${HOME}/.config/Mumble 119deny ${HOME}/.config/PacmanLogViewer
120blacklist ${HOME}/.config/MusE 120deny ${HOME}/.config/PawelStolowski
121blacklist ${HOME}/.config/MuseScore 121deny ${HOME}/.config/Philipp Schmieder
122blacklist ${HOME}/.config/MusicBrainz 122deny ${HOME}/.config/Pinta
123blacklist ${HOME}/.config/Nathan Osman 123deny ${HOME}/.config/QGIS
124blacklist ${HOME}/.config/Nextcloud 124deny ${HOME}/.config/QMediathekView
125blacklist ${HOME}/.config/Nylas Mail 125deny ${HOME}/.config/Qlipper
126blacklist ${HOME}/.config/PacmanLogViewer 126deny ${HOME}/.config/QuiteRss
127blacklist ${HOME}/.config/PawelStolowski 127deny ${HOME}/.config/QuiteRssrc
128blacklist ${HOME}/.config/PBE 128deny ${HOME}/.config/Quotient
129blacklist ${HOME}/.config/Philipp Schmieder 129deny ${HOME}/.config/Rambox
130blacklist ${HOME}/.config/QGIS 130deny ${HOME}/.config/Riot
131blacklist ${HOME}/.config/QMediathekView 131deny ${HOME}/.config/Rocket.Chat
132blacklist ${HOME}/.config/Qlipper 132deny ${HOME}/.config/RogueLegacy
133blacklist ${HOME}/.config/QuiteRss 133deny ${HOME}/.config/RogueLegacyStorageContainer
134blacklist ${HOME}/.config/QuiteRssrc 134deny ${HOME}/.config/Signal
135blacklist ${HOME}/.config/Quotient 135deny ${HOME}/.config/Sinew Software Systems
136blacklist ${HOME}/.config/Rambox 136deny ${HOME}/.config/Slack
137blacklist ${HOME}/.config/Riot 137deny ${HOME}/.config/Standard Notes
138blacklist ${HOME}/.config/Rocket.Chat 138deny ${HOME}/.config/SubDownloader
139blacklist ${HOME}/.config/RogueLegacy 139deny ${HOME}/.config/Thunar
140blacklist ${HOME}/.config/RogueLegacyStorageContainer 140deny ${HOME}/.config/Twitch
141blacklist ${HOME}/.config/Signal 141deny ${HOME}/.config/Unknown Organization
142blacklist ${HOME}/.config/Sinew Software Systems 142deny ${HOME}/.config/VirtualBox
143blacklist ${HOME}/.config/Slack 143deny ${HOME}/.config/Whalebird
144blacklist ${HOME}/.config/Standard Notes 144deny ${HOME}/.config/Wire
145blacklist ${HOME}/.config/SubDownloader 145deny ${HOME}/.config/Youtube
146blacklist ${HOME}/.config/Thunar 146deny ${HOME}/.config/ZeGrapher Project
147blacklist ${HOME}/.config/Twitch 147deny ${HOME}/.config/Zeal
148blacklist ${HOME}/.config/Unknown Organization 148deny ${HOME}/.config/Zulip
149blacklist ${HOME}/.config/VirtualBox 149deny ${HOME}/.config/aacs
150blacklist ${HOME}/.config/Wire 150deny ${HOME}/.config/abiword
151blacklist ${HOME}/.config/Youtube 151deny ${HOME}/.config/agenda
152blacklist ${HOME}/.config/Zeal 152deny ${HOME}/.config/akonadi*
153blacklist ${HOME}/.config/ZeGrapher Project 153deny ${HOME}/.config/akregatorrc
154blacklist ${HOME}/.config/aacs 154deny ${HOME}/.config/alacritty
155blacklist ${HOME}/.config/abiword 155deny ${HOME}/.config/ardour4
156blacklist ${HOME}/.config/agenda 156deny ${HOME}/.config/ardour5
157blacklist ${HOME}/.config/akonadi* 157deny ${HOME}/.config/aria2
158blacklist ${HOME}/.config/akregatorrc 158deny ${HOME}/.config/arkrc
159blacklist ${HOME}/.config/alacritty 159deny ${HOME}/.config/artha.conf
160blacklist ${HOME}/.config/ardour4 160deny ${HOME}/.config/artha.log
161blacklist ${HOME}/.config/ardour5 161deny ${HOME}/.config/asunder
162blacklist ${HOME}/.config/aria2 162deny ${HOME}/.config/atril
163blacklist ${HOME}/.config/arkrc 163deny ${HOME}/.config/audacious
164blacklist ${HOME}/.config/artha.conf 164deny ${HOME}/.config/autokey
165blacklist ${HOME}/.config/artha.log 165deny ${HOME}/.config/avidemux3_qt5rc
166blacklist ${HOME}/.config/asunder 166deny ${HOME}/.config/aweather
167blacklist ${HOME}/.config/atril 167deny ${HOME}/.config/backintime
168blacklist ${HOME}/.config/audacious 168deny ${HOME}/.config/baloofilerc
169blacklist ${HOME}/.config/autokey 169deny ${HOME}/.config/baloorc
170blacklist ${HOME}/.config/avidemux3_qt5rc 170deny ${HOME}/.config/bcompare
171blacklist ${HOME}/.config/aweather 171deny ${HOME}/.config/blender
172blacklist ${HOME}/.config/backintime 172deny ${HOME}/.config/bless
173blacklist ${HOME}/.config/baloofilerc 173deny ${HOME}/.config/bnox
174blacklist ${HOME}/.config/baloorc 174deny ${HOME}/.config/borg
175blacklist ${HOME}/.config/bcompare 175deny ${HOME}/.config/brasero
176blacklist ${HOME}/.config/blender 176deny ${HOME}/.config/brave
177blacklist ${HOME}/.config/bless 177deny ${HOME}/.config/brave-flags.conf
178blacklist ${HOME}/.config/bnox 178deny ${HOME}/.config/caja
179blacklist ${HOME}/.config/borg 179deny ${HOME}/.config/calibre
180blacklist ${HOME}/.config/brasero 180deny ${HOME}/.config/cantata
181blacklist ${HOME}/.config/brave 181deny ${HOME}/.config/catfish
182blacklist ${HOME}/.config/brave-flags.conf 182deny ${HOME}/.config/cawbird
183blacklist ${HOME}/.config/caja 183deny ${HOME}/.config/celluloid
184blacklist ${HOME}/.config/calibre 184deny ${HOME}/.config/cherrytree
185blacklist ${HOME}/.config/cantata 185deny ${HOME}/.config/chrome-beta-flags.conf
186blacklist ${HOME}/.config/catfish 186deny ${HOME}/.config/chrome-beta-flags.config
187blacklist ${HOME}/.config/cawbird 187deny ${HOME}/.config/chrome-flags.conf
188blacklist ${HOME}/.config/celluloid 188deny ${HOME}/.config/chrome-flags.config
189blacklist ${HOME}/.config/cherrytree 189deny ${HOME}/.config/chrome-unstable-flags.conf
190blacklist ${HOME}/.config/chrome-beta-flags.conf 190deny ${HOME}/.config/chrome-unstable-flags.config
191blacklist ${HOME}/.config/chrome-beta-flags.config 191deny ${HOME}/.config/chromium
192blacklist ${HOME}/.config/chrome-flags.conf 192deny ${HOME}/.config/chromium-dev
193blacklist ${HOME}/.config/chrome-flags.config 193deny ${HOME}/.config/chromium-flags.conf
194blacklist ${HOME}/.config/chrome-unstable-flags.conf 194deny ${HOME}/.config/clipit
195blacklist ${HOME}/.config/chrome-unstable-flags.config 195deny ${HOME}/.config/cliqz
196blacklist ${HOME}/.config/chromium 196deny ${HOME}/.config/cmus
197blacklist ${HOME}/.config/chromium-dev 197deny ${HOME}/.config/com.github.bleakgrey.tootle
198blacklist ${HOME}/.config/chromium-flags.conf 198deny ${HOME}/.config/corebird
199blacklist ${HOME}/.config/clipit 199deny ${HOME}/.config/cower
200blacklist ${HOME}/.config/cliqz 200deny ${HOME}/.config/coyim
201blacklist ${HOME}/.config/cmus 201deny ${HOME}/.config/d-feet
202blacklist ${HOME}/.config/com.github.bleakgrey.tootle 202deny ${HOME}/.config/darktable
203blacklist ${HOME}/.config/corebird 203deny ${HOME}/.config/deadbeef
204blacklist ${HOME}/.config/cower 204deny ${HOME}/.config/deluge
205blacklist ${HOME}/.config/coyim 205deny ${HOME}/.config/devilspie2
206blacklist ${HOME}/.config/darktable 206deny ${HOME}/.config/digikam
207blacklist ${HOME}/.config/deadbeef 207deny ${HOME}/.config/digikamrc
208blacklist ${HOME}/.config/deluge 208deny ${HOME}/.config/discord
209blacklist ${HOME}/.config/devilspie2 209deny ${HOME}/.config/discordcanary
210blacklist ${HOME}/.config/digikam 210deny ${HOME}/.config/dkl
211blacklist ${HOME}/.config/digikamrc 211deny ${HOME}/.config/dnox
212blacklist ${HOME}/.config/discord 212deny ${HOME}/.config/dolphin-emu
213blacklist ${HOME}/.config/discordcanary 213deny ${HOME}/.config/dolphinrc
214blacklist ${HOME}/.config/dkl 214deny ${HOME}/.config/dragonplayerrc
215blacklist ${HOME}/.config/dnox 215deny ${HOME}/.config/draw.io
216blacklist ${HOME}/.config/dolphin-emu 216deny ${HOME}/.config/electron-mail
217blacklist ${HOME}/.config/dolphinrc 217deny ${HOME}/.config/emaildefaults
218blacklist ${HOME}/.config/dragonplayerrc 218deny ${HOME}/.config/emailidentities
219blacklist ${HOME}/.config/draw.io 219deny ${HOME}/.config/emilia
220blacklist ${HOME}/.config/d-feet 220deny ${HOME}/.config/enchant
221blacklist ${HOME}/.config/electron-mail 221deny ${HOME}/.config/eog
222blacklist ${HOME}/.config/emaildefaults 222deny ${HOME}/.config/epiphany
223blacklist ${HOME}/.config/emailidentities 223deny ${HOME}/.config/equalx
224blacklist ${HOME}/.config/emilia 224deny ${HOME}/.config/evince
225blacklist ${HOME}/.config/enchant 225deny ${HOME}/.config/evolution
226blacklist ${HOME}/.config/eog 226deny ${HOME}/.config/falkon
227blacklist ${HOME}/.config/epiphany 227deny ${HOME}/.config/filezilla
228blacklist ${HOME}/.config/equalx 228deny ${HOME}/.config/flameshot
229blacklist ${HOME}/.config/evince 229deny ${HOME}/.config/flaska.net
230blacklist ${HOME}/.config/evolution 230deny ${HOME}/.config/flowblade
231blacklist ${HOME}/.config/falkon 231deny ${HOME}/.config/font-manager
232blacklist ${HOME}/.config/filezilla 232deny ${HOME}/.config/freecol
233blacklist ${HOME}/.config/flameshot 233deny ${HOME}/.config/gajim
234blacklist ${HOME}/.config/flaska.net 234deny ${HOME}/.config/galculator
235blacklist ${HOME}/.config/flowblade 235deny ${HOME}/.config/gconf
236blacklist ${HOME}/.config/font-manager 236deny ${HOME}/.config/geany
237blacklist ${HOME}/.config/freecol 237deny ${HOME}/.config/geary
238blacklist ${HOME}/.config/gajim 238deny ${HOME}/.config/gedit
239blacklist ${HOME}/.config/galculator 239deny ${HOME}/.config/geeqie
240blacklist ${HOME}/.config/gconf 240deny ${HOME}/.config/ghb
241blacklist ${HOME}/.config/geany 241deny ${HOME}/.config/ghostwriter
242blacklist ${HOME}/.config/geary 242deny ${HOME}/.config/git
243blacklist ${HOME}/.config/gedit 243deny ${HOME}/.config/git-cola
244blacklist ${HOME}/.config/geeqie 244deny ${HOME}/.config/glade.conf
245blacklist ${HOME}/.config/ghb 245deny ${HOME}/.config/globaltime
246blacklist ${HOME}/.config/ghostwriter 246deny ${HOME}/.config/gmpc
247blacklist ${HOME}/.config/git 247deny ${HOME}/.config/gnome-builder
248blacklist ${HOME}/.config/git-cola 248deny ${HOME}/.config/gnome-chess
249blacklist ${HOME}/.config/glade.conf 249deny ${HOME}/.config/gnome-control-center
250blacklist ${HOME}/.config/globaltime 250deny ${HOME}/.config/gnome-initial-setup-done
251blacklist ${HOME}/.config/gmpc 251deny ${HOME}/.config/gnome-latex
252blacklist ${HOME}/.config/gnome-builder 252deny ${HOME}/.config/gnome-mplayer
253blacklist ${HOME}/.config/gnome-chess 253deny ${HOME}/.config/gnome-mpv
254blacklist ${HOME}/.config/gnome-control-center 254deny ${HOME}/.config/gnome-pie
255blacklist ${HOME}/.config/gnome-initial-setup-done 255deny ${HOME}/.config/gnome-session
256blacklist ${HOME}/.config/gnome-latex 256deny ${HOME}/.config/gnote
257blacklist ${HOME}/.config/gnome-mplayer 257deny ${HOME}/.config/godot
258blacklist ${HOME}/.config/gnome-mpv 258deny ${HOME}/.config/google-chrome
259blacklist ${HOME}/.config/gnome-pie 259deny ${HOME}/.config/google-chrome-beta
260blacklist ${HOME}/.config/gnome-session 260deny ${HOME}/.config/google-chrome-unstable
261blacklist ${HOME}/.config/gnote 261deny ${HOME}/.config/gpicview
262blacklist ${HOME}/.config/godot 262deny ${HOME}/.config/gthumb
263blacklist ${HOME}/.config/google-chrome 263deny ${HOME}/.config/gummi
264blacklist ${HOME}/.config/google-chrome-beta 264deny ${HOME}/.config/guvcview2
265blacklist ${HOME}/.config/google-chrome-unstable 265deny ${HOME}/.config/gwenviewrc
266blacklist ${HOME}/.config/gpicview 266deny ${HOME}/.config/hexchat
267blacklist ${HOME}/.config/gthumb 267deny ${HOME}/.config/homebank
268blacklist ${HOME}/.config/gummi 268deny ${HOME}/.config/i2p
269blacklist ${HOME}/.config/guvcview2 269deny ${HOME}/.config/inkscape
270blacklist ${HOME}/.config/gwenviewrc 270deny ${HOME}/.config/inox
271blacklist ${HOME}/.config/hexchat 271deny ${HOME}/.config/iridium
272blacklist ${HOME}/.config/homebank 272deny ${HOME}/.config/itch
273blacklist ${HOME}/.config/i2p 273deny ${HOME}/.config/jami
274blacklist ${HOME}/.config/inkscape 274deny ${HOME}/.config/jd-gui.cfg
275blacklist ${HOME}/.config/inox 275deny ${HOME}/.config/k3brc
276blacklist ${HOME}/.config/iridium 276deny ${HOME}/.config/kaffeinerc
277blacklist ${HOME}/.config/itch 277deny ${HOME}/.config/kalgebrarc
278blacklist ${HOME}/.config/jami 278deny ${HOME}/.config/katemetainfos
279blacklist ${HOME}/.config/jd-gui.cfg 279deny ${HOME}/.config/katepartrc
280blacklist ${HOME}/.config/k3brc 280deny ${HOME}/.config/katerc
281blacklist ${HOME}/.config/kaffeinerc 281deny ${HOME}/.config/kateschemarc
282blacklist ${HOME}/.config/kalgebrarc 282deny ${HOME}/.config/katesyntaxhighlightingrc
283blacklist ${HOME}/.config/katemetainfos 283deny ${HOME}/.config/katevirc
284blacklist ${HOME}/.config/katepartrc 284deny ${HOME}/.config/kazam
285blacklist ${HOME}/.config/katerc 285deny ${HOME}/.config/kdeconnect
286blacklist ${HOME}/.config/kateschemarc 286deny ${HOME}/.config/kdenliverc
287blacklist ${HOME}/.config/katesyntaxhighlightingrc 287deny ${HOME}/.config/kdiff3fileitemactionrc
288blacklist ${HOME}/.config/katevirc 288deny ${HOME}/.config/kdiff3rc
289blacklist ${HOME}/.config/kazam 289deny ${HOME}/.config/kfindrc
290blacklist ${HOME}/.config/kdeconnect 290deny ${HOME}/.config/kgetrc
291blacklist ${HOME}/.config/kdenliverc 291deny ${HOME}/.config/kid3rc
292blacklist ${HOME}/.config/kdiff3fileitemactionrc 292deny ${HOME}/.config/klavaro
293blacklist ${HOME}/.config/kdiff3rc 293deny ${HOME}/.config/klipperrc
294blacklist ${HOME}/.config/kfindrc 294deny ${HOME}/.config/kmail2rc
295blacklist ${HOME}/.config/kgetrc 295deny ${HOME}/.config/kmailsearchindexingrc
296blacklist ${HOME}/.config/kid3rc 296deny ${HOME}/.config/kmplayerrc
297blacklist ${HOME}/.config/klavaro 297deny ${HOME}/.config/knotesrc
298blacklist ${HOME}/.config/klipperrc 298deny ${HOME}/.config/konversation.notifyrc
299blacklist ${HOME}/.config/kmail2rc 299deny ${HOME}/.config/konversationrc
300blacklist ${HOME}/.config/kmailsearchindexingrc 300deny ${HOME}/.config/kritarc
301blacklist ${HOME}/.config/kmplayerrc 301deny ${HOME}/.config/ktorrentrc
302blacklist ${HOME}/.config/knotesrc 302deny ${HOME}/.config/ktouch2rc
303blacklist ${HOME}/.config/konversationrc 303deny ${HOME}/.config/kube
304blacklist ${HOME}/.config/konversation.notifyrc 304deny ${HOME}/.config/kwriterc
305blacklist ${HOME}/.config/kritarc 305deny ${HOME}/.config/leafpad
306blacklist ${HOME}/.config/ktorrentrc 306deny ${HOME}/.config/libreoffice
307blacklist ${HOME}/.config/ktouch2rc 307deny ${HOME}/.config/liferea
308blacklist ${HOME}/.config/kube 308deny ${HOME}/.config/linphone
309blacklist ${HOME}/.config/kwriterc 309deny ${HOME}/.config/lugaru
310blacklist ${HOME}/.config/leafpad 310deny ${HOME}/.config/lutris
311blacklist ${HOME}/.config/libreoffice 311deny ${HOME}/.config/lximage-qt
312blacklist ${HOME}/.config/liferea 312deny ${HOME}/.config/mailtransports
313blacklist ${HOME}/.config/linphone 313deny ${HOME}/.config/mana
314blacklist ${HOME}/.config/lugaru 314deny ${HOME}/.config/mate-calc
315blacklist ${HOME}/.config/lutris 315deny ${HOME}/.config/mate/eom
316blacklist ${HOME}/.config/lximage-qt 316deny ${HOME}/.config/mate/mate-dictionary
317blacklist ${HOME}/.config/mailtransports 317deny ${HOME}/.config/matrix-mirage
318blacklist ${HOME}/.config/mana 318deny ${HOME}/.config/mcomix
319blacklist ${HOME}/.config/mate-calc 319deny ${HOME}/.config/meld
320blacklist ${HOME}/.config/mate/eom 320deny ${HOME}/.config/menulibre.cfg
321blacklist ${HOME}/.config/mate/mate-dictionary 321deny ${HOME}/.config/meteo-qt
322blacklist ${HOME}/.config/matrix-mirage 322deny ${HOME}/.config/mfusion
323blacklist ${HOME}/.config/mcomix 323deny ${HOME}/.config/microsoft-edge-beta
324blacklist ${HOME}/.config/meld 324deny ${HOME}/.config/microsoft-edge-dev
325blacklist ${HOME}/.config/meteo-qt 325deny ${HOME}/.config/midori
326blacklist ${HOME}/.config/menulibre.cfg 326deny ${HOME}/.config/mirage
327blacklist ${HOME}/.config/mfusion 327deny ${HOME}/.config/mono
328blacklist ${HOME}/.config/Microsoft 328deny ${HOME}/.config/mpDris2
329blacklist ${HOME}/.config/microsoft-edge-dev 329deny ${HOME}/.config/mpd
330blacklist ${HOME}/.config/midori 330deny ${HOME}/.config/mps-youtube
331blacklist ${HOME}/.config/mirage 331deny ${HOME}/.config/mpv
332blacklist ${HOME}/.config/mono 332deny ${HOME}/.config/mupen64plus
333blacklist ${HOME}/.config/mpDris2 333deny ${HOME}/.config/mutt
334blacklist ${HOME}/.config/mpd 334deny ${HOME}/.config/mutter
335blacklist ${HOME}/.config/mps-youtube 335deny ${HOME}/.config/mypaint
336blacklist ${HOME}/.config/mpv 336deny ${HOME}/.config/nano
337blacklist ${HOME}/.config/mupen64plus 337deny ${HOME}/.config/nautilus
338blacklist ${HOME}/.config/mutt 338deny ${HOME}/.config/nemo
339blacklist ${HOME}/.config/mutter 339deny ${HOME}/.config/neochat.notifyrc
340blacklist ${HOME}/.config/mypaint 340deny ${HOME}/.config/neochatrc
341blacklist ${HOME}/.config/nano 341deny ${HOME}/.config/neomutt
342blacklist ${HOME}/.config/nautilus 342deny ${HOME}/.config/netsurf
343blacklist ${HOME}/.config/nemo 343deny ${HOME}/.config/newsbeuter
344blacklist ${HOME}/.config/neochatrc 344deny ${HOME}/.config/newsboat
345blacklist ${HOME}/.config/neochat.notifyrc 345deny ${HOME}/.config/newsflash
346blacklist ${HOME}/.config/neomutt 346deny ${HOME}/.config/nheko
347blacklist ${HOME}/.config/netsurf 347deny ${HOME}/.config/nomacs
348blacklist ${HOME}/.config/newsbeuter 348deny ${HOME}/.config/nuclear
349blacklist ${HOME}/.config/newsboat 349deny ${HOME}/.config/obs-studio
350blacklist ${HOME}/.config/newsflash 350deny ${HOME}/.config/okularpartrc
351blacklist ${HOME}/.config/nheko 351deny ${HOME}/.config/okularrc
352blacklist ${HOME}/.config/NitroShare 352deny ${HOME}/.config/onboard
353blacklist ${HOME}/.config/nomacs 353deny ${HOME}/.config/onionshare
354blacklist ${HOME}/.config/nuclear 354deny ${HOME}/.config/onlyoffice
355blacklist ${HOME}/.config/obs-studio 355deny ${HOME}/.config/openmw
356blacklist ${HOME}/.config/okularpartrc 356deny ${HOME}/.config/opera
357blacklist ${HOME}/.config/okularrc 357deny ${HOME}/.config/opera-beta
358blacklist ${HOME}/.config/onboard 358deny ${HOME}/.config/orage
359blacklist ${HOME}/.config/onionshare 359deny ${HOME}/.config/org.gabmus.gfeeds.json
360blacklist ${HOME}/.config/onlyoffice 360deny ${HOME}/.config/org.gabmus.gfeeds.saved_articles
361blacklist ${HOME}/.config/openmw 361deny ${HOME}/.config/org.kde.gwenviewrc
362blacklist ${HOME}/.config/opera 362deny ${HOME}/.config/otter
363blacklist ${HOME}/.config/opera-beta 363deny ${HOME}/.config/pavucontrol-qt
364blacklist ${HOME}/.config/orage 364deny ${HOME}/.config/pavucontrol.ini
365blacklist ${HOME}/.config/org.gabmus.gfeeds.json 365deny ${HOME}/.config/pcmanfm
366blacklist ${HOME}/.config/org.gabmus.gfeeds.saved_articles 366deny ${HOME}/.config/pdfmod
367blacklist ${HOME}/.config/org.kde.gwenviewrc 367deny ${HOME}/.config/pipe-viewer
368blacklist ${HOME}/.config/otter 368deny ${HOME}/.config/pitivi
369blacklist ${HOME}/.config/pavucontrol-qt 369deny ${HOME}/.config/pix
370blacklist ${HOME}/.config/pavucontrol.ini 370deny ${HOME}/.config/pluma
371blacklist ${HOME}/.config/pcmanfm 371deny ${HOME}/.config/ppsspp
372blacklist ${HOME}/.config/pdfmod 372deny ${HOME}/.config/pragha
373blacklist ${HOME}/.config/Pinta 373deny ${HOME}/.config/profanity
374blacklist ${HOME}/.config/pipe-viewer 374deny ${HOME}/.config/psi
375blacklist ${HOME}/.config/pitivi 375deny ${HOME}/.config/psi+
376blacklist ${HOME}/.config/pix 376deny ${HOME}/.config/qBittorrent
377blacklist ${HOME}/.config/pluma 377deny ${HOME}/.config/qBittorrentrc
378blacklist ${HOME}/.config/ppsspp 378deny ${HOME}/.config/qnapi.ini
379blacklist ${HOME}/.config/pragha 379deny ${HOME}/.config/qpdfview
380blacklist ${HOME}/.config/profanity 380deny ${HOME}/.config/quodlibet
381blacklist ${HOME}/.config/psi 381deny ${HOME}/.config/qupzilla
382blacklist ${HOME}/.config/psi+ 382deny ${HOME}/.config/qutebrowser
383blacklist ${HOME}/.config/qBittorrent 383deny ${HOME}/.config/ranger
384blacklist ${HOME}/.config/qBittorrentrc 384deny ${HOME}/.config/redshift
385blacklist ${HOME}/.config/qnapi.ini 385deny ${HOME}/.config/redshift.conf
386blacklist ${HOME}/.config/qpdfview 386deny ${HOME}/.config/remmina
387blacklist ${HOME}/.config/quodlibet 387deny ${HOME}/.config/ristretto
388blacklist ${HOME}/.config/qupzilla 388deny ${HOME}/.config/rtv
389blacklist ${HOME}/.config/qutebrowser 389deny ${HOME}/.config/scribus
390blacklist ${HOME}/.config/ranger 390deny ${HOME}/.config/scribusrc
391blacklist ${HOME}/.config/redshift 391deny ${HOME}/.config/sinew.in
392blacklist ${HOME}/.config/redshift.conf 392deny ${HOME}/.config/sink
393blacklist ${HOME}/.config/remmina 393deny ${HOME}/.config/skypeforlinux
394blacklist ${HOME}/.config/ristretto 394deny ${HOME}/.config/slimjet
395blacklist ${HOME}/.config/rtv 395deny ${HOME}/.config/smplayer
396blacklist ${HOME}/.config/scribus 396deny ${HOME}/.config/smtube
397blacklist ${HOME}/.config/scribusrc 397deny ${HOME}/.config/smuxi
398blacklist ${HOME}/.config/sinew.in 398deny ${HOME}/.config/snox
399blacklist ${HOME}/.config/sink 399deny ${HOME}/.config/sound-juicer
400blacklist ${HOME}/.config/skypeforlinux 400deny ${HOME}/.config/specialmailcollectionsrc
401blacklist ${HOME}/.config/slimjet 401deny ${HOME}/.config/spectaclerc
402blacklist ${HOME}/.config/smplayer 402deny ${HOME}/.config/spotify
403blacklist ${HOME}/.config/smtube 403deny ${HOME}/.config/sqlitebrowser
404blacklist ${HOME}/.config/smuxi 404deny ${HOME}/.config/stellarium
405blacklist ${HOME}/.config/snox 405deny ${HOME}/.config/straw-viewer
406blacklist ${HOME}/.config/sound-juicer 406deny ${HOME}/.config/strawberry
407blacklist ${HOME}/.config/specialmailcollectionsrc 407deny ${HOME}/.config/supertuxkart
408blacklist ${HOME}/.config/spectaclerc 408deny ${HOME}/.config/synfig
409blacklist ${HOME}/.config/spotify 409deny ${HOME}/.config/teams
410blacklist ${HOME}/.config/sqlitebrowser 410deny ${HOME}/.config/teams-for-linux
411blacklist ${HOME}/.config/stellarium 411deny ${HOME}/.config/telepathy-account-widgets
412blacklist ${HOME}/.config/strawberry 412deny ${HOME}/.config/torbrowser
413blacklist ${HOME}/.config/straw-viewer 413deny ${HOME}/.config/totem
414blacklist ${HOME}/.config/supertuxkart 414deny ${HOME}/.config/tox
415blacklist ${HOME}/.config/synfig 415deny ${HOME}/.config/transgui
416blacklist ${HOME}/.config/teams 416deny ${HOME}/.config/transmission
417blacklist ${HOME}/.config/teams-for-linux 417deny ${HOME}/.config/truecraft
418blacklist ${HOME}/.config/telepathy-account-widgets 418deny ${HOME}/.config/tuta_integration
419blacklist ${HOME}/.config/torbrowser 419deny ${HOME}/.config/tutanota-desktop
420blacklist ${HOME}/.config/totem 420deny ${HOME}/.config/tvbrowser
421blacklist ${HOME}/.config/tox 421deny ${HOME}/.config/uGet
422blacklist ${HOME}/.config/transgui 422deny ${HOME}/.config/ungoogled-chromium
423blacklist ${HOME}/.config/transmission 423deny ${HOME}/.config/uzbl
424blacklist ${HOME}/.config/truecraft 424deny ${HOME}/.config/viewnior
425blacklist ${HOME}/.config/tuta_integration 425deny ${HOME}/.config/vivaldi
426blacklist ${HOME}/.config/tutanota-desktop 426deny ${HOME}/.config/vivaldi-snapshot
427blacklist ${HOME}/.config/tvbrowser 427deny ${HOME}/.config/vlc
428blacklist ${HOME}/.config/uGet 428deny ${HOME}/.config/wesnoth
429blacklist ${HOME}/.config/ungoogled-chromium 429deny ${HOME}/.config/wireshark
430blacklist ${HOME}/.config/uzbl 430deny ${HOME}/.config/wormux
431blacklist ${HOME}/.config/viewnior 431deny ${HOME}/.config/xchat
432blacklist ${HOME}/.config/vivaldi 432deny ${HOME}/.config/xed
433blacklist ${HOME}/.config/vivaldi-snapshot 433deny ${HOME}/.config/xfburn
434blacklist ${HOME}/.config/vlc 434deny ${HOME}/.config/xfce4-dict
435blacklist ${HOME}/.config/wesnoth 435deny ${HOME}/.config/xfce4/xfce4-notes.gtkrc
436blacklist ${HOME}/.config/wormux 436deny ${HOME}/.config/xfce4/xfce4-notes.rc
437blacklist ${HOME}/.config/Whalebird 437deny ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml
438blacklist ${HOME}/.config/wireshark 438deny ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-mixer.xml
439blacklist ${HOME}/.config/xchat 439deny ${HOME}/.config/xiaoyong
440blacklist ${HOME}/.config/xed 440deny ${HOME}/.config/xmms2
441blacklist ${HOME}/.config/xfburn 441deny ${HOME}/.config/xplayer
442blacklist ${HOME}/.config/xfce4/xfce4-notes.gtkrc 442deny ${HOME}/.config/xreader
443blacklist ${HOME}/.config/xfce4/xfce4-notes.rc 443deny ${HOME}/.config/xviewer
444blacklist ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml 444deny ${HOME}/.config/yandex-browser
445blacklist ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-mixer.xml 445deny ${HOME}/.config/yandex-browser-beta
446blacklist ${HOME}/.config/xfce4-dict 446deny ${HOME}/.config/yelp
447blacklist ${HOME}/.config/xiaoyong 447deny ${HOME}/.config/youtube-dl
448blacklist ${HOME}/.config/xmms2 448deny ${HOME}/.config/youtube-dlg
449blacklist ${HOME}/.config/xplayer 449deny ${HOME}/.config/youtube-music-desktop-app
450blacklist ${HOME}/.config/xreader 450deny ${HOME}/.config/youtube-viewer
451blacklist ${HOME}/.config/xviewer 451deny ${HOME}/.config/youtubemusic-nativefier-040164
452blacklist ${HOME}/.config/yandex-browser 452deny ${HOME}/.config/zathura
453blacklist ${HOME}/.config/yandex-browser-beta 453deny ${HOME}/.config/zim
454blacklist ${HOME}/.config/yelp 454deny ${HOME}/.config/zoomus.conf
455blacklist ${HOME}/.config/youtube-dl 455deny ${HOME}/.conkeror.mozdev.org
456blacklist ${HOME}/.config/youtube-dlg 456deny ${HOME}/.crawl
457blacklist ${HOME}/.config/youtubemusic-nativefier-040164 457deny ${HOME}/.cups
458blacklist ${HOME}/.config/youtube-music-desktop-app 458deny ${HOME}/.curl-hsts
459blacklist ${HOME}/.config/youtube-viewer 459deny ${HOME}/.curlrc
460blacklist ${HOME}/.config/zathura 460deny ${HOME}/.dashcore
461blacklist ${HOME}/.config/zoomus.conf 461deny ${HOME}/.devilspie
462blacklist ${HOME}/.config/Zulip 462deny ${HOME}/.dia
463blacklist ${HOME}/.conkeror.mozdev.org 463deny ${HOME}/.digrc
464blacklist ${HOME}/.crawl 464deny ${HOME}/.dillo
465blacklist ${HOME}/.cups 465deny ${HOME}/.dooble
466blacklist ${HOME}/.curl-hsts 466deny ${HOME}/.dosbox
467blacklist ${HOME}/.curlrc 467deny ${HOME}/.dropbox*
468blacklist ${HOME}/.dashcore 468deny ${HOME}/.easystroke
469blacklist ${HOME}/.devilspie 469deny ${HOME}/.electron-cache
470blacklist ${HOME}/.dia 470deny ${HOME}/.electrum*
471blacklist ${HOME}/.digrc 471deny ${HOME}/.elinks
472blacklist ${HOME}/.dillo 472deny ${HOME}/.emacs
473blacklist ${HOME}/.dooble 473deny ${HOME}/.emacs.d
474blacklist ${HOME}/.dosbox 474deny ${HOME}/.equalx
475blacklist ${HOME}/.dropbox* 475deny ${HOME}/.ethereum
476blacklist ${HOME}/.easystroke 476deny ${HOME}/.etr
477blacklist ${HOME}/.electron-cache 477deny ${HOME}/.filezilla
478blacklist ${HOME}/.electrum* 478deny ${HOME}/.firedragon
479blacklist ${HOME}/.elinks 479deny ${HOME}/.flowblade
480blacklist ${HOME}/.emacs 480deny ${HOME}/.fltk
481blacklist ${HOME}/.emacs.d 481deny ${HOME}/.fossamail
482blacklist ${HOME}/.equalx 482deny ${HOME}/.freeciv
483blacklist ${HOME}/.ethereum 483deny ${HOME}/.freecol
484blacklist ${HOME}/.etr 484deny ${HOME}/.freemind
485blacklist ${HOME}/.filezilla 485deny ${HOME}/.frogatto
486blacklist ${HOME}/.firedragon 486deny ${HOME}/.frozen-bubble
487blacklist ${HOME}/.flowblade 487deny ${HOME}/.funnyboat
488blacklist ${HOME}/.fltk 488deny ${HOME}/.gimp*
489blacklist ${HOME}/.fossamail 489deny ${HOME}/.gist
490blacklist ${HOME}/.freeciv 490deny ${HOME}/.gitconfig
491blacklist ${HOME}/.freecol 491deny ${HOME}/.gl-117
492blacklist ${HOME}/.freemind 492deny ${HOME}/.glaxiumrc
493blacklist ${HOME}/.frogatto 493deny ${HOME}/.gnome/gnome-schedule
494blacklist ${HOME}/.frozen-bubble 494deny ${HOME}/.googleearth
495blacklist ${HOME}/.funnyboat 495deny ${HOME}/.gradle
496blacklist ${HOME}/.gimp* 496deny ${HOME}/.gramps
497blacklist ${HOME}/.gist 497deny ${HOME}/.guayadeque
498blacklist ${HOME}/.gitconfig 498deny ${HOME}/.hashcat
499blacklist ${HOME}/.gl-117 499deny ${HOME}/.hedgewars
500blacklist ${HOME}/.glaxiumrc 500deny ${HOME}/.hex-a-hop
501blacklist ${HOME}/.gnome/gnome-schedule 501deny ${HOME}/.hugin
502blacklist ${HOME}/.googleearth 502deny ${HOME}/.i2p
503blacklist ${HOME}/.gradle 503deny ${HOME}/.icedove
504blacklist ${HOME}/.gramps 504deny ${HOME}/.imagej
505blacklist ${HOME}/.guayadeque 505deny ${HOME}/.inkscape
506blacklist ${HOME}/.hashcat 506deny ${HOME}/.itch
507blacklist ${HOME}/.hex-a-hop 507deny ${HOME}/.jack-server
508blacklist ${HOME}/.hedgewars 508deny ${HOME}/.jack-settings
509blacklist ${HOME}/.hugin 509deny ${HOME}/.jak
510blacklist ${HOME}/.i2p 510deny ${HOME}/.java
511blacklist ${HOME}/.icedove 511deny ${HOME}/.jd
512blacklist ${HOME}/.imagej 512deny ${HOME}/.jitsi
513blacklist ${HOME}/.inkscape 513deny ${HOME}/.jumpnbump
514blacklist ${HOME}/.itch 514deny ${HOME}/.kde/share/apps/digikam
515blacklist ${HOME}/.jack-server 515deny ${HOME}/.kde/share/apps/gwenview
516blacklist ${HOME}/.jack-settings 516deny ${HOME}/.kde/share/apps/kaffeine
517blacklist ${HOME}/.jak 517deny ${HOME}/.kde/share/apps/kcookiejar
518blacklist ${HOME}/.java 518deny ${HOME}/.kde/share/apps/kget
519blacklist ${HOME}/.jd 519deny ${HOME}/.kde/share/apps/khtml
520blacklist ${HOME}/.jitsi 520deny ${HOME}/.kde/share/apps/klatexformula
521blacklist ${HOME}/.jumpnbump 521deny ${HOME}/.kde/share/apps/konqsidebartng
522blacklist ${HOME}/.kde/share/apps/digikam 522deny ${HOME}/.kde/share/apps/konqueror
523blacklist ${HOME}/.kde/share/apps/gwenview 523deny ${HOME}/.kde/share/apps/kopete
524blacklist ${HOME}/.kde/share/apps/kaffeine 524deny ${HOME}/.kde/share/apps/ktorrent
525blacklist ${HOME}/.kde/share/apps/kcookiejar 525deny ${HOME}/.kde/share/apps/okular
526blacklist ${HOME}/.kde/share/apps/kget 526deny ${HOME}/.kde/share/config/baloofilerc
527blacklist ${HOME}/.kde/share/apps/khtml 527deny ${HOME}/.kde/share/config/baloorc
528blacklist ${HOME}/.kde/share/apps/klatexformula 528deny ${HOME}/.kde/share/config/digikam
529blacklist ${HOME}/.kde/share/apps/konqsidebartng 529deny ${HOME}/.kde/share/config/gwenviewrc
530blacklist ${HOME}/.kde/share/apps/konqueror 530deny ${HOME}/.kde/share/config/k3brc
531blacklist ${HOME}/.kde/share/apps/kopete 531deny ${HOME}/.kde/share/config/kaffeinerc
532blacklist ${HOME}/.kde/share/apps/ktorrent 532deny ${HOME}/.kde/share/config/kcookiejarrc
533blacklist ${HOME}/.kde/share/apps/okular 533deny ${HOME}/.kde/share/config/kfindrc
534blacklist ${HOME}/.kde/share/config/baloofilerc 534deny ${HOME}/.kde/share/config/kgetrc
535blacklist ${HOME}/.kde/share/config/baloorc 535deny ${HOME}/.kde/share/config/khtmlrc
536blacklist ${HOME}/.kde/share/config/digikam 536deny ${HOME}/.kde/share/config/klipperrc
537blacklist ${HOME}/.kde/share/config/gwenviewrc 537deny ${HOME}/.kde/share/config/kmplayerrc
538blacklist ${HOME}/.kde/share/config/k3brc 538deny ${HOME}/.kde/share/config/konq_history
539blacklist ${HOME}/.kde/share/config/kaffeinerc 539deny ${HOME}/.kde/share/config/konqsidebartngrc
540blacklist ${HOME}/.kde/share/config/kcookiejarrc 540deny ${HOME}/.kde/share/config/konquerorrc
541blacklist ${HOME}/.kde/share/config/kfindrc 541deny ${HOME}/.kde/share/config/konversationrc
542blacklist ${HOME}/.kde/share/config/kgetrc 542deny ${HOME}/.kde/share/config/kopeterc
543blacklist ${HOME}/.kde/share/config/khtmlrc 543deny ${HOME}/.kde/share/config/ktorrentrc
544blacklist ${HOME}/.kde/share/config/klipperrc 544deny ${HOME}/.kde/share/config/okularpartrc
545blacklist ${HOME}/.kde/share/config/kmplayerrc 545deny ${HOME}/.kde/share/config/okularrc
546blacklist ${HOME}/.kde/share/config/konq_history 546deny ${HOME}/.kde4/share/apps/digikam
547blacklist ${HOME}/.kde/share/config/konqsidebartngrc 547deny ${HOME}/.kde4/share/apps/gwenview
548blacklist ${HOME}/.kde/share/config/konquerorrc 548deny ${HOME}/.kde4/share/apps/kaffeine
549blacklist ${HOME}/.kde/share/config/konversationrc 549deny ${HOME}/.kde4/share/apps/kcookiejar
550blacklist ${HOME}/.kde/share/config/kopeterc 550deny ${HOME}/.kde4/share/apps/kget
551blacklist ${HOME}/.kde/share/config/ktorrentrc 551deny ${HOME}/.kde4/share/apps/khtml
552blacklist ${HOME}/.kde/share/config/okularpartrc 552deny ${HOME}/.kde4/share/apps/konqsidebartng
553blacklist ${HOME}/.kde/share/config/okularrc 553deny ${HOME}/.kde4/share/apps/konqueror
554blacklist ${HOME}/.kde4/share/apps/digikam 554deny ${HOME}/.kde4/share/apps/kopete
555blacklist ${HOME}/.kde4/share/apps/gwenview 555deny ${HOME}/.kde4/share/apps/ktorrent
556blacklist ${HOME}/.kde4/share/apps/kaffeine 556deny ${HOME}/.kde4/share/apps/okular
557blacklist ${HOME}/.kde4/share/apps/kcookiejar 557deny ${HOME}/.kde4/share/config/baloofilerc
558blacklist ${HOME}/.kde4/share/apps/kget 558deny ${HOME}/.kde4/share/config/baloorc
559blacklist ${HOME}/.kde4/share/apps/khtml 559deny ${HOME}/.kde4/share/config/digikam
560blacklist ${HOME}/.kde4/share/apps/konqsidebartng 560deny ${HOME}/.kde4/share/config/gwenviewrc
561blacklist ${HOME}/.kde4/share/apps/konqueror 561deny ${HOME}/.kde4/share/config/k3brc
562blacklist ${HOME}/.kde4/share/apps/kopete 562deny ${HOME}/.kde4/share/config/kaffeinerc
563blacklist ${HOME}/.kde4/share/apps/ktorrent 563deny ${HOME}/.kde4/share/config/kcookiejarrc
564blacklist ${HOME}/.kde4/share/apps/okular 564deny ${HOME}/.kde4/share/config/kfindrc
565blacklist ${HOME}/.kde4/share/config/baloofilerc 565deny ${HOME}/.kde4/share/config/kgetrc
566blacklist ${HOME}/.kde4/share/config/baloorc 566deny ${HOME}/.kde4/share/config/khtmlrc
567blacklist ${HOME}/.kde4/share/config/digikam 567deny ${HOME}/.kde4/share/config/klipperrc
568blacklist ${HOME}/.kde4/share/config/gwenviewrc 568deny ${HOME}/.kde4/share/config/konq_history
569blacklist ${HOME}/.kde4/share/config/k3brc 569deny ${HOME}/.kde4/share/config/konqsidebartngrc
570blacklist ${HOME}/.kde4/share/config/kaffeinerc 570deny ${HOME}/.kde4/share/config/konquerorrc
571blacklist ${HOME}/.kde4/share/config/kcookiejarrc 571deny ${HOME}/.kde4/share/config/konversationrc
572blacklist ${HOME}/.kde4/share/config/kfindrc 572deny ${HOME}/.kde4/share/config/kopeterc
573blacklist ${HOME}/.kde4/share/config/kgetrc 573deny ${HOME}/.kde4/share/config/ktorrentrc
574blacklist ${HOME}/.kde4/share/config/khtmlrc 574deny ${HOME}/.kde4/share/config/okularpartrc
575blacklist ${HOME}/.kde4/share/config/klipperrc 575deny ${HOME}/.kde4/share/config/okularrc
576blacklist ${HOME}/.kde4/share/config/konq_history 576deny ${HOME}/.killingfloor
577blacklist ${HOME}/.kde4/share/config/konqsidebartngrc 577deny ${HOME}/.kingsoft
578blacklist ${HOME}/.kde4/share/config/konquerorrc 578deny ${HOME}/.kino-history
579blacklist ${HOME}/.kde4/share/config/konversationrc 579deny ${HOME}/.kinorc
580blacklist ${HOME}/.kde4/share/config/kopeterc 580deny ${HOME}/.klatexformula
581blacklist ${HOME}/.kde4/share/config/ktorrentrc 581deny ${HOME}/.klei
582blacklist ${HOME}/.kde4/share/config/okularpartrc 582deny ${HOME}/.kodi
583blacklist ${HOME}/.kde4/share/config/okularrc 583deny ${HOME}/.librewolf
584blacklist ${HOME}/.killingfloor 584deny ${HOME}/.lincity-ng
585blacklist ${HOME}/.kingsoft 585deny ${HOME}/.links
586blacklist ${HOME}/.kino-history 586deny ${HOME}/.links2
587blacklist ${HOME}/.kinorc 587deny ${HOME}/.linphone-history.db
588blacklist ${HOME}/.klatexformula 588deny ${HOME}/.linphonerc
589blacklist ${HOME}/.klei 589deny ${HOME}/.lmmsrc.xml
590blacklist ${HOME}/.kodi 590deny ${HOME}/.local/lib/vivaldi
591blacklist ${HOME}/.librewolf 591deny ${HOME}/.local/share/0ad
592blacklist ${HOME}/.lincity-ng 592deny ${HOME}/.local/share/3909/PapersPlease
593blacklist ${HOME}/.links 593deny ${HOME}/.local/share/Anki2
594blacklist ${HOME}/.links2 594deny ${HOME}/.local/share/Dredmor
595blacklist ${HOME}/.linphone-history.db 595deny ${HOME}/.local/share/Empathy
596blacklist ${HOME}/.linphonerc 596deny ${HOME}/.local/share/Enpass
597blacklist ${HOME}/.lmmsrc.xml 597deny ${HOME}/.local/share/FasterThanLight
598blacklist ${HOME}/.local/lib/vivaldi 598deny ${HOME}/.local/share/Flavio Tordini
599blacklist ${HOME}/.local/share/0ad 599deny ${HOME}/.local/share/IntoTheBreach
600blacklist ${HOME}/.local/share/3909/PapersPlease 600deny ${HOME}/.local/share/JetBrains
601blacklist ${HOME}/.local/share/Anki2 601deny ${HOME}/.local/share/KDE/neochat
602blacklist ${HOME}/.local/share/Dredmor 602deny ${HOME}/.local/share/Kingsoft
603blacklist ${HOME}/.local/share/Empathy 603deny ${HOME}/.local/share/LibreCAD
604blacklist ${HOME}/.local/share/Enpass 604deny ${HOME}/.local/share/Mendeley Ltd.
605blacklist ${HOME}/.local/share/Flavio Tordini 605deny ${HOME}/.local/share/Mumble
606blacklist ${HOME}/.local/share/JetBrains 606deny ${HOME}/.local/share/Nextcloud
607blacklist ${HOME}/.local/share/KDE/neochat 607deny ${HOME}/.local/share/PBE
608blacklist ${HOME}/.local/share/Kingsoft 608deny ${HOME}/.local/share/Paradox Interactive
609blacklist ${HOME}/.local/share/LibreCAD 609deny ${HOME}/.local/share/PawelStolowski
610blacklist ${HOME}/.local/share/Mendeley Ltd. 610deny ${HOME}/.local/share/PillarsOfEternity
611blacklist ${HOME}/.local/share/Mumble 611deny ${HOME}/.local/share/Psi
612blacklist ${HOME}/.local/share/Nextcloud 612deny ${HOME}/.local/share/QGIS
613blacklist ${HOME}/.local/share/PBE 613deny ${HOME}/.local/share/QMediathekView
614blacklist ${HOME}/.local/share/PawelStolowski 614deny ${HOME}/.local/share/QuiteRss
615blacklist ${HOME}/.local/share/PillarsOfEternity 615deny ${HOME}/.local/share/Ricochet
616blacklist ${HOME}/.local/share/Psi 616deny ${HOME}/.local/share/RogueLegacy
617blacklist ${HOME}/.local/share/QGIS 617deny ${HOME}/.local/share/RogueLegacyStorageContainer
618blacklist ${HOME}/.local/share/QMediathekView 618deny ${HOME}/.local/share/Shortwave
619blacklist ${HOME}/.local/share/QuiteRss 619deny ${HOME}/.local/share/Steam
620blacklist ${HOME}/.local/share/Ricochet 620deny ${HOME}/.local/share/SteamWorld Dig 2
621blacklist ${HOME}/.local/share/RogueLegacy 621deny ${HOME}/.local/share/SteamWorldDig
622blacklist ${HOME}/.local/share/RogueLegacyStorageContainer 622deny ${HOME}/.local/share/SuperHexagon
623blacklist ${HOME}/.local/share/Shortwave 623deny ${HOME}/.local/share/TelegramDesktop
624blacklist ${HOME}/.local/share/Steam 624deny ${HOME}/.local/share/Terraria
625blacklist ${HOME}/.local/share/SteamWorldDig 625deny ${HOME}/.local/share/TpLogger
626blacklist ${HOME}/.local/share/SteamWorld Dig 2 626deny ${HOME}/.local/share/Zeal
627blacklist ${HOME}/.local/share/SuperHexagon 627deny ${HOME}/.local/share/agenda
628blacklist ${HOME}/.local/share/TelegramDesktop 628deny ${HOME}/.local/share/akonadi*
629blacklist ${HOME}/.local/share/Terraria 629deny ${HOME}/.local/share/akregator
630blacklist ${HOME}/.local/share/TpLogger 630deny ${HOME}/.local/share/apps/korganizer
631blacklist ${HOME}/.local/share/Zeal 631deny ${HOME}/.local/share/aspyr-media
632blacklist ${HOME}/.local/share/akonadi* 632deny ${HOME}/.local/share/authenticator-rs
633blacklist ${HOME}/.local/share/akregator 633deny ${HOME}/.local/share/autokey
634blacklist ${HOME}/.local/share/agenda 634deny ${HOME}/.local/share/backintime
635blacklist ${HOME}/.local/share/apps/korganizer 635deny ${HOME}/.local/share/baloo
636blacklist ${HOME}/.local/share/aspyr-media 636deny ${HOME}/.local/share/barrier
637blacklist ${HOME}/.local/share/autokey 637deny ${HOME}/.local/share/bibletime
638blacklist ${HOME}/.local/share/authenticator-rs 638deny ${HOME}/.local/share/bijiben
639blacklist ${HOME}/.local/share/backintime 639deny ${HOME}/.local/share/bohemiainteractive
640blacklist ${HOME}/.local/share/baloo 640deny ${HOME}/.local/share/caja-python
641blacklist ${HOME}/.local/share/barrier 641deny ${HOME}/.local/share/calligragemini
642blacklist ${HOME}/.local/share/bibletime 642deny ${HOME}/.local/share/cantata
643blacklist ${HOME}/.local/share/bijiben 643deny ${HOME}/.local/share/cdprojektred
644blacklist ${HOME}/.local/share/bohemiainteractive 644deny ${HOME}/.local/share/clipit
645blacklist ${HOME}/.local/share/caja-python 645deny ${HOME}/.local/share/com.github.johnfactotum.Foliate
646blacklist ${HOME}/.local/share/calligragemini 646deny ${HOME}/.local/share/contacts
647blacklist ${HOME}/.local/share/cantata 647deny ${HOME}/.local/share/cor-games
648blacklist ${HOME}/.local/share/cdprojektred 648deny ${HOME}/.local/share/data/Mendeley Ltd.
649blacklist ${HOME}/.local/share/clipit 649deny ${HOME}/.local/share/data/Mumble
650blacklist ${HOME}/.local/share/com.github.johnfactotum.Foliate 650deny ${HOME}/.local/share/data/MusE
651blacklist ${HOME}/.local/share/contacts 651deny ${HOME}/.local/share/data/MuseScore
652blacklist ${HOME}/.local/share/cor-games 652deny ${HOME}/.local/share/data/nomacs
653blacklist ${HOME}/.local/share/data/Mendeley Ltd. 653deny ${HOME}/.local/share/data/qBittorrent
654blacklist ${HOME}/.local/share/data/Mumble 654deny ${HOME}/.local/share/dino
655blacklist ${HOME}/.local/share/data/MusE 655deny ${HOME}/.local/share/dolphin
656blacklist ${HOME}/.local/share/data/MuseScore 656deny ${HOME}/.local/share/dolphin-emu
657blacklist ${HOME}/.local/share/data/nomacs 657deny ${HOME}/.local/share/emailidentities
658blacklist ${HOME}/.local/share/data/qBittorrent 658deny ${HOME}/.local/share/epiphany
659blacklist ${HOME}/.local/share/dino 659deny ${HOME}/.local/share/evolution
660blacklist ${HOME}/.local/share/dolphin 660deny ${HOME}/.local/share/feedreader
661blacklist ${HOME}/.local/share/dolphin-emu 661deny ${HOME}/.local/share/feral-interactive
662blacklist ${HOME}/.local/share/emailidentities 662deny ${HOME}/.local/share/five-or-more
663blacklist ${HOME}/.local/share/epiphany 663deny ${HOME}/.local/share/freecol
664blacklist ${HOME}/.local/share/evolution 664deny ${HOME}/.local/share/gajim
665blacklist ${HOME}/.local/share/FasterThanLight 665deny ${HOME}/.local/share/geary
666blacklist ${HOME}/.local/share/feedreader 666deny ${HOME}/.local/share/geeqie
667blacklist ${HOME}/.local/share/feral-interactive 667deny ${HOME}/.local/share/ghostwriter
668blacklist ${HOME}/.local/share/five-or-more 668deny ${HOME}/.local/share/gitg
669blacklist ${HOME}/.local/share/freecol 669deny ${HOME}/.local/share/gnome-2048
670blacklist ${HOME}/.local/share/gajim 670deny ${HOME}/.local/share/gnome-boxes
671blacklist ${HOME}/.local/share/geary 671deny ${HOME}/.local/share/gnome-builder
672blacklist ${HOME}/.local/share/geeqie 672deny ${HOME}/.local/share/gnome-chess
673blacklist ${HOME}/.local/share/ghostwriter 673deny ${HOME}/.local/share/gnome-klotski
674blacklist ${HOME}/.local/share/gitg 674deny ${HOME}/.local/share/gnome-latex
675blacklist ${HOME}/.local/share/gnome-2048 675deny ${HOME}/.local/share/gnome-mines
676blacklist ${HOME}/.local/share/gnome-boxes 676deny ${HOME}/.local/share/gnome-music
677blacklist ${HOME}/.local/share/gnome-builder 677deny ${HOME}/.local/share/gnome-nibbles
678blacklist ${HOME}/.local/share/gnome-chess 678deny ${HOME}/.local/share/gnome-photos
679blacklist ${HOME}/.local/share/gnome-klotski 679deny ${HOME}/.local/share/gnome-pomodoro
680blacklist ${HOME}/.local/share/gnome-latex 680deny ${HOME}/.local/share/gnome-recipes
681blacklist ${HOME}/.local/share/gnome-mines 681deny ${HOME}/.local/share/gnome-ring
682blacklist ${HOME}/.local/share/gnome-music 682deny ${HOME}/.local/share/gnome-sudoku
683blacklist ${HOME}/.local/share/gnome-nibbles 683deny ${HOME}/.local/share/gnome-twitch
684blacklist ${HOME}/.local/share/gnome-photos 684deny ${HOME}/.local/share/gnote
685blacklist ${HOME}/.local/share/gnome-pomodoro 685deny ${HOME}/.local/share/godot
686blacklist ${HOME}/.local/share/gnome-recipes 686deny ${HOME}/.local/share/gradio
687blacklist ${HOME}/.local/share/gnome-ring 687deny ${HOME}/.local/share/gwenview
688blacklist ${HOME}/.local/share/gnome-sudoku 688deny ${HOME}/.local/share/i2p
689blacklist ${HOME}/.local/share/gnome-twitch 689deny ${HOME}/.local/share/io.github.lainsce.Notejot
690blacklist ${HOME}/.local/share/gnote 690deny ${HOME}/.local/share/jami
691blacklist ${HOME}/.local/share/godot 691deny ${HOME}/.local/share/kaffeine
692blacklist ${HOME}/.local/share/gradio 692deny ${HOME}/.local/share/kalgebra
693blacklist ${HOME}/.local/share/gwenview 693deny ${HOME}/.local/share/kate
694blacklist ${HOME}/.local/share/i2p 694deny ${HOME}/.local/share/kdenlive
695blacklist ${HOME}/.local/share/IntoTheBreach 695deny ${HOME}/.local/share/kget
696blacklist ${HOME}/.local/share/jami 696deny ${HOME}/.local/share/kiwix
697blacklist ${HOME}/.local/share/kaffeine 697deny ${HOME}/.local/share/kiwix-desktop
698blacklist ${HOME}/.local/share/kalgebra 698deny ${HOME}/.local/share/klavaro
699blacklist ${HOME}/.local/share/kate 699deny ${HOME}/.local/share/kmail2
700blacklist ${HOME}/.local/share/kdenlive 700deny ${HOME}/.local/share/kmplayer
701blacklist ${HOME}/.local/share/kget 701deny ${HOME}/.local/share/knotes
702blacklist ${HOME}/.local/share/kiwix 702deny ${HOME}/.local/share/krita
703blacklist ${HOME}/.local/share/kiwix-desktop 703deny ${HOME}/.local/share/ktorrent
704blacklist ${HOME}/.local/share/klavaro 704deny ${HOME}/.local/share/ktorrentrc
705blacklist ${HOME}/.local/share/kmail2 705deny ${HOME}/.local/share/ktouch
706blacklist ${HOME}/.local/share/kmplayer 706deny ${HOME}/.local/share/kube
707blacklist ${HOME}/.local/share/knotes 707deny ${HOME}/.local/share/kwrite
708blacklist ${HOME}/.local/share/krita 708deny ${HOME}/.local/share/kxmlgui5/*
709blacklist ${HOME}/.local/share/ktorrent 709deny ${HOME}/.local/share/liferea
710blacklist ${HOME}/.local/share/ktorrentrc 710deny ${HOME}/.local/share/linphone
711blacklist ${HOME}/.local/share/ktouch 711deny ${HOME}/.local/share/local-mail
712blacklist ${HOME}/.local/share/kube 712deny ${HOME}/.local/share/lollypop
713blacklist ${HOME}/.local/share/kwrite 713deny ${HOME}/.local/share/love
714blacklist ${HOME}/.local/share/kxmlgui5/* 714deny ${HOME}/.local/share/lugaru
715blacklist ${HOME}/.local/share/liferea 715deny ${HOME}/.local/share/lutris
716blacklist ${HOME}/.local/share/linphone 716deny ${HOME}/.local/share/man
717blacklist ${HOME}/.local/share/local-mail 717deny ${HOME}/.local/share/mana
718blacklist ${HOME}/.local/share/lollypop 718deny ${HOME}/.local/share/maps-places.json
719blacklist ${HOME}/.local/share/love 719deny ${HOME}/.local/share/matrix-mirage
720blacklist ${HOME}/.local/share/lugaru 720deny ${HOME}/.local/share/mcomix
721blacklist ${HOME}/.local/share/lutris 721deny ${HOME}/.local/share/meld
722blacklist ${HOME}/.local/share/man 722deny ${HOME}/.local/share/midori
723blacklist ${HOME}/.local/share/mana 723deny ${HOME}/.local/share/minder
724blacklist ${HOME}/.local/share/maps-places.json 724deny ${HOME}/.local/share/mirage
725blacklist ${HOME}/.local/share/matrix-mirage 725deny ${HOME}/.local/share/multimc
726blacklist ${HOME}/.local/share/mcomix 726deny ${HOME}/.local/share/multimc5
727blacklist ${HOME}/.local/share/meld 727deny ${HOME}/.local/share/mupen64plus
728blacklist ${HOME}/.local/share/midori 728deny ${HOME}/.local/share/mypaint
729blacklist ${HOME}/.local/share/minder 729deny ${HOME}/.local/share/nautilus
730blacklist ${HOME}/.local/share/mirage 730deny ${HOME}/.local/share/nautilus-python
731blacklist ${HOME}/.local/share/multimc 731deny ${HOME}/.local/share/nemo
732blacklist ${HOME}/.local/share/multimc5 732deny ${HOME}/.local/share/nemo-python
733blacklist ${HOME}/.local/share/mupen64plus 733deny ${HOME}/.local/share/news-flash
734blacklist ${HOME}/.local/share/mypaint 734deny ${HOME}/.local/share/newsbeuter
735blacklist ${HOME}/.local/share/nautilus 735deny ${HOME}/.local/share/newsboat
736blacklist ${HOME}/.local/share/nautilus-python 736deny ${HOME}/.local/share/nheko
737blacklist ${HOME}/.local/share/nemo 737deny ${HOME}/.local/share/nomacs
738blacklist ${HOME}/.local/share/nemo-python 738deny ${HOME}/.local/share/notes
739blacklist ${HOME}/.local/share/news-flash 739deny ${HOME}/.local/share/ocenaudio
740blacklist ${HOME}/.local/share/newsbeuter 740deny ${HOME}/.local/share/okular
741blacklist ${HOME}/.local/share/newsboat 741deny ${HOME}/.local/share/onlyoffice
742blacklist ${HOME}/.local/share/nheko 742deny ${HOME}/.local/share/openmw
743blacklist ${HOME}/.local/share/nomacs 743deny ${HOME}/.local/share/orage
744blacklist ${HOME}/.local/share/notes 744deny ${HOME}/.local/share/org.kde.gwenview
745blacklist ${HOME}/.local/share/ocenaudio 745deny ${HOME}/.local/share/pix
746blacklist ${HOME}/.local/share/okular 746deny ${HOME}/.local/share/plasma_notes
747blacklist ${HOME}/.local/share/onlyoffice 747deny ${HOME}/.local/share/profanity
748blacklist ${HOME}/.local/share/openmw 748deny ${HOME}/.local/share/psi
749blacklist ${HOME}/.local/share/orage 749deny ${HOME}/.local/share/psi+
750blacklist ${HOME}/.local/share/org.kde.gwenview 750deny ${HOME}/.local/share/qpdfview
751blacklist ${HOME}/.local/share/Paradox Interactive 751deny ${HOME}/.local/share/quadrapassel
752blacklist ${HOME}/.local/share/pix 752deny ${HOME}/.local/share/qutebrowser
753blacklist ${HOME}/.local/share/plasma_notes 753deny ${HOME}/.local/share/remmina
754blacklist ${HOME}/.local/share/profanity 754deny ${HOME}/.local/share/rhythmbox
755blacklist ${HOME}/.local/share/psi 755deny ${HOME}/.local/share/rtv
756blacklist ${HOME}/.local/share/psi+ 756deny ${HOME}/.local/share/scribus
757blacklist ${HOME}/.local/share/quadrapassel 757deny ${HOME}/.local/share/shotwell
758blacklist ${HOME}/.local/share/qpdfview 758deny ${HOME}/.local/share/signal-cli
759blacklist ${HOME}/.local/share/qutebrowser 759deny ${HOME}/.local/share/sink
760blacklist ${HOME}/.local/share/remmina 760deny ${HOME}/.local/share/smuxi
761blacklist ${HOME}/.local/share/rhythmbox 761deny ${HOME}/.local/share/spotify
762blacklist ${HOME}/.local/share/rtv 762deny ${HOME}/.local/share/steam
763blacklist ${HOME}/.local/share/scribus 763deny ${HOME}/.local/share/strawberry
764blacklist ${HOME}/.local/share/shotwell 764deny ${HOME}/.local/share/supertux2
765blacklist ${HOME}/.local/share/signal-cli 765deny ${HOME}/.local/share/supertuxkart
766blacklist ${HOME}/.local/share/sink 766deny ${HOME}/.local/share/swell-foop
767blacklist ${HOME}/.local/share/smuxi 767deny ${HOME}/.local/share/telepathy
768blacklist ${HOME}/.local/share/spotify 768deny ${HOME}/.local/share/terasology
769blacklist ${HOME}/.local/share/steam 769deny ${HOME}/.local/share/torbrowser
770blacklist ${HOME}/.local/share/strawberry 770deny ${HOME}/.local/share/totem
771blacklist ${HOME}/.local/share/supertux2 771deny ${HOME}/.local/share/uzbl
772blacklist ${HOME}/.local/share/supertuxkart 772deny ${HOME}/.local/share/vlc
773blacklist ${HOME}/.local/share/swell-foop 773deny ${HOME}/.local/share/vpltd
774blacklist ${HOME}/.local/share/telepathy 774deny ${HOME}/.local/share/vulkan
775blacklist ${HOME}/.local/share/terasology 775deny ${HOME}/.local/share/warsow-2.1
776blacklist ${HOME}/.local/share/torbrowser 776deny ${HOME}/.local/share/wesnoth
777blacklist ${HOME}/.local/share/totem 777deny ${HOME}/.local/share/wormux
778blacklist ${HOME}/.local/share/uzbl 778deny ${HOME}/.local/share/xplayer
779blacklist ${HOME}/.local/share/vlc 779deny ${HOME}/.local/share/xreader
780blacklist ${HOME}/.local/share/vpltd 780deny ${HOME}/.local/share/zathura
781blacklist ${HOME}/.local/share/vulkan 781deny ${HOME}/.lv2
782blacklist ${HOME}/.local/share/warsow-2.1 782deny ${HOME}/.lyx
783blacklist ${HOME}/.local/share/wesnoth 783deny ${HOME}/.magicor
784blacklist ${HOME}/.local/share/wormux 784deny ${HOME}/.masterpdfeditor
785blacklist ${HOME}/.local/share/xplayer 785deny ${HOME}/.mbwarband
786blacklist ${HOME}/.local/share/xreader 786deny ${HOME}/.mcabber
787blacklist ${HOME}/.local/share/zathura 787deny ${HOME}/.mcabberrc
788blacklist ${HOME}/.lv2 788deny ${HOME}/.mediathek3
789blacklist ${HOME}/.lyx 789deny ${HOME}/.megaglest
790blacklist ${HOME}/.magicor 790deny ${HOME}/.minecraft
791blacklist ${HOME}/.masterpdfeditor 791deny ${HOME}/.minetest
792blacklist ${HOME}/.mbwarband 792deny ${HOME}/.mirrormagic
793blacklist ${HOME}/.mcabber 793deny ${HOME}/.moc
794blacklist ${HOME}/.mcabberrc 794deny ${HOME}/.moonchild productions/basilisk
795blacklist ${HOME}/.mediathek3 795deny ${HOME}/.moonchild productions/pale moon
796blacklist ${HOME}/.megaglest 796deny ${HOME}/.mozilla
797blacklist ${HOME}/.minecraft 797deny ${HOME}/.mp3splt-gtk
798blacklist ${HOME}/.minetest 798deny ${HOME}/.mpd
799blacklist ${HOME}/.mirrormagic 799deny ${HOME}/.mpdconf
800blacklist ${HOME}/.moc 800deny ${HOME}/.mplayer
801blacklist ${HOME}/.moonchild productions/basilisk 801deny ${HOME}/.msmtprc
802blacklist ${HOME}/.moonchild productions/pale moon 802deny ${HOME}/.multimc5
803blacklist ${HOME}/.mozilla 803deny ${HOME}/.nanorc
804blacklist ${HOME}/.mp3splt-gtk 804deny ${HOME}/.netactview
805blacklist ${HOME}/.mpd 805deny ${HOME}/.neverball
806blacklist ${HOME}/.mpdconf 806deny ${HOME}/.newsbeuter
807blacklist ${HOME}/.mplayer 807deny ${HOME}/.newsboat
808blacklist ${HOME}/.msmtprc 808deny ${HOME}/.newsrc
809blacklist ${HOME}/.multimc5 809deny ${HOME}/.nicotine
810blacklist ${HOME}/.nanorc 810deny ${HOME}/.node-gyp
811blacklist ${HOME}/.netactview 811deny ${HOME}/.npm
812blacklist ${HOME}/.neverball 812deny ${HOME}/.npmrc
813blacklist ${HOME}/.newsbeuter 813deny ${HOME}/.nv
814blacklist ${HOME}/.newsboat 814deny ${HOME}/.nvm
815blacklist ${HOME}/.newsrc 815deny ${HOME}/.nylas-mail
816blacklist ${HOME}/.nicotine 816deny ${HOME}/.openarena
817blacklist ${HOME}/.node-gyp 817deny ${HOME}/.opencity
818blacklist ${HOME}/.npm 818deny ${HOME}/.openinvaders
819blacklist ${HOME}/.npmrc 819deny ${HOME}/.openshot
820blacklist ${HOME}/.nv 820deny ${HOME}/.openshot_qt
821blacklist ${HOME}/.nvm 821deny ${HOME}/.openttd
822blacklist ${HOME}/.nylas-mail 822deny ${HOME}/.opera
823blacklist ${HOME}/.openarena 823deny ${HOME}/.opera-beta
824blacklist ${HOME}/.opencity 824deny ${HOME}/.ostrichriders
825blacklist ${HOME}/.openinvaders 825deny ${HOME}/.paradoxinteractive
826blacklist ${HOME}/.openshot 826deny ${HOME}/.parallelrealities/blobwars
827blacklist ${HOME}/.openshot_qt 827deny ${HOME}/.pcsxr
828blacklist ${HOME}/.openttd 828deny ${HOME}/.penguin-command
829blacklist ${HOME}/.opera 829deny ${HOME}/.pine-crash
830blacklist ${HOME}/.opera-beta 830deny ${HOME}/.pine-debug1
831blacklist ${HOME}/.ostrichriders 831deny ${HOME}/.pine-debug2
832blacklist ${HOME}/.paradoxinteractive 832deny ${HOME}/.pine-debug3
833blacklist ${HOME}/.parallelrealities/blobwars 833deny ${HOME}/.pine-debug4
834blacklist ${HOME}/.pcsxr 834deny ${HOME}/.pine-interrupted-mail
835blacklist ${HOME}/.penguin-command 835deny ${HOME}/.pinerc
836blacklist ${HOME}/.pine-crash 836deny ${HOME}/.pinercex
837blacklist ${HOME}/.pine-debug1 837deny ${HOME}/.pingus
838blacklist ${HOME}/.pine-debug2 838deny ${HOME}/.pioneer
839blacklist ${HOME}/.pine-debug3 839deny ${HOME}/.purple
840blacklist ${HOME}/.pine-debug4 840deny ${HOME}/.pylint.d
841blacklist ${HOME}/.pine-interrupted-mail 841deny ${HOME}/.qemu-launcher
842blacklist ${HOME}/.pinerc 842deny ${HOME}/.qgis2
843blacklist ${HOME}/.pinercex 843deny ${HOME}/.qmmp
844blacklist ${HOME}/.pingus 844deny ${HOME}/.quodlibet
845blacklist ${HOME}/.pioneer 845deny ${HOME}/.redeclipse
846blacklist ${HOME}/.purple 846deny ${HOME}/.rednotebook
847blacklist ${HOME}/.pylint.d 847deny ${HOME}/.remmina
848blacklist ${HOME}/.qemu-launcher 848deny ${HOME}/.repo_.gitconfig.json
849blacklist ${HOME}/.qgis2 849deny ${HOME}/.repoconfig
850blacklist ${HOME}/.qmmp 850deny ${HOME}/.retroshare
851blacklist ${HOME}/.quodlibet 851deny ${HOME}/.ripperXrc
852blacklist ${HOME}/.redeclipse 852deny ${HOME}/.scorched3d
853blacklist ${HOME}/.remmina 853deny ${HOME}/.scribus
854blacklist ${HOME}/.repo_.gitconfig.json 854deny ${HOME}/.scribusrc
855blacklist ${HOME}/.repoconfig 855deny ${HOME}/.simutrans
856blacklist ${HOME}/.retroshare 856deny ${HOME}/.smartgit/*/passwords
857blacklist ${HOME}/.ripperXrc 857deny ${HOME}/.ssr
858blacklist ${HOME}/.scorched3d 858deny ${HOME}/.steam
859blacklist ${HOME}/.scribus 859deny ${HOME}/.steampath
860blacklist ${HOME}/.scribusrc 860deny ${HOME}/.steampid
861blacklist ${HOME}/.simutrans 861deny ${HOME}/.stellarium
862blacklist ${HOME}/.smartgit/*/passwords 862deny ${HOME}/.subversion
863blacklist ${HOME}/.ssr 863deny ${HOME}/.surf
864blacklist ${HOME}/.steam 864deny ${HOME}/.suve/colorful
865blacklist ${HOME}/.steampath 865deny ${HOME}/.swb.ini
866blacklist ${HOME}/.steampid 866deny ${HOME}/.sword
867blacklist ${HOME}/.stellarium 867deny ${HOME}/.sylpheed-2.0
868blacklist ${HOME}/.subversion 868deny ${HOME}/.synfig
869blacklist ${HOME}/.surf 869deny ${HOME}/.tb
870blacklist ${HOME}/.suve/colorful 870deny ${HOME}/.tconn
871blacklist ${HOME}/.swb.ini 871deny ${HOME}/.teeworlds
872blacklist ${HOME}/.sword 872deny ${HOME}/.texlive20*
873blacklist ${HOME}/.sylpheed-2.0 873deny ${HOME}/.thunderbird
874blacklist ${HOME}/.synfig 874deny ${HOME}/.tilp
875blacklist ${HOME}/.tb 875deny ${HOME}/.tin
876blacklist ${HOME}/.tconn 876deny ${HOME}/.tooling
877blacklist ${HOME}/.teeworlds 877deny ${HOME}/.tor-browser*
878blacklist ${HOME}/.texlive20* 878deny ${HOME}/.torcs
879blacklist ${HOME}/.thunderbird 879deny ${HOME}/.tremulous
880blacklist ${HOME}/.tilp 880deny ${HOME}/.ts3client
881blacklist ${HOME}/.tin 881deny ${HOME}/.tuxguitar*
882blacklist ${HOME}/.tooling 882deny ${HOME}/.tvbrowser
883blacklist ${HOME}/.tor-browser* 883deny ${HOME}/.unknown-horizons
884blacklist ${HOME}/.torcs 884deny ${HOME}/.viking
885blacklist ${HOME}/.tremulous 885deny ${HOME}/.viking-maps
886blacklist ${HOME}/.ts3client 886deny ${HOME}/.vim
887blacklist ${HOME}/.tuxguitar* 887deny ${HOME}/.vimrc
888blacklist ${HOME}/.tvbrowser 888deny ${HOME}/.vmware
889blacklist ${HOME}/.unknown-horizons 889deny ${HOME}/.vscode
890blacklist ${HOME}/.viking 890deny ${HOME}/.vscode-oss
891blacklist ${HOME}/.viking-maps 891deny ${HOME}/.vst
892blacklist ${HOME}/.vim 892deny ${HOME}/.vultures
893blacklist ${HOME}/.vimrc 893deny ${HOME}/.w3m
894blacklist ${HOME}/.vmware 894deny ${HOME}/.warzone2100-3.*
895blacklist ${HOME}/.vscode 895deny ${HOME}/.waterfox
896blacklist ${HOME}/.vscode-oss 896deny ${HOME}/.weechat
897blacklist ${HOME}/.vst 897deny ${HOME}/.wget-hsts
898blacklist ${HOME}/.vultures 898deny ${HOME}/.wgetrc
899blacklist ${HOME}/.w3m 899deny ${HOME}/.widelands
900blacklist ${HOME}/.warzone2100-3.* 900deny ${HOME}/.wine
901blacklist ${HOME}/.waterfox 901deny ${HOME}/.wine64
902blacklist ${HOME}/.weechat 902deny ${HOME}/.wireshark
903blacklist ${HOME}/.wget-hsts 903deny ${HOME}/.wordwarvi
904blacklist ${HOME}/.wgetrc 904deny ${HOME}/.wormux
905blacklist ${HOME}/.widelands 905deny ${HOME}/.xiphos
906blacklist ${HOME}/.wine 906deny ${HOME}/.xmind
907blacklist ${HOME}/.wine64 907deny ${HOME}/.xmms
908blacklist ${HOME}/.wireshark 908deny ${HOME}/.xmr-stak
909blacklist ${HOME}/.wordwarvi 909deny ${HOME}/.xonotic
910blacklist ${HOME}/.wormux 910deny ${HOME}/.xournalpp
911blacklist ${HOME}/.xiphos 911deny ${HOME}/.xpdfrc
912blacklist ${HOME}/.xmind 912deny ${HOME}/.yarn
913blacklist ${HOME}/.xmms 913deny ${HOME}/.yarn-config
914blacklist ${HOME}/.xmr-stak 914deny ${HOME}/.yarncache
915blacklist ${HOME}/.xonotic 915deny ${HOME}/.yarnrc
916blacklist ${HOME}/.xournalpp 916deny ${HOME}/.zoom
917blacklist ${HOME}/.xpdfrc 917deny ${HOME}/Arduino
918blacklist ${HOME}/.yarn 918deny ${HOME}/Monero/wallets
919blacklist ${HOME}/.yarn-config 919deny ${HOME}/Nextcloud
920blacklist ${HOME}/.yarncache 920deny ${HOME}/Nextcloud/Notes
921blacklist ${HOME}/.yarnrc 921deny ${HOME}/SoftMaker
922blacklist ${HOME}/.zoom 922deny ${HOME}/Standard Notes Backups
923blacklist /tmp/akonadi-* 923deny ${HOME}/TeamSpeak3-Client-linux_amd64
924blacklist /tmp/.wine-* 924deny ${HOME}/TeamSpeak3-Client-linux_x86
925blacklist /var/games/nethack 925deny ${HOME}/hyperrogue.ini
926blacklist /var/games/slashem 926deny ${HOME}/i2p
927blacklist /var/games/vulturesclaw 927deny ${HOME}/mps
928blacklist /var/games/vultureseye 928deny ${HOME}/wallet.dat
929blacklist /var/lib/games/Maelstrom-Scores 929deny /tmp/.wine-*
930deny /tmp/akonadi-*
931deny /var/games/nethack
932deny /var/games/slashem
933deny /var/games/vulturesclaw
934deny /var/games/vultureseye
935deny /var/lib/games/Maelstrom-Scores
930 936
931# ${HOME}/.cache directory 937# ${HOME}/.cache directory
932blacklist ${HOME}/.cache/0ad 938deny ${HOME}/.cache/0ad
933blacklist ${HOME}/.cache/8pecxstudios 939deny ${HOME}/.cache/8pecxstudios
934blacklist ${HOME}/.cache/Authenticator 940deny ${HOME}/.cache/Authenticator
935blacklist ${HOME}/.cache/BraveSoftware 941deny ${HOME}/.cache/BraveSoftware
936blacklist ${HOME}/.cache/Clementine 942deny ${HOME}/.cache/Clementine
937blacklist ${HOME}/.cache/ENCOM/Spectral 943deny ${HOME}/.cache/ENCOM/Spectral
938blacklist ${HOME}/.cache/Enox 944deny ${HOME}/.cache/Enox
939blacklist ${HOME}/.cache/Enpass 945deny ${HOME}/.cache/Enpass
940blacklist ${HOME}/.cache/Ferdi 946deny ${HOME}/.cache/Ferdi
941blacklist ${HOME}/.cache/Flavio Tordini 947deny ${HOME}/.cache/Flavio Tordini
942blacklist ${HOME}/.cache/Franz 948deny ${HOME}/.cache/Franz
943blacklist ${HOME}/.cache/INRIA 949deny ${HOME}/.cache/INRIA
944blacklist ${HOME}/.cache/MusicBrainz 950deny ${HOME}/.cache/INRIA/Natron
945blacklist ${HOME}/.cache/NewsFlashGTK 951deny ${HOME}/.cache/KDE/neochat
946blacklist ${HOME}/.cache/Otter 952deny ${HOME}/.cache/Mendeley Ltd.
947blacklist ${HOME}/.cache/PawelStolowski 953deny ${HOME}/.cache/MusicBrainz
948blacklist ${HOME}/.cache/Psi 954deny ${HOME}/.cache/NewsFlashGTK
949blacklist ${HOME}/.cache/QuiteRss 955deny ${HOME}/.cache/Otter
950blacklist ${HOME}/.cache/quodlibet 956deny ${HOME}/.cache/PawelStolowski
951blacklist ${HOME}/.cache/Quotient/quaternion 957deny ${HOME}/.cache/Psi
952blacklist ${HOME}/.cache/Shortwave 958deny ${HOME}/.cache/QuiteRss
953blacklist ${HOME}/.cache/Tox 959deny ${HOME}/.cache/Quotient/quaternion
954blacklist ${HOME}/.cache/Zeal 960deny ${HOME}/.cache/Shortwave
955blacklist ${HOME}/.cache/agenda 961deny ${HOME}/.cache/Tox
956blacklist ${HOME}/.cache/akonadi* 962deny ${HOME}/.cache/Zeal
957blacklist ${HOME}/.cache/atril 963deny ${HOME}/.cache/agenda
958blacklist ${HOME}/.cache/attic 964deny ${HOME}/.cache/akonadi*
959blacklist ${HOME}/.cache/babl 965deny ${HOME}/.cache/atril
960blacklist ${HOME}/.cache/bnox 966deny ${HOME}/.cache/attic
961blacklist ${HOME}/.cache/borg 967deny ${HOME}/.cache/babl
962blacklist ${HOME}/.cache/calibre 968deny ${HOME}/.cache/bnox
963blacklist ${HOME}/.cache/cantata 969deny ${HOME}/.cache/borg
964blacklist ${HOME}/.cache/champlain 970deny ${HOME}/.cache/calibre
965blacklist ${HOME}/.cache/chromium 971deny ${HOME}/.cache/cantata
966blacklist ${HOME}/.cache/chromium-dev 972deny ${HOME}/.cache/champlain
967blacklist ${HOME}/.cache/cliqz 973deny ${HOME}/.cache/chromium
968blacklist ${HOME}/.cache/com.github.johnfactotum.Foliate 974deny ${HOME}/.cache/chromium-dev
969blacklist ${HOME}/.cache/darktable 975deny ${HOME}/.cache/cliqz
970blacklist ${HOME}/.cache/deja-dup 976deny ${HOME}/.cache/com.github.johnfactotum.Foliate
971blacklist ${HOME}/.cache/discover 977deny ${HOME}/.cache/darktable
972blacklist ${HOME}/.cache/dnox 978deny ${HOME}/.cache/deja-dup
973blacklist ${HOME}/.cache/dolphin 979deny ${HOME}/.cache/discover
974blacklist ${HOME}/.cache/dolphin-emu 980deny ${HOME}/.cache/dnox
975blacklist ${HOME}/.cache/ephemeral 981deny ${HOME}/.cache/dolphin
976blacklist ${HOME}/.cache/epiphany 982deny ${HOME}/.cache/dolphin-emu
977blacklist ${HOME}/.cache/evolution 983deny ${HOME}/.cache/ephemeral
978blacklist ${HOME}/.cache/falkon 984deny ${HOME}/.cache/epiphany
979blacklist ${HOME}/.cache/feedreader 985deny ${HOME}/.cache/evolution
980blacklist ${HOME}/.cache/firedragon 986deny ${HOME}/.cache/falkon
981blacklist ${HOME}/.cache/flaska.net/trojita 987deny ${HOME}/.cache/feedreader
982blacklist ${HOME}/.cache/folks 988deny ${HOME}/.cache/firedragon
983blacklist ${HOME}/.cache/font-manager 989deny ${HOME}/.cache/flaska.net/trojita
984blacklist ${HOME}/.cache/fossamail 990deny ${HOME}/.cache/folks
985blacklist ${HOME}/.cache/fractal 991deny ${HOME}/.cache/font-manager
986blacklist ${HOME}/.cache/freecol 992deny ${HOME}/.cache/fossamail
987blacklist ${HOME}/.cache/gajim 993deny ${HOME}/.cache/fractal
988blacklist ${HOME}/.cache/geary 994deny ${HOME}/.cache/freecol
989blacklist ${HOME}/.cache/gegl-0.4 995deny ${HOME}/.cache/gajim
990blacklist ${HOME}/.cache/geeqie 996deny ${HOME}/.cache/geary
991blacklist ${HOME}/.cache/gfeeds 997deny ${HOME}/.cache/geeqie
992blacklist ${HOME}/.cache/gimp 998deny ${HOME}/.cache/gegl-0.4
993blacklist ${HOME}/.cache/gnome-boxes 999deny ${HOME}/.cache/gfeeds
994blacklist ${HOME}/.cache/gnome-builder 1000deny ${HOME}/.cache/gimp
995blacklist ${HOME}/.cache/gnome-control-center 1001deny ${HOME}/.cache/gnome-boxes
996blacklist ${HOME}/.cache/gnome-recipes 1002deny ${HOME}/.cache/gnome-builder
997blacklist ${HOME}/.cache/gnome-screenshot 1003deny ${HOME}/.cache/gnome-control-center
998blacklist ${HOME}/.cache/gnome-software 1004deny ${HOME}/.cache/gnome-recipes
999blacklist ${HOME}/.cache/gnome-twitch 1005deny ${HOME}/.cache/gnome-screenshot
1000blacklist ${HOME}/.cache/godot 1006deny ${HOME}/.cache/gnome-software
1001blacklist ${HOME}/.cache/google-chrome 1007deny ${HOME}/.cache/gnome-twitch
1002blacklist ${HOME}/.cache/google-chrome-beta 1008deny ${HOME}/.cache/godot
1003blacklist ${HOME}/.cache/google-chrome-unstable 1009deny ${HOME}/.cache/google-chrome
1004blacklist ${HOME}/.cache/gradio 1010deny ${HOME}/.cache/google-chrome-beta
1005blacklist ${HOME}/.cache/gummi 1011deny ${HOME}/.cache/google-chrome-unstable
1006blacklist ${HOME}/.cache/icedove 1012deny ${HOME}/.cache/gradio
1007blacklist ${HOME}/.cache/INRIA/Natron 1013deny ${HOME}/.cache/gummi
1008blacklist ${HOME}/.cache/inkscape 1014deny ${HOME}/.cache/icedove
1009blacklist ${HOME}/.cache/inox 1015deny ${HOME}/.cache/inkscape
1010blacklist ${HOME}/.cache/iridium 1016deny ${HOME}/.cache/inox
1011blacklist ${HOME}/.cache/kcmshell5 1017deny ${HOME}/.cache/io.github.lainsce.Notejot
1012blacklist ${HOME}/.cache/KDE/neochat 1018deny ${HOME}/.cache/iridium
1013blacklist ${HOME}/.cache/kdenlive 1019deny ${HOME}/.cache/JetBrains/CLion*
1014blacklist ${HOME}/.cache/keepassxc 1020deny ${HOME}/.cache/kcmshell5
1015blacklist ${HOME}/.cache/kfind 1021deny ${HOME}/.cache/kdenlive
1016blacklist ${HOME}/.cache/kinfocenter 1022deny ${HOME}/.cache/keepassxc
1017blacklist ${HOME}/.cache/kmail2 1023deny ${HOME}/.cache/kfind
1018blacklist ${HOME}/.cache/krunner 1024deny ${HOME}/.cache/kinfocenter
1019blacklist ${HOME}/.cache/krunnerbookmarkrunnerfirefoxdbfile.sqlite* 1025deny ${HOME}/.cache/kmail2
1020blacklist ${HOME}/.cache/kscreenlocker_greet 1026deny ${HOME}/.cache/krunner
1021blacklist ${HOME}/.cache/ksmserver-logout-greeter 1027deny ${HOME}/.cache/krunnerbookmarkrunnerfirefoxdbfile.sqlite*
1022blacklist ${HOME}/.cache/ksplashqml 1028deny ${HOME}/.cache/kscreenlocker_greet
1023blacklist ${HOME}/.cache/kube 1029deny ${HOME}/.cache/ksmserver-logout-greeter
1024blacklist ${HOME}/.cache/kwin 1030deny ${HOME}/.cache/ksplashqml
1025blacklist ${HOME}/.cache/libgweather 1031deny ${HOME}/.cache/kube
1026blacklist ${HOME}/.cache/librewolf 1032deny ${HOME}/.cache/kwin
1027blacklist ${HOME}/.cache/liferea 1033deny ${HOME}/.cache/libgweather
1028blacklist ${HOME}/.cache/lutris 1034deny ${HOME}/.cache/librewolf
1029blacklist ${HOME}/.cache/Mendeley Ltd. 1035deny ${HOME}/.cache/liferea
1030blacklist ${HOME}/.cache/marker 1036deny ${HOME}/.cache/lutris
1031blacklist ${HOME}/.cache/matrix-mirage 1037deny ${HOME}/.cache/marker
1032blacklist ${HOME}/.cache/microsoft-edge-dev 1038deny ${HOME}/.cache/matrix-mirage
1033blacklist ${HOME}/.cache/midori 1039deny ${HOME}/.cache/microsoft-edge-beta
1034blacklist ${HOME}/.cache/minetest 1040deny ${HOME}/.cache/microsoft-edge-dev
1035blacklist ${HOME}/.cache/mirage 1041deny ${HOME}/.cache/midori
1036blacklist ${HOME}/.cache/moonchild productions/basilisk 1042deny ${HOME}/.cache/minetest
1037blacklist ${HOME}/.cache/moonchild productions/pale moon 1043deny ${HOME}/.cache/mirage
1038blacklist ${HOME}/.cache/mozilla 1044deny ${HOME}/.cache/moonchild productions/basilisk
1039blacklist ${HOME}/.cache/ms-excel-online 1045deny ${HOME}/.cache/moonchild productions/pale moon
1040blacklist ${HOME}/.cache/ms-office-online 1046deny ${HOME}/.cache/mozilla
1041blacklist ${HOME}/.cache/ms-onenote-online 1047deny ${HOME}/.cache/ms-excel-online
1042blacklist ${HOME}/.cache/ms-outlook-online 1048deny ${HOME}/.cache/ms-office-online
1043blacklist ${HOME}/.cache/ms-powerpoint-online 1049deny ${HOME}/.cache/ms-onenote-online
1044blacklist ${HOME}/.cache/ms-skype-online 1050deny ${HOME}/.cache/ms-outlook-online
1045blacklist ${HOME}/.cache/ms-word-online 1051deny ${HOME}/.cache/ms-powerpoint-online
1046blacklist ${HOME}/.cache/mutt 1052deny ${HOME}/.cache/ms-skype-online
1047blacklist ${HOME}/.cache/mypaint 1053deny ${HOME}/.cache/ms-word-online
1048blacklist ${HOME}/.cache/nheko 1054deny ${HOME}/.cache/mutt
1049blacklist ${HOME}/.cache/netsurf 1055deny ${HOME}/.cache/mypaint
1050blacklist ${HOME}/.cache/okular 1056deny ${HOME}/.cache/netsurf
1051blacklist ${HOME}/.cache/opera 1057deny ${HOME}/.cache/nheko
1052blacklist ${HOME}/.cache/opera-beta 1058deny ${HOME}/.cache/okular
1053blacklist ${HOME}/.cache/org.gabmus.gfeeds 1059deny ${HOME}/.cache/opera
1054blacklist ${HOME}/.cache/org.gnome.Books 1060deny ${HOME}/.cache/opera-beta
1055blacklist ${HOME}/.cache/org.gnome.Maps 1061deny ${HOME}/.cache/org.gabmus.gfeeds
1056blacklist ${HOME}/.cache/pdfmod 1062deny ${HOME}/.cache/org.gnome.Books
1057blacklist ${HOME}/.cache/peek 1063deny ${HOME}/.cache/org.gnome.Maps
1058blacklist ${HOME}/.cache/pip 1064deny ${HOME}/.cache/pdfmod
1059blacklist ${HOME}/.cache/pipe-viewer 1065deny ${HOME}/.cache/peek
1060blacklist ${HOME}/.cache/plasmashell 1066deny ${HOME}/.cache/pip
1061blacklist ${HOME}/.cache/plasmashellbookmarkrunnerfirefoxdbfile.sqlite* 1067deny ${HOME}/.cache/pipe-viewer
1062blacklist ${HOME}/.cache/psi 1068deny ${HOME}/.cache/plasmashell
1063blacklist ${HOME}/.cache/qBittorrent 1069deny ${HOME}/.cache/plasmashellbookmarkrunnerfirefoxdbfile.sqlite*
1064blacklist ${HOME}/.cache/qupzilla 1070deny ${HOME}/.cache/psi
1065blacklist ${HOME}/.cache/qutebrowser 1071deny ${HOME}/.cache/qBittorrent
1066blacklist ${HOME}/.cache/rhythmbox 1072deny ${HOME}/.cache/quodlibet
1067blacklist ${HOME}/.cache/shotwell 1073deny ${HOME}/.cache/qupzilla
1068blacklist ${HOME}/.cache/simple-scan 1074deny ${HOME}/.cache/qutebrowser
1069blacklist ${HOME}/.cache/slimjet 1075deny ${HOME}/.cache/rednotebook
1070blacklist ${HOME}/.cache/smuxi 1076deny ${HOME}/.cache/rhythmbox
1071blacklist ${HOME}/.cache/snox 1077deny ${HOME}/.cache/shotwell
1072blacklist ${HOME}/.cache/spotify 1078deny ${HOME}/.cache/simple-scan
1073blacklist ${HOME}/.cache/strawberry 1079deny ${HOME}/.cache/slimjet
1074blacklist ${HOME}/.cache/straw-viewer 1080deny ${HOME}/.cache/smuxi
1075blacklist ${HOME}/.cache/supertuxkart 1081deny ${HOME}/.cache/snox
1076blacklist ${HOME}/.cache/systemsettings 1082deny ${HOME}/.cache/spotify
1077blacklist ${HOME}/.cache/telepathy 1083deny ${HOME}/.cache/straw-viewer
1078blacklist ${HOME}/.cache/thunderbird 1084deny ${HOME}/.cache/strawberry
1079blacklist ${HOME}/.cache/torbrowser 1085deny ${HOME}/.cache/supertuxkart
1080blacklist ${HOME}/.cache/transmission 1086deny ${HOME}/.cache/systemsettings
1081blacklist ${HOME}/.cache/ungoogled-chromium 1087deny ${HOME}/.cache/telepathy
1082blacklist ${HOME}/.cache/vivaldi 1088deny ${HOME}/.cache/thunderbird
1083blacklist ${HOME}/.cache/vivaldi-snapshot 1089deny ${HOME}/.cache/torbrowser
1084blacklist ${HOME}/.cache/vlc 1090deny ${HOME}/.cache/transmission
1085blacklist ${HOME}/.cache/vmware 1091deny ${HOME}/.cache/ungoogled-chromium
1086blacklist ${HOME}/.cache/warsow-2.1 1092deny ${HOME}/.cache/vivaldi
1087blacklist ${HOME}/.cache/waterfox 1093deny ${HOME}/.cache/vivaldi-snapshot
1088blacklist ${HOME}/.cache/wesnoth 1094deny ${HOME}/.cache/vlc
1089blacklist ${HOME}/.cache/winetricks 1095deny ${HOME}/.cache/vmware
1090blacklist ${HOME}/.cache/xmms2 1096deny ${HOME}/.cache/warsow-2.1
1091blacklist ${HOME}/.cache/xreader 1097deny ${HOME}/.cache/waterfox
1092blacklist ${HOME}/.cache/yandex-browser 1098deny ${HOME}/.cache/wesnoth
1093blacklist ${HOME}/.cache/yandex-browser-beta 1099deny ${HOME}/.cache/winetricks
1094blacklist ${HOME}/.cache/youtube-dl 1100deny ${HOME}/.cache/xmms2
1095blacklist ${HOME}/.cache/youtube-viewer 1101deny ${HOME}/.cache/xreader
1102deny ${HOME}/.cache/yandex-browser
1103deny ${HOME}/.cache/yandex-browser-beta
1104deny ${HOME}/.cache/youtube-dl
1105deny ${HOME}/.cache/youtube-viewer
1106deny ${HOME}/.cache/zim
diff --git a/etc/inc/disable-shell.inc b/etc/inc/disable-shell.inc
index 8274b0215..da6fb31a3 100644
--- a/etc/inc/disable-shell.inc
+++ b/etc/inc/disable-shell.inc
@@ -2,14 +2,14 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include disable-shell.local 3include disable-shell.local
4 4
5blacklist ${PATH}/bash 5deny ${PATH}/bash
6blacklist ${PATH}/csh 6deny ${PATH}/csh
7blacklist ${PATH}/dash 7deny ${PATH}/dash
8blacklist ${PATH}/fish 8deny ${PATH}/fish
9blacklist ${PATH}/ksh 9deny ${PATH}/ksh
10blacklist ${PATH}/mksh 10deny ${PATH}/mksh
11blacklist ${PATH}/oksh 11deny ${PATH}/oksh
12blacklist ${PATH}/sh 12deny ${PATH}/sh
13blacklist ${PATH}/tclsh 13deny ${PATH}/tclsh
14blacklist ${PATH}/tcsh 14deny ${PATH}/tcsh
15blacklist ${PATH}/zsh 15deny ${PATH}/zsh
diff --git a/etc/inc/disable-xdg.inc b/etc/inc/disable-xdg.inc
index 22acf272d..32aa8c7f6 100644
--- a/etc/inc/disable-xdg.inc
+++ b/etc/inc/disable-xdg.inc
@@ -2,10 +2,10 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include disable-xdg.local 3include disable-xdg.local
4 4
5blacklist ${DOCUMENTS} 5deny ${DOCUMENTS}
6blacklist ${MUSIC} 6deny ${MUSIC}
7blacklist ${PICTURES} 7deny ${PICTURES}
8blacklist ${VIDEOS} 8deny ${VIDEOS}
9 9
10# The following should be considered catch-all directories 10# The following should be considered catch-all directories
11#blacklist ${DESKTOP} 11#blacklist ${DESKTOP}
diff --git a/etc/inc/whitelist-1793-workaround.inc b/etc/inc/whitelist-1793-workaround.inc
index 862837f12..06a424440 100644
--- a/etc/inc/whitelist-1793-workaround.inc
+++ b/etc/inc/whitelist-1793-workaround.inc
@@ -3,27 +3,27 @@
3include whitelist-1793-workaround.local 3include whitelist-1793-workaround.local
4# This works around bug 1793, and allows whitelisting to be used for some KDE applications. 4# This works around bug 1793, and allows whitelisting to be used for some KDE applications.
5 5
6noblacklist ${HOME}/.config/ibus 6nodeny ${HOME}/.config/ibus
7noblacklist ${HOME}/.config/mimeapps.list 7nodeny ${HOME}/.config/mimeapps.list
8noblacklist ${HOME}/.config/pkcs11 8nodeny ${HOME}/.config/pkcs11
9noblacklist ${HOME}/.config/user-dirs.dirs 9nodeny ${HOME}/.config/user-dirs.dirs
10noblacklist ${HOME}/.config/user-dirs.locale 10nodeny ${HOME}/.config/user-dirs.locale
11noblacklist ${HOME}/.config/dconf 11nodeny ${HOME}/.config/dconf
12noblacklist ${HOME}/.config/fontconfig 12nodeny ${HOME}/.config/fontconfig
13noblacklist ${HOME}/.config/gtk-2.0 13nodeny ${HOME}/.config/gtk-2.0
14noblacklist ${HOME}/.config/gtk-3.0 14nodeny ${HOME}/.config/gtk-3.0
15noblacklist ${HOME}/.config/gtk-4.0 15nodeny ${HOME}/.config/gtk-4.0
16noblacklist ${HOME}/.config/gtkrc 16nodeny ${HOME}/.config/gtkrc
17noblacklist ${HOME}/.config/gtkrc-2.0 17nodeny ${HOME}/.config/gtkrc-2.0
18noblacklist ${HOME}/.config/Kvantum 18nodeny ${HOME}/.config/Kvantum
19noblacklist ${HOME}/.config/Trolltech.conf 19nodeny ${HOME}/.config/Trolltech.conf
20noblacklist ${HOME}/.config/QtProject.conf 20nodeny ${HOME}/.config/QtProject.conf
21noblacklist ${HOME}/.config/kdeglobals 21nodeny ${HOME}/.config/kdeglobals
22noblacklist ${HOME}/.config/kio_httprc 22nodeny ${HOME}/.config/kio_httprc
23noblacklist ${HOME}/.config/kioslaverc 23nodeny ${HOME}/.config/kioslaverc
24noblacklist ${HOME}/.config/ksslcablacklist 24nodeny ${HOME}/.config/ksslcablacklist
25noblacklist ${HOME}/.config/qt5ct 25nodeny ${HOME}/.config/qt5ct
26noblacklist ${HOME}/.config/qtcurve 26nodeny ${HOME}/.config/qtcurve
27 27
28blacklist ${HOME}/.config/* 28deny ${HOME}/.config/*
29whitelist ${HOME}/.config 29allow ${HOME}/.config
diff --git a/etc/inc/whitelist-common.inc b/etc/inc/whitelist-common.inc
index 1d3728521..11070e372 100644
--- a/etc/inc/whitelist-common.inc
+++ b/etc/inc/whitelist-common.inc
@@ -4,81 +4,82 @@ include whitelist-common.local
4 4
5# common whitelist for all profiles 5# common whitelist for all profiles
6 6
7whitelist ${HOME}/.XCompose 7allow ${HOME}/.XCompose
8whitelist ${HOME}/.alsaequal.bin 8allow ${HOME}/.alsaequal.bin
9whitelist ${HOME}/.asoundrc 9allow ${HOME}/.asoundrc
10whitelist ${HOME}/.config/ibus 10allow ${HOME}/.config/ibus
11whitelist ${HOME}/.config/mimeapps.list 11allow ${HOME}/.config/mimeapps.list
12whitelist ${HOME}/.config/pkcs11 12allow ${HOME}/.config/pkcs11
13read-only ${HOME}/.config/pkcs11 13read-only ${HOME}/.config/pkcs11
14whitelist ${HOME}/.config/user-dirs.dirs 14allow ${HOME}/.config/user-dirs.dirs
15read-only ${HOME}/.config/user-dirs.dirs 15read-only ${HOME}/.config/user-dirs.dirs
16whitelist ${HOME}/.config/user-dirs.locale 16allow ${HOME}/.config/user-dirs.locale
17read-only ${HOME}/.config/user-dirs.locale 17read-only ${HOME}/.config/user-dirs.locale
18whitelist ${HOME}/.drirc 18allow ${HOME}/.drirc
19whitelist ${HOME}/.icons 19allow ${HOME}/.icons
20?HAS_APPIMAGE: whitelist ${HOME}/.local/share/appimagekit 20?HAS_APPIMAGE: whitelist ${HOME}/.local/share/appimagekit
21whitelist ${HOME}/.local/share/applications 21allow ${HOME}/.local/share/applications
22read-only ${HOME}/.local/share/applications 22read-only ${HOME}/.local/share/applications
23whitelist ${HOME}/.local/share/icons 23allow ${HOME}/.local/share/icons
24whitelist ${HOME}/.local/share/mime 24allow ${HOME}/.local/share/mime
25whitelist ${HOME}/.mime.types 25allow ${HOME}/.mime.types
26whitelist ${HOME}/.uim.d 26allow ${HOME}/.sndio/cookie
27allow ${HOME}/.uim.d
27 28
28# dconf 29# dconf
29mkdir ${HOME}/.config/dconf 30mkdir ${HOME}/.config/dconf
30whitelist ${HOME}/.config/dconf 31allow ${HOME}/.config/dconf
31 32
32# fonts 33# fonts
33whitelist ${HOME}/.cache/fontconfig 34allow ${HOME}/.cache/fontconfig
34whitelist ${HOME}/.config/fontconfig 35allow ${HOME}/.config/fontconfig
35whitelist ${HOME}/.fontconfig 36allow ${HOME}/.fontconfig
36whitelist ${HOME}/.fonts 37allow ${HOME}/.fonts
37whitelist ${HOME}/.fonts.conf 38allow ${HOME}/.fonts.conf
38whitelist ${HOME}/.fonts.conf.d 39allow ${HOME}/.fonts.conf.d
39whitelist ${HOME}/.fonts.d 40allow ${HOME}/.fonts.d
40whitelist ${HOME}/.local/share/fonts 41allow ${HOME}/.local/share/fonts
41whitelist ${HOME}/.pangorc 42allow ${HOME}/.pangorc
42 43
43# gtk 44# gtk
44whitelist ${HOME}/.config/gtk-2.0 45allow ${HOME}/.config/gtk-2.0
45whitelist ${HOME}/.config/gtk-3.0 46allow ${HOME}/.config/gtk-3.0
46whitelist ${HOME}/.config/gtk-4.0 47allow ${HOME}/.config/gtk-4.0
47whitelist ${HOME}/.config/gtkrc 48allow ${HOME}/.config/gtkrc
48whitelist ${HOME}/.config/gtkrc-2.0 49allow ${HOME}/.config/gtkrc-2.0
49whitelist ${HOME}/.gnome2 50allow ${HOME}/.gnome2
50whitelist ${HOME}/.gnome2-private 51allow ${HOME}/.gnome2-private
51whitelist ${HOME}/.gtk-2.0 52allow ${HOME}/.gtk-2.0
52whitelist ${HOME}/.gtkrc 53allow ${HOME}/.gtkrc
53whitelist ${HOME}/.gtkrc-2.0 54allow ${HOME}/.gtkrc-2.0
54whitelist ${HOME}/.kde/share/config/gtkrc 55allow ${HOME}/.kde/share/config/gtkrc
55whitelist ${HOME}/.kde/share/config/gtkrc-2.0 56allow ${HOME}/.kde/share/config/gtkrc-2.0
56whitelist ${HOME}/.kde4/share/config/gtkrc 57allow ${HOME}/.kde4/share/config/gtkrc
57whitelist ${HOME}/.kde4/share/config/gtkrc-2.0 58allow ${HOME}/.kde4/share/config/gtkrc-2.0
58whitelist ${HOME}/.local/share/themes 59allow ${HOME}/.local/share/themes
59whitelist ${HOME}/.themes 60allow ${HOME}/.themes
60 61
61# qt/kde 62# qt/kde
62whitelist ${HOME}/.cache/kioexec/krun 63allow ${HOME}/.cache/kioexec/krun
63whitelist ${HOME}/.config/Kvantum 64allow ${HOME}/.config/Kvantum
64whitelist ${HOME}/.config/Trolltech.conf 65allow ${HOME}/.config/Trolltech.conf
65whitelist ${HOME}/.config/QtProject.conf 66allow ${HOME}/.config/QtProject.conf
66whitelist ${HOME}/.config/kdeglobals 67allow ${HOME}/.config/kdeglobals
67whitelist ${HOME}/.config/kio_httprc 68allow ${HOME}/.config/kio_httprc
68whitelist ${HOME}/.config/kioslaverc 69allow ${HOME}/.config/kioslaverc
69whitelist ${HOME}/.config/ksslcablacklist 70allow ${HOME}/.config/ksslcablacklist
70whitelist ${HOME}/.config/qt5ct 71allow ${HOME}/.config/qt5ct
71whitelist ${HOME}/.config/qtcurve 72allow ${HOME}/.config/qtcurve
72whitelist ${HOME}/.kde/share/config/kdeglobals 73allow ${HOME}/.kde/share/config/kdeglobals
73whitelist ${HOME}/.kde/share/config/kio_httprc 74allow ${HOME}/.kde/share/config/kio_httprc
74whitelist ${HOME}/.kde/share/config/kioslaverc 75allow ${HOME}/.kde/share/config/kioslaverc
75whitelist ${HOME}/.kde/share/config/ksslcablacklist 76allow ${HOME}/.kde/share/config/ksslcablacklist
76whitelist ${HOME}/.kde/share/config/oxygenrc 77allow ${HOME}/.kde/share/config/oxygenrc
77whitelist ${HOME}/.kde/share/icons 78allow ${HOME}/.kde/share/icons
78whitelist ${HOME}/.kde4/share/config/kdeglobals 79allow ${HOME}/.kde4/share/config/kdeglobals
79whitelist ${HOME}/.kde4/share/config/kio_httprc 80allow ${HOME}/.kde4/share/config/kio_httprc
80whitelist ${HOME}/.kde4/share/config/kioslaverc 81allow ${HOME}/.kde4/share/config/kioslaverc
81whitelist ${HOME}/.kde4/share/config/ksslcablacklist 82allow ${HOME}/.kde4/share/config/ksslcablacklist
82whitelist ${HOME}/.kde4/share/config/oxygenrc 83allow ${HOME}/.kde4/share/config/oxygenrc
83whitelist ${HOME}/.kde4/share/icons 84allow ${HOME}/.kde4/share/icons
84whitelist ${HOME}/.local/share/qt5ct 85allow ${HOME}/.local/share/qt5ct
diff --git a/etc/inc/whitelist-player-common.inc b/etc/inc/whitelist-player-common.inc
index e5bf36804..d6ae8eab6 100644
--- a/etc/inc/whitelist-player-common.inc
+++ b/etc/inc/whitelist-player-common.inc
@@ -4,8 +4,8 @@ include whitelist-player-common.local
4 4
5# common whitelist for all media players 5# common whitelist for all media players
6 6
7whitelist ${DESKTOP} 7allow ${DESKTOP}
8whitelist ${DOWNLOADS} 8allow ${DOWNLOADS}
9whitelist ${MUSIC} 9allow ${MUSIC}
10whitelist ${PICTURES} 10allow ${PICTURES}
11whitelist ${VIDEOS} 11allow ${VIDEOS}
diff --git a/etc/inc/whitelist-run-common.inc b/etc/inc/whitelist-run-common.inc
new file mode 100644
index 000000000..a1345eb43
--- /dev/null
+++ b/etc/inc/whitelist-run-common.inc
@@ -0,0 +1,9 @@
1# This file is overwritten during software install.
2# Persistent customizations should go in a .local file.
3include whitelist-run-common.local
4
5whitelist /run/NetworkManager/resolv.conf
6whitelist /run/cups/cups.sock
7whitelist /run/dbus/system_bus_socket
8whitelist /run/systemd/resolve/resolv.conf
9whitelist /run/systemd/resolve/stub-resolv.conf
diff --git a/etc/inc/whitelist-runuser-common.inc b/etc/inc/whitelist-runuser-common.inc
index 48309ffe3..86e5264b9 100644
--- a/etc/inc/whitelist-runuser-common.inc
+++ b/etc/inc/whitelist-runuser-common.inc
@@ -4,13 +4,13 @@ include whitelist-runuser-common.local
4 4
5# common ${RUNUSER} (=/run/user/$UID) whitelist for all profiles 5# common ${RUNUSER} (=/run/user/$UID) whitelist for all profiles
6 6
7whitelist ${RUNUSER}/bus 7allow ${RUNUSER}/bus
8whitelist ${RUNUSER}/dconf 8allow ${RUNUSER}/dconf
9whitelist ${RUNUSER}/gdm/Xauthority 9allow ${RUNUSER}/gdm/Xauthority
10whitelist ${RUNUSER}/ICEauthority 10allow ${RUNUSER}/ICEauthority
11whitelist ${RUNUSER}/.mutter-Xwaylandauth.* 11allow ${RUNUSER}/.mutter-Xwaylandauth.*
12whitelist ${RUNUSER}/pulse/native 12allow ${RUNUSER}/pulse/native
13whitelist ${RUNUSER}/wayland-0 13allow ${RUNUSER}/wayland-0
14whitelist ${RUNUSER}/wayland-1 14allow ${RUNUSER}/wayland-1
15whitelist ${RUNUSER}/xauth_* 15allow ${RUNUSER}/xauth_*
16whitelist ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]] 16allow ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]
diff --git a/etc/inc/whitelist-usr-share-common.inc b/etc/inc/whitelist-usr-share-common.inc
index fe0097934..64296da15 100644
--- a/etc/inc/whitelist-usr-share-common.inc
+++ b/etc/inc/whitelist-usr-share-common.inc
@@ -4,66 +4,66 @@ include whitelist-usr-share-common.local
4 4
5# common /usr/share whitelist for all profiles 5# common /usr/share whitelist for all profiles
6 6
7whitelist /usr/share/alsa 7allow /usr/share/alsa
8whitelist /usr/share/applications 8allow /usr/share/applications
9whitelist /usr/share/ca-certificates 9allow /usr/share/ca-certificates
10whitelist /usr/share/crypto-policies 10allow /usr/share/crypto-policies
11whitelist /usr/share/cursors 11allow /usr/share/cursors
12whitelist /usr/share/dconf 12allow /usr/share/dconf
13whitelist /usr/share/distro-info 13allow /usr/share/distro-info
14whitelist /usr/share/drirc.d 14allow /usr/share/drirc.d
15whitelist /usr/share/enchant 15allow /usr/share/enchant
16whitelist /usr/share/enchant-2 16allow /usr/share/enchant-2
17whitelist /usr/share/file 17allow /usr/share/file
18whitelist /usr/share/fontconfig 18allow /usr/share/fontconfig
19whitelist /usr/share/fonts 19allow /usr/share/fonts
20whitelist /usr/share/fonts-config 20allow /usr/share/fonts-config
21whitelist /usr/share/gir-1.0 21allow /usr/share/gir-1.0
22whitelist /usr/share/gjs-1.0 22allow /usr/share/gjs-1.0
23whitelist /usr/share/glib-2.0 23allow /usr/share/glib-2.0
24whitelist /usr/share/glvnd 24allow /usr/share/glvnd
25whitelist /usr/share/gtk-2.0 25allow /usr/share/gtk-2.0
26whitelist /usr/share/gtk-3.0 26allow /usr/share/gtk-3.0
27whitelist /usr/share/gtk-engines 27allow /usr/share/gtk-engines
28whitelist /usr/share/gtksourceview-3.0 28allow /usr/share/gtksourceview-3.0
29whitelist /usr/share/gtksourceview-4 29allow /usr/share/gtksourceview-4
30whitelist /usr/share/hunspell 30allow /usr/share/hunspell
31whitelist /usr/share/hwdata 31allow /usr/share/hwdata
32whitelist /usr/share/icons 32allow /usr/share/icons
33whitelist /usr/share/icu 33allow /usr/share/icu
34whitelist /usr/share/knotifications5 34allow /usr/share/knotifications5
35whitelist /usr/share/kservices5 35allow /usr/share/kservices5
36whitelist /usr/share/Kvantum 36allow /usr/share/Kvantum
37whitelist /usr/share/kxmlgui5 37allow /usr/share/kxmlgui5
38whitelist /usr/share/libdrm 38allow /usr/share/libdrm
39whitelist /usr/share/libthai 39allow /usr/share/libthai
40whitelist /usr/share/locale 40allow /usr/share/locale
41whitelist /usr/share/mime 41allow /usr/share/mime
42whitelist /usr/share/misc 42allow /usr/share/misc
43whitelist /usr/share/Modules 43allow /usr/share/Modules
44whitelist /usr/share/myspell 44allow /usr/share/myspell
45whitelist /usr/share/p11-kit 45allow /usr/share/p11-kit
46whitelist /usr/share/perl 46allow /usr/share/perl
47whitelist /usr/share/perl5 47allow /usr/share/perl5
48whitelist /usr/share/pixmaps 48allow /usr/share/pixmaps
49whitelist /usr/share/pki 49allow /usr/share/pki
50whitelist /usr/share/plasma 50allow /usr/share/plasma
51whitelist /usr/share/publicsuffix 51allow /usr/share/publicsuffix
52whitelist /usr/share/qt 52allow /usr/share/qt
53whitelist /usr/share/qt4 53allow /usr/share/qt4
54whitelist /usr/share/qt5 54allow /usr/share/qt5
55whitelist /usr/share/qt5ct 55allow /usr/share/qt5ct
56whitelist /usr/share/sounds 56allow /usr/share/sounds
57whitelist /usr/share/tcl8.6 57allow /usr/share/tcl8.6
58whitelist /usr/share/tcltk 58allow /usr/share/tcltk
59whitelist /usr/share/terminfo 59allow /usr/share/terminfo
60whitelist /usr/share/texlive 60allow /usr/share/texlive
61whitelist /usr/share/texmf 61allow /usr/share/texmf
62whitelist /usr/share/themes 62allow /usr/share/themes
63whitelist /usr/share/thumbnail.so 63allow /usr/share/thumbnail.so
64whitelist /usr/share/uim 64allow /usr/share/uim
65whitelist /usr/share/vulkan 65allow /usr/share/vulkan
66whitelist /usr/share/X11 66allow /usr/share/X11
67whitelist /usr/share/xml 67allow /usr/share/xml
68whitelist /usr/share/zenity 68allow /usr/share/zenity
69whitelist /usr/share/zoneinfo 69allow /usr/share/zoneinfo
diff --git a/etc/inc/whitelist-var-common.inc b/etc/inc/whitelist-var-common.inc
index d8ba84ad0..c449e8905 100644
--- a/etc/inc/whitelist-var-common.inc
+++ b/etc/inc/whitelist-var-common.inc
@@ -4,12 +4,12 @@ include whitelist-var-common.local
4 4
5# common /var whitelist for all profiles 5# common /var whitelist for all profiles
6 6
7whitelist /var/lib/aspell 7allow /var/lib/aspell
8whitelist /var/lib/ca-certificates 8allow /var/lib/ca-certificates
9whitelist /var/lib/dbus 9allow /var/lib/dbus
10whitelist /var/lib/menu-xdg 10allow /var/lib/menu-xdg
11whitelist /var/lib/uim 11allow /var/lib/uim
12whitelist /var/cache/fontconfig 12allow /var/cache/fontconfig
13whitelist /var/tmp 13allow /var/tmp
14whitelist /var/run 14allow /var/run
15whitelist /var/lock 15allow /var/lock
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-19 21:26:10 +0000