aboutsummaryrefslogtreecommitdiffstats
path: root/etc/inc
diff options
context:
space:
mode:
authorLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2021-07-18 20:39:14 -0300
committerLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2021-07-18 20:39:14 -0300
commitf43382f1e9707b4fd5e63c7bfe881912aa4ee994 (patch)
tree499639bb962c8b071b153dcdad1b42af8286521d /etc/inc
parentAdd MS Edge Beta profile (diff)
downloadfirejail-f43382f1e9707b4fd5e63c7bfe881912aa4ee994.tar.gz
firejail-f43382f1e9707b4fd5e63c7bfe881912aa4ee994.tar.zst
firejail-f43382f1e9707b4fd5e63c7bfe881912aa4ee994.zip
Revert "move whitelist/blacklist to allow/deny"
This reverts commit fe0f975f447d59977d90c3226cc8c623b31b20b3. Note: This only reverts the changes from etc. The 4 aliases introduced on commit 45f2ba544 are mere, well, aliases. That is, they fail to address the different usability problems discussed on [#3447][3447] and in fact only make things more confusing (as has already been mentioned on [this][4379] and later comments). The main reason is that the aliases do not meaningfully map to the original commands. For example, the commands from each pair below seem like they would do the exact same thing: * `allow` and `nodeny` * `deny` and `noallow` Additionally, if these aliases are not the final commands, but only a test/work-in-progress, then keeping the wide-scale search/replace changes made on commit fe0f975f4 would only serve to cause confusion, as users of firejail-git, contributors and downstream projects might start changing the commands used on their profiles, only to later have to change them again, potentially to completely different commands. The sooner this is undone the better, as (besides the above reasons) the more profile changes there are between the original commit and the revert, the harder it is to e.g.: `git diff` versions of files across the following revision ranges: before the commit, after the commit but before the revert and after the revert. Note: This is still the case even if a commit is [ignored by `git blame`][4390]. So let us revert fe0f975f4 and only reapply similar large-scale changes once we have discussed and settled on better commands. How the revert was applied: Despite using the auto-generated message from `git revert`, to ensure correctness and to avoid conflicts the changes were reverted in different steps: Firstly, revert the files which can be safely reverted directly ("filestorevert"): # Find out which files have been changed on fe0f975f44, but have not # been changed afterwards and list them on "filestorevert" git show --pretty='' --name-only fe0f975f44 -- etc | LC_ALL=C sort >allfiles git diff --name-only fe0f975f44..master -- etc | LC_ALL=C sort >filestoignore comm -2 -3 allfiles filestoignore >filestorevert # Note: There are 3 extra files on filestoignore because they were # added after commit fe0f975f44 wc -l allfiles filestoignore filestorevert | head -n 3 # 797 allfiles # 8 filestoignore # 792 filestorevert # Automatically revert files in "filestorevert" # See https://stackoverflow.com/a/23401018/10095231 tr '\n' '\000' <filestorevert | xargs -0 git show fe0f975f44 -- | git apply --reverse printf 'Total files reverted:\n' git diff --name-only | wc -l # 792 Secondly, do some search/replace on the rest: tr '\n' '\000' <filestoignore | xargs -0 sed -i.bak \ -e 's/allow /whitelist /' -e 's/noallow /nowhitelist /' \ -e 's/deny /blacklist /' -e 's/nodeny /noblacklist /' \ -e 's/deny-nolog /blacklist-nolog /' find etc -name '*.bak' -print0 | xargs -0 rm Thirdly, verify the result. The following command shows the difference between all the changes in etc from before fe0f975f44 and this commit (inclusive): git diff fe0f975f44~1 -- etc From the output, it looks like all alias changes are fully reverted and that the other changes to etc (from after fe0f975f44) remain, so the revert seems to be done correctly. [3447]: https://github.com/netblue30/firejail/issues/3447 [4379]: https://github.com/netblue30/firejail/issues/4379#issuecomment-876460222 [4390]: https://github.com/netblue30/firejail/issues/4390
Diffstat (limited to 'etc/inc')
-rw-r--r--etc/inc/allow-bin-sh.inc6
-rw-r--r--etc/inc/allow-common-devel.inc36
-rw-r--r--etc/inc/allow-gjs.inc16
-rw-r--r--etc/inc/allow-java.inc10
-rw-r--r--etc/inc/allow-lua.inc16
-rw-r--r--etc/inc/allow-nodejs.inc4
-rw-r--r--etc/inc/allow-opengl-game.inc4
-rw-r--r--etc/inc/allow-perl.inc16
-rw-r--r--etc/inc/allow-php.inc6
-rw-r--r--etc/inc/allow-python2.inc10
-rw-r--r--etc/inc/allow-python3.inc12
-rw-r--r--etc/inc/allow-ruby.inc4
-rw-r--r--etc/inc/allow-ssh.inc8
-rw-r--r--etc/inc/disable-common.inc710
-rw-r--r--etc/inc/disable-devel.inc80
-rw-r--r--etc/inc/disable-interpreters.inc84
-rw-r--r--etc/inc/disable-passwdmgr.inc30
-rw-r--r--etc/inc/disable-programs.inc2184
-rw-r--r--etc/inc/disable-shell.inc22
-rw-r--r--etc/inc/disable-xdg.inc8
-rw-r--r--etc/inc/whitelist-1793-workaround.inc46
-rw-r--r--etc/inc/whitelist-common.inc130
-rw-r--r--etc/inc/whitelist-player-common.inc10
-rw-r--r--etc/inc/whitelist-runuser-common.inc20
-rw-r--r--etc/inc/whitelist-usr-share-common.inc126
-rw-r--r--etc/inc/whitelist-var-common.inc18
26 files changed, 1808 insertions, 1808 deletions
diff --git a/etc/inc/allow-bin-sh.inc b/etc/inc/allow-bin-sh.inc
index 59cd40878..d6c295414 100644
--- a/etc/inc/allow-bin-sh.inc
+++ b/etc/inc/allow-bin-sh.inc
@@ -2,6 +2,6 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-bin-sh.local 3include allow-bin-sh.local
4 4
5nodeny ${PATH}/bash 5noblacklist ${PATH}/bash
6nodeny ${PATH}/dash 6noblacklist ${PATH}/dash
7nodeny ${PATH}/sh 7noblacklist ${PATH}/sh
diff --git a/etc/inc/allow-common-devel.inc b/etc/inc/allow-common-devel.inc
index 71b1483cd..011bbe226 100644
--- a/etc/inc/allow-common-devel.inc
+++ b/etc/inc/allow-common-devel.inc
@@ -3,29 +3,29 @@
3include allow-common-devel.local 3include allow-common-devel.local
4 4
5# Git 5# Git
6nodeny ${HOME}/.config/git 6noblacklist ${HOME}/.config/git
7nodeny ${HOME}/.gitconfig 7noblacklist ${HOME}/.gitconfig
8nodeny ${HOME}/.git-credentials 8noblacklist ${HOME}/.git-credentials
9 9
10# Java 10# Java
11nodeny ${HOME}/.gradle 11noblacklist ${HOME}/.gradle
12nodeny ${HOME}/.java 12noblacklist ${HOME}/.java
13 13
14# Node.js 14# Node.js
15nodeny ${HOME}/.node-gyp 15noblacklist ${HOME}/.node-gyp
16nodeny ${HOME}/.npm 16noblacklist ${HOME}/.npm
17nodeny ${HOME}/.npmrc 17noblacklist ${HOME}/.npmrc
18nodeny ${HOME}/.nvm 18noblacklist ${HOME}/.nvm
19nodeny ${HOME}/.yarn 19noblacklist ${HOME}/.yarn
20nodeny ${HOME}/.yarn-config 20noblacklist ${HOME}/.yarn-config
21nodeny ${HOME}/.yarncache 21noblacklist ${HOME}/.yarncache
22nodeny ${HOME}/.yarnrc 22noblacklist ${HOME}/.yarnrc
23 23
24# Python 24# Python
25nodeny ${HOME}/.pylint.d 25noblacklist ${HOME}/.pylint.d
26nodeny ${HOME}/.python-history 26noblacklist ${HOME}/.python-history
27nodeny ${HOME}/.python_history 27noblacklist ${HOME}/.python_history
28nodeny ${HOME}/.pythonhist 28noblacklist ${HOME}/.pythonhist
29 29
30# Rust 30# Rust
31nodeny ${HOME}/.cargo/* 31noblacklist ${HOME}/.cargo/*
diff --git a/etc/inc/allow-gjs.inc b/etc/inc/allow-gjs.inc
index 2e2490079..c1366e093 100644
--- a/etc/inc/allow-gjs.inc
+++ b/etc/inc/allow-gjs.inc
@@ -2,11 +2,11 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-gjs.local 3include allow-gjs.local
4 4
5nodeny ${PATH}/gjs 5noblacklist ${PATH}/gjs
6nodeny ${PATH}/gjs-console 6noblacklist ${PATH}/gjs-console
7nodeny /usr/lib/gjs 7noblacklist /usr/lib/gjs
8nodeny /usr/lib/libgjs* 8noblacklist /usr/lib/libgjs*
9nodeny /usr/lib/libmozjs-* 9noblacklist /usr/lib/libmozjs-*
10nodeny /usr/lib64/gjs 10noblacklist /usr/lib64/gjs
11nodeny /usr/lib64/libgjs* 11noblacklist /usr/lib64/libgjs*
12nodeny /usr/lib64/libmozjs-* 12noblacklist /usr/lib64/libmozjs-*
diff --git a/etc/inc/allow-java.inc b/etc/inc/allow-java.inc
index af44f3664..24d18fb77 100644
--- a/etc/inc/allow-java.inc
+++ b/etc/inc/allow-java.inc
@@ -2,8 +2,8 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-java.local 3include allow-java.local
4 4
5nodeny ${HOME}/.java 5noblacklist ${HOME}/.java
6nodeny ${PATH}/java 6noblacklist ${PATH}/java
7nodeny /etc/java 7noblacklist /etc/java
8nodeny /usr/lib/java 8noblacklist /usr/lib/java
9nodeny /usr/share/java 9noblacklist /usr/share/java
diff --git a/etc/inc/allow-lua.inc b/etc/inc/allow-lua.inc
index 3d0a1997b..9c47e7a3b 100644
--- a/etc/inc/allow-lua.inc
+++ b/etc/inc/allow-lua.inc
@@ -2,11 +2,11 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-lua.local 3include allow-lua.local
4 4
5nodeny ${PATH}/lua* 5noblacklist ${PATH}/lua*
6nodeny /usr/include 6noblacklist /usr/include
7nodeny /usr/lib/liblua* 7noblacklist /usr/lib/liblua*
8nodeny /usr/lib/lua 8noblacklist /usr/lib/lua
9nodeny /usr/lib64/liblua* 9noblacklist /usr/lib64/liblua*
10nodeny /usr/lib64/lua 10noblacklist /usr/lib64/lua
11nodeny /usr/share/lua 11noblacklist /usr/share/lua
12nodeny /usr/share/lua* 12noblacklist /usr/share/lua*
diff --git a/etc/inc/allow-nodejs.inc b/etc/inc/allow-nodejs.inc
index e915b3866..351c94ab8 100644
--- a/etc/inc/allow-nodejs.inc
+++ b/etc/inc/allow-nodejs.inc
@@ -2,8 +2,8 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-nodejs.local 3include allow-nodejs.local
4 4
5nodeny ${PATH}/node 5noblacklist ${PATH}/node
6nodeny /usr/include/node 6noblacklist /usr/include/node
7 7
8# Allow python for node-gyp (blacklisted by disable-interpreters.inc) 8# Allow python for node-gyp (blacklisted by disable-interpreters.inc)
9include allow-python2.inc 9include allow-python2.inc
diff --git a/etc/inc/allow-opengl-game.inc b/etc/inc/allow-opengl-game.inc
index 00e35e983..5d2d6c5c1 100644
--- a/etc/inc/allow-opengl-game.inc
+++ b/etc/inc/allow-opengl-game.inc
@@ -2,6 +2,6 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-opengl-game.local 3include allow-opengl-game.local
4 4
5nodeny ${PATH}/bash 5noblacklist ${PATH}/bash
6allow /usr/share/opengl-games-utils/opengl-game-functions.sh 6whitelist /usr/share/opengl-games-utils/opengl-game-functions.sh
7private-bin basename,bash,cut,glxinfo,grep,head,sed,zenity 7private-bin basename,bash,cut,glxinfo,grep,head,sed,zenity
diff --git a/etc/inc/allow-perl.inc b/etc/inc/allow-perl.inc
index 134d27239..5a1952c94 100644
--- a/etc/inc/allow-perl.inc
+++ b/etc/inc/allow-perl.inc
@@ -2,11 +2,11 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-perl.local 3include allow-perl.local
4 4
5nodeny ${PATH}/core_perl 5noblacklist ${PATH}/core_perl
6nodeny ${PATH}/cpan* 6noblacklist ${PATH}/cpan*
7nodeny ${PATH}/perl 7noblacklist ${PATH}/perl
8nodeny ${PATH}/site_perl 8noblacklist ${PATH}/site_perl
9nodeny ${PATH}/vendor_perl 9noblacklist ${PATH}/vendor_perl
10nodeny /usr/lib/perl* 10noblacklist /usr/lib/perl*
11nodeny /usr/lib64/perl* 11noblacklist /usr/lib64/perl*
12nodeny /usr/share/perl* 12noblacklist /usr/share/perl*
diff --git a/etc/inc/allow-php.inc b/etc/inc/allow-php.inc
index 520c2019e..a0950dc26 100644
--- a/etc/inc/allow-php.inc
+++ b/etc/inc/allow-php.inc
@@ -2,6 +2,6 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-php.local 3include allow-php.local
4 4
5nodeny ${PATH}/php* 5noblacklist ${PATH}/php*
6nodeny /usr/lib/php* 6noblacklist /usr/lib/php*
7nodeny /usr/share/php* 7noblacklist /usr/share/php*
diff --git a/etc/inc/allow-python2.inc b/etc/inc/allow-python2.inc
index f1830043a..b0525e2e1 100644
--- a/etc/inc/allow-python2.inc
+++ b/etc/inc/allow-python2.inc
@@ -2,8 +2,8 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-python2.local 3include allow-python2.local
4 4
5nodeny ${PATH}/python2* 5noblacklist ${PATH}/python2*
6nodeny /usr/include/python2* 6noblacklist /usr/include/python2*
7nodeny /usr/lib/python2* 7noblacklist /usr/lib/python2*
8nodeny /usr/local/lib/python2* 8noblacklist /usr/local/lib/python2*
9nodeny /usr/share/python2* 9noblacklist /usr/share/python2*
diff --git a/etc/inc/allow-python3.inc b/etc/inc/allow-python3.inc
index e4b6ed1a9..d968886b0 100644
--- a/etc/inc/allow-python3.inc
+++ b/etc/inc/allow-python3.inc
@@ -2,9 +2,9 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-python3.local 3include allow-python3.local
4 4
5nodeny ${PATH}/python3* 5noblacklist ${PATH}/python3*
6nodeny /usr/include/python3* 6noblacklist /usr/include/python3*
7nodeny /usr/lib/python3* 7noblacklist /usr/lib/python3*
8nodeny /usr/lib64/python3* 8noblacklist /usr/lib64/python3*
9nodeny /usr/local/lib/python3* 9noblacklist /usr/local/lib/python3*
10nodeny /usr/share/python3* 10noblacklist /usr/share/python3*
diff --git a/etc/inc/allow-ruby.inc b/etc/inc/allow-ruby.inc
index d949bbc84..a8c701219 100644
--- a/etc/inc/allow-ruby.inc
+++ b/etc/inc/allow-ruby.inc
@@ -2,5 +2,5 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-ruby.local 3include allow-ruby.local
4 4
5nodeny ${PATH}/ruby 5noblacklist ${PATH}/ruby
6nodeny /usr/lib/ruby 6noblacklist /usr/lib/ruby
diff --git a/etc/inc/allow-ssh.inc b/etc/inc/allow-ssh.inc
index 44957bf32..67c78a483 100644
--- a/etc/inc/allow-ssh.inc
+++ b/etc/inc/allow-ssh.inc
@@ -2,7 +2,7 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-ssh.local 3include allow-ssh.local
4 4
5nodeny ${HOME}/.ssh 5noblacklist ${HOME}/.ssh
6nodeny /etc/ssh 6noblacklist /etc/ssh
7nodeny /etc/ssh/ssh_config 7noblacklist /etc/ssh/ssh_config
8nodeny /tmp/ssh-* 8noblacklist /tmp/ssh-*
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc
index 1283a3a3d..6df0c4990 100644
--- a/etc/inc/disable-common.inc
+++ b/etc/inc/disable-common.inc
@@ -5,63 +5,63 @@ include disable-common.local
5# The following block breaks trash functionality in file managers 5# The following block breaks trash functionality in file managers
6#read-only ${HOME}/.local 6#read-only ${HOME}/.local
7#read-write ${HOME}/.local/share 7#read-write ${HOME}/.local/share
8deny ${HOME}/.local/share/Trash 8blacklist ${HOME}/.local/share/Trash
9 9
10# History files in $HOME and clipboard managers 10# History files in $HOME and clipboard managers
11deny-nolog ${HOME}/.*_history 11blacklist-nolog ${HOME}/.*_history
12deny-nolog ${HOME}/.adobe 12blacklist-nolog ${HOME}/.adobe
13deny-nolog ${HOME}/.cache/greenclip* 13blacklist-nolog ${HOME}/.cache/greenclip*
14deny-nolog ${HOME}/.histfile 14blacklist-nolog ${HOME}/.histfile
15deny-nolog ${HOME}/.history 15blacklist-nolog ${HOME}/.history
16deny-nolog ${HOME}/.kde/share/apps/klipper 16blacklist-nolog ${HOME}/.kde/share/apps/klipper
17deny-nolog ${HOME}/.kde4/share/apps/klipper 17blacklist-nolog ${HOME}/.kde4/share/apps/klipper
18deny-nolog ${HOME}/.local/share/fish/fish_history 18blacklist-nolog ${HOME}/.local/share/fish/fish_history
19deny-nolog ${HOME}/.local/share/klipper 19blacklist-nolog ${HOME}/.local/share/klipper
20deny-nolog ${HOME}/.macromedia 20blacklist-nolog ${HOME}/.macromedia
21deny-nolog ${HOME}/.mupdf.history 21blacklist-nolog ${HOME}/.mupdf.history
22deny-nolog ${HOME}/.python-history 22blacklist-nolog ${HOME}/.python-history
23deny-nolog ${HOME}/.python_history 23blacklist-nolog ${HOME}/.python_history
24deny-nolog ${HOME}/.pythonhist 24blacklist-nolog ${HOME}/.pythonhist
25deny-nolog ${HOME}/.lesshst 25blacklist-nolog ${HOME}/.lesshst
26deny-nolog ${HOME}/.viminfo 26blacklist-nolog ${HOME}/.viminfo
27deny-nolog /tmp/clipmenu* 27blacklist-nolog /tmp/clipmenu*
28 28
29# X11 session autostart 29# X11 session autostart
30# blacklist ${HOME}/.xpra - this will kill --x11=xpra cmdline option for all programs 30# blacklist ${HOME}/.xpra - this will kill --x11=xpra cmdline option for all programs
31deny ${HOME}/.Xsession 31blacklist ${HOME}/.Xsession
32deny ${HOME}/.blackbox 32blacklist ${HOME}/.blackbox
33deny ${HOME}/.config/autostart 33blacklist ${HOME}/.config/autostart
34deny ${HOME}/.config/autostart-scripts 34blacklist ${HOME}/.config/autostart-scripts
35deny ${HOME}/.config/awesome 35blacklist ${HOME}/.config/awesome
36deny ${HOME}/.config/i3 36blacklist ${HOME}/.config/i3
37deny ${HOME}/.config/sway 37blacklist ${HOME}/.config/sway
38deny ${HOME}/.config/lxsession/LXDE/autostart 38blacklist ${HOME}/.config/lxsession/LXDE/autostart
39deny ${HOME}/.config/openbox 39blacklist ${HOME}/.config/openbox
40deny ${HOME}/.config/plasma-workspace 40blacklist ${HOME}/.config/plasma-workspace
41deny ${HOME}/.config/startupconfig 41blacklist ${HOME}/.config/startupconfig
42deny ${HOME}/.config/startupconfigkeys 42blacklist ${HOME}/.config/startupconfigkeys
43deny ${HOME}/.fluxbox 43blacklist ${HOME}/.fluxbox
44deny ${HOME}/.gnomerc 44blacklist ${HOME}/.gnomerc
45deny ${HOME}/.kde/Autostart 45blacklist ${HOME}/.kde/Autostart
46deny ${HOME}/.kde/env 46blacklist ${HOME}/.kde/env
47deny ${HOME}/.kde/share/autostart 47blacklist ${HOME}/.kde/share/autostart
48deny ${HOME}/.kde/share/config/startupconfig 48blacklist ${HOME}/.kde/share/config/startupconfig
49deny ${HOME}/.kde/share/config/startupconfigkeys 49blacklist ${HOME}/.kde/share/config/startupconfigkeys
50deny ${HOME}/.kde/shutdown 50blacklist ${HOME}/.kde/shutdown
51deny ${HOME}/.kde4/env 51blacklist ${HOME}/.kde4/env
52deny ${HOME}/.kde4/Autostart 52blacklist ${HOME}/.kde4/Autostart
53deny ${HOME}/.kde4/share/autostart 53blacklist ${HOME}/.kde4/share/autostart
54deny ${HOME}/.kde4/shutdown 54blacklist ${HOME}/.kde4/shutdown
55deny ${HOME}/.kde4/share/config/startupconfig 55blacklist ${HOME}/.kde4/share/config/startupconfig
56deny ${HOME}/.kde4/share/config/startupconfigkeys 56blacklist ${HOME}/.kde4/share/config/startupconfigkeys
57deny ${HOME}/.local/share/autostart 57blacklist ${HOME}/.local/share/autostart
58deny ${HOME}/.xinitrc 58blacklist ${HOME}/.xinitrc
59deny ${HOME}/.xprofile 59blacklist ${HOME}/.xprofile
60deny ${HOME}/.xserverrc 60blacklist ${HOME}/.xserverrc
61deny ${HOME}/.xsession 61blacklist ${HOME}/.xsession
62deny ${HOME}/.xsessionrc 62blacklist ${HOME}/.xsessionrc
63deny /etc/X11/Xsession.d 63blacklist /etc/X11/Xsession.d
64deny /etc/xdg/autostart 64blacklist /etc/xdg/autostart
65read-only ${HOME}/.Xauthority 65read-only ${HOME}/.Xauthority
66 66
67# Session manager 67# Session manager
@@ -70,46 +70,46 @@ read-only ${HOME}/.Xauthority
70#?HAS_X11: blacklist /tmp/.ICE-unix 70#?HAS_X11: blacklist /tmp/.ICE-unix
71 71
72# KDE config 72# KDE config
73deny ${HOME}/.cache/konsole 73blacklist ${HOME}/.cache/konsole
74deny ${HOME}/.config/khotkeysrc 74blacklist ${HOME}/.config/khotkeysrc
75deny ${HOME}/.config/krunnerrc 75blacklist ${HOME}/.config/krunnerrc
76deny ${HOME}/.config/kscreenlockerrc 76blacklist ${HOME}/.config/kscreenlockerrc
77deny ${HOME}/.config/ksslcertificatemanager 77blacklist ${HOME}/.config/ksslcertificatemanager
78deny ${HOME}/.config/kwalletrc 78blacklist ${HOME}/.config/kwalletrc
79deny ${HOME}/.config/kwinrc 79blacklist ${HOME}/.config/kwinrc
80deny ${HOME}/.config/kwinrulesrc 80blacklist ${HOME}/.config/kwinrulesrc
81deny ${HOME}/.config/plasma-locale-settings.sh 81blacklist ${HOME}/.config/plasma-locale-settings.sh
82deny ${HOME}/.config/plasma-org.kde.plasma.desktop-appletsrc 82blacklist ${HOME}/.config/plasma-org.kde.plasma.desktop-appletsrc
83deny ${HOME}/.config/plasmashellrc 83blacklist ${HOME}/.config/plasmashellrc
84deny ${HOME}/.config/plasmavaultrc 84blacklist ${HOME}/.config/plasmavaultrc
85deny ${HOME}/.kde/share/apps/kwin 85blacklist ${HOME}/.kde/share/apps/kwin
86deny ${HOME}/.kde/share/apps/plasma 86blacklist ${HOME}/.kde/share/apps/plasma
87deny ${HOME}/.kde/share/apps/solid 87blacklist ${HOME}/.kde/share/apps/solid
88deny ${HOME}/.kde/share/config/khotkeysrc 88blacklist ${HOME}/.kde/share/config/khotkeysrc
89deny ${HOME}/.kde/share/config/krunnerrc 89blacklist ${HOME}/.kde/share/config/krunnerrc
90deny ${HOME}/.kde/share/config/kscreensaverrc 90blacklist ${HOME}/.kde/share/config/kscreensaverrc
91deny ${HOME}/.kde/share/config/ksslcertificatemanager 91blacklist ${HOME}/.kde/share/config/ksslcertificatemanager
92deny ${HOME}/.kde/share/config/kwalletrc 92blacklist ${HOME}/.kde/share/config/kwalletrc
93deny ${HOME}/.kde/share/config/kwinrc 93blacklist ${HOME}/.kde/share/config/kwinrc
94deny ${HOME}/.kde/share/config/kwinrulesrc 94blacklist ${HOME}/.kde/share/config/kwinrulesrc
95deny ${HOME}/.kde/share/config/plasma-desktop-appletsrc 95blacklist ${HOME}/.kde/share/config/plasma-desktop-appletsrc
96deny ${HOME}/.kde4/share/apps/kwin 96blacklist ${HOME}/.kde4/share/apps/kwin
97deny ${HOME}/.kde4/share/apps/plasma 97blacklist ${HOME}/.kde4/share/apps/plasma
98deny ${HOME}/.kde4/share/apps/solid 98blacklist ${HOME}/.kde4/share/apps/solid
99deny ${HOME}/.kde4/share/config/khotkeysrc 99blacklist ${HOME}/.kde4/share/config/khotkeysrc
100deny ${HOME}/.kde4/share/config/krunnerrc 100blacklist ${HOME}/.kde4/share/config/krunnerrc
101deny ${HOME}/.kde4/share/config/kscreensaverrc 101blacklist ${HOME}/.kde4/share/config/kscreensaverrc
102deny ${HOME}/.kde4/share/config/ksslcertificatemanager 102blacklist ${HOME}/.kde4/share/config/ksslcertificatemanager
103deny ${HOME}/.kde4/share/config/kwalletrc 103blacklist ${HOME}/.kde4/share/config/kwalletrc
104deny ${HOME}/.kde4/share/config/kwinrc 104blacklist ${HOME}/.kde4/share/config/kwinrc
105deny ${HOME}/.kde4/share/config/kwinrulesrc 105blacklist ${HOME}/.kde4/share/config/kwinrulesrc
106deny ${HOME}/.kde4/share/config/plasma-desktop-appletsrc 106blacklist ${HOME}/.kde4/share/config/plasma-desktop-appletsrc
107deny ${HOME}/.local/share/kglobalaccel 107blacklist ${HOME}/.local/share/kglobalaccel
108deny ${HOME}/.local/share/kwin 108blacklist ${HOME}/.local/share/kwin
109deny ${HOME}/.local/share/plasma 109blacklist ${HOME}/.local/share/plasma
110deny ${HOME}/.local/share/plasmashell 110blacklist ${HOME}/.local/share/plasmashell
111deny ${HOME}/.local/share/solid 111blacklist ${HOME}/.local/share/solid
112deny /tmp/konsole-*.history 112blacklist /tmp/konsole-*.history
113read-only ${HOME}/.cache/ksycoca5_* 113read-only ${HOME}/.cache/ksycoca5_*
114read-only ${HOME}/.config/*notifyrc 114read-only ${HOME}/.config/*notifyrc
115read-only ${HOME}/.config/kdeglobals 115read-only ${HOME}/.config/kdeglobals
@@ -138,139 +138,139 @@ read-only ${HOME}/.local/share/kservices5
138read-only ${HOME}/.local/share/kssl 138read-only ${HOME}/.local/share/kssl
139 139
140# KDE sockets 140# KDE sockets
141deny ${RUNUSER}/*.slave-socket 141blacklist ${RUNUSER}/*.slave-socket
142deny ${RUNUSER}/kdeinit5__* 142blacklist ${RUNUSER}/kdeinit5__*
143deny ${RUNUSER}/kdesud_* 143blacklist ${RUNUSER}/kdesud_*
144# see #3358 144# see #3358
145#?HAS_NODBUS: blacklist ${RUNUSER}/ksocket-* 145#?HAS_NODBUS: blacklist ${RUNUSER}/ksocket-*
146#?HAS_NODBUS: blacklist /tmp/ksocket-* 146#?HAS_NODBUS: blacklist /tmp/ksocket-*
147 147
148# gnome 148# gnome
149# contains extensions, last used times of applications, and notifications 149# contains extensions, last used times of applications, and notifications
150deny ${HOME}/.local/share/gnome-shell 150blacklist ${HOME}/.local/share/gnome-shell
151# contains recently used files and serials of static/removable storage 151# contains recently used files and serials of static/removable storage
152deny ${HOME}/.local/share/gvfs-metadata 152blacklist ${HOME}/.local/share/gvfs-metadata
153# no direct modification of dconf database 153# no direct modification of dconf database
154read-only ${HOME}/.config/dconf 154read-only ${HOME}/.config/dconf
155deny ${RUNUSER}/gnome-session-leader-fifo 155blacklist ${RUNUSER}/gnome-session-leader-fifo
156deny ${RUNUSER}/gnome-shell 156blacklist ${RUNUSER}/gnome-shell
157deny ${RUNUSER}/gsconnect 157blacklist ${RUNUSER}/gsconnect
158 158
159# systemd 159# systemd
160deny ${HOME}/.config/systemd 160blacklist ${HOME}/.config/systemd
161deny ${HOME}/.local/share/systemd 161blacklist ${HOME}/.local/share/systemd
162deny /var/lib/systemd 162blacklist /var/lib/systemd
163deny ${PATH}/systemd-run 163blacklist ${PATH}/systemd-run
164deny ${RUNUSER}/systemd 164blacklist ${RUNUSER}/systemd
165deny ${PATH}/systemctl 165blacklist ${PATH}/systemctl
166deny /etc/systemd/system 166blacklist /etc/systemd/system
167deny /etc/systemd/network 167blacklist /etc/systemd/network
168# creates problems on Arch where /etc/resolv.conf is a symlink to /var/run/systemd/resolve/resolv.conf 168# creates problems on Arch where /etc/resolv.conf is a symlink to /var/run/systemd/resolve/resolv.conf
169#blacklist /var/run/systemd 169#blacklist /var/run/systemd
170 170
171# openrc 171# openrc
172deny /etc/runlevels/ 172blacklist /etc/runlevels/
173deny /etc/init.d/ 173blacklist /etc/init.d/
174deny /etc/rc.conf 174blacklist /etc/rc.conf
175 175
176# VirtualBox 176# VirtualBox
177deny ${HOME}/.VirtualBox 177blacklist ${HOME}/.VirtualBox
178deny ${HOME}/.config/VirtualBox 178blacklist ${HOME}/.config/VirtualBox
179deny ${HOME}/VirtualBox VMs 179blacklist ${HOME}/VirtualBox VMs
180 180
181# GNOME Boxes 181# GNOME Boxes
182deny ${HOME}/.config/gnome-boxes 182blacklist ${HOME}/.config/gnome-boxes
183deny ${HOME}/.local/share/gnome-boxes 183blacklist ${HOME}/.local/share/gnome-boxes
184 184
185# libvirt 185# libvirt
186deny ${HOME}/.cache/libvirt 186blacklist ${HOME}/.cache/libvirt
187deny ${HOME}/.config/libvirt 187blacklist ${HOME}/.config/libvirt
188deny ${RUNUSER}/libvirt 188blacklist ${RUNUSER}/libvirt
189deny /var/cache/libvirt 189blacklist /var/cache/libvirt
190deny /var/lib/libvirt 190blacklist /var/lib/libvirt
191deny /var/log/libvirt 191blacklist /var/log/libvirt
192 192
193# OCI-Containers / Podman 193# OCI-Containers / Podman
194deny ${RUNUSER}/containers 194blacklist ${RUNUSER}/containers
195deny ${RUNUSER}/crun 195blacklist ${RUNUSER}/crun
196deny ${RUNUSER}/libpod 196blacklist ${RUNUSER}/libpod
197deny ${RUNUSER}/runc 197blacklist ${RUNUSER}/runc
198deny ${RUNUSER}/toolbox 198blacklist ${RUNUSER}/toolbox
199 199
200# VeraCrypt 200# VeraCrypt
201deny ${HOME}/.VeraCrypt 201blacklist ${HOME}/.VeraCrypt
202deny ${PATH}/veracrypt 202blacklist ${PATH}/veracrypt
203deny ${PATH}/veracrypt-uninstall.sh 203blacklist ${PATH}/veracrypt-uninstall.sh
204deny /usr/share/applications/veracrypt.* 204blacklist /usr/share/applications/veracrypt.*
205deny /usr/share/pixmaps/veracrypt.* 205blacklist /usr/share/pixmaps/veracrypt.*
206deny /usr/share/veracrypt 206blacklist /usr/share/veracrypt
207 207
208# TrueCrypt 208# TrueCrypt
209deny ${HOME}/.TrueCrypt 209blacklist ${HOME}/.TrueCrypt
210deny ${PATH}/truecrypt 210blacklist ${PATH}/truecrypt
211deny ${PATH}/truecrypt-uninstall.sh 211blacklist ${PATH}/truecrypt-uninstall.sh
212deny /usr/share/applications/truecrypt.* 212blacklist /usr/share/applications/truecrypt.*
213deny /usr/share/pixmaps/truecrypt.* 213blacklist /usr/share/pixmaps/truecrypt.*
214deny /usr/share/truecrypt 214blacklist /usr/share/truecrypt
215 215
216# zuluCrypt 216# zuluCrypt
217deny ${HOME}/.zuluCrypt 217blacklist ${HOME}/.zuluCrypt
218deny ${HOME}/.zuluCrypt-socket 218blacklist ${HOME}/.zuluCrypt-socket
219deny ${PATH}/zuluCrypt-cli 219blacklist ${PATH}/zuluCrypt-cli
220deny ${PATH}/zuluMount-cli 220blacklist ${PATH}/zuluMount-cli
221 221
222# var 222# var
223deny /var/cache/apt 223blacklist /var/cache/apt
224deny /var/cache/pacman 224blacklist /var/cache/pacman
225deny /var/lib/apt 225blacklist /var/lib/apt
226deny /var/lib/clamav 226blacklist /var/lib/clamav
227deny /var/lib/dkms 227blacklist /var/lib/dkms
228deny /var/lib/mysql/mysql.sock 228blacklist /var/lib/mysql/mysql.sock
229deny /var/lib/mysqld/mysql.sock 229blacklist /var/lib/mysqld/mysql.sock
230deny /var/lib/pacman 230blacklist /var/lib/pacman
231deny /var/lib/upower 231blacklist /var/lib/upower
232# blacklist /var/log - a virtual /var/log directory (mostly empty) is build up by default for 232# blacklist /var/log - a virtual /var/log directory (mostly empty) is build up by default for
233# every sandbox, unless --writable-var-log switch is activated 233# every sandbox, unless --writable-var-log switch is activated
234deny /var/mail 234blacklist /var/mail
235deny /var/opt 235blacklist /var/opt
236deny /var/run/acpid.socket 236blacklist /var/run/acpid.socket
237deny /var/run/docker.sock 237blacklist /var/run/docker.sock
238deny /var/run/minissdpd.sock 238blacklist /var/run/minissdpd.sock
239deny /var/run/mysql/mysqld.sock 239blacklist /var/run/mysql/mysqld.sock
240deny /var/run/mysqld/mysqld.sock 240blacklist /var/run/mysqld/mysqld.sock
241deny /var/run/rpcbind.sock 241blacklist /var/run/rpcbind.sock
242deny /var/run/screens 242blacklist /var/run/screens
243deny /var/spool/anacron 243blacklist /var/spool/anacron
244deny /var/spool/cron 244blacklist /var/spool/cron
245deny /var/spool/mail 245blacklist /var/spool/mail
246 246
247# etc 247# etc
248deny /etc/anacrontab 248blacklist /etc/anacrontab
249deny /etc/cron* 249blacklist /etc/cron*
250deny /etc/profile.d 250blacklist /etc/profile.d
251deny /etc/rc.local 251blacklist /etc/rc.local
252# rc1.d, rc2.d, ... 252# rc1.d, rc2.d, ...
253deny /etc/rc?.d 253blacklist /etc/rc?.d
254deny /etc/kernel* 254blacklist /etc/kernel*
255deny /etc/grub* 255blacklist /etc/grub*
256deny /etc/dkms 256blacklist /etc/dkms
257deny /etc/apparmor* 257blacklist /etc/apparmor*
258deny /etc/selinux 258blacklist /etc/selinux
259deny /etc/modules* 259blacklist /etc/modules*
260deny /etc/logrotate* 260blacklist /etc/logrotate*
261deny /etc/adduser.conf 261blacklist /etc/adduser.conf
262 262
263# hide config for various intrusion detection systems 263# hide config for various intrusion detection systems
264deny /etc/rkhunter.conf 264blacklist /etc/rkhunter.conf
265deny /var/lib/rkhunter 265blacklist /var/lib/rkhunter
266deny /etc/chkrootkit.conf 266blacklist /etc/chkrootkit.conf
267deny /etc/lynis 267blacklist /etc/lynis
268deny /etc/aide 268blacklist /etc/aide
269deny /etc/logcheck 269blacklist /etc/logcheck
270deny /etc/tripwire 270blacklist /etc/tripwire
271deny /etc/snort 271blacklist /etc/snort
272deny /etc/fail2ban.conf 272blacklist /etc/fail2ban.conf
273deny /etc/suricata 273blacklist /etc/suricata
274 274
275# Startup files 275# Startup files
276read-only ${HOME}/.antigen 276read-only ${HOME}/.antigen
@@ -307,13 +307,13 @@ read-only ${HOME}/.zshrc
307read-only ${HOME}/.zshrc.local 307read-only ${HOME}/.zshrc.local
308 308
309# Remote access 309# Remote access
310deny ${HOME}/.rhosts 310blacklist ${HOME}/.rhosts
311deny ${HOME}/.shosts 311blacklist ${HOME}/.shosts
312deny ${HOME}/.ssh/authorized_keys 312blacklist ${HOME}/.ssh/authorized_keys
313deny ${HOME}/.ssh/authorized_keys2 313blacklist ${HOME}/.ssh/authorized_keys2
314deny ${HOME}/.ssh/environment 314blacklist ${HOME}/.ssh/environment
315deny ${HOME}/.ssh/rc 315blacklist ${HOME}/.ssh/rc
316deny /etc/hosts.equiv 316blacklist /etc/hosts.equiv
317read-only ${HOME}/.ssh/config 317read-only ${HOME}/.ssh/config
318read-only ${HOME}/.ssh/config.d 318read-only ${HOME}/.ssh/config.d
319 319
@@ -374,200 +374,200 @@ read-only ${HOME}/.local/share/mime
374read-only ${HOME}/.local/share/thumbnailers 374read-only ${HOME}/.local/share/thumbnailers
375 375
376# prevent access to ssh-agent 376# prevent access to ssh-agent
377deny /tmp/ssh-* 377blacklist /tmp/ssh-*
378 378
379# top secret 379# top secret
380deny ${HOME}/*.kdb 380blacklist ${HOME}/*.kdb
381deny ${HOME}/*.kdbx 381blacklist ${HOME}/*.kdbx
382deny ${HOME}/*.key 382blacklist ${HOME}/*.key
383deny ${HOME}/.Private 383blacklist ${HOME}/.Private
384deny ${HOME}/.caff 384blacklist ${HOME}/.caff
385deny ${HOME}/.cargo/credentials 385blacklist ${HOME}/.cargo/credentials
386deny ${HOME}/.cargo/credentials.toml 386blacklist ${HOME}/.cargo/credentials.toml
387deny ${HOME}/.cert 387blacklist ${HOME}/.cert
388deny ${HOME}/.config/keybase 388blacklist ${HOME}/.config/keybase
389deny ${HOME}/.davfs2/secrets 389blacklist ${HOME}/.davfs2/secrets
390deny ${HOME}/.ecryptfs 390blacklist ${HOME}/.ecryptfs
391deny ${HOME}/.fetchmailrc 391blacklist ${HOME}/.fetchmailrc
392deny ${HOME}/.fscrypt 392blacklist ${HOME}/.fscrypt
393deny ${HOME}/.git-credential-cache 393blacklist ${HOME}/.git-credential-cache
394deny ${HOME}/.git-credentials 394blacklist ${HOME}/.git-credentials
395deny ${HOME}/.gnome2/keyrings 395blacklist ${HOME}/.gnome2/keyrings
396deny ${HOME}/.gnupg 396blacklist ${HOME}/.gnupg
397deny ${HOME}/.config/hub 397blacklist ${HOME}/.config/hub
398deny ${HOME}/.kde/share/apps/kwallet 398blacklist ${HOME}/.kde/share/apps/kwallet
399deny ${HOME}/.kde4/share/apps/kwallet 399blacklist ${HOME}/.kde4/share/apps/kwallet
400deny ${HOME}/.local/share/keyrings 400blacklist ${HOME}/.local/share/keyrings
401deny ${HOME}/.local/share/kwalletd 401blacklist ${HOME}/.local/share/kwalletd
402deny ${HOME}/.local/share/plasma-vault 402blacklist ${HOME}/.local/share/plasma-vault
403deny ${HOME}/.msmtprc 403blacklist ${HOME}/.msmtprc
404deny ${HOME}/.mutt 404blacklist ${HOME}/.mutt
405deny ${HOME}/.muttrc 405blacklist ${HOME}/.muttrc
406deny ${HOME}/.netrc 406blacklist ${HOME}/.netrc
407deny ${HOME}/.nyx 407blacklist ${HOME}/.nyx
408deny ${HOME}/.pki 408blacklist ${HOME}/.pki
409deny ${HOME}/.local/share/pki 409blacklist ${HOME}/.local/share/pki
410deny ${HOME}/.smbcredentials 410blacklist ${HOME}/.smbcredentials
411deny ${HOME}/.ssh 411blacklist ${HOME}/.ssh
412deny ${HOME}/.vaults 412blacklist ${HOME}/.vaults
413deny /.fscrypt 413blacklist /.fscrypt
414deny /etc/davfs2/secrets 414blacklist /etc/davfs2/secrets
415deny /etc/group+ 415blacklist /etc/group+
416deny /etc/group- 416blacklist /etc/group-
417deny /etc/gshadow 417blacklist /etc/gshadow
418deny /etc/gshadow+ 418blacklist /etc/gshadow+
419deny /etc/gshadow- 419blacklist /etc/gshadow-
420deny /etc/passwd+ 420blacklist /etc/passwd+
421deny /etc/passwd- 421blacklist /etc/passwd-
422deny /etc/shadow 422blacklist /etc/shadow
423deny /etc/shadow+ 423blacklist /etc/shadow+
424deny /etc/shadow- 424blacklist /etc/shadow-
425deny /etc/ssh 425blacklist /etc/ssh
426deny /etc/ssh/* 426blacklist /etc/ssh/*
427deny /home/.ecryptfs 427blacklist /home/.ecryptfs
428deny /home/.fscrypt 428blacklist /home/.fscrypt
429deny /var/backup 429blacklist /var/backup
430 430
431# cloud provider configuration 431# cloud provider configuration
432deny ${HOME}/.aws 432blacklist ${HOME}/.aws
433deny ${HOME}/.boto 433blacklist ${HOME}/.boto
434deny ${HOME}/.config/gcloud 434blacklist ${HOME}/.config/gcloud
435deny ${HOME}/.kube 435blacklist ${HOME}/.kube
436deny ${HOME}/.passwd-s3fs 436blacklist ${HOME}/.passwd-s3fs
437deny ${HOME}/.s3cmd 437blacklist ${HOME}/.s3cmd
438deny /etc/boto.cfg 438blacklist /etc/boto.cfg
439 439
440# system directories 440# system directories
441deny /sbin 441blacklist /sbin
442deny /usr/local/sbin 442blacklist /usr/local/sbin
443deny /usr/sbin 443blacklist /usr/sbin
444 444
445# system management 445# system management
446deny ${PATH}/at 446blacklist ${PATH}/at
447deny ${PATH}/busybox 447blacklist ${PATH}/busybox
448deny ${PATH}/chage 448blacklist ${PATH}/chage
449deny ${PATH}/chfn 449blacklist ${PATH}/chfn
450deny ${PATH}/chsh 450blacklist ${PATH}/chsh
451deny ${PATH}/crontab 451blacklist ${PATH}/crontab
452deny ${PATH}/evtest 452blacklist ${PATH}/evtest
453deny ${PATH}/expiry 453blacklist ${PATH}/expiry
454deny ${PATH}/fusermount 454blacklist ${PATH}/fusermount
455deny ${PATH}/gksu 455blacklist ${PATH}/gksu
456deny ${PATH}/gksudo 456blacklist ${PATH}/gksudo
457deny ${PATH}/gpasswd 457blacklist ${PATH}/gpasswd
458deny ${PATH}/kdesudo 458blacklist ${PATH}/kdesudo
459deny ${PATH}/ksu 459blacklist ${PATH}/ksu
460deny ${PATH}/mount 460blacklist ${PATH}/mount
461deny ${PATH}/mount.ecryptfs_private 461blacklist ${PATH}/mount.ecryptfs_private
462deny ${PATH}/nc 462blacklist ${PATH}/nc
463deny ${PATH}/ncat 463blacklist ${PATH}/ncat
464deny ${PATH}/nmap 464blacklist ${PATH}/nmap
465deny ${PATH}/newgidmap 465blacklist ${PATH}/newgidmap
466deny ${PATH}/newgrp 466blacklist ${PATH}/newgrp
467deny ${PATH}/newuidmap 467blacklist ${PATH}/newuidmap
468deny ${PATH}/ntfs-3g 468blacklist ${PATH}/ntfs-3g
469deny ${PATH}/pkexec 469blacklist ${PATH}/pkexec
470deny ${PATH}/procmail 470blacklist ${PATH}/procmail
471deny ${PATH}/sg 471blacklist ${PATH}/sg
472deny ${PATH}/strace 472blacklist ${PATH}/strace
473deny ${PATH}/su 473blacklist ${PATH}/su
474deny ${PATH}/sudo 474blacklist ${PATH}/sudo
475deny ${PATH}/tcpdump 475blacklist ${PATH}/tcpdump
476deny ${PATH}/umount 476blacklist ${PATH}/umount
477deny ${PATH}/unix_chkpwd 477blacklist ${PATH}/unix_chkpwd
478deny ${PATH}/xev 478blacklist ${PATH}/xev
479deny ${PATH}/xinput 479blacklist ${PATH}/xinput
480 480
481# other SUID binaries 481# other SUID binaries
482deny /usr/lib/virtualbox 482blacklist /usr/lib/virtualbox
483deny /usr/lib64/virtualbox 483blacklist /usr/lib64/virtualbox
484 484
485# prevent lxterminal connecting to an existing lxterminal session 485# prevent lxterminal connecting to an existing lxterminal session
486deny /tmp/.lxterminal-socket* 486blacklist /tmp/.lxterminal-socket*
487# prevent tmux connecting to an existing session 487# prevent tmux connecting to an existing session
488deny /tmp/tmux-* 488blacklist /tmp/tmux-*
489 489
490# disable terminals running as server resulting in sandbox escape 490# disable terminals running as server resulting in sandbox escape
491deny ${PATH}/lxterminal 491blacklist ${PATH}/lxterminal
492deny ${PATH}/gnome-terminal 492blacklist ${PATH}/gnome-terminal
493deny ${PATH}/gnome-terminal.wrapper 493blacklist ${PATH}/gnome-terminal.wrapper
494deny ${PATH}/lilyterm 494blacklist ${PATH}/lilyterm
495deny ${PATH}/mate-terminal 495blacklist ${PATH}/mate-terminal
496deny ${PATH}/mate-terminal.wrapper 496blacklist ${PATH}/mate-terminal.wrapper
497deny ${PATH}/pantheon-terminal 497blacklist ${PATH}/pantheon-terminal
498deny ${PATH}/roxterm 498blacklist ${PATH}/roxterm
499deny ${PATH}/roxterm-config 499blacklist ${PATH}/roxterm-config
500deny ${PATH}/terminix 500blacklist ${PATH}/terminix
501deny ${PATH}/tilix 501blacklist ${PATH}/tilix
502deny ${PATH}/urxvtc 502blacklist ${PATH}/urxvtc
503deny ${PATH}/urxvtcd 503blacklist ${PATH}/urxvtcd
504deny ${PATH}/xfce4-terminal 504blacklist ${PATH}/xfce4-terminal
505deny ${PATH}/xfce4-terminal.wrapper 505blacklist ${PATH}/xfce4-terminal.wrapper
506# blacklist ${PATH}/konsole 506# blacklist ${PATH}/konsole
507# konsole doesn't seem to have this problem - last tested on Ubuntu 16.04 507# konsole doesn't seem to have this problem - last tested on Ubuntu 16.04
508 508
509# kernel files 509# kernel files
510deny /initrd* 510blacklist /initrd*
511deny /vmlinuz* 511blacklist /vmlinuz*
512 512
513# snapshot files 513# snapshot files
514deny /.snapshots 514blacklist /.snapshots
515 515
516# flatpak 516# flatpak
517deny ${HOME}/.cache/flatpak 517blacklist ${HOME}/.cache/flatpak
518deny ${HOME}/.config/flatpak 518blacklist ${HOME}/.config/flatpak
519nodeny ${HOME}/.local/share/flatpak/exports 519noblacklist ${HOME}/.local/share/flatpak/exports
520read-only ${HOME}/.local/share/flatpak/exports 520read-only ${HOME}/.local/share/flatpak/exports
521deny ${HOME}/.local/share/flatpak/* 521blacklist ${HOME}/.local/share/flatpak/*
522deny ${HOME}/.var 522blacklist ${HOME}/.var
523deny ${RUNUSER}/app 523blacklist ${RUNUSER}/app
524deny ${RUNUSER}/doc 524blacklist ${RUNUSER}/doc
525deny ${RUNUSER}/.dbus-proxy 525blacklist ${RUNUSER}/.dbus-proxy
526deny ${RUNUSER}/.flatpak 526blacklist ${RUNUSER}/.flatpak
527deny ${RUNUSER}/.flatpak-cache 527blacklist ${RUNUSER}/.flatpak-cache
528deny ${RUNUSER}/.flatpak-helper 528blacklist ${RUNUSER}/.flatpak-helper
529deny /usr/share/flatpak 529blacklist /usr/share/flatpak
530nodeny /var/lib/flatpak/exports 530noblacklist /var/lib/flatpak/exports
531deny /var/lib/flatpak/* 531blacklist /var/lib/flatpak/*
532# most of the time bwrap is SUID binary 532# most of the time bwrap is SUID binary
533deny ${PATH}/bwrap 533blacklist ${PATH}/bwrap
534 534
535# snap 535# snap
536deny ${RUNUSER}/snapd-session-agent.socket 536blacklist ${RUNUSER}/snapd-session-agent.socket
537 537
538# mail directories used by mutt 538# mail directories used by mutt
539deny ${HOME}/.Mail 539blacklist ${HOME}/.Mail
540deny ${HOME}/.mail 540blacklist ${HOME}/.mail
541deny ${HOME}/.signature 541blacklist ${HOME}/.signature
542deny ${HOME}/Mail 542blacklist ${HOME}/Mail
543deny ${HOME}/mail 543blacklist ${HOME}/mail
544deny ${HOME}/postponed 544blacklist ${HOME}/postponed
545deny ${HOME}/sent 545blacklist ${HOME}/sent
546 546
547# kernel configuration 547# kernel configuration
548deny /proc/config.gz 548blacklist /proc/config.gz
549 549
550# prevent DNS malware attempting to communicate with the server 550# prevent DNS malware attempting to communicate with the server
551# using regular DNS tools 551# using regular DNS tools
552deny ${PATH}/dig 552blacklist ${PATH}/dig
553deny ${PATH}/dlint 553blacklist ${PATH}/dlint
554deny ${PATH}/dns2tcp 554blacklist ${PATH}/dns2tcp
555deny ${PATH}/dnssec-* 555blacklist ${PATH}/dnssec-*
556deny ${PATH}/dnswalk 556blacklist ${PATH}/dnswalk
557deny ${PATH}/drill 557blacklist ${PATH}/drill
558deny ${PATH}/host 558blacklist ${PATH}/host
559deny ${PATH}/iodine 559blacklist ${PATH}/iodine
560deny ${PATH}/kdig 560blacklist ${PATH}/kdig
561deny ${PATH}/khost 561blacklist ${PATH}/khost
562deny ${PATH}/knsupdate 562blacklist ${PATH}/knsupdate
563deny ${PATH}/ldns-* 563blacklist ${PATH}/ldns-*
564deny ${PATH}/ldnsd 564blacklist ${PATH}/ldnsd
565deny ${PATH}/nslookup 565blacklist ${PATH}/nslookup
566deny ${PATH}/resolvectl 566blacklist ${PATH}/resolvectl
567deny ${PATH}/unbound-host 567blacklist ${PATH}/unbound-host
568 568
569# rest of ${RUNUSER} 569# rest of ${RUNUSER}
570deny ${RUNUSER}/*.lock 570blacklist ${RUNUSER}/*.lock
571deny ${RUNUSER}/inaccessible 571blacklist ${RUNUSER}/inaccessible
572deny ${RUNUSER}/pk-debconf-socket 572blacklist ${RUNUSER}/pk-debconf-socket
573deny ${RUNUSER}/update-notifier.pid 573blacklist ${RUNUSER}/update-notifier.pid
diff --git a/etc/inc/disable-devel.inc b/etc/inc/disable-devel.inc
index a893eb3f3..e74b1b40b 100644
--- a/etc/inc/disable-devel.inc
+++ b/etc/inc/disable-devel.inc
@@ -5,65 +5,65 @@ include disable-devel.local
5# development tools 5# development tools
6 6
7# clang/llvm 7# clang/llvm
8deny ${PATH}/clang* 8blacklist ${PATH}/clang*
9deny ${PATH}/lldb* 9blacklist ${PATH}/lldb*
10deny ${PATH}/llvm* 10blacklist ${PATH}/llvm*
11# see issue #2106 - it disables hardware acceleration in Firefox on Radeon GPU 11# see issue #2106 - it disables hardware acceleration in Firefox on Radeon GPU
12# blacklist /usr/lib/llvm* 12# blacklist /usr/lib/llvm*
13 13
14# GCC 14# GCC
15deny ${PATH}/as 15blacklist ${PATH}/as
16deny ${PATH}/cc 16blacklist ${PATH}/cc
17deny ${PATH}/c++* 17blacklist ${PATH}/c++*
18deny ${PATH}/c8* 18blacklist ${PATH}/c8*
19deny ${PATH}/c9* 19blacklist ${PATH}/c9*
20deny ${PATH}/cpp* 20blacklist ${PATH}/cpp*
21deny ${PATH}/g++* 21blacklist ${PATH}/g++*
22deny ${PATH}/gcc* 22blacklist ${PATH}/gcc*
23deny ${PATH}/gdb 23blacklist ${PATH}/gdb
24deny ${PATH}/ld 24blacklist ${PATH}/ld
25deny ${PATH}/*-gcc* 25blacklist ${PATH}/*-gcc*
26deny ${PATH}/*-g++* 26blacklist ${PATH}/*-g++*
27deny ${PATH}/*-gcc* 27blacklist ${PATH}/*-gcc*
28deny ${PATH}/*-g++* 28blacklist ${PATH}/*-g++*
29# seems to create problems on Gentoo 29# seems to create problems on Gentoo
30#blacklist /usr/lib/gcc 30#blacklist /usr/lib/gcc
31 31
32#Go 32#Go
33deny ${PATH}/gccgo 33blacklist ${PATH}/gccgo
34deny ${PATH}/go 34blacklist ${PATH}/go
35deny ${PATH}/gofmt 35blacklist ${PATH}/gofmt
36 36
37# Java 37# Java
38deny ${PATH}/java 38blacklist ${PATH}/java
39deny ${PATH}/javac 39blacklist ${PATH}/javac
40deny /etc/java 40blacklist /etc/java
41deny /usr/lib/java 41blacklist /usr/lib/java
42deny /usr/share/java 42blacklist /usr/share/java
43 43
44#OpenSSL 44#OpenSSL
45deny ${PATH}/openssl 45blacklist ${PATH}/openssl
46deny ${PATH}/openssl-1.0 46blacklist ${PATH}/openssl-1.0
47 47
48#Rust 48#Rust
49deny ${PATH}/rust-gdb 49blacklist ${PATH}/rust-gdb
50deny ${PATH}/rust-lldb 50blacklist ${PATH}/rust-lldb
51deny ${PATH}/rustc 51blacklist ${PATH}/rustc
52deny ${HOME}/.rustup 52blacklist ${HOME}/.rustup
53 53
54# tcc - Tiny C Compiler 54# tcc - Tiny C Compiler
55deny ${PATH}/tcc 55blacklist ${PATH}/tcc
56deny ${PATH}/x86_64-tcc 56blacklist ${PATH}/x86_64-tcc
57deny /usr/lib/tcc 57blacklist /usr/lib/tcc
58 58
59# Valgrind 59# Valgrind
60deny ${PATH}/valgrind* 60blacklist ${PATH}/valgrind*
61deny /usr/lib/valgrind 61blacklist /usr/lib/valgrind
62 62
63 63
64# Source-Code 64# Source-Code
65 65
66deny /usr/src 66blacklist /usr/src
67deny /usr/local/src 67blacklist /usr/local/src
68deny /usr/include 68blacklist /usr/include
69deny /usr/local/include 69blacklist /usr/local/include
diff --git a/etc/inc/disable-interpreters.inc b/etc/inc/disable-interpreters.inc
index c77d9a490..5d8a236fb 100644
--- a/etc/inc/disable-interpreters.inc
+++ b/etc/inc/disable-interpreters.inc
@@ -3,66 +3,66 @@
3include disable-interpreters.local 3include disable-interpreters.local
4 4
5# gjs 5# gjs
6deny ${PATH}/gjs 6blacklist ${PATH}/gjs
7deny ${PATH}/gjs-console 7blacklist ${PATH}/gjs-console
8deny /usr/lib/gjs 8blacklist /usr/lib/gjs
9deny /usr/lib/libgjs* 9blacklist /usr/lib/libgjs*
10deny /usr/lib64/gjs 10blacklist /usr/lib64/gjs
11deny /usr/lib64/libgjs* 11blacklist /usr/lib64/libgjs*
12 12
13# Lua 13# Lua
14deny ${PATH}/lua* 14blacklist ${PATH}/lua*
15deny /usr/include/lua* 15blacklist /usr/include/lua*
16deny /usr/lib/liblua* 16blacklist /usr/lib/liblua*
17deny /usr/lib/lua 17blacklist /usr/lib/lua
18deny /usr/lib64/liblua* 18blacklist /usr/lib64/liblua*
19deny /usr/lib64/lua 19blacklist /usr/lib64/lua
20deny /usr/share/lua* 20blacklist /usr/share/lua*
21 21
22# mozjs 22# mozjs
23deny /usr/lib/libmozjs-* 23blacklist /usr/lib/libmozjs-*
24deny /usr/lib64/libmozjs-* 24blacklist /usr/lib64/libmozjs-*
25 25
26# Node.js 26# Node.js
27deny ${PATH}/node 27blacklist ${PATH}/node
28deny /usr/include/node 28blacklist /usr/include/node
29 29
30# nvm 30# nvm
31deny ${HOME}/.nvm 31blacklist ${HOME}/.nvm
32 32
33# Perl 33# Perl
34deny ${PATH}/core_perl 34blacklist ${PATH}/core_perl
35deny ${PATH}/cpan* 35blacklist ${PATH}/cpan*
36deny ${PATH}/perl 36blacklist ${PATH}/perl
37deny ${PATH}/site_perl 37blacklist ${PATH}/site_perl
38deny ${PATH}/vendor_perl 38blacklist ${PATH}/vendor_perl
39deny /usr/lib/perl* 39blacklist /usr/lib/perl*
40deny /usr/lib64/perl* 40blacklist /usr/lib64/perl*
41deny /usr/share/perl* 41blacklist /usr/share/perl*
42 42
43# PHP 43# PHP
44deny ${PATH}/php* 44blacklist ${PATH}/php*
45deny /usr/lib/php* 45blacklist /usr/lib/php*
46deny /usr/share/php* 46blacklist /usr/share/php*
47 47
48# Ruby 48# Ruby
49deny ${PATH}/ruby 49blacklist ${PATH}/ruby
50deny /usr/lib/ruby 50blacklist /usr/lib/ruby
51 51
52# Programs using python: deluge, firefox addons, filezilla, cherrytree, xchat, hexchat, libreoffice, scribus 52# Programs using python: deluge, firefox addons, filezilla, cherrytree, xchat, hexchat, libreoffice, scribus
53# Python 2 53# Python 2
54deny ${PATH}/python2* 54blacklist ${PATH}/python2*
55deny /usr/include/python2* 55blacklist /usr/include/python2*
56deny /usr/lib/python2* 56blacklist /usr/lib/python2*
57deny /usr/local/lib/python2* 57blacklist /usr/local/lib/python2*
58deny /usr/share/python2* 58blacklist /usr/share/python2*
59 59
60# You will want to add noblacklist for python3 stuff in the firefox and/or chromium profiles if you use the Gnome connector (see Issue #2026) 60# You will want to add noblacklist for python3 stuff in the firefox and/or chromium profiles if you use the Gnome connector (see Issue #2026)
61 61
62# Python 3 62# Python 3
63deny ${PATH}/python3* 63blacklist ${PATH}/python3*
64deny /usr/include/python3* 64blacklist /usr/include/python3*
65deny /usr/lib/python3* 65blacklist /usr/lib/python3*
66deny /usr/lib64/python3* 66blacklist /usr/lib64/python3*
67deny /usr/local/lib/python3* 67blacklist /usr/local/lib/python3*
68deny /usr/share/python3* 68blacklist /usr/share/python3*
diff --git a/etc/inc/disable-passwdmgr.inc b/etc/inc/disable-passwdmgr.inc
index 0a61bc46f..3ed9a1b14 100644
--- a/etc/inc/disable-passwdmgr.inc
+++ b/etc/inc/disable-passwdmgr.inc
@@ -2,18 +2,18 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include disable-passwdmgr.local 3include disable-passwdmgr.local
4 4
5deny ${HOME}/.config/Bitwarden 5blacklist ${HOME}/.config/Bitwarden
6deny ${HOME}/.config/KeePass 6blacklist ${HOME}/.config/KeePass
7deny ${HOME}/.config/keepass 7blacklist ${HOME}/.config/keepass
8deny ${HOME}/.config/keepassx 8blacklist ${HOME}/.config/keepassx
9deny ${HOME}/.config/keepassxc 9blacklist ${HOME}/.config/keepassxc
10deny ${HOME}/.config/KeePassXCrc 10blacklist ${HOME}/.config/KeePassXCrc
11deny ${HOME}/.config/Sinew Software Systems 11blacklist ${HOME}/.config/Sinew Software Systems
12deny ${HOME}/.fpm 12blacklist ${HOME}/.fpm
13deny ${HOME}/.keepass 13blacklist ${HOME}/.keepass
14deny ${HOME}/.keepassx 14blacklist ${HOME}/.keepassx
15deny ${HOME}/.keepassxc 15blacklist ${HOME}/.keepassxc
16deny ${HOME}/.lastpass 16blacklist ${HOME}/.lastpass
17deny ${HOME}/.local/share/KeePass 17blacklist ${HOME}/.local/share/KeePass
18deny ${HOME}/.local/share/keepass 18blacklist ${HOME}/.local/share/keepass
19deny ${HOME}/.password-store 19blacklist ${HOME}/.password-store
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc
index 5fe2f8c28..fd907034f 100644
--- a/etc/inc/disable-programs.inc
+++ b/etc/inc/disable-programs.inc
@@ -2,1097 +2,1097 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include disable-programs.local 3include disable-programs.local
4 4
5deny ${HOME}/.*coin 5blacklist ${HOME}/.*coin
6deny ${HOME}/.8pecxstudios 6blacklist ${HOME}/.8pecxstudios
7deny ${HOME}/.AndroidStudio* 7blacklist ${HOME}/.AndroidStudio*
8deny ${HOME}/.Atom 8blacklist ${HOME}/.Atom
9deny ${HOME}/.CLion* 9blacklist ${HOME}/.CLion*
10deny ${HOME}/.FBReader 10blacklist ${HOME}/.FBReader
11deny ${HOME}/.FontForge 11blacklist ${HOME}/.FontForge
12deny ${HOME}/.IdeaIC* 12blacklist ${HOME}/.IdeaIC*
13deny ${HOME}/.LuminanceHDR 13blacklist ${HOME}/.LuminanceHDR
14deny ${HOME}/.Mathematica 14blacklist ${HOME}/.Mathematica
15deny ${HOME}/.Natron 15blacklist ${HOME}/.Natron
16deny ${HOME}/.PlayOnLinux 16blacklist ${HOME}/.PlayOnLinux
17deny ${HOME}/.PyCharm* 17blacklist ${HOME}/.PyCharm*
18deny ${HOME}/.Sayonara 18blacklist ${HOME}/.Sayonara
19deny ${HOME}/.Steam 19blacklist ${HOME}/.Steam
20deny ${HOME}/.Steampath 20blacklist ${HOME}/.Steampath
21deny ${HOME}/.Steampid 21blacklist ${HOME}/.Steampid
22deny ${HOME}/.TelegramDesktop 22blacklist ${HOME}/.TelegramDesktop
23deny ${HOME}/.VSCodium 23blacklist ${HOME}/.VSCodium
24deny ${HOME}/.ViberPC 24blacklist ${HOME}/.ViberPC
25deny ${HOME}/.VirtualBox 25blacklist ${HOME}/.VirtualBox
26deny ${HOME}/.WebStorm* 26blacklist ${HOME}/.WebStorm*
27deny ${HOME}/.Wolfram Research 27blacklist ${HOME}/.Wolfram Research
28deny ${HOME}/.ZAP 28blacklist ${HOME}/.ZAP
29deny ${HOME}/.aMule 29blacklist ${HOME}/.aMule
30deny ${HOME}/.abook 30blacklist ${HOME}/.abook
31deny ${HOME}/.addressbook 31blacklist ${HOME}/.addressbook
32deny ${HOME}/.alpine-smime 32blacklist ${HOME}/.alpine-smime
33deny ${HOME}/.android 33blacklist ${HOME}/.android
34deny ${HOME}/.anydesk 34blacklist ${HOME}/.anydesk
35deny ${HOME}/.arduino15 35blacklist ${HOME}/.arduino15
36deny ${HOME}/.aria2 36blacklist ${HOME}/.aria2
37deny ${HOME}/.arm 37blacklist ${HOME}/.arm
38deny ${HOME}/.asunder_album_artist 38blacklist ${HOME}/.asunder_album_artist
39deny ${HOME}/.asunder_album_genre 39blacklist ${HOME}/.asunder_album_genre
40deny ${HOME}/.asunder_album_title 40blacklist ${HOME}/.asunder_album_title
41deny ${HOME}/.atom 41blacklist ${HOME}/.atom
42deny ${HOME}/.attic 42blacklist ${HOME}/.attic
43deny ${HOME}/.audacity-data 43blacklist ${HOME}/.audacity-data
44deny ${HOME}/.avidemux6 44blacklist ${HOME}/.avidemux6
45deny ${HOME}/.ballbuster.hs 45blacklist ${HOME}/.ballbuster.hs
46deny ${HOME}/.balsa 46blacklist ${HOME}/.balsa
47deny ${HOME}/.bcast5 47blacklist ${HOME}/.bcast5
48deny ${HOME}/.bibletime 48blacklist ${HOME}/.bibletime
49deny ${HOME}/.bitcoin 49blacklist ${HOME}/.bitcoin
50deny ${HOME}/.blobby 50blacklist ${HOME}/.blobby
51deny ${HOME}/.bogofilter 51blacklist ${HOME}/.bogofilter
52deny ${HOME}/.bzf 52blacklist ${HOME}/.bzf
53deny ${HOME}/.cargo/* 53blacklist ${HOME}/.cargo/*
54deny ${HOME}/.claws-mail 54blacklist ${HOME}/.claws-mail
55deny ${HOME}/.cliqz 55blacklist ${HOME}/.cliqz
56deny ${HOME}/.clion* 56blacklist ${HOME}/.clion*
57deny ${HOME}/.clonk 57blacklist ${HOME}/.clonk
58deny ${HOME}/.config/0ad 58blacklist ${HOME}/.config/0ad
59deny ${HOME}/.config/2048-qt 59blacklist ${HOME}/.config/2048-qt
60deny ${HOME}/.config/Atom 60blacklist ${HOME}/.config/Atom
61deny ${HOME}/.config/Audaciousrc 61blacklist ${HOME}/.config/Audaciousrc
62deny ${HOME}/.config/Authenticator 62blacklist ${HOME}/.config/Authenticator
63deny ${HOME}/.config/Beaker Browser 63blacklist ${HOME}/.config/Beaker Browser
64deny ${HOME}/.config/Bitcoin 64blacklist ${HOME}/.config/Bitcoin
65deny ${HOME}/.config/Bitwarden 65blacklist ${HOME}/.config/Bitwarden
66deny ${HOME}/.config/Brackets 66blacklist ${HOME}/.config/Brackets
67deny ${HOME}/.config/BraveSoftware 67blacklist ${HOME}/.config/BraveSoftware
68deny ${HOME}/.config/Clementine 68blacklist ${HOME}/.config/Clementine
69deny ${HOME}/.config/Code 69blacklist ${HOME}/.config/Code
70deny ${HOME}/.config/Code - OSS 70blacklist ${HOME}/.config/Code - OSS
71deny ${HOME}/.config/Code Industry 71blacklist ${HOME}/.config/Code Industry
72deny ${HOME}/.config/Cryptocat 72blacklist ${HOME}/.config/Cryptocat
73deny ${HOME}/.config/Debauchee/Barrier.conf 73blacklist ${HOME}/.config/Debauchee/Barrier.conf
74deny ${HOME}/.config/Dharkael 74blacklist ${HOME}/.config/Dharkael
75deny ${HOME}/.config/ENCOM 75blacklist ${HOME}/.config/ENCOM
76deny ${HOME}/.config/Element 76blacklist ${HOME}/.config/Element
77deny ${HOME}/.config/Element (Riot) 77blacklist ${HOME}/.config/Element (Riot)
78deny ${HOME}/.config/Enox 78blacklist ${HOME}/.config/Enox
79deny ${HOME}/.config/Epic 79blacklist ${HOME}/.config/Epic
80deny ${HOME}/.config/Ferdi 80blacklist ${HOME}/.config/Ferdi
81deny ${HOME}/.config/Flavio Tordini 81blacklist ${HOME}/.config/Flavio Tordini
82deny ${HOME}/.config/Franz 82blacklist ${HOME}/.config/Franz
83deny ${HOME}/.config/FreeCAD 83blacklist ${HOME}/.config/FreeCAD
84deny ${HOME}/.config/FreeTube 84blacklist ${HOME}/.config/FreeTube
85deny ${HOME}/.config/Fritzing 85blacklist ${HOME}/.config/Fritzing
86deny ${HOME}/.config/GIMP 86blacklist ${HOME}/.config/GIMP
87deny ${HOME}/.config/GitHub Desktop 87blacklist ${HOME}/.config/GitHub Desktop
88deny ${HOME}/.config/Gitter 88blacklist ${HOME}/.config/Gitter
89deny ${HOME}/.config/Google 89blacklist ${HOME}/.config/Google
90deny ${HOME}/.config/Google Play Music Desktop Player 90blacklist ${HOME}/.config/Google Play Music Desktop Player
91deny ${HOME}/.config/Gpredict 91blacklist ${HOME}/.config/Gpredict
92deny ${HOME}/.config/INRIA 92blacklist ${HOME}/.config/INRIA
93deny ${HOME}/.config/InSilmaril 93blacklist ${HOME}/.config/InSilmaril
94deny ${HOME}/.config/Jitsi Meet 94blacklist ${HOME}/.config/Jitsi Meet
95deny ${HOME}/.config/JetBrains/CLion* 95blacklist ${HOME}/.config/JetBrains/CLion*
96deny ${HOME}/.config/KDE/neochat 96blacklist ${HOME}/.config/KDE/neochat
97deny ${HOME}/.config/Kid3 97blacklist ${HOME}/.config/Kid3
98deny ${HOME}/.config/Kingsoft 98blacklist ${HOME}/.config/Kingsoft
99deny ${HOME}/.config/LibreCAD 99blacklist ${HOME}/.config/LibreCAD
100deny ${HOME}/.config/Loop_Hero 100blacklist ${HOME}/.config/Loop_Hero
101deny ${HOME}/.config/Luminance 101blacklist ${HOME}/.config/Luminance
102deny ${HOME}/.config/LyX 102blacklist ${HOME}/.config/LyX
103deny ${HOME}/.config/Mattermost 103blacklist ${HOME}/.config/Mattermost
104deny ${HOME}/.config/Meltytech 104blacklist ${HOME}/.config/Meltytech
105deny ${HOME}/.config/Mendeley Ltd. 105blacklist ${HOME}/.config/Mendeley Ltd.
106deny ${HOME}/.config/Microsoft 106blacklist ${HOME}/.config/Microsoft
107deny ${HOME}/.config/Min 107blacklist ${HOME}/.config/Min
108deny ${HOME}/.config/ModTheSpire 108blacklist ${HOME}/.config/ModTheSpire
109deny ${HOME}/.config/Mousepad 109blacklist ${HOME}/.config/Mousepad
110deny ${HOME}/.config/Mumble 110blacklist ${HOME}/.config/Mumble
111deny ${HOME}/.config/MusE 111blacklist ${HOME}/.config/MusE
112deny ${HOME}/.config/MuseScore 112blacklist ${HOME}/.config/MuseScore
113deny ${HOME}/.config/MusicBrainz 113blacklist ${HOME}/.config/MusicBrainz
114deny ${HOME}/.config/Nathan Osman 114blacklist ${HOME}/.config/Nathan Osman
115deny ${HOME}/.config/Nextcloud 115blacklist ${HOME}/.config/Nextcloud
116deny ${HOME}/.config/NitroShare 116blacklist ${HOME}/.config/NitroShare
117deny ${HOME}/.config/Nylas Mail 117blacklist ${HOME}/.config/Nylas Mail
118deny ${HOME}/.config/PBE 118blacklist ${HOME}/.config/PBE
119deny ${HOME}/.config/PacmanLogViewer 119blacklist ${HOME}/.config/PacmanLogViewer
120deny ${HOME}/.config/PawelStolowski 120blacklist ${HOME}/.config/PawelStolowski
121deny ${HOME}/.config/Philipp Schmieder 121blacklist ${HOME}/.config/Philipp Schmieder
122deny ${HOME}/.config/Pinta 122blacklist ${HOME}/.config/Pinta
123deny ${HOME}/.config/QGIS 123blacklist ${HOME}/.config/QGIS
124deny ${HOME}/.config/QMediathekView 124blacklist ${HOME}/.config/QMediathekView
125deny ${HOME}/.config/Qlipper 125blacklist ${HOME}/.config/Qlipper
126deny ${HOME}/.config/QuiteRss 126blacklist ${HOME}/.config/QuiteRss
127deny ${HOME}/.config/QuiteRssrc 127blacklist ${HOME}/.config/QuiteRssrc
128deny ${HOME}/.config/Quotient 128blacklist ${HOME}/.config/Quotient
129deny ${HOME}/.config/Rambox 129blacklist ${HOME}/.config/Rambox
130deny ${HOME}/.config/Riot 130blacklist ${HOME}/.config/Riot
131deny ${HOME}/.config/Rocket.Chat 131blacklist ${HOME}/.config/Rocket.Chat
132deny ${HOME}/.config/RogueLegacy 132blacklist ${HOME}/.config/RogueLegacy
133deny ${HOME}/.config/RogueLegacyStorageContainer 133blacklist ${HOME}/.config/RogueLegacyStorageContainer
134deny ${HOME}/.config/Signal 134blacklist ${HOME}/.config/Signal
135deny ${HOME}/.config/Sinew Software Systems 135blacklist ${HOME}/.config/Sinew Software Systems
136deny ${HOME}/.config/Slack 136blacklist ${HOME}/.config/Slack
137deny ${HOME}/.config/Standard Notes 137blacklist ${HOME}/.config/Standard Notes
138deny ${HOME}/.config/SubDownloader 138blacklist ${HOME}/.config/SubDownloader
139deny ${HOME}/.config/Thunar 139blacklist ${HOME}/.config/Thunar
140deny ${HOME}/.config/Twitch 140blacklist ${HOME}/.config/Twitch
141deny ${HOME}/.config/Unknown Organization 141blacklist ${HOME}/.config/Unknown Organization
142deny ${HOME}/.config/VirtualBox 142blacklist ${HOME}/.config/VirtualBox
143deny ${HOME}/.config/Whalebird 143blacklist ${HOME}/.config/Whalebird
144deny ${HOME}/.config/Wire 144blacklist ${HOME}/.config/Wire
145deny ${HOME}/.config/Youtube 145blacklist ${HOME}/.config/Youtube
146deny ${HOME}/.config/ZeGrapher Project 146blacklist ${HOME}/.config/ZeGrapher Project
147deny ${HOME}/.config/Zeal 147blacklist ${HOME}/.config/Zeal
148deny ${HOME}/.config/Zulip 148blacklist ${HOME}/.config/Zulip
149deny ${HOME}/.config/aacs 149blacklist ${HOME}/.config/aacs
150deny ${HOME}/.config/abiword 150blacklist ${HOME}/.config/abiword
151deny ${HOME}/.config/agenda 151blacklist ${HOME}/.config/agenda
152deny ${HOME}/.config/akonadi* 152blacklist ${HOME}/.config/akonadi*
153deny ${HOME}/.config/akregatorrc 153blacklist ${HOME}/.config/akregatorrc
154deny ${HOME}/.config/alacritty 154blacklist ${HOME}/.config/alacritty
155deny ${HOME}/.config/ardour4 155blacklist ${HOME}/.config/ardour4
156deny ${HOME}/.config/ardour5 156blacklist ${HOME}/.config/ardour5
157deny ${HOME}/.config/aria2 157blacklist ${HOME}/.config/aria2
158deny ${HOME}/.config/arkrc 158blacklist ${HOME}/.config/arkrc
159deny ${HOME}/.config/artha.conf 159blacklist ${HOME}/.config/artha.conf
160deny ${HOME}/.config/artha.log 160blacklist ${HOME}/.config/artha.log
161deny ${HOME}/.config/asunder 161blacklist ${HOME}/.config/asunder
162deny ${HOME}/.config/atril 162blacklist ${HOME}/.config/atril
163deny ${HOME}/.config/audacious 163blacklist ${HOME}/.config/audacious
164deny ${HOME}/.config/autokey 164blacklist ${HOME}/.config/autokey
165deny ${HOME}/.config/avidemux3_qt5rc 165blacklist ${HOME}/.config/avidemux3_qt5rc
166deny ${HOME}/.config/aweather 166blacklist ${HOME}/.config/aweather
167deny ${HOME}/.config/backintime 167blacklist ${HOME}/.config/backintime
168deny ${HOME}/.config/baloofilerc 168blacklist ${HOME}/.config/baloofilerc
169deny ${HOME}/.config/baloorc 169blacklist ${HOME}/.config/baloorc
170deny ${HOME}/.config/bcompare 170blacklist ${HOME}/.config/bcompare
171deny ${HOME}/.config/blender 171blacklist ${HOME}/.config/blender
172deny ${HOME}/.config/bless 172blacklist ${HOME}/.config/bless
173deny ${HOME}/.config/bnox 173blacklist ${HOME}/.config/bnox
174deny ${HOME}/.config/borg 174blacklist ${HOME}/.config/borg
175deny ${HOME}/.config/brasero 175blacklist ${HOME}/.config/brasero
176deny ${HOME}/.config/brave 176blacklist ${HOME}/.config/brave
177deny ${HOME}/.config/brave-flags.conf 177blacklist ${HOME}/.config/brave-flags.conf
178deny ${HOME}/.config/caja 178blacklist ${HOME}/.config/caja
179deny ${HOME}/.config/calibre 179blacklist ${HOME}/.config/calibre
180deny ${HOME}/.config/cantata 180blacklist ${HOME}/.config/cantata
181deny ${HOME}/.config/catfish 181blacklist ${HOME}/.config/catfish
182deny ${HOME}/.config/cawbird 182blacklist ${HOME}/.config/cawbird
183deny ${HOME}/.config/celluloid 183blacklist ${HOME}/.config/celluloid
184deny ${HOME}/.config/cherrytree 184blacklist ${HOME}/.config/cherrytree
185deny ${HOME}/.config/chrome-beta-flags.conf 185blacklist ${HOME}/.config/chrome-beta-flags.conf
186deny ${HOME}/.config/chrome-beta-flags.config 186blacklist ${HOME}/.config/chrome-beta-flags.config
187deny ${HOME}/.config/chrome-flags.conf 187blacklist ${HOME}/.config/chrome-flags.conf
188deny ${HOME}/.config/chrome-flags.config 188blacklist ${HOME}/.config/chrome-flags.config
189deny ${HOME}/.config/chrome-unstable-flags.conf 189blacklist ${HOME}/.config/chrome-unstable-flags.conf
190deny ${HOME}/.config/chrome-unstable-flags.config 190blacklist ${HOME}/.config/chrome-unstable-flags.config
191deny ${HOME}/.config/chromium 191blacklist ${HOME}/.config/chromium
192deny ${HOME}/.config/chromium-dev 192blacklist ${HOME}/.config/chromium-dev
193deny ${HOME}/.config/chromium-flags.conf 193blacklist ${HOME}/.config/chromium-flags.conf
194deny ${HOME}/.config/clipit 194blacklist ${HOME}/.config/clipit
195deny ${HOME}/.config/cliqz 195blacklist ${HOME}/.config/cliqz
196deny ${HOME}/.config/cmus 196blacklist ${HOME}/.config/cmus
197deny ${HOME}/.config/com.github.bleakgrey.tootle 197blacklist ${HOME}/.config/com.github.bleakgrey.tootle
198deny ${HOME}/.config/corebird 198blacklist ${HOME}/.config/corebird
199deny ${HOME}/.config/cower 199blacklist ${HOME}/.config/cower
200deny ${HOME}/.config/coyim 200blacklist ${HOME}/.config/coyim
201deny ${HOME}/.config/d-feet 201blacklist ${HOME}/.config/d-feet
202deny ${HOME}/.config/darktable 202blacklist ${HOME}/.config/darktable
203deny ${HOME}/.config/deadbeef 203blacklist ${HOME}/.config/deadbeef
204deny ${HOME}/.config/deluge 204blacklist ${HOME}/.config/deluge
205deny ${HOME}/.config/devilspie2 205blacklist ${HOME}/.config/devilspie2
206deny ${HOME}/.config/digikam 206blacklist ${HOME}/.config/digikam
207deny ${HOME}/.config/digikamrc 207blacklist ${HOME}/.config/digikamrc
208deny ${HOME}/.config/discord 208blacklist ${HOME}/.config/discord
209deny ${HOME}/.config/discordcanary 209blacklist ${HOME}/.config/discordcanary
210deny ${HOME}/.config/dkl 210blacklist ${HOME}/.config/dkl
211deny ${HOME}/.config/dnox 211blacklist ${HOME}/.config/dnox
212deny ${HOME}/.config/dolphin-emu 212blacklist ${HOME}/.config/dolphin-emu
213deny ${HOME}/.config/dolphinrc 213blacklist ${HOME}/.config/dolphinrc
214deny ${HOME}/.config/dragonplayerrc 214blacklist ${HOME}/.config/dragonplayerrc
215deny ${HOME}/.config/draw.io 215blacklist ${HOME}/.config/draw.io
216deny ${HOME}/.config/electron-mail 216blacklist ${HOME}/.config/electron-mail
217deny ${HOME}/.config/emaildefaults 217blacklist ${HOME}/.config/emaildefaults
218deny ${HOME}/.config/emailidentities 218blacklist ${HOME}/.config/emailidentities
219deny ${HOME}/.config/emilia 219blacklist ${HOME}/.config/emilia
220deny ${HOME}/.config/enchant 220blacklist ${HOME}/.config/enchant
221deny ${HOME}/.config/eog 221blacklist ${HOME}/.config/eog
222deny ${HOME}/.config/epiphany 222blacklist ${HOME}/.config/epiphany
223deny ${HOME}/.config/equalx 223blacklist ${HOME}/.config/equalx
224deny ${HOME}/.config/evince 224blacklist ${HOME}/.config/evince
225deny ${HOME}/.config/evolution 225blacklist ${HOME}/.config/evolution
226deny ${HOME}/.config/falkon 226blacklist ${HOME}/.config/falkon
227deny ${HOME}/.config/filezilla 227blacklist ${HOME}/.config/filezilla
228deny ${HOME}/.config/flameshot 228blacklist ${HOME}/.config/flameshot
229deny ${HOME}/.config/flaska.net 229blacklist ${HOME}/.config/flaska.net
230deny ${HOME}/.config/flowblade 230blacklist ${HOME}/.config/flowblade
231deny ${HOME}/.config/font-manager 231blacklist ${HOME}/.config/font-manager
232deny ${HOME}/.config/freecol 232blacklist ${HOME}/.config/freecol
233deny ${HOME}/.config/gajim 233blacklist ${HOME}/.config/gajim
234deny ${HOME}/.config/galculator 234blacklist ${HOME}/.config/galculator
235deny ${HOME}/.config/gconf 235blacklist ${HOME}/.config/gconf
236deny ${HOME}/.config/geany 236blacklist ${HOME}/.config/geany
237deny ${HOME}/.config/geary 237blacklist ${HOME}/.config/geary
238deny ${HOME}/.config/gedit 238blacklist ${HOME}/.config/gedit
239deny ${HOME}/.config/geeqie 239blacklist ${HOME}/.config/geeqie
240deny ${HOME}/.config/ghb 240blacklist ${HOME}/.config/ghb
241deny ${HOME}/.config/ghostwriter 241blacklist ${HOME}/.config/ghostwriter
242deny ${HOME}/.config/git 242blacklist ${HOME}/.config/git
243deny ${HOME}/.config/git-cola 243blacklist ${HOME}/.config/git-cola
244deny ${HOME}/.config/glade.conf 244blacklist ${HOME}/.config/glade.conf
245deny ${HOME}/.config/globaltime 245blacklist ${HOME}/.config/globaltime
246deny ${HOME}/.config/gmpc 246blacklist ${HOME}/.config/gmpc
247deny ${HOME}/.config/gnome-builder 247blacklist ${HOME}/.config/gnome-builder
248deny ${HOME}/.config/gnome-chess 248blacklist ${HOME}/.config/gnome-chess
249deny ${HOME}/.config/gnome-control-center 249blacklist ${HOME}/.config/gnome-control-center
250deny ${HOME}/.config/gnome-initial-setup-done 250blacklist ${HOME}/.config/gnome-initial-setup-done
251deny ${HOME}/.config/gnome-latex 251blacklist ${HOME}/.config/gnome-latex
252deny ${HOME}/.config/gnome-mplayer 252blacklist ${HOME}/.config/gnome-mplayer
253deny ${HOME}/.config/gnome-mpv 253blacklist ${HOME}/.config/gnome-mpv
254deny ${HOME}/.config/gnome-pie 254blacklist ${HOME}/.config/gnome-pie
255deny ${HOME}/.config/gnome-session 255blacklist ${HOME}/.config/gnome-session
256deny ${HOME}/.config/gnote 256blacklist ${HOME}/.config/gnote
257deny ${HOME}/.config/godot 257blacklist ${HOME}/.config/godot
258deny ${HOME}/.config/google-chrome 258blacklist ${HOME}/.config/google-chrome
259deny ${HOME}/.config/google-chrome-beta 259blacklist ${HOME}/.config/google-chrome-beta
260deny ${HOME}/.config/google-chrome-unstable 260blacklist ${HOME}/.config/google-chrome-unstable
261deny ${HOME}/.config/gpicview 261blacklist ${HOME}/.config/gpicview
262deny ${HOME}/.config/gthumb 262blacklist ${HOME}/.config/gthumb
263deny ${HOME}/.config/gummi 263blacklist ${HOME}/.config/gummi
264deny ${HOME}/.config/guvcview2 264blacklist ${HOME}/.config/guvcview2
265deny ${HOME}/.config/gwenviewrc 265blacklist ${HOME}/.config/gwenviewrc
266deny ${HOME}/.config/hexchat 266blacklist ${HOME}/.config/hexchat
267deny ${HOME}/.config/homebank 267blacklist ${HOME}/.config/homebank
268deny ${HOME}/.config/i2p 268blacklist ${HOME}/.config/i2p
269deny ${HOME}/.config/inkscape 269blacklist ${HOME}/.config/inkscape
270deny ${HOME}/.config/inox 270blacklist ${HOME}/.config/inox
271deny ${HOME}/.config/iridium 271blacklist ${HOME}/.config/iridium
272deny ${HOME}/.config/itch 272blacklist ${HOME}/.config/itch
273deny ${HOME}/.config/jami 273blacklist ${HOME}/.config/jami
274deny ${HOME}/.config/jd-gui.cfg 274blacklist ${HOME}/.config/jd-gui.cfg
275deny ${HOME}/.config/k3brc 275blacklist ${HOME}/.config/k3brc
276deny ${HOME}/.config/kaffeinerc 276blacklist ${HOME}/.config/kaffeinerc
277deny ${HOME}/.config/kalgebrarc 277blacklist ${HOME}/.config/kalgebrarc
278deny ${HOME}/.config/katemetainfos 278blacklist ${HOME}/.config/katemetainfos
279deny ${HOME}/.config/katepartrc 279blacklist ${HOME}/.config/katepartrc
280deny ${HOME}/.config/katerc 280blacklist ${HOME}/.config/katerc
281deny ${HOME}/.config/kateschemarc 281blacklist ${HOME}/.config/kateschemarc
282deny ${HOME}/.config/katesyntaxhighlightingrc 282blacklist ${HOME}/.config/katesyntaxhighlightingrc
283deny ${HOME}/.config/katevirc 283blacklist ${HOME}/.config/katevirc
284deny ${HOME}/.config/kazam 284blacklist ${HOME}/.config/kazam
285deny ${HOME}/.config/kdeconnect 285blacklist ${HOME}/.config/kdeconnect
286deny ${HOME}/.config/kdenliverc 286blacklist ${HOME}/.config/kdenliverc
287deny ${HOME}/.config/kdiff3fileitemactionrc 287blacklist ${HOME}/.config/kdiff3fileitemactionrc
288deny ${HOME}/.config/kdiff3rc 288blacklist ${HOME}/.config/kdiff3rc
289deny ${HOME}/.config/kfindrc 289blacklist ${HOME}/.config/kfindrc
290deny ${HOME}/.config/kgetrc 290blacklist ${HOME}/.config/kgetrc
291deny ${HOME}/.config/kid3rc 291blacklist ${HOME}/.config/kid3rc
292deny ${HOME}/.config/klavaro 292blacklist ${HOME}/.config/klavaro
293deny ${HOME}/.config/klipperrc 293blacklist ${HOME}/.config/klipperrc
294deny ${HOME}/.config/kmail2rc 294blacklist ${HOME}/.config/kmail2rc
295deny ${HOME}/.config/kmailsearchindexingrc 295blacklist ${HOME}/.config/kmailsearchindexingrc
296deny ${HOME}/.config/kmplayerrc 296blacklist ${HOME}/.config/kmplayerrc
297deny ${HOME}/.config/knotesrc 297blacklist ${HOME}/.config/knotesrc
298deny ${HOME}/.config/konversation.notifyrc 298blacklist ${HOME}/.config/konversation.notifyrc
299deny ${HOME}/.config/konversationrc 299blacklist ${HOME}/.config/konversationrc
300deny ${HOME}/.config/kritarc 300blacklist ${HOME}/.config/kritarc
301deny ${HOME}/.config/ktorrentrc 301blacklist ${HOME}/.config/ktorrentrc
302deny ${HOME}/.config/ktouch2rc 302blacklist ${HOME}/.config/ktouch2rc
303deny ${HOME}/.config/kube 303blacklist ${HOME}/.config/kube
304deny ${HOME}/.config/kwriterc 304blacklist ${HOME}/.config/kwriterc
305deny ${HOME}/.config/leafpad 305blacklist ${HOME}/.config/leafpad
306deny ${HOME}/.config/libreoffice 306blacklist ${HOME}/.config/libreoffice
307deny ${HOME}/.config/liferea 307blacklist ${HOME}/.config/liferea
308deny ${HOME}/.config/linphone 308blacklist ${HOME}/.config/linphone
309deny ${HOME}/.config/lugaru 309blacklist ${HOME}/.config/lugaru
310deny ${HOME}/.config/lutris 310blacklist ${HOME}/.config/lutris
311deny ${HOME}/.config/lximage-qt 311blacklist ${HOME}/.config/lximage-qt
312deny ${HOME}/.config/mailtransports 312blacklist ${HOME}/.config/mailtransports
313deny ${HOME}/.config/mana 313blacklist ${HOME}/.config/mana
314deny ${HOME}/.config/mate-calc 314blacklist ${HOME}/.config/mate-calc
315deny ${HOME}/.config/mate/eom 315blacklist ${HOME}/.config/mate/eom
316deny ${HOME}/.config/mate/mate-dictionary 316blacklist ${HOME}/.config/mate/mate-dictionary
317deny ${HOME}/.config/matrix-mirage 317blacklist ${HOME}/.config/matrix-mirage
318deny ${HOME}/.config/mcomix 318blacklist ${HOME}/.config/mcomix
319deny ${HOME}/.config/meld 319blacklist ${HOME}/.config/meld
320deny ${HOME}/.config/menulibre.cfg 320blacklist ${HOME}/.config/menulibre.cfg
321deny ${HOME}/.config/meteo-qt 321blacklist ${HOME}/.config/meteo-qt
322deny ${HOME}/.config/mfusion 322blacklist ${HOME}/.config/mfusion
323deny ${HOME}/.config/microsoft-edge-dev 323blacklist ${HOME}/.config/microsoft-edge-dev
324deny ${HOME}/.config/midori 324blacklist ${HOME}/.config/midori
325deny ${HOME}/.config/mirage 325blacklist ${HOME}/.config/mirage
326deny ${HOME}/.config/mono 326blacklist ${HOME}/.config/mono
327deny ${HOME}/.config/mpDris2 327blacklist ${HOME}/.config/mpDris2
328deny ${HOME}/.config/mpd 328blacklist ${HOME}/.config/mpd
329deny ${HOME}/.config/mps-youtube 329blacklist ${HOME}/.config/mps-youtube
330deny ${HOME}/.config/mpv 330blacklist ${HOME}/.config/mpv
331deny ${HOME}/.config/mupen64plus 331blacklist ${HOME}/.config/mupen64plus
332deny ${HOME}/.config/mutt 332blacklist ${HOME}/.config/mutt
333deny ${HOME}/.config/mutter 333blacklist ${HOME}/.config/mutter
334deny ${HOME}/.config/mypaint 334blacklist ${HOME}/.config/mypaint
335deny ${HOME}/.config/nano 335blacklist ${HOME}/.config/nano
336deny ${HOME}/.config/nautilus 336blacklist ${HOME}/.config/nautilus
337deny ${HOME}/.config/nemo 337blacklist ${HOME}/.config/nemo
338deny ${HOME}/.config/neochat.notifyrc 338blacklist ${HOME}/.config/neochat.notifyrc
339deny ${HOME}/.config/neochatrc 339blacklist ${HOME}/.config/neochatrc
340deny ${HOME}/.config/neomutt 340blacklist ${HOME}/.config/neomutt
341deny ${HOME}/.config/netsurf 341blacklist ${HOME}/.config/netsurf
342deny ${HOME}/.config/newsbeuter 342blacklist ${HOME}/.config/newsbeuter
343deny ${HOME}/.config/newsboat 343blacklist ${HOME}/.config/newsboat
344deny ${HOME}/.config/newsflash 344blacklist ${HOME}/.config/newsflash
345deny ${HOME}/.config/nheko 345blacklist ${HOME}/.config/nheko
346deny ${HOME}/.config/nomacs 346blacklist ${HOME}/.config/nomacs
347deny ${HOME}/.config/nuclear 347blacklist ${HOME}/.config/nuclear
348deny ${HOME}/.config/obs-studio 348blacklist ${HOME}/.config/obs-studio
349deny ${HOME}/.config/okularpartrc 349blacklist ${HOME}/.config/okularpartrc
350deny ${HOME}/.config/okularrc 350blacklist ${HOME}/.config/okularrc
351deny ${HOME}/.config/onboard 351blacklist ${HOME}/.config/onboard
352deny ${HOME}/.config/onionshare 352blacklist ${HOME}/.config/onionshare
353deny ${HOME}/.config/onlyoffice 353blacklist ${HOME}/.config/onlyoffice
354deny ${HOME}/.config/openmw 354blacklist ${HOME}/.config/openmw
355deny ${HOME}/.config/opera 355blacklist ${HOME}/.config/opera
356deny ${HOME}/.config/opera-beta 356blacklist ${HOME}/.config/opera-beta
357deny ${HOME}/.config/orage 357blacklist ${HOME}/.config/orage
358deny ${HOME}/.config/org.gabmus.gfeeds.json 358blacklist ${HOME}/.config/org.gabmus.gfeeds.json
359deny ${HOME}/.config/org.gabmus.gfeeds.saved_articles 359blacklist ${HOME}/.config/org.gabmus.gfeeds.saved_articles
360deny ${HOME}/.config/org.kde.gwenviewrc 360blacklist ${HOME}/.config/org.kde.gwenviewrc
361deny ${HOME}/.config/otter 361blacklist ${HOME}/.config/otter
362deny ${HOME}/.config/pavucontrol-qt 362blacklist ${HOME}/.config/pavucontrol-qt
363deny ${HOME}/.config/pavucontrol.ini 363blacklist ${HOME}/.config/pavucontrol.ini
364deny ${HOME}/.config/pcmanfm 364blacklist ${HOME}/.config/pcmanfm
365deny ${HOME}/.config/pdfmod 365blacklist ${HOME}/.config/pdfmod
366deny ${HOME}/.config/pipe-viewer 366blacklist ${HOME}/.config/pipe-viewer
367deny ${HOME}/.config/pitivi 367blacklist ${HOME}/.config/pitivi
368deny ${HOME}/.config/pix 368blacklist ${HOME}/.config/pix
369deny ${HOME}/.config/pluma 369blacklist ${HOME}/.config/pluma
370deny ${HOME}/.config/ppsspp 370blacklist ${HOME}/.config/ppsspp
371deny ${HOME}/.config/pragha 371blacklist ${HOME}/.config/pragha
372deny ${HOME}/.config/profanity 372blacklist ${HOME}/.config/profanity
373deny ${HOME}/.config/psi 373blacklist ${HOME}/.config/psi
374deny ${HOME}/.config/psi+ 374blacklist ${HOME}/.config/psi+
375deny ${HOME}/.config/qBittorrent 375blacklist ${HOME}/.config/qBittorrent
376deny ${HOME}/.config/qBittorrentrc 376blacklist ${HOME}/.config/qBittorrentrc
377deny ${HOME}/.config/qnapi.ini 377blacklist ${HOME}/.config/qnapi.ini
378deny ${HOME}/.config/qpdfview 378blacklist ${HOME}/.config/qpdfview
379deny ${HOME}/.config/quodlibet 379blacklist ${HOME}/.config/quodlibet
380deny ${HOME}/.config/qupzilla 380blacklist ${HOME}/.config/qupzilla
381deny ${HOME}/.config/qutebrowser 381blacklist ${HOME}/.config/qutebrowser
382deny ${HOME}/.config/ranger 382blacklist ${HOME}/.config/ranger
383deny ${HOME}/.config/redshift 383blacklist ${HOME}/.config/redshift
384deny ${HOME}/.config/redshift.conf 384blacklist ${HOME}/.config/redshift.conf
385deny ${HOME}/.config/remmina 385blacklist ${HOME}/.config/remmina
386deny ${HOME}/.config/ristretto 386blacklist ${HOME}/.config/ristretto
387deny ${HOME}/.config/rtv 387blacklist ${HOME}/.config/rtv
388deny ${HOME}/.config/scribus 388blacklist ${HOME}/.config/scribus
389deny ${HOME}/.config/scribusrc 389blacklist ${HOME}/.config/scribusrc
390deny ${HOME}/.config/sinew.in 390blacklist ${HOME}/.config/sinew.in
391deny ${HOME}/.config/sink 391blacklist ${HOME}/.config/sink
392deny ${HOME}/.config/skypeforlinux 392blacklist ${HOME}/.config/skypeforlinux
393deny ${HOME}/.config/slimjet 393blacklist ${HOME}/.config/slimjet
394deny ${HOME}/.config/smplayer 394blacklist ${HOME}/.config/smplayer
395deny ${HOME}/.config/smtube 395blacklist ${HOME}/.config/smtube
396deny ${HOME}/.config/smuxi 396blacklist ${HOME}/.config/smuxi
397deny ${HOME}/.config/snox 397blacklist ${HOME}/.config/snox
398deny ${HOME}/.config/sound-juicer 398blacklist ${HOME}/.config/sound-juicer
399deny ${HOME}/.config/specialmailcollectionsrc 399blacklist ${HOME}/.config/specialmailcollectionsrc
400deny ${HOME}/.config/spectaclerc 400blacklist ${HOME}/.config/spectaclerc
401deny ${HOME}/.config/spotify 401blacklist ${HOME}/.config/spotify
402deny ${HOME}/.config/sqlitebrowser 402blacklist ${HOME}/.config/sqlitebrowser
403deny ${HOME}/.config/stellarium 403blacklist ${HOME}/.config/stellarium
404deny ${HOME}/.config/straw-viewer 404blacklist ${HOME}/.config/straw-viewer
405deny ${HOME}/.config/strawberry 405blacklist ${HOME}/.config/strawberry
406deny ${HOME}/.config/supertuxkart 406blacklist ${HOME}/.config/supertuxkart
407deny ${HOME}/.config/synfig 407blacklist ${HOME}/.config/synfig
408deny ${HOME}/.config/teams 408blacklist ${HOME}/.config/teams
409deny ${HOME}/.config/teams-for-linux 409blacklist ${HOME}/.config/teams-for-linux
410deny ${HOME}/.config/telepathy-account-widgets 410blacklist ${HOME}/.config/telepathy-account-widgets
411deny ${HOME}/.config/torbrowser 411blacklist ${HOME}/.config/torbrowser
412deny ${HOME}/.config/totem 412blacklist ${HOME}/.config/totem
413deny ${HOME}/.config/tox 413blacklist ${HOME}/.config/tox
414deny ${HOME}/.config/transgui 414blacklist ${HOME}/.config/transgui
415deny ${HOME}/.config/transmission 415blacklist ${HOME}/.config/transmission
416deny ${HOME}/.config/truecraft 416blacklist ${HOME}/.config/truecraft
417deny ${HOME}/.config/tuta_integration 417blacklist ${HOME}/.config/tuta_integration
418deny ${HOME}/.config/tutanota-desktop 418blacklist ${HOME}/.config/tutanota-desktop
419deny ${HOME}/.config/tvbrowser 419blacklist ${HOME}/.config/tvbrowser
420deny ${HOME}/.config/uGet 420blacklist ${HOME}/.config/uGet
421deny ${HOME}/.config/ungoogled-chromium 421blacklist ${HOME}/.config/ungoogled-chromium
422deny ${HOME}/.config/uzbl 422blacklist ${HOME}/.config/uzbl
423deny ${HOME}/.config/viewnior 423blacklist ${HOME}/.config/viewnior
424deny ${HOME}/.config/vivaldi 424blacklist ${HOME}/.config/vivaldi
425deny ${HOME}/.config/vivaldi-snapshot 425blacklist ${HOME}/.config/vivaldi-snapshot
426deny ${HOME}/.config/vlc 426blacklist ${HOME}/.config/vlc
427deny ${HOME}/.config/wesnoth 427blacklist ${HOME}/.config/wesnoth
428deny ${HOME}/.config/wireshark 428blacklist ${HOME}/.config/wireshark
429deny ${HOME}/.config/wormux 429blacklist ${HOME}/.config/wormux
430deny ${HOME}/.config/xchat 430blacklist ${HOME}/.config/xchat
431deny ${HOME}/.config/xed 431blacklist ${HOME}/.config/xed
432deny ${HOME}/.config/xfburn 432blacklist ${HOME}/.config/xfburn
433deny ${HOME}/.config/xfce4-dict 433blacklist ${HOME}/.config/xfce4-dict
434deny ${HOME}/.config/xfce4/xfce4-notes.gtkrc 434blacklist ${HOME}/.config/xfce4/xfce4-notes.gtkrc
435deny ${HOME}/.config/xfce4/xfce4-notes.rc 435blacklist ${HOME}/.config/xfce4/xfce4-notes.rc
436deny ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml 436blacklist ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml
437deny ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-mixer.xml 437blacklist ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-mixer.xml
438deny ${HOME}/.config/xiaoyong 438blacklist ${HOME}/.config/xiaoyong
439deny ${HOME}/.config/xmms2 439blacklist ${HOME}/.config/xmms2
440deny ${HOME}/.config/xplayer 440blacklist ${HOME}/.config/xplayer
441deny ${HOME}/.config/xreader 441blacklist ${HOME}/.config/xreader
442deny ${HOME}/.config/xviewer 442blacklist ${HOME}/.config/xviewer
443deny ${HOME}/.config/yandex-browser 443blacklist ${HOME}/.config/yandex-browser
444deny ${HOME}/.config/yandex-browser-beta 444blacklist ${HOME}/.config/yandex-browser-beta
445deny ${HOME}/.config/yelp 445blacklist ${HOME}/.config/yelp
446deny ${HOME}/.config/youtube-dl 446blacklist ${HOME}/.config/youtube-dl
447deny ${HOME}/.config/youtube-dlg 447blacklist ${HOME}/.config/youtube-dlg
448deny ${HOME}/.config/youtube-music-desktop-app 448blacklist ${HOME}/.config/youtube-music-desktop-app
449deny ${HOME}/.config/youtube-viewer 449blacklist ${HOME}/.config/youtube-viewer
450deny ${HOME}/.config/youtubemusic-nativefier-040164 450blacklist ${HOME}/.config/youtubemusic-nativefier-040164
451deny ${HOME}/.config/zathura 451blacklist ${HOME}/.config/zathura
452deny ${HOME}/.config/zoomus.conf 452blacklist ${HOME}/.config/zoomus.conf
453deny ${HOME}/.conkeror.mozdev.org 453blacklist ${HOME}/.conkeror.mozdev.org
454deny ${HOME}/.crawl 454blacklist ${HOME}/.crawl
455deny ${HOME}/.cups 455blacklist ${HOME}/.cups
456deny ${HOME}/.curl-hsts 456blacklist ${HOME}/.curl-hsts
457deny ${HOME}/.curlrc 457blacklist ${HOME}/.curlrc
458deny ${HOME}/.dashcore 458blacklist ${HOME}/.dashcore
459deny ${HOME}/.devilspie 459blacklist ${HOME}/.devilspie
460deny ${HOME}/.dia 460blacklist ${HOME}/.dia
461deny ${HOME}/.digrc 461blacklist ${HOME}/.digrc
462deny ${HOME}/.dillo 462blacklist ${HOME}/.dillo
463deny ${HOME}/.dooble 463blacklist ${HOME}/.dooble
464deny ${HOME}/.dosbox 464blacklist ${HOME}/.dosbox
465deny ${HOME}/.dropbox* 465blacklist ${HOME}/.dropbox*
466deny ${HOME}/.easystroke 466blacklist ${HOME}/.easystroke
467deny ${HOME}/.electron-cache 467blacklist ${HOME}/.electron-cache
468deny ${HOME}/.electrum* 468blacklist ${HOME}/.electrum*
469deny ${HOME}/.elinks 469blacklist ${HOME}/.elinks
470deny ${HOME}/.emacs 470blacklist ${HOME}/.emacs
471deny ${HOME}/.emacs.d 471blacklist ${HOME}/.emacs.d
472deny ${HOME}/.equalx 472blacklist ${HOME}/.equalx
473deny ${HOME}/.ethereum 473blacklist ${HOME}/.ethereum
474deny ${HOME}/.etr 474blacklist ${HOME}/.etr
475deny ${HOME}/.filezilla 475blacklist ${HOME}/.filezilla
476deny ${HOME}/.firedragon 476blacklist ${HOME}/.firedragon
477deny ${HOME}/.flowblade 477blacklist ${HOME}/.flowblade
478deny ${HOME}/.fltk 478blacklist ${HOME}/.fltk
479deny ${HOME}/.fossamail 479blacklist ${HOME}/.fossamail
480deny ${HOME}/.freeciv 480blacklist ${HOME}/.freeciv
481deny ${HOME}/.freecol 481blacklist ${HOME}/.freecol
482deny ${HOME}/.freemind 482blacklist ${HOME}/.freemind
483deny ${HOME}/.frogatto 483blacklist ${HOME}/.frogatto
484deny ${HOME}/.frozen-bubble 484blacklist ${HOME}/.frozen-bubble
485deny ${HOME}/.funnyboat 485blacklist ${HOME}/.funnyboat
486deny ${HOME}/.gimp* 486blacklist ${HOME}/.gimp*
487deny ${HOME}/.gist 487blacklist ${HOME}/.gist
488deny ${HOME}/.gitconfig 488blacklist ${HOME}/.gitconfig
489deny ${HOME}/.gl-117 489blacklist ${HOME}/.gl-117
490deny ${HOME}/.glaxiumrc 490blacklist ${HOME}/.glaxiumrc
491deny ${HOME}/.gnome/gnome-schedule 491blacklist ${HOME}/.gnome/gnome-schedule
492deny ${HOME}/.googleearth 492blacklist ${HOME}/.googleearth
493deny ${HOME}/.gradle 493blacklist ${HOME}/.gradle
494deny ${HOME}/.gramps 494blacklist ${HOME}/.gramps
495deny ${HOME}/.guayadeque 495blacklist ${HOME}/.guayadeque
496deny ${HOME}/.hashcat 496blacklist ${HOME}/.hashcat
497deny ${HOME}/.hedgewars 497blacklist ${HOME}/.hedgewars
498deny ${HOME}/.hex-a-hop 498blacklist ${HOME}/.hex-a-hop
499deny ${HOME}/.hugin 499blacklist ${HOME}/.hugin
500deny ${HOME}/.i2p 500blacklist ${HOME}/.i2p
501deny ${HOME}/.icedove 501blacklist ${HOME}/.icedove
502deny ${HOME}/.imagej 502blacklist ${HOME}/.imagej
503deny ${HOME}/.inkscape 503blacklist ${HOME}/.inkscape
504deny ${HOME}/.itch 504blacklist ${HOME}/.itch
505deny ${HOME}/.jack-server 505blacklist ${HOME}/.jack-server
506deny ${HOME}/.jack-settings 506blacklist ${HOME}/.jack-settings
507deny ${HOME}/.jak 507blacklist ${HOME}/.jak
508deny ${HOME}/.java 508blacklist ${HOME}/.java
509deny ${HOME}/.jd 509blacklist ${HOME}/.jd
510deny ${HOME}/.jitsi 510blacklist ${HOME}/.jitsi
511deny ${HOME}/.jumpnbump 511blacklist ${HOME}/.jumpnbump
512deny ${HOME}/.kde/share/apps/digikam 512blacklist ${HOME}/.kde/share/apps/digikam
513deny ${HOME}/.kde/share/apps/gwenview 513blacklist ${HOME}/.kde/share/apps/gwenview
514deny ${HOME}/.kde/share/apps/kaffeine 514blacklist ${HOME}/.kde/share/apps/kaffeine
515deny ${HOME}/.kde/share/apps/kcookiejar 515blacklist ${HOME}/.kde/share/apps/kcookiejar
516deny ${HOME}/.kde/share/apps/kget 516blacklist ${HOME}/.kde/share/apps/kget
517deny ${HOME}/.kde/share/apps/khtml 517blacklist ${HOME}/.kde/share/apps/khtml
518deny ${HOME}/.kde/share/apps/klatexformula 518blacklist ${HOME}/.kde/share/apps/klatexformula
519deny ${HOME}/.kde/share/apps/konqsidebartng 519blacklist ${HOME}/.kde/share/apps/konqsidebartng
520deny ${HOME}/.kde/share/apps/konqueror 520blacklist ${HOME}/.kde/share/apps/konqueror
521deny ${HOME}/.kde/share/apps/kopete 521blacklist ${HOME}/.kde/share/apps/kopete
522deny ${HOME}/.kde/share/apps/ktorrent 522blacklist ${HOME}/.kde/share/apps/ktorrent
523deny ${HOME}/.kde/share/apps/okular 523blacklist ${HOME}/.kde/share/apps/okular
524deny ${HOME}/.kde/share/config/baloofilerc 524blacklist ${HOME}/.kde/share/config/baloofilerc
525deny ${HOME}/.kde/share/config/baloorc 525blacklist ${HOME}/.kde/share/config/baloorc
526deny ${HOME}/.kde/share/config/digikam 526blacklist ${HOME}/.kde/share/config/digikam
527deny ${HOME}/.kde/share/config/gwenviewrc 527blacklist ${HOME}/.kde/share/config/gwenviewrc
528deny ${HOME}/.kde/share/config/k3brc 528blacklist ${HOME}/.kde/share/config/k3brc
529deny ${HOME}/.kde/share/config/kaffeinerc 529blacklist ${HOME}/.kde/share/config/kaffeinerc
530deny ${HOME}/.kde/share/config/kcookiejarrc 530blacklist ${HOME}/.kde/share/config/kcookiejarrc
531deny ${HOME}/.kde/share/config/kfindrc 531blacklist ${HOME}/.kde/share/config/kfindrc
532deny ${HOME}/.kde/share/config/kgetrc 532blacklist ${HOME}/.kde/share/config/kgetrc
533deny ${HOME}/.kde/share/config/khtmlrc 533blacklist ${HOME}/.kde/share/config/khtmlrc
534deny ${HOME}/.kde/share/config/klipperrc 534blacklist ${HOME}/.kde/share/config/klipperrc
535deny ${HOME}/.kde/share/config/kmplayerrc 535blacklist ${HOME}/.kde/share/config/kmplayerrc
536deny ${HOME}/.kde/share/config/konq_history 536blacklist ${HOME}/.kde/share/config/konq_history
537deny ${HOME}/.kde/share/config/konqsidebartngrc 537blacklist ${HOME}/.kde/share/config/konqsidebartngrc
538deny ${HOME}/.kde/share/config/konquerorrc 538blacklist ${HOME}/.kde/share/config/konquerorrc
539deny ${HOME}/.kde/share/config/konversationrc 539blacklist ${HOME}/.kde/share/config/konversationrc
540deny ${HOME}/.kde/share/config/kopeterc 540blacklist ${HOME}/.kde/share/config/kopeterc
541deny ${HOME}/.kde/share/config/ktorrentrc 541blacklist ${HOME}/.kde/share/config/ktorrentrc
542deny ${HOME}/.kde/share/config/okularpartrc 542blacklist ${HOME}/.kde/share/config/okularpartrc
543deny ${HOME}/.kde/share/config/okularrc 543blacklist ${HOME}/.kde/share/config/okularrc
544deny ${HOME}/.kde4/share/apps/digikam 544blacklist ${HOME}/.kde4/share/apps/digikam
545deny ${HOME}/.kde4/share/apps/gwenview 545blacklist ${HOME}/.kde4/share/apps/gwenview
546deny ${HOME}/.kde4/share/apps/kaffeine 546blacklist ${HOME}/.kde4/share/apps/kaffeine
547deny ${HOME}/.kde4/share/apps/kcookiejar 547blacklist ${HOME}/.kde4/share/apps/kcookiejar
548deny ${HOME}/.kde4/share/apps/kget 548blacklist ${HOME}/.kde4/share/apps/kget
549deny ${HOME}/.kde4/share/apps/khtml 549blacklist ${HOME}/.kde4/share/apps/khtml
550deny ${HOME}/.kde4/share/apps/konqsidebartng 550blacklist ${HOME}/.kde4/share/apps/konqsidebartng
551deny ${HOME}/.kde4/share/apps/konqueror 551blacklist ${HOME}/.kde4/share/apps/konqueror
552deny ${HOME}/.kde4/share/apps/kopete 552blacklist ${HOME}/.kde4/share/apps/kopete
553deny ${HOME}/.kde4/share/apps/ktorrent 553blacklist ${HOME}/.kde4/share/apps/ktorrent
554deny ${HOME}/.kde4/share/apps/okular 554blacklist ${HOME}/.kde4/share/apps/okular
555deny ${HOME}/.kde4/share/config/baloofilerc 555blacklist ${HOME}/.kde4/share/config/baloofilerc
556deny ${HOME}/.kde4/share/config/baloorc 556blacklist ${HOME}/.kde4/share/config/baloorc
557deny ${HOME}/.kde4/share/config/digikam 557blacklist ${HOME}/.kde4/share/config/digikam
558deny ${HOME}/.kde4/share/config/gwenviewrc 558blacklist ${HOME}/.kde4/share/config/gwenviewrc
559deny ${HOME}/.kde4/share/config/k3brc 559blacklist ${HOME}/.kde4/share/config/k3brc
560deny ${HOME}/.kde4/share/config/kaffeinerc 560blacklist ${HOME}/.kde4/share/config/kaffeinerc
561deny ${HOME}/.kde4/share/config/kcookiejarrc 561blacklist ${HOME}/.kde4/share/config/kcookiejarrc
562deny ${HOME}/.kde4/share/config/kfindrc 562blacklist ${HOME}/.kde4/share/config/kfindrc
563deny ${HOME}/.kde4/share/config/kgetrc 563blacklist ${HOME}/.kde4/share/config/kgetrc
564deny ${HOME}/.kde4/share/config/khtmlrc 564blacklist ${HOME}/.kde4/share/config/khtmlrc
565deny ${HOME}/.kde4/share/config/klipperrc 565blacklist ${HOME}/.kde4/share/config/klipperrc
566deny ${HOME}/.kde4/share/config/konq_history 566blacklist ${HOME}/.kde4/share/config/konq_history
567deny ${HOME}/.kde4/share/config/konqsidebartngrc 567blacklist ${HOME}/.kde4/share/config/konqsidebartngrc
568deny ${HOME}/.kde4/share/config/konquerorrc 568blacklist ${HOME}/.kde4/share/config/konquerorrc
569deny ${HOME}/.kde4/share/config/konversationrc 569blacklist ${HOME}/.kde4/share/config/konversationrc
570deny ${HOME}/.kde4/share/config/kopeterc 570blacklist ${HOME}/.kde4/share/config/kopeterc
571deny ${HOME}/.kde4/share/config/ktorrentrc 571blacklist ${HOME}/.kde4/share/config/ktorrentrc
572deny ${HOME}/.kde4/share/config/okularpartrc 572blacklist ${HOME}/.kde4/share/config/okularpartrc
573deny ${HOME}/.kde4/share/config/okularrc 573blacklist ${HOME}/.kde4/share/config/okularrc
574deny ${HOME}/.killingfloor 574blacklist ${HOME}/.killingfloor
575deny ${HOME}/.kingsoft 575blacklist ${HOME}/.kingsoft
576deny ${HOME}/.kino-history 576blacklist ${HOME}/.kino-history
577deny ${HOME}/.kinorc 577blacklist ${HOME}/.kinorc
578deny ${HOME}/.klatexformula 578blacklist ${HOME}/.klatexformula
579deny ${HOME}/.klei 579blacklist ${HOME}/.klei
580deny ${HOME}/.kodi 580blacklist ${HOME}/.kodi
581deny ${HOME}/.librewolf 581blacklist ${HOME}/.librewolf
582deny ${HOME}/.lincity-ng 582blacklist ${HOME}/.lincity-ng
583deny ${HOME}/.links 583blacklist ${HOME}/.links
584deny ${HOME}/.links2 584blacklist ${HOME}/.links2
585deny ${HOME}/.linphone-history.db 585blacklist ${HOME}/.linphone-history.db
586deny ${HOME}/.linphonerc 586blacklist ${HOME}/.linphonerc
587deny ${HOME}/.lmmsrc.xml 587blacklist ${HOME}/.lmmsrc.xml
588deny ${HOME}/.local/lib/vivaldi 588blacklist ${HOME}/.local/lib/vivaldi
589deny ${HOME}/.local/share/0ad 589blacklist ${HOME}/.local/share/0ad
590deny ${HOME}/.local/share/3909/PapersPlease 590blacklist ${HOME}/.local/share/3909/PapersPlease
591deny ${HOME}/.local/share/Anki2 591blacklist ${HOME}/.local/share/Anki2
592deny ${HOME}/.local/share/Dredmor 592blacklist ${HOME}/.local/share/Dredmor
593deny ${HOME}/.local/share/Empathy 593blacklist ${HOME}/.local/share/Empathy
594deny ${HOME}/.local/share/Enpass 594blacklist ${HOME}/.local/share/Enpass
595deny ${HOME}/.local/share/FasterThanLight 595blacklist ${HOME}/.local/share/FasterThanLight
596deny ${HOME}/.local/share/Flavio Tordini 596blacklist ${HOME}/.local/share/Flavio Tordini
597deny ${HOME}/.local/share/IntoTheBreach 597blacklist ${HOME}/.local/share/IntoTheBreach
598deny ${HOME}/.local/share/JetBrains 598blacklist ${HOME}/.local/share/JetBrains
599deny ${HOME}/.local/share/KDE/neochat 599blacklist ${HOME}/.local/share/KDE/neochat
600deny ${HOME}/.local/share/Kingsoft 600blacklist ${HOME}/.local/share/Kingsoft
601deny ${HOME}/.local/share/LibreCAD 601blacklist ${HOME}/.local/share/LibreCAD
602deny ${HOME}/.local/share/Mendeley Ltd. 602blacklist ${HOME}/.local/share/Mendeley Ltd.
603deny ${HOME}/.local/share/Mumble 603blacklist ${HOME}/.local/share/Mumble
604deny ${HOME}/.local/share/Nextcloud 604blacklist ${HOME}/.local/share/Nextcloud
605deny ${HOME}/.local/share/PBE 605blacklist ${HOME}/.local/share/PBE
606deny ${HOME}/.local/share/Paradox Interactive 606blacklist ${HOME}/.local/share/Paradox Interactive
607deny ${HOME}/.local/share/PawelStolowski 607blacklist ${HOME}/.local/share/PawelStolowski
608deny ${HOME}/.local/share/PillarsOfEternity 608blacklist ${HOME}/.local/share/PillarsOfEternity
609deny ${HOME}/.local/share/Psi 609blacklist ${HOME}/.local/share/Psi
610deny ${HOME}/.local/share/QGIS 610blacklist ${HOME}/.local/share/QGIS
611deny ${HOME}/.local/share/QMediathekView 611blacklist ${HOME}/.local/share/QMediathekView
612deny ${HOME}/.local/share/QuiteRss 612blacklist ${HOME}/.local/share/QuiteRss
613deny ${HOME}/.local/share/Ricochet 613blacklist ${HOME}/.local/share/Ricochet
614deny ${HOME}/.local/share/RogueLegacy 614blacklist ${HOME}/.local/share/RogueLegacy
615deny ${HOME}/.local/share/RogueLegacyStorageContainer 615blacklist ${HOME}/.local/share/RogueLegacyStorageContainer
616deny ${HOME}/.local/share/Shortwave 616blacklist ${HOME}/.local/share/Shortwave
617deny ${HOME}/.local/share/Steam 617blacklist ${HOME}/.local/share/Steam
618deny ${HOME}/.local/share/SteamWorld Dig 2 618blacklist ${HOME}/.local/share/SteamWorld Dig 2
619deny ${HOME}/.local/share/SteamWorldDig 619blacklist ${HOME}/.local/share/SteamWorldDig
620deny ${HOME}/.local/share/SuperHexagon 620blacklist ${HOME}/.local/share/SuperHexagon
621deny ${HOME}/.local/share/TelegramDesktop 621blacklist ${HOME}/.local/share/TelegramDesktop
622deny ${HOME}/.local/share/Terraria 622blacklist ${HOME}/.local/share/Terraria
623deny ${HOME}/.local/share/TpLogger 623blacklist ${HOME}/.local/share/TpLogger
624deny ${HOME}/.local/share/Zeal 624blacklist ${HOME}/.local/share/Zeal
625deny ${HOME}/.local/share/agenda 625blacklist ${HOME}/.local/share/agenda
626deny ${HOME}/.local/share/akonadi* 626blacklist ${HOME}/.local/share/akonadi*
627deny ${HOME}/.local/share/akregator 627blacklist ${HOME}/.local/share/akregator
628deny ${HOME}/.local/share/apps/korganizer 628blacklist ${HOME}/.local/share/apps/korganizer
629deny ${HOME}/.local/share/aspyr-media 629blacklist ${HOME}/.local/share/aspyr-media
630deny ${HOME}/.local/share/authenticator-rs 630blacklist ${HOME}/.local/share/authenticator-rs
631deny ${HOME}/.local/share/autokey 631blacklist ${HOME}/.local/share/autokey
632deny ${HOME}/.local/share/backintime 632blacklist ${HOME}/.local/share/backintime
633deny ${HOME}/.local/share/baloo 633blacklist ${HOME}/.local/share/baloo
634deny ${HOME}/.local/share/barrier 634blacklist ${HOME}/.local/share/barrier
635deny ${HOME}/.local/share/bibletime 635blacklist ${HOME}/.local/share/bibletime
636deny ${HOME}/.local/share/bijiben 636blacklist ${HOME}/.local/share/bijiben
637deny ${HOME}/.local/share/bohemiainteractive 637blacklist ${HOME}/.local/share/bohemiainteractive
638deny ${HOME}/.local/share/caja-python 638blacklist ${HOME}/.local/share/caja-python
639deny ${HOME}/.local/share/calligragemini 639blacklist ${HOME}/.local/share/calligragemini
640deny ${HOME}/.local/share/cantata 640blacklist ${HOME}/.local/share/cantata
641deny ${HOME}/.local/share/cdprojektred 641blacklist ${HOME}/.local/share/cdprojektred
642deny ${HOME}/.local/share/clipit 642blacklist ${HOME}/.local/share/clipit
643deny ${HOME}/.local/share/com.github.johnfactotum.Foliate 643blacklist ${HOME}/.local/share/com.github.johnfactotum.Foliate
644deny ${HOME}/.local/share/contacts 644blacklist ${HOME}/.local/share/contacts
645deny ${HOME}/.local/share/cor-games 645blacklist ${HOME}/.local/share/cor-games
646deny ${HOME}/.local/share/data/Mendeley Ltd. 646blacklist ${HOME}/.local/share/data/Mendeley Ltd.
647deny ${HOME}/.local/share/data/Mumble 647blacklist ${HOME}/.local/share/data/Mumble
648deny ${HOME}/.local/share/data/MusE 648blacklist ${HOME}/.local/share/data/MusE
649deny ${HOME}/.local/share/data/MuseScore 649blacklist ${HOME}/.local/share/data/MuseScore
650deny ${HOME}/.local/share/data/nomacs 650blacklist ${HOME}/.local/share/data/nomacs
651deny ${HOME}/.local/share/data/qBittorrent 651blacklist ${HOME}/.local/share/data/qBittorrent
652deny ${HOME}/.local/share/dino 652blacklist ${HOME}/.local/share/dino
653deny ${HOME}/.local/share/dolphin 653blacklist ${HOME}/.local/share/dolphin
654deny ${HOME}/.local/share/dolphin-emu 654blacklist ${HOME}/.local/share/dolphin-emu
655deny ${HOME}/.local/share/emailidentities 655blacklist ${HOME}/.local/share/emailidentities
656deny ${HOME}/.local/share/epiphany 656blacklist ${HOME}/.local/share/epiphany
657deny ${HOME}/.local/share/evolution 657blacklist ${HOME}/.local/share/evolution
658deny ${HOME}/.local/share/feedreader 658blacklist ${HOME}/.local/share/feedreader
659deny ${HOME}/.local/share/feral-interactive 659blacklist ${HOME}/.local/share/feral-interactive
660deny ${HOME}/.local/share/five-or-more 660blacklist ${HOME}/.local/share/five-or-more
661deny ${HOME}/.local/share/freecol 661blacklist ${HOME}/.local/share/freecol
662deny ${HOME}/.local/share/gajim 662blacklist ${HOME}/.local/share/gajim
663deny ${HOME}/.local/share/geary 663blacklist ${HOME}/.local/share/geary
664deny ${HOME}/.local/share/geeqie 664blacklist ${HOME}/.local/share/geeqie
665deny ${HOME}/.local/share/ghostwriter 665blacklist ${HOME}/.local/share/ghostwriter
666deny ${HOME}/.local/share/gitg 666blacklist ${HOME}/.local/share/gitg
667deny ${HOME}/.local/share/gnome-2048 667blacklist ${HOME}/.local/share/gnome-2048
668deny ${HOME}/.local/share/gnome-boxes 668blacklist ${HOME}/.local/share/gnome-boxes
669deny ${HOME}/.local/share/gnome-builder 669blacklist ${HOME}/.local/share/gnome-builder
670deny ${HOME}/.local/share/gnome-chess 670blacklist ${HOME}/.local/share/gnome-chess
671deny ${HOME}/.local/share/gnome-klotski 671blacklist ${HOME}/.local/share/gnome-klotski
672deny ${HOME}/.local/share/gnome-latex 672blacklist ${HOME}/.local/share/gnome-latex
673deny ${HOME}/.local/share/gnome-mines 673blacklist ${HOME}/.local/share/gnome-mines
674deny ${HOME}/.local/share/gnome-music 674blacklist ${HOME}/.local/share/gnome-music
675deny ${HOME}/.local/share/gnome-nibbles 675blacklist ${HOME}/.local/share/gnome-nibbles
676deny ${HOME}/.local/share/gnome-photos 676blacklist ${HOME}/.local/share/gnome-photos
677deny ${HOME}/.local/share/gnome-pomodoro 677blacklist ${HOME}/.local/share/gnome-pomodoro
678deny ${HOME}/.local/share/gnome-recipes 678blacklist ${HOME}/.local/share/gnome-recipes
679deny ${HOME}/.local/share/gnome-ring 679blacklist ${HOME}/.local/share/gnome-ring
680deny ${HOME}/.local/share/gnome-sudoku 680blacklist ${HOME}/.local/share/gnome-sudoku
681deny ${HOME}/.local/share/gnome-twitch 681blacklist ${HOME}/.local/share/gnome-twitch
682deny ${HOME}/.local/share/gnote 682blacklist ${HOME}/.local/share/gnote
683deny ${HOME}/.local/share/godot 683blacklist ${HOME}/.local/share/godot
684deny ${HOME}/.local/share/gradio 684blacklist ${HOME}/.local/share/gradio
685deny ${HOME}/.local/share/gwenview 685blacklist ${HOME}/.local/share/gwenview
686deny ${HOME}/.local/share/i2p 686blacklist ${HOME}/.local/share/i2p
687deny ${HOME}/.local/share/jami 687blacklist ${HOME}/.local/share/jami
688deny ${HOME}/.local/share/kaffeine 688blacklist ${HOME}/.local/share/kaffeine
689deny ${HOME}/.local/share/kalgebra 689blacklist ${HOME}/.local/share/kalgebra
690deny ${HOME}/.local/share/kate 690blacklist ${HOME}/.local/share/kate
691deny ${HOME}/.local/share/kdenlive 691blacklist ${HOME}/.local/share/kdenlive
692deny ${HOME}/.local/share/kget 692blacklist ${HOME}/.local/share/kget
693deny ${HOME}/.local/share/kiwix 693blacklist ${HOME}/.local/share/kiwix
694deny ${HOME}/.local/share/kiwix-desktop 694blacklist ${HOME}/.local/share/kiwix-desktop
695deny ${HOME}/.local/share/klavaro 695blacklist ${HOME}/.local/share/klavaro
696deny ${HOME}/.local/share/kmail2 696blacklist ${HOME}/.local/share/kmail2
697deny ${HOME}/.local/share/kmplayer 697blacklist ${HOME}/.local/share/kmplayer
698deny ${HOME}/.local/share/knotes 698blacklist ${HOME}/.local/share/knotes
699deny ${HOME}/.local/share/krita 699blacklist ${HOME}/.local/share/krita
700deny ${HOME}/.local/share/ktorrent 700blacklist ${HOME}/.local/share/ktorrent
701deny ${HOME}/.local/share/ktorrentrc 701blacklist ${HOME}/.local/share/ktorrentrc
702deny ${HOME}/.local/share/ktouch 702blacklist ${HOME}/.local/share/ktouch
703deny ${HOME}/.local/share/kube 703blacklist ${HOME}/.local/share/kube
704deny ${HOME}/.local/share/kwrite 704blacklist ${HOME}/.local/share/kwrite
705deny ${HOME}/.local/share/kxmlgui5/* 705blacklist ${HOME}/.local/share/kxmlgui5/*
706deny ${HOME}/.local/share/liferea 706blacklist ${HOME}/.local/share/liferea
707deny ${HOME}/.local/share/linphone 707blacklist ${HOME}/.local/share/linphone
708deny ${HOME}/.local/share/local-mail 708blacklist ${HOME}/.local/share/local-mail
709deny ${HOME}/.local/share/lollypop 709blacklist ${HOME}/.local/share/lollypop
710deny ${HOME}/.local/share/love 710blacklist ${HOME}/.local/share/love
711deny ${HOME}/.local/share/lugaru 711blacklist ${HOME}/.local/share/lugaru
712deny ${HOME}/.local/share/lutris 712blacklist ${HOME}/.local/share/lutris
713deny ${HOME}/.local/share/man 713blacklist ${HOME}/.local/share/man
714deny ${HOME}/.local/share/mana 714blacklist ${HOME}/.local/share/mana
715deny ${HOME}/.local/share/maps-places.json 715blacklist ${HOME}/.local/share/maps-places.json
716deny ${HOME}/.local/share/matrix-mirage 716blacklist ${HOME}/.local/share/matrix-mirage
717deny ${HOME}/.local/share/mcomix 717blacklist ${HOME}/.local/share/mcomix
718deny ${HOME}/.local/share/meld 718blacklist ${HOME}/.local/share/meld
719deny ${HOME}/.local/share/midori 719blacklist ${HOME}/.local/share/midori
720deny ${HOME}/.local/share/minder 720blacklist ${HOME}/.local/share/minder
721deny ${HOME}/.local/share/mirage 721blacklist ${HOME}/.local/share/mirage
722deny ${HOME}/.local/share/multimc 722blacklist ${HOME}/.local/share/multimc
723deny ${HOME}/.local/share/multimc5 723blacklist ${HOME}/.local/share/multimc5
724deny ${HOME}/.local/share/mupen64plus 724blacklist ${HOME}/.local/share/mupen64plus
725deny ${HOME}/.local/share/mypaint 725blacklist ${HOME}/.local/share/mypaint
726deny ${HOME}/.local/share/nautilus 726blacklist ${HOME}/.local/share/nautilus
727deny ${HOME}/.local/share/nautilus-python 727blacklist ${HOME}/.local/share/nautilus-python
728deny ${HOME}/.local/share/nemo 728blacklist ${HOME}/.local/share/nemo
729deny ${HOME}/.local/share/nemo-python 729blacklist ${HOME}/.local/share/nemo-python
730deny ${HOME}/.local/share/news-flash 730blacklist ${HOME}/.local/share/news-flash
731deny ${HOME}/.local/share/newsbeuter 731blacklist ${HOME}/.local/share/newsbeuter
732deny ${HOME}/.local/share/newsboat 732blacklist ${HOME}/.local/share/newsboat
733deny ${HOME}/.local/share/nheko 733blacklist ${HOME}/.local/share/nheko
734deny ${HOME}/.local/share/nomacs 734blacklist ${HOME}/.local/share/nomacs
735deny ${HOME}/.local/share/notes 735blacklist ${HOME}/.local/share/notes
736deny ${HOME}/.local/share/ocenaudio 736blacklist ${HOME}/.local/share/ocenaudio
737deny ${HOME}/.local/share/okular 737blacklist ${HOME}/.local/share/okular
738deny ${HOME}/.local/share/onlyoffice 738blacklist ${HOME}/.local/share/onlyoffice
739deny ${HOME}/.local/share/openmw 739blacklist ${HOME}/.local/share/openmw
740deny ${HOME}/.local/share/orage 740blacklist ${HOME}/.local/share/orage
741deny ${HOME}/.local/share/org.kde.gwenview 741blacklist ${HOME}/.local/share/org.kde.gwenview
742deny ${HOME}/.local/share/pix 742blacklist ${HOME}/.local/share/pix
743deny ${HOME}/.local/share/plasma_notes 743blacklist ${HOME}/.local/share/plasma_notes
744deny ${HOME}/.local/share/profanity 744blacklist ${HOME}/.local/share/profanity
745deny ${HOME}/.local/share/psi 745blacklist ${HOME}/.local/share/psi
746deny ${HOME}/.local/share/psi+ 746blacklist ${HOME}/.local/share/psi+
747deny ${HOME}/.local/share/qpdfview 747blacklist ${HOME}/.local/share/qpdfview
748deny ${HOME}/.local/share/quadrapassel 748blacklist ${HOME}/.local/share/quadrapassel
749deny ${HOME}/.local/share/qutebrowser 749blacklist ${HOME}/.local/share/qutebrowser
750deny ${HOME}/.local/share/remmina 750blacklist ${HOME}/.local/share/remmina
751deny ${HOME}/.local/share/rhythmbox 751blacklist ${HOME}/.local/share/rhythmbox
752deny ${HOME}/.local/share/rtv 752blacklist ${HOME}/.local/share/rtv
753deny ${HOME}/.local/share/scribus 753blacklist ${HOME}/.local/share/scribus
754deny ${HOME}/.local/share/shotwell 754blacklist ${HOME}/.local/share/shotwell
755deny ${HOME}/.local/share/signal-cli 755blacklist ${HOME}/.local/share/signal-cli
756deny ${HOME}/.local/share/sink 756blacklist ${HOME}/.local/share/sink
757deny ${HOME}/.local/share/smuxi 757blacklist ${HOME}/.local/share/smuxi
758deny ${HOME}/.local/share/spotify 758blacklist ${HOME}/.local/share/spotify
759deny ${HOME}/.local/share/steam 759blacklist ${HOME}/.local/share/steam
760deny ${HOME}/.local/share/strawberry 760blacklist ${HOME}/.local/share/strawberry
761deny ${HOME}/.local/share/supertux2 761blacklist ${HOME}/.local/share/supertux2
762deny ${HOME}/.local/share/supertuxkart 762blacklist ${HOME}/.local/share/supertuxkart
763deny ${HOME}/.local/share/swell-foop 763blacklist ${HOME}/.local/share/swell-foop
764deny ${HOME}/.local/share/telepathy 764blacklist ${HOME}/.local/share/telepathy
765deny ${HOME}/.local/share/terasology 765blacklist ${HOME}/.local/share/terasology
766deny ${HOME}/.local/share/torbrowser 766blacklist ${HOME}/.local/share/torbrowser
767deny ${HOME}/.local/share/totem 767blacklist ${HOME}/.local/share/totem
768deny ${HOME}/.local/share/uzbl 768blacklist ${HOME}/.local/share/uzbl
769deny ${HOME}/.local/share/vlc 769blacklist ${HOME}/.local/share/vlc
770deny ${HOME}/.local/share/vpltd 770blacklist ${HOME}/.local/share/vpltd
771deny ${HOME}/.local/share/vulkan 771blacklist ${HOME}/.local/share/vulkan
772deny ${HOME}/.local/share/warsow-2.1 772blacklist ${HOME}/.local/share/warsow-2.1
773deny ${HOME}/.local/share/wesnoth 773blacklist ${HOME}/.local/share/wesnoth
774deny ${HOME}/.local/share/wormux 774blacklist ${HOME}/.local/share/wormux
775deny ${HOME}/.local/share/xplayer 775blacklist ${HOME}/.local/share/xplayer
776deny ${HOME}/.local/share/xreader 776blacklist ${HOME}/.local/share/xreader
777deny ${HOME}/.local/share/zathura 777blacklist ${HOME}/.local/share/zathura
778deny ${HOME}/.lv2 778blacklist ${HOME}/.lv2
779deny ${HOME}/.lyx 779blacklist ${HOME}/.lyx
780deny ${HOME}/.magicor 780blacklist ${HOME}/.magicor
781deny ${HOME}/.masterpdfeditor 781blacklist ${HOME}/.masterpdfeditor
782deny ${HOME}/.mbwarband 782blacklist ${HOME}/.mbwarband
783deny ${HOME}/.mcabber 783blacklist ${HOME}/.mcabber
784deny ${HOME}/.mcabberrc 784blacklist ${HOME}/.mcabberrc
785deny ${HOME}/.mediathek3 785blacklist ${HOME}/.mediathek3
786deny ${HOME}/.megaglest 786blacklist ${HOME}/.megaglest
787deny ${HOME}/.minecraft 787blacklist ${HOME}/.minecraft
788deny ${HOME}/.minetest 788blacklist ${HOME}/.minetest
789deny ${HOME}/.mirrormagic 789blacklist ${HOME}/.mirrormagic
790deny ${HOME}/.moc 790blacklist ${HOME}/.moc
791deny ${HOME}/.moonchild productions/basilisk 791blacklist ${HOME}/.moonchild productions/basilisk
792deny ${HOME}/.moonchild productions/pale moon 792blacklist ${HOME}/.moonchild productions/pale moon
793deny ${HOME}/.mozilla 793blacklist ${HOME}/.mozilla
794deny ${HOME}/.mp3splt-gtk 794blacklist ${HOME}/.mp3splt-gtk
795deny ${HOME}/.mpd 795blacklist ${HOME}/.mpd
796deny ${HOME}/.mpdconf 796blacklist ${HOME}/.mpdconf
797deny ${HOME}/.mplayer 797blacklist ${HOME}/.mplayer
798deny ${HOME}/.msmtprc 798blacklist ${HOME}/.msmtprc
799deny ${HOME}/.multimc5 799blacklist ${HOME}/.multimc5
800deny ${HOME}/.nanorc 800blacklist ${HOME}/.nanorc
801deny ${HOME}/.netactview 801blacklist ${HOME}/.netactview
802deny ${HOME}/.neverball 802blacklist ${HOME}/.neverball
803deny ${HOME}/.newsbeuter 803blacklist ${HOME}/.newsbeuter
804deny ${HOME}/.newsboat 804blacklist ${HOME}/.newsboat
805deny ${HOME}/.newsrc 805blacklist ${HOME}/.newsrc
806deny ${HOME}/.nicotine 806blacklist ${HOME}/.nicotine
807deny ${HOME}/.node-gyp 807blacklist ${HOME}/.node-gyp
808deny ${HOME}/.npm 808blacklist ${HOME}/.npm
809deny ${HOME}/.npmrc 809blacklist ${HOME}/.npmrc
810deny ${HOME}/.nv 810blacklist ${HOME}/.nv
811deny ${HOME}/.nvm 811blacklist ${HOME}/.nvm
812deny ${HOME}/.nylas-mail 812blacklist ${HOME}/.nylas-mail
813deny ${HOME}/.openarena 813blacklist ${HOME}/.openarena
814deny ${HOME}/.opencity 814blacklist ${HOME}/.opencity
815deny ${HOME}/.openinvaders 815blacklist ${HOME}/.openinvaders
816deny ${HOME}/.openshot 816blacklist ${HOME}/.openshot
817deny ${HOME}/.openshot_qt 817blacklist ${HOME}/.openshot_qt
818deny ${HOME}/.openttd 818blacklist ${HOME}/.openttd
819deny ${HOME}/.opera 819blacklist ${HOME}/.opera
820deny ${HOME}/.opera-beta 820blacklist ${HOME}/.opera-beta
821deny ${HOME}/.ostrichriders 821blacklist ${HOME}/.ostrichriders
822deny ${HOME}/.paradoxinteractive 822blacklist ${HOME}/.paradoxinteractive
823deny ${HOME}/.parallelrealities/blobwars 823blacklist ${HOME}/.parallelrealities/blobwars
824deny ${HOME}/.pcsxr 824blacklist ${HOME}/.pcsxr
825deny ${HOME}/.penguin-command 825blacklist ${HOME}/.penguin-command
826deny ${HOME}/.pine-crash 826blacklist ${HOME}/.pine-crash
827deny ${HOME}/.pine-debug1 827blacklist ${HOME}/.pine-debug1
828deny ${HOME}/.pine-debug2 828blacklist ${HOME}/.pine-debug2
829deny ${HOME}/.pine-debug3 829blacklist ${HOME}/.pine-debug3
830deny ${HOME}/.pine-debug4 830blacklist ${HOME}/.pine-debug4
831deny ${HOME}/.pine-interrupted-mail 831blacklist ${HOME}/.pine-interrupted-mail
832deny ${HOME}/.pinerc 832blacklist ${HOME}/.pinerc
833deny ${HOME}/.pinercex 833blacklist ${HOME}/.pinercex
834deny ${HOME}/.pingus 834blacklist ${HOME}/.pingus
835deny ${HOME}/.pioneer 835blacklist ${HOME}/.pioneer
836deny ${HOME}/.purple 836blacklist ${HOME}/.purple
837deny ${HOME}/.pylint.d 837blacklist ${HOME}/.pylint.d
838deny ${HOME}/.qemu-launcher 838blacklist ${HOME}/.qemu-launcher
839deny ${HOME}/.qgis2 839blacklist ${HOME}/.qgis2
840deny ${HOME}/.qmmp 840blacklist ${HOME}/.qmmp
841deny ${HOME}/.quodlibet 841blacklist ${HOME}/.quodlibet
842deny ${HOME}/.redeclipse 842blacklist ${HOME}/.redeclipse
843deny ${HOME}/.remmina 843blacklist ${HOME}/.remmina
844deny ${HOME}/.repo_.gitconfig.json 844blacklist ${HOME}/.repo_.gitconfig.json
845deny ${HOME}/.repoconfig 845blacklist ${HOME}/.repoconfig
846deny ${HOME}/.retroshare 846blacklist ${HOME}/.retroshare
847deny ${HOME}/.ripperXrc 847blacklist ${HOME}/.ripperXrc
848deny ${HOME}/.scorched3d 848blacklist ${HOME}/.scorched3d
849deny ${HOME}/.scribus 849blacklist ${HOME}/.scribus
850deny ${HOME}/.scribusrc 850blacklist ${HOME}/.scribusrc
851deny ${HOME}/.simutrans 851blacklist ${HOME}/.simutrans
852deny ${HOME}/.smartgit/*/passwords 852blacklist ${HOME}/.smartgit/*/passwords
853deny ${HOME}/.ssr 853blacklist ${HOME}/.ssr
854deny ${HOME}/.steam 854blacklist ${HOME}/.steam
855deny ${HOME}/.steampath 855blacklist ${HOME}/.steampath
856deny ${HOME}/.steampid 856blacklist ${HOME}/.steampid
857deny ${HOME}/.stellarium 857blacklist ${HOME}/.stellarium
858deny ${HOME}/.subversion 858blacklist ${HOME}/.subversion
859deny ${HOME}/.surf 859blacklist ${HOME}/.surf
860deny ${HOME}/.suve/colorful 860blacklist ${HOME}/.suve/colorful
861deny ${HOME}/.swb.ini 861blacklist ${HOME}/.swb.ini
862deny ${HOME}/.sword 862blacklist ${HOME}/.sword
863deny ${HOME}/.sylpheed-2.0 863blacklist ${HOME}/.sylpheed-2.0
864deny ${HOME}/.synfig 864blacklist ${HOME}/.synfig
865deny ${HOME}/.tb 865blacklist ${HOME}/.tb
866deny ${HOME}/.tconn 866blacklist ${HOME}/.tconn
867deny ${HOME}/.teeworlds 867blacklist ${HOME}/.teeworlds
868deny ${HOME}/.texlive20* 868blacklist ${HOME}/.texlive20*
869deny ${HOME}/.thunderbird 869blacklist ${HOME}/.thunderbird
870deny ${HOME}/.tilp 870blacklist ${HOME}/.tilp
871deny ${HOME}/.tin 871blacklist ${HOME}/.tin
872deny ${HOME}/.tooling 872blacklist ${HOME}/.tooling
873deny ${HOME}/.tor-browser* 873blacklist ${HOME}/.tor-browser*
874deny ${HOME}/.torcs 874blacklist ${HOME}/.torcs
875deny ${HOME}/.tremulous 875blacklist ${HOME}/.tremulous
876deny ${HOME}/.ts3client 876blacklist ${HOME}/.ts3client
877deny ${HOME}/.tuxguitar* 877blacklist ${HOME}/.tuxguitar*
878deny ${HOME}/.tvbrowser 878blacklist ${HOME}/.tvbrowser
879deny ${HOME}/.unknown-horizons 879blacklist ${HOME}/.unknown-horizons
880deny ${HOME}/.viking 880blacklist ${HOME}/.viking
881deny ${HOME}/.viking-maps 881blacklist ${HOME}/.viking-maps
882deny ${HOME}/.vim 882blacklist ${HOME}/.vim
883deny ${HOME}/.vimrc 883blacklist ${HOME}/.vimrc
884deny ${HOME}/.vmware 884blacklist ${HOME}/.vmware
885deny ${HOME}/.vscode 885blacklist ${HOME}/.vscode
886deny ${HOME}/.vscode-oss 886blacklist ${HOME}/.vscode-oss
887deny ${HOME}/.vst 887blacklist ${HOME}/.vst
888deny ${HOME}/.vultures 888blacklist ${HOME}/.vultures
889deny ${HOME}/.w3m 889blacklist ${HOME}/.w3m
890deny ${HOME}/.warzone2100-3.* 890blacklist ${HOME}/.warzone2100-3.*
891deny ${HOME}/.waterfox 891blacklist ${HOME}/.waterfox
892deny ${HOME}/.weechat 892blacklist ${HOME}/.weechat
893deny ${HOME}/.wget-hsts 893blacklist ${HOME}/.wget-hsts
894deny ${HOME}/.wgetrc 894blacklist ${HOME}/.wgetrc
895deny ${HOME}/.widelands 895blacklist ${HOME}/.widelands
896deny ${HOME}/.wine 896blacklist ${HOME}/.wine
897deny ${HOME}/.wine64 897blacklist ${HOME}/.wine64
898deny ${HOME}/.wireshark 898blacklist ${HOME}/.wireshark
899deny ${HOME}/.wordwarvi 899blacklist ${HOME}/.wordwarvi
900deny ${HOME}/.wormux 900blacklist ${HOME}/.wormux
901deny ${HOME}/.xiphos 901blacklist ${HOME}/.xiphos
902deny ${HOME}/.xmind 902blacklist ${HOME}/.xmind
903deny ${HOME}/.xmms 903blacklist ${HOME}/.xmms
904deny ${HOME}/.xmr-stak 904blacklist ${HOME}/.xmr-stak
905deny ${HOME}/.xonotic 905blacklist ${HOME}/.xonotic
906deny ${HOME}/.xournalpp 906blacklist ${HOME}/.xournalpp
907deny ${HOME}/.xpdfrc 907blacklist ${HOME}/.xpdfrc
908deny ${HOME}/.yarn 908blacklist ${HOME}/.yarn
909deny ${HOME}/.yarn-config 909blacklist ${HOME}/.yarn-config
910deny ${HOME}/.yarncache 910blacklist ${HOME}/.yarncache
911deny ${HOME}/.yarnrc 911blacklist ${HOME}/.yarnrc
912deny ${HOME}/.zoom 912blacklist ${HOME}/.zoom
913deny ${HOME}/Arduino 913blacklist ${HOME}/Arduino
914deny ${HOME}/Monero/wallets 914blacklist ${HOME}/Monero/wallets
915deny ${HOME}/Nextcloud 915blacklist ${HOME}/Nextcloud
916deny ${HOME}/Nextcloud/Notes 916blacklist ${HOME}/Nextcloud/Notes
917deny ${HOME}/SoftMaker 917blacklist ${HOME}/SoftMaker
918deny ${HOME}/Standard Notes Backups 918blacklist ${HOME}/Standard Notes Backups
919deny ${HOME}/TeamSpeak3-Client-linux_amd64 919blacklist ${HOME}/TeamSpeak3-Client-linux_amd64
920deny ${HOME}/TeamSpeak3-Client-linux_x86 920blacklist ${HOME}/TeamSpeak3-Client-linux_x86
921deny ${HOME}/hyperrogue.ini 921blacklist ${HOME}/hyperrogue.ini
922deny ${HOME}/i2p 922blacklist ${HOME}/i2p
923deny ${HOME}/mps 923blacklist ${HOME}/mps
924deny ${HOME}/wallet.dat 924blacklist ${HOME}/wallet.dat
925deny /tmp/.wine-* 925blacklist /tmp/.wine-*
926deny /tmp/akonadi-* 926blacklist /tmp/akonadi-*
927deny /var/games/nethack 927blacklist /var/games/nethack
928deny /var/games/slashem 928blacklist /var/games/slashem
929deny /var/games/vulturesclaw 929blacklist /var/games/vulturesclaw
930deny /var/games/vultureseye 930blacklist /var/games/vultureseye
931deny /var/lib/games/Maelstrom-Scores 931blacklist /var/lib/games/Maelstrom-Scores
932 932
933# ${HOME}/.cache directory 933# ${HOME}/.cache directory
934deny ${HOME}/.cache/0ad 934blacklist ${HOME}/.cache/0ad
935deny ${HOME}/.cache/8pecxstudios 935blacklist ${HOME}/.cache/8pecxstudios
936deny ${HOME}/.cache/Authenticator 936blacklist ${HOME}/.cache/Authenticator
937deny ${HOME}/.cache/BraveSoftware 937blacklist ${HOME}/.cache/BraveSoftware
938deny ${HOME}/.cache/Clementine 938blacklist ${HOME}/.cache/Clementine
939deny ${HOME}/.cache/ENCOM/Spectral 939blacklist ${HOME}/.cache/ENCOM/Spectral
940deny ${HOME}/.cache/Enox 940blacklist ${HOME}/.cache/Enox
941deny ${HOME}/.cache/Enpass 941blacklist ${HOME}/.cache/Enpass
942deny ${HOME}/.cache/Ferdi 942blacklist ${HOME}/.cache/Ferdi
943deny ${HOME}/.cache/Flavio Tordini 943blacklist ${HOME}/.cache/Flavio Tordini
944deny ${HOME}/.cache/Franz 944blacklist ${HOME}/.cache/Franz
945deny ${HOME}/.cache/INRIA 945blacklist ${HOME}/.cache/INRIA
946deny ${HOME}/.cache/INRIA/Natron 946blacklist ${HOME}/.cache/INRIA/Natron
947deny ${HOME}/.cache/KDE/neochat 947blacklist ${HOME}/.cache/KDE/neochat
948deny ${HOME}/.cache/Mendeley Ltd. 948blacklist ${HOME}/.cache/Mendeley Ltd.
949deny ${HOME}/.cache/MusicBrainz 949blacklist ${HOME}/.cache/MusicBrainz
950deny ${HOME}/.cache/NewsFlashGTK 950blacklist ${HOME}/.cache/NewsFlashGTK
951deny ${HOME}/.cache/Otter 951blacklist ${HOME}/.cache/Otter
952deny ${HOME}/.cache/PawelStolowski 952blacklist ${HOME}/.cache/PawelStolowski
953deny ${HOME}/.cache/Psi 953blacklist ${HOME}/.cache/Psi
954deny ${HOME}/.cache/QuiteRss 954blacklist ${HOME}/.cache/QuiteRss
955deny ${HOME}/.cache/Quotient/quaternion 955blacklist ${HOME}/.cache/Quotient/quaternion
956deny ${HOME}/.cache/Shortwave 956blacklist ${HOME}/.cache/Shortwave
957deny ${HOME}/.cache/Tox 957blacklist ${HOME}/.cache/Tox
958deny ${HOME}/.cache/Zeal 958blacklist ${HOME}/.cache/Zeal
959deny ${HOME}/.cache/agenda 959blacklist ${HOME}/.cache/agenda
960deny ${HOME}/.cache/akonadi* 960blacklist ${HOME}/.cache/akonadi*
961deny ${HOME}/.cache/atril 961blacklist ${HOME}/.cache/atril
962deny ${HOME}/.cache/attic 962blacklist ${HOME}/.cache/attic
963deny ${HOME}/.cache/babl 963blacklist ${HOME}/.cache/babl
964deny ${HOME}/.cache/bnox 964blacklist ${HOME}/.cache/bnox
965deny ${HOME}/.cache/borg 965blacklist ${HOME}/.cache/borg
966deny ${HOME}/.cache/calibre 966blacklist ${HOME}/.cache/calibre
967deny ${HOME}/.cache/cantata 967blacklist ${HOME}/.cache/cantata
968deny ${HOME}/.cache/champlain 968blacklist ${HOME}/.cache/champlain
969deny ${HOME}/.cache/chromium 969blacklist ${HOME}/.cache/chromium
970deny ${HOME}/.cache/chromium-dev 970blacklist ${HOME}/.cache/chromium-dev
971deny ${HOME}/.cache/cliqz 971blacklist ${HOME}/.cache/cliqz
972deny ${HOME}/.cache/com.github.johnfactotum.Foliate 972blacklist ${HOME}/.cache/com.github.johnfactotum.Foliate
973deny ${HOME}/.cache/darktable 973blacklist ${HOME}/.cache/darktable
974deny ${HOME}/.cache/deja-dup 974blacklist ${HOME}/.cache/deja-dup
975deny ${HOME}/.cache/discover 975blacklist ${HOME}/.cache/discover
976deny ${HOME}/.cache/dnox 976blacklist ${HOME}/.cache/dnox
977deny ${HOME}/.cache/dolphin 977blacklist ${HOME}/.cache/dolphin
978deny ${HOME}/.cache/dolphin-emu 978blacklist ${HOME}/.cache/dolphin-emu
979deny ${HOME}/.cache/ephemeral 979blacklist ${HOME}/.cache/ephemeral
980deny ${HOME}/.cache/epiphany 980blacklist ${HOME}/.cache/epiphany
981deny ${HOME}/.cache/evolution 981blacklist ${HOME}/.cache/evolution
982deny ${HOME}/.cache/falkon 982blacklist ${HOME}/.cache/falkon
983deny ${HOME}/.cache/feedreader 983blacklist ${HOME}/.cache/feedreader
984deny ${HOME}/.cache/firedragon 984blacklist ${HOME}/.cache/firedragon
985deny ${HOME}/.cache/flaska.net/trojita 985blacklist ${HOME}/.cache/flaska.net/trojita
986deny ${HOME}/.cache/folks 986blacklist ${HOME}/.cache/folks
987deny ${HOME}/.cache/font-manager 987blacklist ${HOME}/.cache/font-manager
988deny ${HOME}/.cache/fossamail 988blacklist ${HOME}/.cache/fossamail
989deny ${HOME}/.cache/fractal 989blacklist ${HOME}/.cache/fractal
990deny ${HOME}/.cache/freecol 990blacklist ${HOME}/.cache/freecol
991deny ${HOME}/.cache/gajim 991blacklist ${HOME}/.cache/gajim
992deny ${HOME}/.cache/geary 992blacklist ${HOME}/.cache/geary
993deny ${HOME}/.cache/geeqie 993blacklist ${HOME}/.cache/geeqie
994deny ${HOME}/.cache/gegl-0.4 994blacklist ${HOME}/.cache/gegl-0.4
995deny ${HOME}/.cache/gfeeds 995blacklist ${HOME}/.cache/gfeeds
996deny ${HOME}/.cache/gimp 996blacklist ${HOME}/.cache/gimp
997deny ${HOME}/.cache/gnome-boxes 997blacklist ${HOME}/.cache/gnome-boxes
998deny ${HOME}/.cache/gnome-builder 998blacklist ${HOME}/.cache/gnome-builder
999deny ${HOME}/.cache/gnome-control-center 999blacklist ${HOME}/.cache/gnome-control-center
1000deny ${HOME}/.cache/gnome-recipes 1000blacklist ${HOME}/.cache/gnome-recipes
1001deny ${HOME}/.cache/gnome-screenshot 1001blacklist ${HOME}/.cache/gnome-screenshot
1002deny ${HOME}/.cache/gnome-software 1002blacklist ${HOME}/.cache/gnome-software
1003deny ${HOME}/.cache/gnome-twitch 1003blacklist ${HOME}/.cache/gnome-twitch
1004deny ${HOME}/.cache/godot 1004blacklist ${HOME}/.cache/godot
1005deny ${HOME}/.cache/google-chrome 1005blacklist ${HOME}/.cache/google-chrome
1006deny ${HOME}/.cache/google-chrome-beta 1006blacklist ${HOME}/.cache/google-chrome-beta
1007deny ${HOME}/.cache/google-chrome-unstable 1007blacklist ${HOME}/.cache/google-chrome-unstable
1008deny ${HOME}/.cache/gradio 1008blacklist ${HOME}/.cache/gradio
1009deny ${HOME}/.cache/gummi 1009blacklist ${HOME}/.cache/gummi
1010deny ${HOME}/.cache/icedove 1010blacklist ${HOME}/.cache/icedove
1011deny ${HOME}/.cache/inkscape 1011blacklist ${HOME}/.cache/inkscape
1012deny ${HOME}/.cache/inox 1012blacklist ${HOME}/.cache/inox
1013deny ${HOME}/.cache/iridium 1013blacklist ${HOME}/.cache/iridium
1014deny ${HOME}/.cache/JetBrains/CLion* 1014blacklist ${HOME}/.cache/JetBrains/CLion*
1015deny ${HOME}/.cache/kcmshell5 1015blacklist ${HOME}/.cache/kcmshell5
1016deny ${HOME}/.cache/kdenlive 1016blacklist ${HOME}/.cache/kdenlive
1017deny ${HOME}/.cache/keepassxc 1017blacklist ${HOME}/.cache/keepassxc
1018deny ${HOME}/.cache/kfind 1018blacklist ${HOME}/.cache/kfind
1019deny ${HOME}/.cache/kinfocenter 1019blacklist ${HOME}/.cache/kinfocenter
1020deny ${HOME}/.cache/kmail2 1020blacklist ${HOME}/.cache/kmail2
1021deny ${HOME}/.cache/krunner 1021blacklist ${HOME}/.cache/krunner
1022deny ${HOME}/.cache/krunnerbookmarkrunnerfirefoxdbfile.sqlite* 1022blacklist ${HOME}/.cache/krunnerbookmarkrunnerfirefoxdbfile.sqlite*
1023deny ${HOME}/.cache/kscreenlocker_greet 1023blacklist ${HOME}/.cache/kscreenlocker_greet
1024deny ${HOME}/.cache/ksmserver-logout-greeter 1024blacklist ${HOME}/.cache/ksmserver-logout-greeter
1025deny ${HOME}/.cache/ksplashqml 1025blacklist ${HOME}/.cache/ksplashqml
1026deny ${HOME}/.cache/kube 1026blacklist ${HOME}/.cache/kube
1027deny ${HOME}/.cache/kwin 1027blacklist ${HOME}/.cache/kwin
1028deny ${HOME}/.cache/libgweather 1028blacklist ${HOME}/.cache/libgweather
1029deny ${HOME}/.cache/librewolf 1029blacklist ${HOME}/.cache/librewolf
1030deny ${HOME}/.cache/liferea 1030blacklist ${HOME}/.cache/liferea
1031deny ${HOME}/.cache/lutris 1031blacklist ${HOME}/.cache/lutris
1032deny ${HOME}/.cache/marker 1032blacklist ${HOME}/.cache/marker
1033deny ${HOME}/.cache/matrix-mirage 1033blacklist ${HOME}/.cache/matrix-mirage
1034deny ${HOME}/.cache/microsoft-edge-dev 1034blacklist ${HOME}/.cache/microsoft-edge-dev
1035deny ${HOME}/.cache/midori 1035blacklist ${HOME}/.cache/midori
1036deny ${HOME}/.cache/minetest 1036blacklist ${HOME}/.cache/minetest
1037deny ${HOME}/.cache/mirage 1037blacklist ${HOME}/.cache/mirage
1038deny ${HOME}/.cache/moonchild productions/basilisk 1038blacklist ${HOME}/.cache/moonchild productions/basilisk
1039deny ${HOME}/.cache/moonchild productions/pale moon 1039blacklist ${HOME}/.cache/moonchild productions/pale moon
1040deny ${HOME}/.cache/mozilla 1040blacklist ${HOME}/.cache/mozilla
1041deny ${HOME}/.cache/ms-excel-online 1041blacklist ${HOME}/.cache/ms-excel-online
1042deny ${HOME}/.cache/ms-office-online 1042blacklist ${HOME}/.cache/ms-office-online
1043deny ${HOME}/.cache/ms-onenote-online 1043blacklist ${HOME}/.cache/ms-onenote-online
1044deny ${HOME}/.cache/ms-outlook-online 1044blacklist ${HOME}/.cache/ms-outlook-online
1045deny ${HOME}/.cache/ms-powerpoint-online 1045blacklist ${HOME}/.cache/ms-powerpoint-online
1046deny ${HOME}/.cache/ms-skype-online 1046blacklist ${HOME}/.cache/ms-skype-online
1047deny ${HOME}/.cache/ms-word-online 1047blacklist ${HOME}/.cache/ms-word-online
1048deny ${HOME}/.cache/mutt 1048blacklist ${HOME}/.cache/mutt
1049deny ${HOME}/.cache/mypaint 1049blacklist ${HOME}/.cache/mypaint
1050deny ${HOME}/.cache/netsurf 1050blacklist ${HOME}/.cache/netsurf
1051deny ${HOME}/.cache/nheko 1051blacklist ${HOME}/.cache/nheko
1052deny ${HOME}/.cache/okular 1052blacklist ${HOME}/.cache/okular
1053deny ${HOME}/.cache/opera 1053blacklist ${HOME}/.cache/opera
1054deny ${HOME}/.cache/opera-beta 1054blacklist ${HOME}/.cache/opera-beta
1055deny ${HOME}/.cache/org.gabmus.gfeeds 1055blacklist ${HOME}/.cache/org.gabmus.gfeeds
1056deny ${HOME}/.cache/org.gnome.Books 1056blacklist ${HOME}/.cache/org.gnome.Books
1057deny ${HOME}/.cache/org.gnome.Maps 1057blacklist ${HOME}/.cache/org.gnome.Maps
1058deny ${HOME}/.cache/pdfmod 1058blacklist ${HOME}/.cache/pdfmod
1059deny ${HOME}/.cache/peek 1059blacklist ${HOME}/.cache/peek
1060deny ${HOME}/.cache/pip 1060blacklist ${HOME}/.cache/pip
1061deny ${HOME}/.cache/pipe-viewer 1061blacklist ${HOME}/.cache/pipe-viewer
1062deny ${HOME}/.cache/plasmashell 1062blacklist ${HOME}/.cache/plasmashell
1063deny ${HOME}/.cache/plasmashellbookmarkrunnerfirefoxdbfile.sqlite* 1063blacklist ${HOME}/.cache/plasmashellbookmarkrunnerfirefoxdbfile.sqlite*
1064deny ${HOME}/.cache/psi 1064blacklist ${HOME}/.cache/psi
1065deny ${HOME}/.cache/qBittorrent 1065blacklist ${HOME}/.cache/qBittorrent
1066deny ${HOME}/.cache/quodlibet 1066blacklist ${HOME}/.cache/quodlibet
1067deny ${HOME}/.cache/qupzilla 1067blacklist ${HOME}/.cache/qupzilla
1068deny ${HOME}/.cache/qutebrowser 1068blacklist ${HOME}/.cache/qutebrowser
1069deny ${HOME}/.cache/rhythmbox 1069blacklist ${HOME}/.cache/rhythmbox
1070deny ${HOME}/.cache/shotwell 1070blacklist ${HOME}/.cache/shotwell
1071deny ${HOME}/.cache/simple-scan 1071blacklist ${HOME}/.cache/simple-scan
1072deny ${HOME}/.cache/slimjet 1072blacklist ${HOME}/.cache/slimjet
1073deny ${HOME}/.cache/smuxi 1073blacklist ${HOME}/.cache/smuxi
1074deny ${HOME}/.cache/snox 1074blacklist ${HOME}/.cache/snox
1075deny ${HOME}/.cache/spotify 1075blacklist ${HOME}/.cache/spotify
1076deny ${HOME}/.cache/straw-viewer 1076blacklist ${HOME}/.cache/straw-viewer
1077deny ${HOME}/.cache/strawberry 1077blacklist ${HOME}/.cache/strawberry
1078deny ${HOME}/.cache/supertuxkart 1078blacklist ${HOME}/.cache/supertuxkart
1079deny ${HOME}/.cache/systemsettings 1079blacklist ${HOME}/.cache/systemsettings
1080deny ${HOME}/.cache/telepathy 1080blacklist ${HOME}/.cache/telepathy
1081deny ${HOME}/.cache/thunderbird 1081blacklist ${HOME}/.cache/thunderbird
1082deny ${HOME}/.cache/torbrowser 1082blacklist ${HOME}/.cache/torbrowser
1083deny ${HOME}/.cache/transmission 1083blacklist ${HOME}/.cache/transmission
1084deny ${HOME}/.cache/ungoogled-chromium 1084blacklist ${HOME}/.cache/ungoogled-chromium
1085deny ${HOME}/.cache/vivaldi 1085blacklist ${HOME}/.cache/vivaldi
1086deny ${HOME}/.cache/vivaldi-snapshot 1086blacklist ${HOME}/.cache/vivaldi-snapshot
1087deny ${HOME}/.cache/vlc 1087blacklist ${HOME}/.cache/vlc
1088deny ${HOME}/.cache/vmware 1088blacklist ${HOME}/.cache/vmware
1089deny ${HOME}/.cache/warsow-2.1 1089blacklist ${HOME}/.cache/warsow-2.1
1090deny ${HOME}/.cache/waterfox 1090blacklist ${HOME}/.cache/waterfox
1091deny ${HOME}/.cache/wesnoth 1091blacklist ${HOME}/.cache/wesnoth
1092deny ${HOME}/.cache/winetricks 1092blacklist ${HOME}/.cache/winetricks
1093deny ${HOME}/.cache/xmms2 1093blacklist ${HOME}/.cache/xmms2
1094deny ${HOME}/.cache/xreader 1094blacklist ${HOME}/.cache/xreader
1095deny ${HOME}/.cache/yandex-browser 1095blacklist ${HOME}/.cache/yandex-browser
1096deny ${HOME}/.cache/yandex-browser-beta 1096blacklist ${HOME}/.cache/yandex-browser-beta
1097deny ${HOME}/.cache/youtube-dl 1097blacklist ${HOME}/.cache/youtube-dl
1098deny ${HOME}/.cache/youtube-viewer 1098blacklist ${HOME}/.cache/youtube-viewer
diff --git a/etc/inc/disable-shell.inc b/etc/inc/disable-shell.inc
index da6fb31a3..8274b0215 100644
--- a/etc/inc/disable-shell.inc
+++ b/etc/inc/disable-shell.inc
@@ -2,14 +2,14 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include disable-shell.local 3include disable-shell.local
4 4
5deny ${PATH}/bash 5blacklist ${PATH}/bash
6deny ${PATH}/csh 6blacklist ${PATH}/csh
7deny ${PATH}/dash 7blacklist ${PATH}/dash
8deny ${PATH}/fish 8blacklist ${PATH}/fish
9deny ${PATH}/ksh 9blacklist ${PATH}/ksh
10deny ${PATH}/mksh 10blacklist ${PATH}/mksh
11deny ${PATH}/oksh 11blacklist ${PATH}/oksh
12deny ${PATH}/sh 12blacklist ${PATH}/sh
13deny ${PATH}/tclsh 13blacklist ${PATH}/tclsh
14deny ${PATH}/tcsh 14blacklist ${PATH}/tcsh
15deny ${PATH}/zsh 15blacklist ${PATH}/zsh
diff --git a/etc/inc/disable-xdg.inc b/etc/inc/disable-xdg.inc
index 32aa8c7f6..22acf272d 100644
--- a/etc/inc/disable-xdg.inc
+++ b/etc/inc/disable-xdg.inc
@@ -2,10 +2,10 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include disable-xdg.local 3include disable-xdg.local
4 4
5deny ${DOCUMENTS} 5blacklist ${DOCUMENTS}
6deny ${MUSIC} 6blacklist ${MUSIC}
7deny ${PICTURES} 7blacklist ${PICTURES}
8deny ${VIDEOS} 8blacklist ${VIDEOS}
9 9
10# The following should be considered catch-all directories 10# The following should be considered catch-all directories
11#blacklist ${DESKTOP} 11#blacklist ${DESKTOP}
diff --git a/etc/inc/whitelist-1793-workaround.inc b/etc/inc/whitelist-1793-workaround.inc
index 06a424440..862837f12 100644
--- a/etc/inc/whitelist-1793-workaround.inc
+++ b/etc/inc/whitelist-1793-workaround.inc
@@ -3,27 +3,27 @@
3include whitelist-1793-workaround.local 3include whitelist-1793-workaround.local
4# This works around bug 1793, and allows whitelisting to be used for some KDE applications. 4# This works around bug 1793, and allows whitelisting to be used for some KDE applications.
5 5
6nodeny ${HOME}/.config/ibus 6noblacklist ${HOME}/.config/ibus
7nodeny ${HOME}/.config/mimeapps.list 7noblacklist ${HOME}/.config/mimeapps.list
8nodeny ${HOME}/.config/pkcs11 8noblacklist ${HOME}/.config/pkcs11
9nodeny ${HOME}/.config/user-dirs.dirs 9noblacklist ${HOME}/.config/user-dirs.dirs
10nodeny ${HOME}/.config/user-dirs.locale 10noblacklist ${HOME}/.config/user-dirs.locale
11nodeny ${HOME}/.config/dconf 11noblacklist ${HOME}/.config/dconf
12nodeny ${HOME}/.config/fontconfig 12noblacklist ${HOME}/.config/fontconfig
13nodeny ${HOME}/.config/gtk-2.0 13noblacklist ${HOME}/.config/gtk-2.0
14nodeny ${HOME}/.config/gtk-3.0 14noblacklist ${HOME}/.config/gtk-3.0
15nodeny ${HOME}/.config/gtk-4.0 15noblacklist ${HOME}/.config/gtk-4.0
16nodeny ${HOME}/.config/gtkrc 16noblacklist ${HOME}/.config/gtkrc
17nodeny ${HOME}/.config/gtkrc-2.0 17noblacklist ${HOME}/.config/gtkrc-2.0
18nodeny ${HOME}/.config/Kvantum 18noblacklist ${HOME}/.config/Kvantum
19nodeny ${HOME}/.config/Trolltech.conf 19noblacklist ${HOME}/.config/Trolltech.conf
20nodeny ${HOME}/.config/QtProject.conf 20noblacklist ${HOME}/.config/QtProject.conf
21nodeny ${HOME}/.config/kdeglobals 21noblacklist ${HOME}/.config/kdeglobals
22nodeny ${HOME}/.config/kio_httprc 22noblacklist ${HOME}/.config/kio_httprc
23nodeny ${HOME}/.config/kioslaverc 23noblacklist ${HOME}/.config/kioslaverc
24nodeny ${HOME}/.config/ksslcablacklist 24noblacklist ${HOME}/.config/ksslcablacklist
25nodeny ${HOME}/.config/qt5ct 25noblacklist ${HOME}/.config/qt5ct
26nodeny ${HOME}/.config/qtcurve 26noblacklist ${HOME}/.config/qtcurve
27 27
28deny ${HOME}/.config/* 28blacklist ${HOME}/.config/*
29allow ${HOME}/.config 29whitelist ${HOME}/.config
diff --git a/etc/inc/whitelist-common.inc b/etc/inc/whitelist-common.inc
index 11070e372..fedfb2bc2 100644
--- a/etc/inc/whitelist-common.inc
+++ b/etc/inc/whitelist-common.inc
@@ -4,82 +4,82 @@ include whitelist-common.local
4 4
5# common whitelist for all profiles 5# common whitelist for all profiles
6 6
7allow ${HOME}/.XCompose 7whitelist ${HOME}/.XCompose
8allow ${HOME}/.alsaequal.bin 8whitelist ${HOME}/.alsaequal.bin
9allow ${HOME}/.asoundrc 9whitelist ${HOME}/.asoundrc
10allow ${HOME}/.config/ibus 10whitelist ${HOME}/.config/ibus
11allow ${HOME}/.config/mimeapps.list 11whitelist ${HOME}/.config/mimeapps.list
12allow ${HOME}/.config/pkcs11 12whitelist ${HOME}/.config/pkcs11
13read-only ${HOME}/.config/pkcs11 13read-only ${HOME}/.config/pkcs11
14allow ${HOME}/.config/user-dirs.dirs 14whitelist ${HOME}/.config/user-dirs.dirs
15read-only ${HOME}/.config/user-dirs.dirs 15read-only ${HOME}/.config/user-dirs.dirs
16allow ${HOME}/.config/user-dirs.locale 16whitelist ${HOME}/.config/user-dirs.locale
17read-only ${HOME}/.config/user-dirs.locale 17read-only ${HOME}/.config/user-dirs.locale
18allow ${HOME}/.drirc 18whitelist ${HOME}/.drirc
19allow ${HOME}/.icons 19whitelist ${HOME}/.icons
20?HAS_APPIMAGE: whitelist ${HOME}/.local/share/appimagekit 20?HAS_APPIMAGE: whitelist ${HOME}/.local/share/appimagekit
21allow ${HOME}/.local/share/applications 21whitelist ${HOME}/.local/share/applications
22read-only ${HOME}/.local/share/applications 22read-only ${HOME}/.local/share/applications
23allow ${HOME}/.local/share/icons 23whitelist ${HOME}/.local/share/icons
24allow ${HOME}/.local/share/mime 24whitelist ${HOME}/.local/share/mime
25allow ${HOME}/.mime.types 25whitelist ${HOME}/.mime.types
26allow ${HOME}/.sndio/cookie 26whitelist ${HOME}/.sndio/cookie
27allow ${HOME}/.uim.d 27whitelist ${HOME}/.uim.d
28 28
29# dconf 29# dconf
30mkdir ${HOME}/.config/dconf 30mkdir ${HOME}/.config/dconf
31allow ${HOME}/.config/dconf 31whitelist ${HOME}/.config/dconf
32 32
33# fonts 33# fonts
34allow ${HOME}/.cache/fontconfig 34whitelist ${HOME}/.cache/fontconfig
35allow ${HOME}/.config/fontconfig 35whitelist ${HOME}/.config/fontconfig
36allow ${HOME}/.fontconfig 36whitelist ${HOME}/.fontconfig
37allow ${HOME}/.fonts 37whitelist ${HOME}/.fonts
38allow ${HOME}/.fonts.conf 38whitelist ${HOME}/.fonts.conf
39allow ${HOME}/.fonts.conf.d 39whitelist ${HOME}/.fonts.conf.d
40allow ${HOME}/.fonts.d 40whitelist ${HOME}/.fonts.d
41allow ${HOME}/.local/share/fonts 41whitelist ${HOME}/.local/share/fonts
42allow ${HOME}/.pangorc 42whitelist ${HOME}/.pangorc
43 43
44# gtk 44# gtk
45allow ${HOME}/.config/gtk-2.0 45whitelist ${HOME}/.config/gtk-2.0
46allow ${HOME}/.config/gtk-3.0 46whitelist ${HOME}/.config/gtk-3.0
47allow ${HOME}/.config/gtk-4.0 47whitelist ${HOME}/.config/gtk-4.0
48allow ${HOME}/.config/gtkrc 48whitelist ${HOME}/.config/gtkrc
49allow ${HOME}/.config/gtkrc-2.0 49whitelist ${HOME}/.config/gtkrc-2.0
50allow ${HOME}/.gnome2 50whitelist ${HOME}/.gnome2
51allow ${HOME}/.gnome2-private 51whitelist ${HOME}/.gnome2-private
52allow ${HOME}/.gtk-2.0 52whitelist ${HOME}/.gtk-2.0
53allow ${HOME}/.gtkrc 53whitelist ${HOME}/.gtkrc
54allow ${HOME}/.gtkrc-2.0 54whitelist ${HOME}/.gtkrc-2.0
55allow ${HOME}/.kde/share/config/gtkrc 55whitelist ${HOME}/.kde/share/config/gtkrc
56allow ${HOME}/.kde/share/config/gtkrc-2.0 56whitelist ${HOME}/.kde/share/config/gtkrc-2.0
57allow ${HOME}/.kde4/share/config/gtkrc 57whitelist ${HOME}/.kde4/share/config/gtkrc
58allow ${HOME}/.kde4/share/config/gtkrc-2.0 58whitelist ${HOME}/.kde4/share/config/gtkrc-2.0
59allow ${HOME}/.local/share/themes 59whitelist ${HOME}/.local/share/themes
60allow ${HOME}/.themes 60whitelist ${HOME}/.themes
61 61
62# qt/kde 62# qt/kde
63allow ${HOME}/.cache/kioexec/krun 63whitelist ${HOME}/.cache/kioexec/krun
64allow ${HOME}/.config/Kvantum 64whitelist ${HOME}/.config/Kvantum
65allow ${HOME}/.config/Trolltech.conf 65whitelist ${HOME}/.config/Trolltech.conf
66allow ${HOME}/.config/QtProject.conf 66whitelist ${HOME}/.config/QtProject.conf
67allow ${HOME}/.config/kdeglobals 67whitelist ${HOME}/.config/kdeglobals
68allow ${HOME}/.config/kio_httprc 68whitelist ${HOME}/.config/kio_httprc
69allow ${HOME}/.config/kioslaverc 69whitelist ${HOME}/.config/kioslaverc
70allow ${HOME}/.config/ksslcablacklist 70whitelist ${HOME}/.config/ksslcablacklist
71allow ${HOME}/.config/qt5ct 71whitelist ${HOME}/.config/qt5ct
72allow ${HOME}/.config/qtcurve 72whitelist ${HOME}/.config/qtcurve
73allow ${HOME}/.kde/share/config/kdeglobals 73whitelist ${HOME}/.kde/share/config/kdeglobals
74allow ${HOME}/.kde/share/config/kio_httprc 74whitelist ${HOME}/.kde/share/config/kio_httprc
75allow ${HOME}/.kde/share/config/kioslaverc 75whitelist ${HOME}/.kde/share/config/kioslaverc
76allow ${HOME}/.kde/share/config/ksslcablacklist 76whitelist ${HOME}/.kde/share/config/ksslcablacklist
77allow ${HOME}/.kde/share/config/oxygenrc 77whitelist ${HOME}/.kde/share/config/oxygenrc
78allow ${HOME}/.kde/share/icons 78whitelist ${HOME}/.kde/share/icons
79allow ${HOME}/.kde4/share/config/kdeglobals 79whitelist ${HOME}/.kde4/share/config/kdeglobals
80allow ${HOME}/.kde4/share/config/kio_httprc 80whitelist ${HOME}/.kde4/share/config/kio_httprc
81allow ${HOME}/.kde4/share/config/kioslaverc 81whitelist ${HOME}/.kde4/share/config/kioslaverc
82allow ${HOME}/.kde4/share/config/ksslcablacklist 82whitelist ${HOME}/.kde4/share/config/ksslcablacklist
83allow ${HOME}/.kde4/share/config/oxygenrc 83whitelist ${HOME}/.kde4/share/config/oxygenrc
84allow ${HOME}/.kde4/share/icons 84whitelist ${HOME}/.kde4/share/icons
85allow ${HOME}/.local/share/qt5ct 85whitelist ${HOME}/.local/share/qt5ct
diff --git a/etc/inc/whitelist-player-common.inc b/etc/inc/whitelist-player-common.inc
index d6ae8eab6..e5bf36804 100644
--- a/etc/inc/whitelist-player-common.inc
+++ b/etc/inc/whitelist-player-common.inc
@@ -4,8 +4,8 @@ include whitelist-player-common.local
4 4
5# common whitelist for all media players 5# common whitelist for all media players
6 6
7allow ${DESKTOP} 7whitelist ${DESKTOP}
8allow ${DOWNLOADS} 8whitelist ${DOWNLOADS}
9allow ${MUSIC} 9whitelist ${MUSIC}
10allow ${PICTURES} 10whitelist ${PICTURES}
11allow ${VIDEOS} 11whitelist ${VIDEOS}
diff --git a/etc/inc/whitelist-runuser-common.inc b/etc/inc/whitelist-runuser-common.inc
index 86e5264b9..48309ffe3 100644
--- a/etc/inc/whitelist-runuser-common.inc
+++ b/etc/inc/whitelist-runuser-common.inc
@@ -4,13 +4,13 @@ include whitelist-runuser-common.local
4 4
5# common ${RUNUSER} (=/run/user/$UID) whitelist for all profiles 5# common ${RUNUSER} (=/run/user/$UID) whitelist for all profiles
6 6
7allow ${RUNUSER}/bus 7whitelist ${RUNUSER}/bus
8allow ${RUNUSER}/dconf 8whitelist ${RUNUSER}/dconf
9allow ${RUNUSER}/gdm/Xauthority 9whitelist ${RUNUSER}/gdm/Xauthority
10allow ${RUNUSER}/ICEauthority 10whitelist ${RUNUSER}/ICEauthority
11allow ${RUNUSER}/.mutter-Xwaylandauth.* 11whitelist ${RUNUSER}/.mutter-Xwaylandauth.*
12allow ${RUNUSER}/pulse/native 12whitelist ${RUNUSER}/pulse/native
13allow ${RUNUSER}/wayland-0 13whitelist ${RUNUSER}/wayland-0
14allow ${RUNUSER}/wayland-1 14whitelist ${RUNUSER}/wayland-1
15allow ${RUNUSER}/xauth_* 15whitelist ${RUNUSER}/xauth_*
16allow ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]] 16whitelist ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]
diff --git a/etc/inc/whitelist-usr-share-common.inc b/etc/inc/whitelist-usr-share-common.inc
index 64296da15..fe0097934 100644
--- a/etc/inc/whitelist-usr-share-common.inc
+++ b/etc/inc/whitelist-usr-share-common.inc
@@ -4,66 +4,66 @@ include whitelist-usr-share-common.local
4 4
5# common /usr/share whitelist for all profiles 5# common /usr/share whitelist for all profiles
6 6
7allow /usr/share/alsa 7whitelist /usr/share/alsa
8allow /usr/share/applications 8whitelist /usr/share/applications
9allow /usr/share/ca-certificates 9whitelist /usr/share/ca-certificates
10allow /usr/share/crypto-policies 10whitelist /usr/share/crypto-policies
11allow /usr/share/cursors 11whitelist /usr/share/cursors
12allow /usr/share/dconf 12whitelist /usr/share/dconf
13allow /usr/share/distro-info 13whitelist /usr/share/distro-info
14allow /usr/share/drirc.d 14whitelist /usr/share/drirc.d
15allow /usr/share/enchant 15whitelist /usr/share/enchant
16allow /usr/share/enchant-2 16whitelist /usr/share/enchant-2
17allow /usr/share/file 17whitelist /usr/share/file
18allow /usr/share/fontconfig 18whitelist /usr/share/fontconfig
19allow /usr/share/fonts 19whitelist /usr/share/fonts
20allow /usr/share/fonts-config 20whitelist /usr/share/fonts-config
21allow /usr/share/gir-1.0 21whitelist /usr/share/gir-1.0
22allow /usr/share/gjs-1.0 22whitelist /usr/share/gjs-1.0
23allow /usr/share/glib-2.0 23whitelist /usr/share/glib-2.0
24allow /usr/share/glvnd 24whitelist /usr/share/glvnd
25allow /usr/share/gtk-2.0 25whitelist /usr/share/gtk-2.0
26allow /usr/share/gtk-3.0 26whitelist /usr/share/gtk-3.0
27allow /usr/share/gtk-engines 27whitelist /usr/share/gtk-engines
28allow /usr/share/gtksourceview-3.0 28whitelist /usr/share/gtksourceview-3.0
29allow /usr/share/gtksourceview-4 29whitelist /usr/share/gtksourceview-4
30allow /usr/share/hunspell 30whitelist /usr/share/hunspell
31allow /usr/share/hwdata 31whitelist /usr/share/hwdata
32allow /usr/share/icons 32whitelist /usr/share/icons
33allow /usr/share/icu 33whitelist /usr/share/icu
34allow /usr/share/knotifications5 34whitelist /usr/share/knotifications5
35allow /usr/share/kservices5 35whitelist /usr/share/kservices5
36allow /usr/share/Kvantum 36whitelist /usr/share/Kvantum
37allow /usr/share/kxmlgui5 37whitelist /usr/share/kxmlgui5
38allow /usr/share/libdrm 38whitelist /usr/share/libdrm
39allow /usr/share/libthai 39whitelist /usr/share/libthai
40allow /usr/share/locale 40whitelist /usr/share/locale
41allow /usr/share/mime 41whitelist /usr/share/mime
42allow /usr/share/misc 42whitelist /usr/share/misc
43allow /usr/share/Modules 43whitelist /usr/share/Modules
44allow /usr/share/myspell 44whitelist /usr/share/myspell
45allow /usr/share/p11-kit 45whitelist /usr/share/p11-kit
46allow /usr/share/perl 46whitelist /usr/share/perl
47allow /usr/share/perl5 47whitelist /usr/share/perl5
48allow /usr/share/pixmaps 48whitelist /usr/share/pixmaps
49allow /usr/share/pki 49whitelist /usr/share/pki
50allow /usr/share/plasma 50whitelist /usr/share/plasma
51allow /usr/share/publicsuffix 51whitelist /usr/share/publicsuffix
52allow /usr/share/qt 52whitelist /usr/share/qt
53allow /usr/share/qt4 53whitelist /usr/share/qt4
54allow /usr/share/qt5 54whitelist /usr/share/qt5
55allow /usr/share/qt5ct 55whitelist /usr/share/qt5ct
56allow /usr/share/sounds 56whitelist /usr/share/sounds
57allow /usr/share/tcl8.6 57whitelist /usr/share/tcl8.6
58allow /usr/share/tcltk 58whitelist /usr/share/tcltk
59allow /usr/share/terminfo 59whitelist /usr/share/terminfo
60allow /usr/share/texlive 60whitelist /usr/share/texlive
61allow /usr/share/texmf 61whitelist /usr/share/texmf
62allow /usr/share/themes 62whitelist /usr/share/themes
63allow /usr/share/thumbnail.so 63whitelist /usr/share/thumbnail.so
64allow /usr/share/uim 64whitelist /usr/share/uim
65allow /usr/share/vulkan 65whitelist /usr/share/vulkan
66allow /usr/share/X11 66whitelist /usr/share/X11
67allow /usr/share/xml 67whitelist /usr/share/xml
68allow /usr/share/zenity 68whitelist /usr/share/zenity
69allow /usr/share/zoneinfo 69whitelist /usr/share/zoneinfo
diff --git a/etc/inc/whitelist-var-common.inc b/etc/inc/whitelist-var-common.inc
index c449e8905..d8ba84ad0 100644
--- a/etc/inc/whitelist-var-common.inc
+++ b/etc/inc/whitelist-var-common.inc
@@ -4,12 +4,12 @@ include whitelist-var-common.local
4 4
5# common /var whitelist for all profiles 5# common /var whitelist for all profiles
6 6
7allow /var/lib/aspell 7whitelist /var/lib/aspell
8allow /var/lib/ca-certificates 8whitelist /var/lib/ca-certificates
9allow /var/lib/dbus 9whitelist /var/lib/dbus
10allow /var/lib/menu-xdg 10whitelist /var/lib/menu-xdg
11allow /var/lib/uim 11whitelist /var/lib/uim
12allow /var/cache/fontconfig 12whitelist /var/cache/fontconfig
13allow /var/tmp 13whitelist /var/tmp
14allow /var/run 14whitelist /var/run
15allow /var/lock 15whitelist /var/lock