aboutsummaryrefslogtreecommitdiffstats
path: root/etc/inc
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@protonmail.com>2021-07-05 07:23:31 -0400
committerLibravatar netblue30 <netblue30@protonmail.com>2021-07-05 07:23:31 -0400
commitfe0f975f447d59977d90c3226cc8c623b31b20b3 (patch)
tree70897a33cde6c716e273d927d18a6be4b54c18a9 /etc/inc
parentdeprecated whitelist=yes/no in /etc/firejail/firejail.config (diff)
downloadfirejail-fe0f975f447d59977d90c3226cc8c623b31b20b3.tar.gz
firejail-fe0f975f447d59977d90c3226cc8c623b31b20b3.tar.zst
firejail-fe0f975f447d59977d90c3226cc8c623b31b20b3.zip
move whitelist/blacklist to allow/deny
Diffstat (limited to 'etc/inc')
-rw-r--r--etc/inc/allow-bin-sh.inc6
-rw-r--r--etc/inc/allow-common-devel.inc36
-rw-r--r--etc/inc/allow-gjs.inc16
-rw-r--r--etc/inc/allow-java.inc10
-rw-r--r--etc/inc/allow-lua.inc16
-rw-r--r--etc/inc/allow-nodejs.inc4
-rw-r--r--etc/inc/allow-opengl-game.inc4
-rw-r--r--etc/inc/allow-perl.inc16
-rw-r--r--etc/inc/allow-php.inc6
-rw-r--r--etc/inc/allow-python2.inc10
-rw-r--r--etc/inc/allow-python3.inc12
-rw-r--r--etc/inc/allow-ruby.inc4
-rw-r--r--etc/inc/allow-ssh.inc8
-rw-r--r--etc/inc/disable-common.inc684
-rw-r--r--etc/inc/disable-devel.inc80
-rw-r--r--etc/inc/disable-interpreters.inc84
-rw-r--r--etc/inc/disable-passwdmgr.inc30
-rw-r--r--etc/inc/disable-programs.inc2178
-rw-r--r--etc/inc/disable-shell.inc22
-rw-r--r--etc/inc/disable-xdg.inc8
-rw-r--r--etc/inc/whitelist-1793-workaround.inc46
-rw-r--r--etc/inc/whitelist-common.inc130
-rw-r--r--etc/inc/whitelist-player-common.inc10
-rw-r--r--etc/inc/whitelist-runuser-common.inc20
-rw-r--r--etc/inc/whitelist-usr-share-common.inc126
-rw-r--r--etc/inc/whitelist-var-common.inc18
26 files changed, 1792 insertions, 1792 deletions
diff --git a/etc/inc/allow-bin-sh.inc b/etc/inc/allow-bin-sh.inc
index d6c295414..59cd40878 100644
--- a/etc/inc/allow-bin-sh.inc
+++ b/etc/inc/allow-bin-sh.inc
@@ -2,6 +2,6 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-bin-sh.local 3include allow-bin-sh.local
4 4
5noblacklist ${PATH}/bash 5nodeny ${PATH}/bash
6noblacklist ${PATH}/dash 6nodeny ${PATH}/dash
7noblacklist ${PATH}/sh 7nodeny ${PATH}/sh
diff --git a/etc/inc/allow-common-devel.inc b/etc/inc/allow-common-devel.inc
index 011bbe226..71b1483cd 100644
--- a/etc/inc/allow-common-devel.inc
+++ b/etc/inc/allow-common-devel.inc
@@ -3,29 +3,29 @@
3include allow-common-devel.local 3include allow-common-devel.local
4 4
5# Git 5# Git
6noblacklist ${HOME}/.config/git 6nodeny ${HOME}/.config/git
7noblacklist ${HOME}/.gitconfig 7nodeny ${HOME}/.gitconfig
8noblacklist ${HOME}/.git-credentials 8nodeny ${HOME}/.git-credentials
9 9
10# Java 10# Java
11noblacklist ${HOME}/.gradle 11nodeny ${HOME}/.gradle
12noblacklist ${HOME}/.java 12nodeny ${HOME}/.java
13 13
14# Node.js 14# Node.js
15noblacklist ${HOME}/.node-gyp 15nodeny ${HOME}/.node-gyp
16noblacklist ${HOME}/.npm 16nodeny ${HOME}/.npm
17noblacklist ${HOME}/.npmrc 17nodeny ${HOME}/.npmrc
18noblacklist ${HOME}/.nvm 18nodeny ${HOME}/.nvm
19noblacklist ${HOME}/.yarn 19nodeny ${HOME}/.yarn
20noblacklist ${HOME}/.yarn-config 20nodeny ${HOME}/.yarn-config
21noblacklist ${HOME}/.yarncache 21nodeny ${HOME}/.yarncache
22noblacklist ${HOME}/.yarnrc 22nodeny ${HOME}/.yarnrc
23 23
24# Python 24# Python
25noblacklist ${HOME}/.pylint.d 25nodeny ${HOME}/.pylint.d
26noblacklist ${HOME}/.python-history 26nodeny ${HOME}/.python-history
27noblacklist ${HOME}/.python_history 27nodeny ${HOME}/.python_history
28noblacklist ${HOME}/.pythonhist 28nodeny ${HOME}/.pythonhist
29 29
30# Rust 30# Rust
31noblacklist ${HOME}/.cargo/* 31nodeny ${HOME}/.cargo/*
diff --git a/etc/inc/allow-gjs.inc b/etc/inc/allow-gjs.inc
index c1366e093..2e2490079 100644
--- a/etc/inc/allow-gjs.inc
+++ b/etc/inc/allow-gjs.inc
@@ -2,11 +2,11 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-gjs.local 3include allow-gjs.local
4 4
5noblacklist ${PATH}/gjs 5nodeny ${PATH}/gjs
6noblacklist ${PATH}/gjs-console 6nodeny ${PATH}/gjs-console
7noblacklist /usr/lib/gjs 7nodeny /usr/lib/gjs
8noblacklist /usr/lib/libgjs* 8nodeny /usr/lib/libgjs*
9noblacklist /usr/lib/libmozjs-* 9nodeny /usr/lib/libmozjs-*
10noblacklist /usr/lib64/gjs 10nodeny /usr/lib64/gjs
11noblacklist /usr/lib64/libgjs* 11nodeny /usr/lib64/libgjs*
12noblacklist /usr/lib64/libmozjs-* 12nodeny /usr/lib64/libmozjs-*
diff --git a/etc/inc/allow-java.inc b/etc/inc/allow-java.inc
index 24d18fb77..af44f3664 100644
--- a/etc/inc/allow-java.inc
+++ b/etc/inc/allow-java.inc
@@ -2,8 +2,8 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-java.local 3include allow-java.local
4 4
5noblacklist ${HOME}/.java 5nodeny ${HOME}/.java
6noblacklist ${PATH}/java 6nodeny ${PATH}/java
7noblacklist /etc/java 7nodeny /etc/java
8noblacklist /usr/lib/java 8nodeny /usr/lib/java
9noblacklist /usr/share/java 9nodeny /usr/share/java
diff --git a/etc/inc/allow-lua.inc b/etc/inc/allow-lua.inc
index 9c47e7a3b..3d0a1997b 100644
--- a/etc/inc/allow-lua.inc
+++ b/etc/inc/allow-lua.inc
@@ -2,11 +2,11 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-lua.local 3include allow-lua.local
4 4
5noblacklist ${PATH}/lua* 5nodeny ${PATH}/lua*
6noblacklist /usr/include 6nodeny /usr/include
7noblacklist /usr/lib/liblua* 7nodeny /usr/lib/liblua*
8noblacklist /usr/lib/lua 8nodeny /usr/lib/lua
9noblacklist /usr/lib64/liblua* 9nodeny /usr/lib64/liblua*
10noblacklist /usr/lib64/lua 10nodeny /usr/lib64/lua
11noblacklist /usr/share/lua 11nodeny /usr/share/lua
12noblacklist /usr/share/lua* 12nodeny /usr/share/lua*
diff --git a/etc/inc/allow-nodejs.inc b/etc/inc/allow-nodejs.inc
index 351c94ab8..e915b3866 100644
--- a/etc/inc/allow-nodejs.inc
+++ b/etc/inc/allow-nodejs.inc
@@ -2,8 +2,8 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-nodejs.local 3include allow-nodejs.local
4 4
5noblacklist ${PATH}/node 5nodeny ${PATH}/node
6noblacklist /usr/include/node 6nodeny /usr/include/node
7 7
8# Allow python for node-gyp (blacklisted by disable-interpreters.inc) 8# Allow python for node-gyp (blacklisted by disable-interpreters.inc)
9include allow-python2.inc 9include allow-python2.inc
diff --git a/etc/inc/allow-opengl-game.inc b/etc/inc/allow-opengl-game.inc
index 5d2d6c5c1..00e35e983 100644
--- a/etc/inc/allow-opengl-game.inc
+++ b/etc/inc/allow-opengl-game.inc
@@ -2,6 +2,6 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-opengl-game.local 3include allow-opengl-game.local
4 4
5noblacklist ${PATH}/bash 5nodeny ${PATH}/bash
6whitelist /usr/share/opengl-games-utils/opengl-game-functions.sh 6allow /usr/share/opengl-games-utils/opengl-game-functions.sh
7private-bin basename,bash,cut,glxinfo,grep,head,sed,zenity 7private-bin basename,bash,cut,glxinfo,grep,head,sed,zenity
diff --git a/etc/inc/allow-perl.inc b/etc/inc/allow-perl.inc
index 5a1952c94..134d27239 100644
--- a/etc/inc/allow-perl.inc
+++ b/etc/inc/allow-perl.inc
@@ -2,11 +2,11 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-perl.local 3include allow-perl.local
4 4
5noblacklist ${PATH}/core_perl 5nodeny ${PATH}/core_perl
6noblacklist ${PATH}/cpan* 6nodeny ${PATH}/cpan*
7noblacklist ${PATH}/perl 7nodeny ${PATH}/perl
8noblacklist ${PATH}/site_perl 8nodeny ${PATH}/site_perl
9noblacklist ${PATH}/vendor_perl 9nodeny ${PATH}/vendor_perl
10noblacklist /usr/lib/perl* 10nodeny /usr/lib/perl*
11noblacklist /usr/lib64/perl* 11nodeny /usr/lib64/perl*
12noblacklist /usr/share/perl* 12nodeny /usr/share/perl*
diff --git a/etc/inc/allow-php.inc b/etc/inc/allow-php.inc
index a0950dc26..520c2019e 100644
--- a/etc/inc/allow-php.inc
+++ b/etc/inc/allow-php.inc
@@ -2,6 +2,6 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-php.local 3include allow-php.local
4 4
5noblacklist ${PATH}/php* 5nodeny ${PATH}/php*
6noblacklist /usr/lib/php* 6nodeny /usr/lib/php*
7noblacklist /usr/share/php* 7nodeny /usr/share/php*
diff --git a/etc/inc/allow-python2.inc b/etc/inc/allow-python2.inc
index b0525e2e1..f1830043a 100644
--- a/etc/inc/allow-python2.inc
+++ b/etc/inc/allow-python2.inc
@@ -2,8 +2,8 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-python2.local 3include allow-python2.local
4 4
5noblacklist ${PATH}/python2* 5nodeny ${PATH}/python2*
6noblacklist /usr/include/python2* 6nodeny /usr/include/python2*
7noblacklist /usr/lib/python2* 7nodeny /usr/lib/python2*
8noblacklist /usr/local/lib/python2* 8nodeny /usr/local/lib/python2*
9noblacklist /usr/share/python2* 9nodeny /usr/share/python2*
diff --git a/etc/inc/allow-python3.inc b/etc/inc/allow-python3.inc
index d968886b0..e4b6ed1a9 100644
--- a/etc/inc/allow-python3.inc
+++ b/etc/inc/allow-python3.inc
@@ -2,9 +2,9 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-python3.local 3include allow-python3.local
4 4
5noblacklist ${PATH}/python3* 5nodeny ${PATH}/python3*
6noblacklist /usr/include/python3* 6nodeny /usr/include/python3*
7noblacklist /usr/lib/python3* 7nodeny /usr/lib/python3*
8noblacklist /usr/lib64/python3* 8nodeny /usr/lib64/python3*
9noblacklist /usr/local/lib/python3* 9nodeny /usr/local/lib/python3*
10noblacklist /usr/share/python3* 10nodeny /usr/share/python3*
diff --git a/etc/inc/allow-ruby.inc b/etc/inc/allow-ruby.inc
index a8c701219..d949bbc84 100644
--- a/etc/inc/allow-ruby.inc
+++ b/etc/inc/allow-ruby.inc
@@ -2,5 +2,5 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-ruby.local 3include allow-ruby.local
4 4
5noblacklist ${PATH}/ruby 5nodeny ${PATH}/ruby
6noblacklist /usr/lib/ruby 6nodeny /usr/lib/ruby
diff --git a/etc/inc/allow-ssh.inc b/etc/inc/allow-ssh.inc
index 67c78a483..44957bf32 100644
--- a/etc/inc/allow-ssh.inc
+++ b/etc/inc/allow-ssh.inc
@@ -2,7 +2,7 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include allow-ssh.local 3include allow-ssh.local
4 4
5noblacklist ${HOME}/.ssh 5nodeny ${HOME}/.ssh
6noblacklist /etc/ssh 6nodeny /etc/ssh
7noblacklist /etc/ssh/ssh_config 7nodeny /etc/ssh/ssh_config
8noblacklist /tmp/ssh-* 8nodeny /tmp/ssh-*
diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc
index 2dc53d311..4c83284ee 100644
--- a/etc/inc/disable-common.inc
+++ b/etc/inc/disable-common.inc
@@ -5,63 +5,63 @@ include disable-common.local
5# The following block breaks trash functionality in file managers 5# The following block breaks trash functionality in file managers
6#read-only ${HOME}/.local 6#read-only ${HOME}/.local
7#read-write ${HOME}/.local/share 7#read-write ${HOME}/.local/share
8blacklist ${HOME}/.local/share/Trash 8deny ${HOME}/.local/share/Trash
9 9
10# History files in $HOME and clipboard managers 10# History files in $HOME and clipboard managers
11blacklist-nolog ${HOME}/.*_history 11deny-nolog ${HOME}/.*_history
12blacklist-nolog ${HOME}/.adobe 12deny-nolog ${HOME}/.adobe
13blacklist-nolog ${HOME}/.cache/greenclip* 13deny-nolog ${HOME}/.cache/greenclip*
14blacklist-nolog ${HOME}/.histfile 14deny-nolog ${HOME}/.histfile
15blacklist-nolog ${HOME}/.history 15deny-nolog ${HOME}/.history
16blacklist-nolog ${HOME}/.kde/share/apps/klipper 16deny-nolog ${HOME}/.kde/share/apps/klipper
17blacklist-nolog ${HOME}/.kde4/share/apps/klipper 17deny-nolog ${HOME}/.kde4/share/apps/klipper
18blacklist-nolog ${HOME}/.local/share/fish/fish_history 18deny-nolog ${HOME}/.local/share/fish/fish_history
19blacklist-nolog ${HOME}/.local/share/klipper 19deny-nolog ${HOME}/.local/share/klipper
20blacklist-nolog ${HOME}/.macromedia 20deny-nolog ${HOME}/.macromedia
21blacklist-nolog ${HOME}/.mupdf.history 21deny-nolog ${HOME}/.mupdf.history
22blacklist-nolog ${HOME}/.python-history 22deny-nolog ${HOME}/.python-history
23blacklist-nolog ${HOME}/.python_history 23deny-nolog ${HOME}/.python_history
24blacklist-nolog ${HOME}/.pythonhist 24deny-nolog ${HOME}/.pythonhist
25blacklist-nolog ${HOME}/.lesshst 25deny-nolog ${HOME}/.lesshst
26blacklist-nolog ${HOME}/.viminfo 26deny-nolog ${HOME}/.viminfo
27blacklist-nolog /tmp/clipmenu* 27deny-nolog /tmp/clipmenu*
28 28
29# X11 session autostart 29# X11 session autostart
30# blacklist ${HOME}/.xpra - this will kill --x11=xpra cmdline option for all programs 30# blacklist ${HOME}/.xpra - this will kill --x11=xpra cmdline option for all programs
31blacklist ${HOME}/.Xsession 31deny ${HOME}/.Xsession
32blacklist ${HOME}/.blackbox 32deny ${HOME}/.blackbox
33blacklist ${HOME}/.config/autostart 33deny ${HOME}/.config/autostart
34blacklist ${HOME}/.config/autostart-scripts 34deny ${HOME}/.config/autostart-scripts
35blacklist ${HOME}/.config/awesome 35deny ${HOME}/.config/awesome
36blacklist ${HOME}/.config/i3 36deny ${HOME}/.config/i3
37blacklist ${HOME}/.config/sway 37deny ${HOME}/.config/sway
38blacklist ${HOME}/.config/lxsession/LXDE/autostart 38deny ${HOME}/.config/lxsession/LXDE/autostart
39blacklist ${HOME}/.config/openbox 39deny ${HOME}/.config/openbox
40blacklist ${HOME}/.config/plasma-workspace 40deny ${HOME}/.config/plasma-workspace
41blacklist ${HOME}/.config/startupconfig 41deny ${HOME}/.config/startupconfig
42blacklist ${HOME}/.config/startupconfigkeys 42deny ${HOME}/.config/startupconfigkeys
43blacklist ${HOME}/.fluxbox 43deny ${HOME}/.fluxbox
44blacklist ${HOME}/.gnomerc 44deny ${HOME}/.gnomerc
45blacklist ${HOME}/.kde/Autostart 45deny ${HOME}/.kde/Autostart
46blacklist ${HOME}/.kde/env 46deny ${HOME}/.kde/env
47blacklist ${HOME}/.kde/share/autostart 47deny ${HOME}/.kde/share/autostart
48blacklist ${HOME}/.kde/share/config/startupconfig 48deny ${HOME}/.kde/share/config/startupconfig
49blacklist ${HOME}/.kde/share/config/startupconfigkeys 49deny ${HOME}/.kde/share/config/startupconfigkeys
50blacklist ${HOME}/.kde/shutdown 50deny ${HOME}/.kde/shutdown
51blacklist ${HOME}/.kde4/env 51deny ${HOME}/.kde4/env
52blacklist ${HOME}/.kde4/Autostart 52deny ${HOME}/.kde4/Autostart
53blacklist ${HOME}/.kde4/share/autostart 53deny ${HOME}/.kde4/share/autostart
54blacklist ${HOME}/.kde4/shutdown 54deny ${HOME}/.kde4/shutdown
55blacklist ${HOME}/.kde4/share/config/startupconfig 55deny ${HOME}/.kde4/share/config/startupconfig
56blacklist ${HOME}/.kde4/share/config/startupconfigkeys 56deny ${HOME}/.kde4/share/config/startupconfigkeys
57blacklist ${HOME}/.local/share/autostart 57deny ${HOME}/.local/share/autostart
58blacklist ${HOME}/.xinitrc 58deny ${HOME}/.xinitrc
59blacklist ${HOME}/.xprofile 59deny ${HOME}/.xprofile
60blacklist ${HOME}/.xserverrc 60deny ${HOME}/.xserverrc
61blacklist ${HOME}/.xsession 61deny ${HOME}/.xsession
62blacklist ${HOME}/.xsessionrc 62deny ${HOME}/.xsessionrc
63blacklist /etc/X11/Xsession.d 63deny /etc/X11/Xsession.d
64blacklist /etc/xdg/autostart 64deny /etc/xdg/autostart
65read-only ${HOME}/.Xauthority 65read-only ${HOME}/.Xauthority
66 66
67# Session manager 67# Session manager
@@ -70,46 +70,46 @@ read-only ${HOME}/.Xauthority
70#?HAS_X11: blacklist /tmp/.ICE-unix 70#?HAS_X11: blacklist /tmp/.ICE-unix
71 71
72# KDE config 72# KDE config
73blacklist ${HOME}/.cache/konsole 73deny ${HOME}/.cache/konsole
74blacklist ${HOME}/.config/khotkeysrc 74deny ${HOME}/.config/khotkeysrc
75blacklist ${HOME}/.config/krunnerrc 75deny ${HOME}/.config/krunnerrc
76blacklist ${HOME}/.config/kscreenlockerrc 76deny ${HOME}/.config/kscreenlockerrc
77blacklist ${HOME}/.config/ksslcertificatemanager 77deny ${HOME}/.config/ksslcertificatemanager
78blacklist ${HOME}/.config/kwalletrc 78deny ${HOME}/.config/kwalletrc
79blacklist ${HOME}/.config/kwinrc 79deny ${HOME}/.config/kwinrc
80blacklist ${HOME}/.config/kwinrulesrc 80deny ${HOME}/.config/kwinrulesrc
81blacklist ${HOME}/.config/plasma-locale-settings.sh 81deny ${HOME}/.config/plasma-locale-settings.sh
82blacklist ${HOME}/.config/plasma-org.kde.plasma.desktop-appletsrc 82deny ${HOME}/.config/plasma-org.kde.plasma.desktop-appletsrc
83blacklist ${HOME}/.config/plasmashellrc 83deny ${HOME}/.config/plasmashellrc
84blacklist ${HOME}/.config/plasmavaultrc 84deny ${HOME}/.config/plasmavaultrc
85blacklist ${HOME}/.kde/share/apps/kwin 85deny ${HOME}/.kde/share/apps/kwin
86blacklist ${HOME}/.kde/share/apps/plasma 86deny ${HOME}/.kde/share/apps/plasma
87blacklist ${HOME}/.kde/share/apps/solid 87deny ${HOME}/.kde/share/apps/solid
88blacklist ${HOME}/.kde/share/config/khotkeysrc 88deny ${HOME}/.kde/share/config/khotkeysrc
89blacklist ${HOME}/.kde/share/config/krunnerrc 89deny ${HOME}/.kde/share/config/krunnerrc
90blacklist ${HOME}/.kde/share/config/kscreensaverrc 90deny ${HOME}/.kde/share/config/kscreensaverrc
91blacklist ${HOME}/.kde/share/config/ksslcertificatemanager 91deny ${HOME}/.kde/share/config/ksslcertificatemanager
92blacklist ${HOME}/.kde/share/config/kwalletrc 92deny ${HOME}/.kde/share/config/kwalletrc
93blacklist ${HOME}/.kde/share/config/kwinrc 93deny ${HOME}/.kde/share/config/kwinrc
94blacklist ${HOME}/.kde/share/config/kwinrulesrc 94deny ${HOME}/.kde/share/config/kwinrulesrc
95blacklist ${HOME}/.kde/share/config/plasma-desktop-appletsrc 95deny ${HOME}/.kde/share/config/plasma-desktop-appletsrc
96blacklist ${HOME}/.kde4/share/apps/kwin 96deny ${HOME}/.kde4/share/apps/kwin
97blacklist ${HOME}/.kde4/share/apps/plasma 97deny ${HOME}/.kde4/share/apps/plasma
98blacklist ${HOME}/.kde4/share/apps/solid 98deny ${HOME}/.kde4/share/apps/solid
99blacklist ${HOME}/.kde4/share/config/khotkeysrc 99deny ${HOME}/.kde4/share/config/khotkeysrc
100blacklist ${HOME}/.kde4/share/config/krunnerrc 100deny ${HOME}/.kde4/share/config/krunnerrc
101blacklist ${HOME}/.kde4/share/config/kscreensaverrc 101deny ${HOME}/.kde4/share/config/kscreensaverrc
102blacklist ${HOME}/.kde4/share/config/ksslcertificatemanager 102deny ${HOME}/.kde4/share/config/ksslcertificatemanager
103blacklist ${HOME}/.kde4/share/config/kwalletrc 103deny ${HOME}/.kde4/share/config/kwalletrc
104blacklist ${HOME}/.kde4/share/config/kwinrc 104deny ${HOME}/.kde4/share/config/kwinrc
105blacklist ${HOME}/.kde4/share/config/kwinrulesrc 105deny ${HOME}/.kde4/share/config/kwinrulesrc
106blacklist ${HOME}/.kde4/share/config/plasma-desktop-appletsrc 106deny ${HOME}/.kde4/share/config/plasma-desktop-appletsrc
107blacklist ${HOME}/.local/share/kglobalaccel 107deny ${HOME}/.local/share/kglobalaccel
108blacklist ${HOME}/.local/share/kwin 108deny ${HOME}/.local/share/kwin
109blacklist ${HOME}/.local/share/plasma 109deny ${HOME}/.local/share/plasma
110blacklist ${HOME}/.local/share/plasmashell 110deny ${HOME}/.local/share/plasmashell
111blacklist ${HOME}/.local/share/solid 111deny ${HOME}/.local/share/solid
112blacklist /tmp/konsole-*.history 112deny /tmp/konsole-*.history
113read-only ${HOME}/.cache/ksycoca5_* 113read-only ${HOME}/.cache/ksycoca5_*
114read-only ${HOME}/.config/*notifyrc 114read-only ${HOME}/.config/*notifyrc
115read-only ${HOME}/.config/kdeglobals 115read-only ${HOME}/.config/kdeglobals
@@ -138,124 +138,124 @@ read-only ${HOME}/.local/share/kservices5
138read-only ${HOME}/.local/share/kssl 138read-only ${HOME}/.local/share/kssl
139 139
140# KDE sockets 140# KDE sockets
141blacklist ${RUNUSER}/*.slave-socket 141deny ${RUNUSER}/*.slave-socket
142blacklist ${RUNUSER}/kdeinit5__* 142deny ${RUNUSER}/kdeinit5__*
143blacklist ${RUNUSER}/kdesud_* 143deny ${RUNUSER}/kdesud_*
144# see #3358 144# see #3358
145#?HAS_NODBUS: blacklist ${RUNUSER}/ksocket-* 145#?HAS_NODBUS: blacklist ${RUNUSER}/ksocket-*
146#?HAS_NODBUS: blacklist /tmp/ksocket-* 146#?HAS_NODBUS: blacklist /tmp/ksocket-*
147 147
148# gnome 148# gnome
149# contains extensions, last used times of applications, and notifications 149# contains extensions, last used times of applications, and notifications
150blacklist ${HOME}/.local/share/gnome-shell 150deny ${HOME}/.local/share/gnome-shell
151# contains recently used files and serials of static/removable storage 151# contains recently used files and serials of static/removable storage
152blacklist ${HOME}/.local/share/gvfs-metadata 152deny ${HOME}/.local/share/gvfs-metadata
153# no direct modification of dconf database 153# no direct modification of dconf database
154read-only ${HOME}/.config/dconf 154read-only ${HOME}/.config/dconf
155blacklist ${RUNUSER}/gnome-session-leader-fifo 155deny ${RUNUSER}/gnome-session-leader-fifo
156blacklist ${RUNUSER}/gnome-shell 156deny ${RUNUSER}/gnome-shell
157blacklist ${RUNUSER}/gsconnect 157deny ${RUNUSER}/gsconnect
158 158
159# systemd 159# systemd
160blacklist ${HOME}/.config/systemd 160deny ${HOME}/.config/systemd
161blacklist ${HOME}/.local/share/systemd 161deny ${HOME}/.local/share/systemd
162blacklist /var/lib/systemd 162deny /var/lib/systemd
163blacklist ${PATH}/systemd-run 163deny ${PATH}/systemd-run
164blacklist ${RUNUSER}/systemd 164deny ${RUNUSER}/systemd
165# creates problems on Arch where /etc/resolv.conf is a symlink to /var/run/systemd/resolve/resolv.conf 165# creates problems on Arch where /etc/resolv.conf is a symlink to /var/run/systemd/resolve/resolv.conf
166#blacklist /var/run/systemd 166#blacklist /var/run/systemd
167 167
168# openrc 168# openrc
169blacklist /etc/runlevels/ 169deny /etc/runlevels/
170blacklist /etc/init.d/ 170deny /etc/init.d/
171blacklist /etc/rc.conf 171deny /etc/rc.conf
172 172
173# VirtualBox 173# VirtualBox
174blacklist ${HOME}/.VirtualBox 174deny ${HOME}/.VirtualBox
175blacklist ${HOME}/.config/VirtualBox 175deny ${HOME}/.config/VirtualBox
176blacklist ${HOME}/VirtualBox VMs 176deny ${HOME}/VirtualBox VMs
177 177
178# GNOME Boxes 178# GNOME Boxes
179blacklist ${HOME}/.config/gnome-boxes 179deny ${HOME}/.config/gnome-boxes
180blacklist ${HOME}/.local/share/gnome-boxes 180deny ${HOME}/.local/share/gnome-boxes
181 181
182# libvirt 182# libvirt
183blacklist ${HOME}/.cache/libvirt 183deny ${HOME}/.cache/libvirt
184blacklist ${HOME}/.config/libvirt 184deny ${HOME}/.config/libvirt
185blacklist ${RUNUSER}/libvirt 185deny ${RUNUSER}/libvirt
186blacklist /var/cache/libvirt 186deny /var/cache/libvirt
187blacklist /var/lib/libvirt 187deny /var/lib/libvirt
188blacklist /var/log/libvirt 188deny /var/log/libvirt
189 189
190# OCI-Containers / Podman 190# OCI-Containers / Podman
191blacklist ${RUNUSER}/containers 191deny ${RUNUSER}/containers
192blacklist ${RUNUSER}/crun 192deny ${RUNUSER}/crun
193blacklist ${RUNUSER}/libpod 193deny ${RUNUSER}/libpod
194blacklist ${RUNUSER}/runc 194deny ${RUNUSER}/runc
195blacklist ${RUNUSER}/toolbox 195deny ${RUNUSER}/toolbox
196 196
197# VeraCrypt 197# VeraCrypt
198blacklist ${HOME}/.VeraCrypt 198deny ${HOME}/.VeraCrypt
199blacklist ${PATH}/veracrypt 199deny ${PATH}/veracrypt
200blacklist ${PATH}/veracrypt-uninstall.sh 200deny ${PATH}/veracrypt-uninstall.sh
201blacklist /usr/share/applications/veracrypt.* 201deny /usr/share/applications/veracrypt.*
202blacklist /usr/share/pixmaps/veracrypt.* 202deny /usr/share/pixmaps/veracrypt.*
203blacklist /usr/share/veracrypt 203deny /usr/share/veracrypt
204 204
205# TrueCrypt 205# TrueCrypt
206blacklist ${HOME}/.TrueCrypt 206deny ${HOME}/.TrueCrypt
207blacklist ${PATH}/truecrypt 207deny ${PATH}/truecrypt
208blacklist ${PATH}/truecrypt-uninstall.sh 208deny ${PATH}/truecrypt-uninstall.sh
209blacklist /usr/share/applications/truecrypt.* 209deny /usr/share/applications/truecrypt.*
210blacklist /usr/share/pixmaps/truecrypt.* 210deny /usr/share/pixmaps/truecrypt.*
211blacklist /usr/share/truecrypt 211deny /usr/share/truecrypt
212 212
213# zuluCrypt 213# zuluCrypt
214blacklist ${HOME}/.zuluCrypt 214deny ${HOME}/.zuluCrypt
215blacklist ${HOME}/.zuluCrypt-socket 215deny ${HOME}/.zuluCrypt-socket
216blacklist ${PATH}/zuluCrypt-cli 216deny ${PATH}/zuluCrypt-cli
217blacklist ${PATH}/zuluMount-cli 217deny ${PATH}/zuluMount-cli
218 218
219# var 219# var
220blacklist /var/cache/apt 220deny /var/cache/apt
221blacklist /var/cache/pacman 221deny /var/cache/pacman
222blacklist /var/lib/apt 222deny /var/lib/apt
223blacklist /var/lib/clamav 223deny /var/lib/clamav
224blacklist /var/lib/dkms 224deny /var/lib/dkms
225blacklist /var/lib/mysql/mysql.sock 225deny /var/lib/mysql/mysql.sock
226blacklist /var/lib/mysqld/mysql.sock 226deny /var/lib/mysqld/mysql.sock
227blacklist /var/lib/pacman 227deny /var/lib/pacman
228blacklist /var/lib/upower 228deny /var/lib/upower
229# blacklist /var/log - a virtual /var/log directory (mostly empty) is build up by default for 229# blacklist /var/log - a virtual /var/log directory (mostly empty) is build up by default for
230# every sandbox, unless --writable-var-log switch is activated 230# every sandbox, unless --writable-var-log switch is activated
231blacklist /var/mail 231deny /var/mail
232blacklist /var/opt 232deny /var/opt
233blacklist /var/run/acpid.socket 233deny /var/run/acpid.socket
234blacklist /var/run/docker.sock 234deny /var/run/docker.sock
235blacklist /var/run/minissdpd.sock 235deny /var/run/minissdpd.sock
236blacklist /var/run/mysql/mysqld.sock 236deny /var/run/mysql/mysqld.sock
237blacklist /var/run/mysqld/mysqld.sock 237deny /var/run/mysqld/mysqld.sock
238blacklist /var/run/rpcbind.sock 238deny /var/run/rpcbind.sock
239blacklist /var/run/screens 239deny /var/run/screens
240blacklist /var/spool/anacron 240deny /var/spool/anacron
241blacklist /var/spool/cron 241deny /var/spool/cron
242blacklist /var/spool/mail 242deny /var/spool/mail
243 243
244# etc 244# etc
245blacklist /etc/anacrontab 245deny /etc/anacrontab
246blacklist /etc/cron* 246deny /etc/cron*
247blacklist /etc/profile.d 247deny /etc/profile.d
248blacklist /etc/rc.local 248deny /etc/rc.local
249# rc1.d, rc2.d, ... 249# rc1.d, rc2.d, ...
250blacklist /etc/rc?.d 250deny /etc/rc?.d
251blacklist /etc/kernel* 251deny /etc/kernel*
252blacklist /etc/grub* 252deny /etc/grub*
253blacklist /etc/dkms 253deny /etc/dkms
254blacklist /etc/apparmor* 254deny /etc/apparmor*
255blacklist /etc/selinux 255deny /etc/selinux
256blacklist /etc/modules* 256deny /etc/modules*
257blacklist /etc/logrotate* 257deny /etc/logrotate*
258blacklist /etc/adduser.conf 258deny /etc/adduser.conf
259 259
260# Startup files 260# Startup files
261read-only ${HOME}/.antigen 261read-only ${HOME}/.antigen
@@ -292,13 +292,13 @@ read-only ${HOME}/.zshrc
292read-only ${HOME}/.zshrc.local 292read-only ${HOME}/.zshrc.local
293 293
294# Remote access 294# Remote access
295blacklist ${HOME}/.rhosts 295deny ${HOME}/.rhosts
296blacklist ${HOME}/.shosts 296deny ${HOME}/.shosts
297blacklist ${HOME}/.ssh/authorized_keys 297deny ${HOME}/.ssh/authorized_keys
298blacklist ${HOME}/.ssh/authorized_keys2 298deny ${HOME}/.ssh/authorized_keys2
299blacklist ${HOME}/.ssh/environment 299deny ${HOME}/.ssh/environment
300blacklist ${HOME}/.ssh/rc 300deny ${HOME}/.ssh/rc
301blacklist /etc/hosts.equiv 301deny /etc/hosts.equiv
302read-only ${HOME}/.ssh/config 302read-only ${HOME}/.ssh/config
303read-only ${HOME}/.ssh/config.d 303read-only ${HOME}/.ssh/config.d
304 304
@@ -359,200 +359,200 @@ read-only ${HOME}/.local/share/mime
359read-only ${HOME}/.local/share/thumbnailers 359read-only ${HOME}/.local/share/thumbnailers
360 360
361# prevent access to ssh-agent 361# prevent access to ssh-agent
362blacklist /tmp/ssh-* 362deny /tmp/ssh-*
363 363
364# top secret 364# top secret
365blacklist ${HOME}/*.kdb 365deny ${HOME}/*.kdb
366blacklist ${HOME}/*.kdbx 366deny ${HOME}/*.kdbx
367blacklist ${HOME}/*.key 367deny ${HOME}/*.key
368blacklist ${HOME}/.Private 368deny ${HOME}/.Private
369blacklist ${HOME}/.caff 369deny ${HOME}/.caff
370blacklist ${HOME}/.cargo/credentials 370deny ${HOME}/.cargo/credentials
371blacklist ${HOME}/.cargo/credentials.toml 371deny ${HOME}/.cargo/credentials.toml
372blacklist ${HOME}/.cert 372deny ${HOME}/.cert
373blacklist ${HOME}/.config/keybase 373deny ${HOME}/.config/keybase
374blacklist ${HOME}/.davfs2/secrets 374deny ${HOME}/.davfs2/secrets
375blacklist ${HOME}/.ecryptfs 375deny ${HOME}/.ecryptfs
376blacklist ${HOME}/.fetchmailrc 376deny ${HOME}/.fetchmailrc
377blacklist ${HOME}/.fscrypt 377deny ${HOME}/.fscrypt
378blacklist ${HOME}/.git-credential-cache 378deny ${HOME}/.git-credential-cache
379blacklist ${HOME}/.git-credentials 379deny ${HOME}/.git-credentials
380blacklist ${HOME}/.gnome2/keyrings 380deny ${HOME}/.gnome2/keyrings
381blacklist ${HOME}/.gnupg 381deny ${HOME}/.gnupg
382blacklist ${HOME}/.config/hub 382deny ${HOME}/.config/hub
383blacklist ${HOME}/.kde/share/apps/kwallet 383deny ${HOME}/.kde/share/apps/kwallet
384blacklist ${HOME}/.kde4/share/apps/kwallet 384deny ${HOME}/.kde4/share/apps/kwallet
385blacklist ${HOME}/.local/share/keyrings 385deny ${HOME}/.local/share/keyrings
386blacklist ${HOME}/.local/share/kwalletd 386deny ${HOME}/.local/share/kwalletd
387blacklist ${HOME}/.local/share/plasma-vault 387deny ${HOME}/.local/share/plasma-vault
388blacklist ${HOME}/.msmtprc 388deny ${HOME}/.msmtprc
389blacklist ${HOME}/.mutt 389deny ${HOME}/.mutt
390blacklist ${HOME}/.muttrc 390deny ${HOME}/.muttrc
391blacklist ${HOME}/.netrc 391deny ${HOME}/.netrc
392blacklist ${HOME}/.nyx 392deny ${HOME}/.nyx
393blacklist ${HOME}/.pki 393deny ${HOME}/.pki
394blacklist ${HOME}/.local/share/pki 394deny ${HOME}/.local/share/pki
395blacklist ${HOME}/.smbcredentials 395deny ${HOME}/.smbcredentials
396blacklist ${HOME}/.ssh 396deny ${HOME}/.ssh
397blacklist ${HOME}/.vaults 397deny ${HOME}/.vaults
398blacklist /.fscrypt 398deny /.fscrypt
399blacklist /etc/davfs2/secrets 399deny /etc/davfs2/secrets
400blacklist /etc/group+ 400deny /etc/group+
401blacklist /etc/group- 401deny /etc/group-
402blacklist /etc/gshadow 402deny /etc/gshadow
403blacklist /etc/gshadow+ 403deny /etc/gshadow+
404blacklist /etc/gshadow- 404deny /etc/gshadow-
405blacklist /etc/passwd+ 405deny /etc/passwd+
406blacklist /etc/passwd- 406deny /etc/passwd-
407blacklist /etc/shadow 407deny /etc/shadow
408blacklist /etc/shadow+ 408deny /etc/shadow+
409blacklist /etc/shadow- 409deny /etc/shadow-
410blacklist /etc/ssh 410deny /etc/ssh
411blacklist /etc/ssh/* 411deny /etc/ssh/*
412blacklist /home/.ecryptfs 412deny /home/.ecryptfs
413blacklist /home/.fscrypt 413deny /home/.fscrypt
414blacklist /var/backup 414deny /var/backup
415 415
416# cloud provider configuration 416# cloud provider configuration
417blacklist ${HOME}/.aws 417deny ${HOME}/.aws
418blacklist ${HOME}/.boto 418deny ${HOME}/.boto
419blacklist ${HOME}/.config/gcloud 419deny ${HOME}/.config/gcloud
420blacklist ${HOME}/.kube 420deny ${HOME}/.kube
421blacklist ${HOME}/.passwd-s3fs 421deny ${HOME}/.passwd-s3fs
422blacklist ${HOME}/.s3cmd 422deny ${HOME}/.s3cmd
423blacklist /etc/boto.cfg 423deny /etc/boto.cfg
424 424
425# system directories 425# system directories
426blacklist /sbin 426deny /sbin
427blacklist /usr/local/sbin 427deny /usr/local/sbin
428blacklist /usr/sbin 428deny /usr/sbin
429 429
430# system management 430# system management
431blacklist ${PATH}/at 431deny ${PATH}/at
432blacklist ${PATH}/busybox 432deny ${PATH}/busybox
433blacklist ${PATH}/chage 433deny ${PATH}/chage
434blacklist ${PATH}/chfn 434deny ${PATH}/chfn
435blacklist ${PATH}/chsh 435deny ${PATH}/chsh
436blacklist ${PATH}/crontab 436deny ${PATH}/crontab
437blacklist ${PATH}/evtest 437deny ${PATH}/evtest
438blacklist ${PATH}/expiry 438deny ${PATH}/expiry
439blacklist ${PATH}/fusermount 439deny ${PATH}/fusermount
440blacklist ${PATH}/gksu 440deny ${PATH}/gksu
441blacklist ${PATH}/gksudo 441deny ${PATH}/gksudo
442blacklist ${PATH}/gpasswd 442deny ${PATH}/gpasswd
443blacklist ${PATH}/kdesudo 443deny ${PATH}/kdesudo
444blacklist ${PATH}/ksu 444deny ${PATH}/ksu
445blacklist ${PATH}/mount 445deny ${PATH}/mount
446blacklist ${PATH}/mount.ecryptfs_private 446deny ${PATH}/mount.ecryptfs_private
447blacklist ${PATH}/nc 447deny ${PATH}/nc
448blacklist ${PATH}/ncat 448deny ${PATH}/ncat
449blacklist ${PATH}/nmap 449deny ${PATH}/nmap
450blacklist ${PATH}/newgidmap 450deny ${PATH}/newgidmap
451blacklist ${PATH}/newgrp 451deny ${PATH}/newgrp
452blacklist ${PATH}/newuidmap 452deny ${PATH}/newuidmap
453blacklist ${PATH}/ntfs-3g 453deny ${PATH}/ntfs-3g
454blacklist ${PATH}/pkexec 454deny ${PATH}/pkexec
455blacklist ${PATH}/procmail 455deny ${PATH}/procmail
456blacklist ${PATH}/sg 456deny ${PATH}/sg
457blacklist ${PATH}/strace 457deny ${PATH}/strace
458blacklist ${PATH}/su 458deny ${PATH}/su
459blacklist ${PATH}/sudo 459deny ${PATH}/sudo
460blacklist ${PATH}/tcpdump 460deny ${PATH}/tcpdump
461blacklist ${PATH}/umount 461deny ${PATH}/umount
462blacklist ${PATH}/unix_chkpwd 462deny ${PATH}/unix_chkpwd
463blacklist ${PATH}/xev 463deny ${PATH}/xev
464blacklist ${PATH}/xinput 464deny ${PATH}/xinput
465 465
466# other SUID binaries 466# other SUID binaries
467blacklist /usr/lib/virtualbox 467deny /usr/lib/virtualbox
468blacklist /usr/lib64/virtualbox 468deny /usr/lib64/virtualbox
469 469
470# prevent lxterminal connecting to an existing lxterminal session 470# prevent lxterminal connecting to an existing lxterminal session
471blacklist /tmp/.lxterminal-socket* 471deny /tmp/.lxterminal-socket*
472# prevent tmux connecting to an existing session 472# prevent tmux connecting to an existing session
473blacklist /tmp/tmux-* 473deny /tmp/tmux-*
474 474
475# disable terminals running as server resulting in sandbox escape 475# disable terminals running as server resulting in sandbox escape
476blacklist ${PATH}/lxterminal 476deny ${PATH}/lxterminal
477blacklist ${PATH}/gnome-terminal 477deny ${PATH}/gnome-terminal
478blacklist ${PATH}/gnome-terminal.wrapper 478deny ${PATH}/gnome-terminal.wrapper
479blacklist ${PATH}/lilyterm 479deny ${PATH}/lilyterm
480blacklist ${PATH}/mate-terminal 480deny ${PATH}/mate-terminal
481blacklist ${PATH}/mate-terminal.wrapper 481deny ${PATH}/mate-terminal.wrapper
482blacklist ${PATH}/pantheon-terminal 482deny ${PATH}/pantheon-terminal
483blacklist ${PATH}/roxterm 483deny ${PATH}/roxterm
484blacklist ${PATH}/roxterm-config 484deny ${PATH}/roxterm-config
485blacklist ${PATH}/terminix 485deny ${PATH}/terminix
486blacklist ${PATH}/tilix 486deny ${PATH}/tilix
487blacklist ${PATH}/urxvtc 487deny ${PATH}/urxvtc
488blacklist ${PATH}/urxvtcd 488deny ${PATH}/urxvtcd
489blacklist ${PATH}/xfce4-terminal 489deny ${PATH}/xfce4-terminal
490blacklist ${PATH}/xfce4-terminal.wrapper 490deny ${PATH}/xfce4-terminal.wrapper
491# blacklist ${PATH}/konsole 491# blacklist ${PATH}/konsole
492# konsole doesn't seem to have this problem - last tested on Ubuntu 16.04 492# konsole doesn't seem to have this problem - last tested on Ubuntu 16.04
493 493
494# kernel files 494# kernel files
495blacklist /initrd* 495deny /initrd*
496blacklist /vmlinuz* 496deny /vmlinuz*
497 497
498# snapshot files 498# snapshot files
499blacklist /.snapshots 499deny /.snapshots
500 500
501# flatpak 501# flatpak
502blacklist ${HOME}/.cache/flatpak 502deny ${HOME}/.cache/flatpak
503blacklist ${HOME}/.config/flatpak 503deny ${HOME}/.config/flatpak
504noblacklist ${HOME}/.local/share/flatpak/exports 504nodeny ${HOME}/.local/share/flatpak/exports
505read-only ${HOME}/.local/share/flatpak/exports 505read-only ${HOME}/.local/share/flatpak/exports
506blacklist ${HOME}/.local/share/flatpak/* 506deny ${HOME}/.local/share/flatpak/*
507blacklist ${HOME}/.var 507deny ${HOME}/.var
508blacklist ${RUNUSER}/app 508deny ${RUNUSER}/app
509blacklist ${RUNUSER}/doc 509deny ${RUNUSER}/doc
510blacklist ${RUNUSER}/.dbus-proxy 510deny ${RUNUSER}/.dbus-proxy
511blacklist ${RUNUSER}/.flatpak 511deny ${RUNUSER}/.flatpak
512blacklist ${RUNUSER}/.flatpak-cache 512deny ${RUNUSER}/.flatpak-cache
513blacklist ${RUNUSER}/.flatpak-helper 513deny ${RUNUSER}/.flatpak-helper
514blacklist /usr/share/flatpak 514deny /usr/share/flatpak
515noblacklist /var/lib/flatpak/exports 515nodeny /var/lib/flatpak/exports
516blacklist /var/lib/flatpak/* 516deny /var/lib/flatpak/*
517# most of the time bwrap is SUID binary 517# most of the time bwrap is SUID binary
518blacklist ${PATH}/bwrap 518deny ${PATH}/bwrap
519 519
520# snap 520# snap
521blacklist ${RUNUSER}/snapd-session-agent.socket 521deny ${RUNUSER}/snapd-session-agent.socket
522 522
523# mail directories used by mutt 523# mail directories used by mutt
524blacklist ${HOME}/.Mail 524deny ${HOME}/.Mail
525blacklist ${HOME}/.mail 525deny ${HOME}/.mail
526blacklist ${HOME}/.signature 526deny ${HOME}/.signature
527blacklist ${HOME}/Mail 527deny ${HOME}/Mail
528blacklist ${HOME}/mail 528deny ${HOME}/mail
529blacklist ${HOME}/postponed 529deny ${HOME}/postponed
530blacklist ${HOME}/sent 530deny ${HOME}/sent
531 531
532# kernel configuration 532# kernel configuration
533blacklist /proc/config.gz 533deny /proc/config.gz
534 534
535# prevent DNS malware attempting to communicate with the server 535# prevent DNS malware attempting to communicate with the server
536# using regular DNS tools 536# using regular DNS tools
537blacklist ${PATH}/dig 537deny ${PATH}/dig
538blacklist ${PATH}/dlint 538deny ${PATH}/dlint
539blacklist ${PATH}/dns2tcp 539deny ${PATH}/dns2tcp
540blacklist ${PATH}/dnssec-* 540deny ${PATH}/dnssec-*
541blacklist ${PATH}/dnswalk 541deny ${PATH}/dnswalk
542blacklist ${PATH}/drill 542deny ${PATH}/drill
543blacklist ${PATH}/host 543deny ${PATH}/host
544blacklist ${PATH}/iodine 544deny ${PATH}/iodine
545blacklist ${PATH}/kdig 545deny ${PATH}/kdig
546blacklist ${PATH}/khost 546deny ${PATH}/khost
547blacklist ${PATH}/knsupdate 547deny ${PATH}/knsupdate
548blacklist ${PATH}/ldns-* 548deny ${PATH}/ldns-*
549blacklist ${PATH}/ldnsd 549deny ${PATH}/ldnsd
550blacklist ${PATH}/nslookup 550deny ${PATH}/nslookup
551blacklist ${PATH}/resolvectl 551deny ${PATH}/resolvectl
552blacklist ${PATH}/unbound-host 552deny ${PATH}/unbound-host
553 553
554# rest of ${RUNUSER} 554# rest of ${RUNUSER}
555blacklist ${RUNUSER}/*.lock 555deny ${RUNUSER}/*.lock
556blacklist ${RUNUSER}/inaccessible 556deny ${RUNUSER}/inaccessible
557blacklist ${RUNUSER}/pk-debconf-socket 557deny ${RUNUSER}/pk-debconf-socket
558blacklist ${RUNUSER}/update-notifier.pid 558deny ${RUNUSER}/update-notifier.pid
diff --git a/etc/inc/disable-devel.inc b/etc/inc/disable-devel.inc
index e74b1b40b..a893eb3f3 100644
--- a/etc/inc/disable-devel.inc
+++ b/etc/inc/disable-devel.inc
@@ -5,65 +5,65 @@ include disable-devel.local
5# development tools 5# development tools
6 6
7# clang/llvm 7# clang/llvm
8blacklist ${PATH}/clang* 8deny ${PATH}/clang*
9blacklist ${PATH}/lldb* 9deny ${PATH}/lldb*
10blacklist ${PATH}/llvm* 10deny ${PATH}/llvm*
11# see issue #2106 - it disables hardware acceleration in Firefox on Radeon GPU 11# see issue #2106 - it disables hardware acceleration in Firefox on Radeon GPU
12# blacklist /usr/lib/llvm* 12# blacklist /usr/lib/llvm*
13 13
14# GCC 14# GCC
15blacklist ${PATH}/as 15deny ${PATH}/as
16blacklist ${PATH}/cc 16deny ${PATH}/cc
17blacklist ${PATH}/c++* 17deny ${PATH}/c++*
18blacklist ${PATH}/c8* 18deny ${PATH}/c8*
19blacklist ${PATH}/c9* 19deny ${PATH}/c9*
20blacklist ${PATH}/cpp* 20deny ${PATH}/cpp*
21blacklist ${PATH}/g++* 21deny ${PATH}/g++*
22blacklist ${PATH}/gcc* 22deny ${PATH}/gcc*
23blacklist ${PATH}/gdb 23deny ${PATH}/gdb
24blacklist ${PATH}/ld 24deny ${PATH}/ld
25blacklist ${PATH}/*-gcc* 25deny ${PATH}/*-gcc*
26blacklist ${PATH}/*-g++* 26deny ${PATH}/*-g++*
27blacklist ${PATH}/*-gcc* 27deny ${PATH}/*-gcc*
28blacklist ${PATH}/*-g++* 28deny ${PATH}/*-g++*
29# seems to create problems on Gentoo 29# seems to create problems on Gentoo
30#blacklist /usr/lib/gcc 30#blacklist /usr/lib/gcc
31 31
32#Go 32#Go
33blacklist ${PATH}/gccgo 33deny ${PATH}/gccgo
34blacklist ${PATH}/go 34deny ${PATH}/go
35blacklist ${PATH}/gofmt 35deny ${PATH}/gofmt
36 36
37# Java 37# Java
38blacklist ${PATH}/java 38deny ${PATH}/java
39blacklist ${PATH}/javac 39deny ${PATH}/javac
40blacklist /etc/java 40deny /etc/java
41blacklist /usr/lib/java 41deny /usr/lib/java
42blacklist /usr/share/java 42deny /usr/share/java
43 43
44#OpenSSL 44#OpenSSL
45blacklist ${PATH}/openssl 45deny ${PATH}/openssl
46blacklist ${PATH}/openssl-1.0 46deny ${PATH}/openssl-1.0
47 47
48#Rust 48#Rust
49blacklist ${PATH}/rust-gdb 49deny ${PATH}/rust-gdb
50blacklist ${PATH}/rust-lldb 50deny ${PATH}/rust-lldb
51blacklist ${PATH}/rustc 51deny ${PATH}/rustc
52blacklist ${HOME}/.rustup 52deny ${HOME}/.rustup
53 53
54# tcc - Tiny C Compiler 54# tcc - Tiny C Compiler
55blacklist ${PATH}/tcc 55deny ${PATH}/tcc
56blacklist ${PATH}/x86_64-tcc 56deny ${PATH}/x86_64-tcc
57blacklist /usr/lib/tcc 57deny /usr/lib/tcc
58 58
59# Valgrind 59# Valgrind
60blacklist ${PATH}/valgrind* 60deny ${PATH}/valgrind*
61blacklist /usr/lib/valgrind 61deny /usr/lib/valgrind
62 62
63 63
64# Source-Code 64# Source-Code
65 65
66blacklist /usr/src 66deny /usr/src
67blacklist /usr/local/src 67deny /usr/local/src
68blacklist /usr/include 68deny /usr/include
69blacklist /usr/local/include 69deny /usr/local/include
diff --git a/etc/inc/disable-interpreters.inc b/etc/inc/disable-interpreters.inc
index 5d8a236fb..c77d9a490 100644
--- a/etc/inc/disable-interpreters.inc
+++ b/etc/inc/disable-interpreters.inc
@@ -3,66 +3,66 @@
3include disable-interpreters.local 3include disable-interpreters.local
4 4
5# gjs 5# gjs
6blacklist ${PATH}/gjs 6deny ${PATH}/gjs
7blacklist ${PATH}/gjs-console 7deny ${PATH}/gjs-console
8blacklist /usr/lib/gjs 8deny /usr/lib/gjs
9blacklist /usr/lib/libgjs* 9deny /usr/lib/libgjs*
10blacklist /usr/lib64/gjs 10deny /usr/lib64/gjs
11blacklist /usr/lib64/libgjs* 11deny /usr/lib64/libgjs*
12 12
13# Lua 13# Lua
14blacklist ${PATH}/lua* 14deny ${PATH}/lua*
15blacklist /usr/include/lua* 15deny /usr/include/lua*
16blacklist /usr/lib/liblua* 16deny /usr/lib/liblua*
17blacklist /usr/lib/lua 17deny /usr/lib/lua
18blacklist /usr/lib64/liblua* 18deny /usr/lib64/liblua*
19blacklist /usr/lib64/lua 19deny /usr/lib64/lua
20blacklist /usr/share/lua* 20deny /usr/share/lua*
21 21
22# mozjs 22# mozjs
23blacklist /usr/lib/libmozjs-* 23deny /usr/lib/libmozjs-*
24blacklist /usr/lib64/libmozjs-* 24deny /usr/lib64/libmozjs-*
25 25
26# Node.js 26# Node.js
27blacklist ${PATH}/node 27deny ${PATH}/node
28blacklist /usr/include/node 28deny /usr/include/node
29 29
30# nvm 30# nvm
31blacklist ${HOME}/.nvm 31deny ${HOME}/.nvm
32 32
33# Perl 33# Perl
34blacklist ${PATH}/core_perl 34deny ${PATH}/core_perl
35blacklist ${PATH}/cpan* 35deny ${PATH}/cpan*
36blacklist ${PATH}/perl 36deny ${PATH}/perl
37blacklist ${PATH}/site_perl 37deny ${PATH}/site_perl
38blacklist ${PATH}/vendor_perl 38deny ${PATH}/vendor_perl
39blacklist /usr/lib/perl* 39deny /usr/lib/perl*
40blacklist /usr/lib64/perl* 40deny /usr/lib64/perl*
41blacklist /usr/share/perl* 41deny /usr/share/perl*
42 42
43# PHP 43# PHP
44blacklist ${PATH}/php* 44deny ${PATH}/php*
45blacklist /usr/lib/php* 45deny /usr/lib/php*
46blacklist /usr/share/php* 46deny /usr/share/php*
47 47
48# Ruby 48# Ruby
49blacklist ${PATH}/ruby 49deny ${PATH}/ruby
50blacklist /usr/lib/ruby 50deny /usr/lib/ruby
51 51
52# Programs using python: deluge, firefox addons, filezilla, cherrytree, xchat, hexchat, libreoffice, scribus 52# Programs using python: deluge, firefox addons, filezilla, cherrytree, xchat, hexchat, libreoffice, scribus
53# Python 2 53# Python 2
54blacklist ${PATH}/python2* 54deny ${PATH}/python2*
55blacklist /usr/include/python2* 55deny /usr/include/python2*
56blacklist /usr/lib/python2* 56deny /usr/lib/python2*
57blacklist /usr/local/lib/python2* 57deny /usr/local/lib/python2*
58blacklist /usr/share/python2* 58deny /usr/share/python2*
59 59
60# You will want to add noblacklist for python3 stuff in the firefox and/or chromium profiles if you use the Gnome connector (see Issue #2026) 60# You will want to add noblacklist for python3 stuff in the firefox and/or chromium profiles if you use the Gnome connector (see Issue #2026)
61 61
62# Python 3 62# Python 3
63blacklist ${PATH}/python3* 63deny ${PATH}/python3*
64blacklist /usr/include/python3* 64deny /usr/include/python3*
65blacklist /usr/lib/python3* 65deny /usr/lib/python3*
66blacklist /usr/lib64/python3* 66deny /usr/lib64/python3*
67blacklist /usr/local/lib/python3* 67deny /usr/local/lib/python3*
68blacklist /usr/share/python3* 68deny /usr/share/python3*
diff --git a/etc/inc/disable-passwdmgr.inc b/etc/inc/disable-passwdmgr.inc
index 3ed9a1b14..0a61bc46f 100644
--- a/etc/inc/disable-passwdmgr.inc
+++ b/etc/inc/disable-passwdmgr.inc
@@ -2,18 +2,18 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include disable-passwdmgr.local 3include disable-passwdmgr.local
4 4
5blacklist ${HOME}/.config/Bitwarden 5deny ${HOME}/.config/Bitwarden
6blacklist ${HOME}/.config/KeePass 6deny ${HOME}/.config/KeePass
7blacklist ${HOME}/.config/keepass 7deny ${HOME}/.config/keepass
8blacklist ${HOME}/.config/keepassx 8deny ${HOME}/.config/keepassx
9blacklist ${HOME}/.config/keepassxc 9deny ${HOME}/.config/keepassxc
10blacklist ${HOME}/.config/KeePassXCrc 10deny ${HOME}/.config/KeePassXCrc
11blacklist ${HOME}/.config/Sinew Software Systems 11deny ${HOME}/.config/Sinew Software Systems
12blacklist ${HOME}/.fpm 12deny ${HOME}/.fpm
13blacklist ${HOME}/.keepass 13deny ${HOME}/.keepass
14blacklist ${HOME}/.keepassx 14deny ${HOME}/.keepassx
15blacklist ${HOME}/.keepassxc 15deny ${HOME}/.keepassxc
16blacklist ${HOME}/.lastpass 16deny ${HOME}/.lastpass
17blacklist ${HOME}/.local/share/KeePass 17deny ${HOME}/.local/share/KeePass
18blacklist ${HOME}/.local/share/keepass 18deny ${HOME}/.local/share/keepass
19blacklist ${HOME}/.password-store 19deny ${HOME}/.password-store
diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc
index 0e575e5eb..8a32bc685 100644
--- a/etc/inc/disable-programs.inc
+++ b/etc/inc/disable-programs.inc
@@ -2,1094 +2,1094 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include disable-programs.local 3include disable-programs.local
4 4
5blacklist ${HOME}/Arduino 5deny ${HOME}/Arduino
6blacklist ${HOME}/i2p 6deny ${HOME}/i2p
7blacklist ${HOME}/Monero/wallets 7deny ${HOME}/Monero/wallets
8blacklist ${HOME}/Nextcloud 8deny ${HOME}/Nextcloud
9blacklist ${HOME}/Nextcloud/Notes 9deny ${HOME}/Nextcloud/Notes
10blacklist ${HOME}/SoftMaker 10deny ${HOME}/SoftMaker
11blacklist ${HOME}/Standard Notes Backups 11deny ${HOME}/Standard Notes Backups
12blacklist ${HOME}/TeamSpeak3-Client-linux_x86 12deny ${HOME}/TeamSpeak3-Client-linux_x86
13blacklist ${HOME}/TeamSpeak3-Client-linux_amd64 13deny ${HOME}/TeamSpeak3-Client-linux_amd64
14blacklist ${HOME}/hyperrogue.ini 14deny ${HOME}/hyperrogue.ini
15blacklist ${HOME}/mps 15deny ${HOME}/mps
16blacklist ${HOME}/wallet.dat 16deny ${HOME}/wallet.dat
17blacklist ${HOME}/.*coin 17deny ${HOME}/.*coin
18blacklist ${HOME}/.8pecxstudios 18deny ${HOME}/.8pecxstudios
19blacklist ${HOME}/.AndroidStudio* 19deny ${HOME}/.AndroidStudio*
20blacklist ${HOME}/.Atom 20deny ${HOME}/.Atom
21blacklist ${HOME}/.CLion* 21deny ${HOME}/.CLion*
22blacklist ${HOME}/.FBReader 22deny ${HOME}/.FBReader
23blacklist ${HOME}/.FontForge 23deny ${HOME}/.FontForge
24blacklist ${HOME}/.IdeaIC* 24deny ${HOME}/.IdeaIC*
25blacklist ${HOME}/.LuminanceHDR 25deny ${HOME}/.LuminanceHDR
26blacklist ${HOME}/.Mathematica 26deny ${HOME}/.Mathematica
27blacklist ${HOME}/.Natron 27deny ${HOME}/.Natron
28blacklist ${HOME}/.PlayOnLinux 28deny ${HOME}/.PlayOnLinux
29blacklist ${HOME}/.PyCharm* 29deny ${HOME}/.PyCharm*
30blacklist ${HOME}/.Sayonara 30deny ${HOME}/.Sayonara
31blacklist ${HOME}/.Steam 31deny ${HOME}/.Steam
32blacklist ${HOME}/.Steampath 32deny ${HOME}/.Steampath
33blacklist ${HOME}/.Steampid 33deny ${HOME}/.Steampid
34blacklist ${HOME}/.TelegramDesktop 34deny ${HOME}/.TelegramDesktop
35blacklist ${HOME}/.VSCodium 35deny ${HOME}/.VSCodium
36blacklist ${HOME}/.ViberPC 36deny ${HOME}/.ViberPC
37blacklist ${HOME}/.VirtualBox 37deny ${HOME}/.VirtualBox
38blacklist ${HOME}/.WebStorm* 38deny ${HOME}/.WebStorm*
39blacklist ${HOME}/.Wolfram Research 39deny ${HOME}/.Wolfram Research
40blacklist ${HOME}/.ZAP 40deny ${HOME}/.ZAP
41blacklist ${HOME}/.abook 41deny ${HOME}/.abook
42blacklist ${HOME}/.addressbook 42deny ${HOME}/.addressbook
43blacklist ${HOME}/.alpine-smime 43deny ${HOME}/.alpine-smime
44blacklist ${HOME}/.aMule 44deny ${HOME}/.aMule
45blacklist ${HOME}/.android 45deny ${HOME}/.android
46blacklist ${HOME}/.anydesk 46deny ${HOME}/.anydesk
47blacklist ${HOME}/.arduino15 47deny ${HOME}/.arduino15
48blacklist ${HOME}/.aria2 48deny ${HOME}/.aria2
49blacklist ${HOME}/.arm 49deny ${HOME}/.arm
50blacklist ${HOME}/.asunder_album_artist 50deny ${HOME}/.asunder_album_artist
51blacklist ${HOME}/.asunder_album_genre 51deny ${HOME}/.asunder_album_genre
52blacklist ${HOME}/.asunder_album_title 52deny ${HOME}/.asunder_album_title
53blacklist ${HOME}/.atom 53deny ${HOME}/.atom
54blacklist ${HOME}/.attic 54deny ${HOME}/.attic
55blacklist ${HOME}/.audacity-data 55deny ${HOME}/.audacity-data
56blacklist ${HOME}/.avidemux6 56deny ${HOME}/.avidemux6
57blacklist ${HOME}/.ballbuster.hs 57deny ${HOME}/.ballbuster.hs
58blacklist ${HOME}/.balsa 58deny ${HOME}/.balsa
59blacklist ${HOME}/.bcast5 59deny ${HOME}/.bcast5
60blacklist ${HOME}/.bibletime 60deny ${HOME}/.bibletime
61blacklist ${HOME}/.bitcoin 61deny ${HOME}/.bitcoin
62blacklist ${HOME}/.blobby 62deny ${HOME}/.blobby
63blacklist ${HOME}/.bogofilter 63deny ${HOME}/.bogofilter
64blacklist ${HOME}/.bzf 64deny ${HOME}/.bzf
65blacklist ${HOME}/.cargo/* 65deny ${HOME}/.cargo/*
66blacklist ${HOME}/.claws-mail 66deny ${HOME}/.claws-mail
67blacklist ${HOME}/.cliqz 67deny ${HOME}/.cliqz
68blacklist ${HOME}/.clonk 68deny ${HOME}/.clonk
69blacklist ${HOME}/.config/0ad 69deny ${HOME}/.config/0ad
70blacklist ${HOME}/.config/2048-qt 70deny ${HOME}/.config/2048-qt
71blacklist ${HOME}/.config/Atom 71deny ${HOME}/.config/Atom
72blacklist ${HOME}/.config/Audaciousrc 72deny ${HOME}/.config/Audaciousrc
73blacklist ${HOME}/.config/Authenticator 73deny ${HOME}/.config/Authenticator
74blacklist ${HOME}/.config/Beaker Browser 74deny ${HOME}/.config/Beaker Browser
75blacklist ${HOME}/.config/Bitcoin 75deny ${HOME}/.config/Bitcoin
76blacklist ${HOME}/.config/Bitwarden 76deny ${HOME}/.config/Bitwarden
77blacklist ${HOME}/.config/Brackets 77deny ${HOME}/.config/Brackets
78blacklist ${HOME}/.config/BraveSoftware 78deny ${HOME}/.config/BraveSoftware
79blacklist ${HOME}/.config/Clementine 79deny ${HOME}/.config/Clementine
80blacklist ${HOME}/.config/Code 80deny ${HOME}/.config/Code
81blacklist ${HOME}/.config/Code - OSS 81deny ${HOME}/.config/Code - OSS
82blacklist ${HOME}/.config/Code Industry 82deny ${HOME}/.config/Code Industry
83blacklist ${HOME}/.config/Cryptocat 83deny ${HOME}/.config/Cryptocat
84blacklist ${HOME}/.config/Debauchee/Barrier.conf 84deny ${HOME}/.config/Debauchee/Barrier.conf
85blacklist ${HOME}/.config/Dharkael 85deny ${HOME}/.config/Dharkael
86blacklist ${HOME}/.config/Element 86deny ${HOME}/.config/Element
87blacklist ${HOME}/.config/Element (Riot) 87deny ${HOME}/.config/Element (Riot)
88blacklist ${HOME}/.config/ENCOM 88deny ${HOME}/.config/ENCOM
89blacklist ${HOME}/.config/Enox 89deny ${HOME}/.config/Enox
90blacklist ${HOME}/.config/Epic 90deny ${HOME}/.config/Epic
91blacklist ${HOME}/.config/Ferdi 91deny ${HOME}/.config/Ferdi
92blacklist ${HOME}/.config/Flavio Tordini 92deny ${HOME}/.config/Flavio Tordini
93blacklist ${HOME}/.config/Franz 93deny ${HOME}/.config/Franz
94blacklist ${HOME}/.config/FreeCAD 94deny ${HOME}/.config/FreeCAD
95blacklist ${HOME}/.config/FreeTube 95deny ${HOME}/.config/FreeTube
96blacklist ${HOME}/.config/Fritzing 96deny ${HOME}/.config/Fritzing
97blacklist ${HOME}/.config/GIMP 97deny ${HOME}/.config/GIMP
98blacklist ${HOME}/.config/GitHub Desktop 98deny ${HOME}/.config/GitHub Desktop
99blacklist ${HOME}/.config/Gitter 99deny ${HOME}/.config/Gitter
100blacklist ${HOME}/.config/Google 100deny ${HOME}/.config/Google
101blacklist ${HOME}/.config/Google Play Music Desktop Player 101deny ${HOME}/.config/Google Play Music Desktop Player
102blacklist ${HOME}/.config/Gpredict 102deny ${HOME}/.config/Gpredict
103blacklist ${HOME}/.config/INRIA 103deny ${HOME}/.config/INRIA
104blacklist ${HOME}/.config/InSilmaril 104deny ${HOME}/.config/InSilmaril
105blacklist ${HOME}/.config/Jitsi Meet 105deny ${HOME}/.config/Jitsi Meet
106blacklist ${HOME}/.config/KDE/neochat 106deny ${HOME}/.config/KDE/neochat
107blacklist ${HOME}/.config/Kid3 107deny ${HOME}/.config/Kid3
108blacklist ${HOME}/.config/Kingsoft 108deny ${HOME}/.config/Kingsoft
109blacklist ${HOME}/.config/LibreCAD 109deny ${HOME}/.config/LibreCAD
110blacklist ${HOME}/.config/Loop_Hero 110deny ${HOME}/.config/Loop_Hero
111blacklist ${HOME}/.config/Luminance 111deny ${HOME}/.config/Luminance
112blacklist ${HOME}/.config/LyX 112deny ${HOME}/.config/LyX
113blacklist ${HOME}/.config/Mattermost 113deny ${HOME}/.config/Mattermost
114blacklist ${HOME}/.config/Meltytech 114deny ${HOME}/.config/Meltytech
115blacklist ${HOME}/.config/Mendeley Ltd. 115deny ${HOME}/.config/Mendeley Ltd.
116blacklist ${HOME}/.config/Min 116deny ${HOME}/.config/Min
117blacklist ${HOME}/.config/ModTheSpire 117deny ${HOME}/.config/ModTheSpire
118blacklist ${HOME}/.config/Mousepad 118deny ${HOME}/.config/Mousepad
119blacklist ${HOME}/.config/Mumble 119deny ${HOME}/.config/Mumble
120blacklist ${HOME}/.config/MusE 120deny ${HOME}/.config/MusE
121blacklist ${HOME}/.config/MuseScore 121deny ${HOME}/.config/MuseScore
122blacklist ${HOME}/.config/MusicBrainz 122deny ${HOME}/.config/MusicBrainz
123blacklist ${HOME}/.config/Nathan Osman 123deny ${HOME}/.config/Nathan Osman
124blacklist ${HOME}/.config/Nextcloud 124deny ${HOME}/.config/Nextcloud
125blacklist ${HOME}/.config/Nylas Mail 125deny ${HOME}/.config/Nylas Mail
126blacklist ${HOME}/.config/PacmanLogViewer 126deny ${HOME}/.config/PacmanLogViewer
127blacklist ${HOME}/.config/PawelStolowski 127deny ${HOME}/.config/PawelStolowski
128blacklist ${HOME}/.config/PBE 128deny ${HOME}/.config/PBE
129blacklist ${HOME}/.config/Philipp Schmieder 129deny ${HOME}/.config/Philipp Schmieder
130blacklist ${HOME}/.config/QGIS 130deny ${HOME}/.config/QGIS
131blacklist ${HOME}/.config/QMediathekView 131deny ${HOME}/.config/QMediathekView
132blacklist ${HOME}/.config/Qlipper 132deny ${HOME}/.config/Qlipper
133blacklist ${HOME}/.config/QuiteRss 133deny ${HOME}/.config/QuiteRss
134blacklist ${HOME}/.config/QuiteRssrc 134deny ${HOME}/.config/QuiteRssrc
135blacklist ${HOME}/.config/Quotient 135deny ${HOME}/.config/Quotient
136blacklist ${HOME}/.config/Rambox 136deny ${HOME}/.config/Rambox
137blacklist ${HOME}/.config/Riot 137deny ${HOME}/.config/Riot
138blacklist ${HOME}/.config/Rocket.Chat 138deny ${HOME}/.config/Rocket.Chat
139blacklist ${HOME}/.config/RogueLegacy 139deny ${HOME}/.config/RogueLegacy
140blacklist ${HOME}/.config/RogueLegacyStorageContainer 140deny ${HOME}/.config/RogueLegacyStorageContainer
141blacklist ${HOME}/.config/Signal 141deny ${HOME}/.config/Signal
142blacklist ${HOME}/.config/Sinew Software Systems 142deny ${HOME}/.config/Sinew Software Systems
143blacklist ${HOME}/.config/Slack 143deny ${HOME}/.config/Slack
144blacklist ${HOME}/.config/Standard Notes 144deny ${HOME}/.config/Standard Notes
145blacklist ${HOME}/.config/SubDownloader 145deny ${HOME}/.config/SubDownloader
146blacklist ${HOME}/.config/Thunar 146deny ${HOME}/.config/Thunar
147blacklist ${HOME}/.config/Twitch 147deny ${HOME}/.config/Twitch
148blacklist ${HOME}/.config/Unknown Organization 148deny ${HOME}/.config/Unknown Organization
149blacklist ${HOME}/.config/VirtualBox 149deny ${HOME}/.config/VirtualBox
150blacklist ${HOME}/.config/Wire 150deny ${HOME}/.config/Wire
151blacklist ${HOME}/.config/Youtube 151deny ${HOME}/.config/Youtube
152blacklist ${HOME}/.config/Zeal 152deny ${HOME}/.config/Zeal
153blacklist ${HOME}/.config/ZeGrapher Project 153deny ${HOME}/.config/ZeGrapher Project
154blacklist ${HOME}/.config/aacs 154deny ${HOME}/.config/aacs
155blacklist ${HOME}/.config/abiword 155deny ${HOME}/.config/abiword
156blacklist ${HOME}/.config/agenda 156deny ${HOME}/.config/agenda
157blacklist ${HOME}/.config/akonadi* 157deny ${HOME}/.config/akonadi*
158blacklist ${HOME}/.config/akregatorrc 158deny ${HOME}/.config/akregatorrc
159blacklist ${HOME}/.config/alacritty 159deny ${HOME}/.config/alacritty
160blacklist ${HOME}/.config/ardour4 160deny ${HOME}/.config/ardour4
161blacklist ${HOME}/.config/ardour5 161deny ${HOME}/.config/ardour5
162blacklist ${HOME}/.config/aria2 162deny ${HOME}/.config/aria2
163blacklist ${HOME}/.config/arkrc 163deny ${HOME}/.config/arkrc
164blacklist ${HOME}/.config/artha.conf 164deny ${HOME}/.config/artha.conf
165blacklist ${HOME}/.config/artha.log 165deny ${HOME}/.config/artha.log
166blacklist ${HOME}/.config/asunder 166deny ${HOME}/.config/asunder
167blacklist ${HOME}/.config/atril 167deny ${HOME}/.config/atril
168blacklist ${HOME}/.config/audacious 168deny ${HOME}/.config/audacious
169blacklist ${HOME}/.config/autokey 169deny ${HOME}/.config/autokey
170blacklist ${HOME}/.config/avidemux3_qt5rc 170deny ${HOME}/.config/avidemux3_qt5rc
171blacklist ${HOME}/.config/aweather 171deny ${HOME}/.config/aweather
172blacklist ${HOME}/.config/backintime 172deny ${HOME}/.config/backintime
173blacklist ${HOME}/.config/baloofilerc 173deny ${HOME}/.config/baloofilerc
174blacklist ${HOME}/.config/baloorc 174deny ${HOME}/.config/baloorc
175blacklist ${HOME}/.config/bcompare 175deny ${HOME}/.config/bcompare
176blacklist ${HOME}/.config/blender 176deny ${HOME}/.config/blender
177blacklist ${HOME}/.config/bless 177deny ${HOME}/.config/bless
178blacklist ${HOME}/.config/bnox 178deny ${HOME}/.config/bnox
179blacklist ${HOME}/.config/borg 179deny ${HOME}/.config/borg
180blacklist ${HOME}/.config/brasero 180deny ${HOME}/.config/brasero
181blacklist ${HOME}/.config/brave 181deny ${HOME}/.config/brave
182blacklist ${HOME}/.config/brave-flags.conf 182deny ${HOME}/.config/brave-flags.conf
183blacklist ${HOME}/.config/caja 183deny ${HOME}/.config/caja
184blacklist ${HOME}/.config/calibre 184deny ${HOME}/.config/calibre
185blacklist ${HOME}/.config/cantata 185deny ${HOME}/.config/cantata
186blacklist ${HOME}/.config/catfish 186deny ${HOME}/.config/catfish
187blacklist ${HOME}/.config/cawbird 187deny ${HOME}/.config/cawbird
188blacklist ${HOME}/.config/celluloid 188deny ${HOME}/.config/celluloid
189blacklist ${HOME}/.config/cherrytree 189deny ${HOME}/.config/cherrytree
190blacklist ${HOME}/.config/chrome-beta-flags.conf 190deny ${HOME}/.config/chrome-beta-flags.conf
191blacklist ${HOME}/.config/chrome-beta-flags.config 191deny ${HOME}/.config/chrome-beta-flags.config
192blacklist ${HOME}/.config/chrome-flags.conf 192deny ${HOME}/.config/chrome-flags.conf
193blacklist ${HOME}/.config/chrome-flags.config 193deny ${HOME}/.config/chrome-flags.config
194blacklist ${HOME}/.config/chrome-unstable-flags.conf 194deny ${HOME}/.config/chrome-unstable-flags.conf
195blacklist ${HOME}/.config/chrome-unstable-flags.config 195deny ${HOME}/.config/chrome-unstable-flags.config
196blacklist ${HOME}/.config/chromium 196deny ${HOME}/.config/chromium
197blacklist ${HOME}/.config/chromium-dev 197deny ${HOME}/.config/chromium-dev
198blacklist ${HOME}/.config/chromium-flags.conf 198deny ${HOME}/.config/chromium-flags.conf
199blacklist ${HOME}/.config/clipit 199deny ${HOME}/.config/clipit
200blacklist ${HOME}/.config/cliqz 200deny ${HOME}/.config/cliqz
201blacklist ${HOME}/.config/cmus 201deny ${HOME}/.config/cmus
202blacklist ${HOME}/.config/com.github.bleakgrey.tootle 202deny ${HOME}/.config/com.github.bleakgrey.tootle
203blacklist ${HOME}/.config/corebird 203deny ${HOME}/.config/corebird
204blacklist ${HOME}/.config/cower 204deny ${HOME}/.config/cower
205blacklist ${HOME}/.config/coyim 205deny ${HOME}/.config/coyim
206blacklist ${HOME}/.config/darktable 206deny ${HOME}/.config/darktable
207blacklist ${HOME}/.config/deadbeef 207deny ${HOME}/.config/deadbeef
208blacklist ${HOME}/.config/deluge 208deny ${HOME}/.config/deluge
209blacklist ${HOME}/.config/devilspie2 209deny ${HOME}/.config/devilspie2
210blacklist ${HOME}/.config/digikam 210deny ${HOME}/.config/digikam
211blacklist ${HOME}/.config/digikamrc 211deny ${HOME}/.config/digikamrc
212blacklist ${HOME}/.config/discord 212deny ${HOME}/.config/discord
213blacklist ${HOME}/.config/discordcanary 213deny ${HOME}/.config/discordcanary
214blacklist ${HOME}/.config/dkl 214deny ${HOME}/.config/dkl
215blacklist ${HOME}/.config/dnox 215deny ${HOME}/.config/dnox
216blacklist ${HOME}/.config/dolphin-emu 216deny ${HOME}/.config/dolphin-emu
217blacklist ${HOME}/.config/dolphinrc 217deny ${HOME}/.config/dolphinrc
218blacklist ${HOME}/.config/dragonplayerrc 218deny ${HOME}/.config/dragonplayerrc
219blacklist ${HOME}/.config/draw.io 219deny ${HOME}/.config/draw.io
220blacklist ${HOME}/.config/d-feet 220deny ${HOME}/.config/d-feet
221blacklist ${HOME}/.config/electron-mail 221deny ${HOME}/.config/electron-mail
222blacklist ${HOME}/.config/emaildefaults 222deny ${HOME}/.config/emaildefaults
223blacklist ${HOME}/.config/emailidentities 223deny ${HOME}/.config/emailidentities
224blacklist ${HOME}/.config/emilia 224deny ${HOME}/.config/emilia
225blacklist ${HOME}/.config/enchant 225deny ${HOME}/.config/enchant
226blacklist ${HOME}/.config/eog 226deny ${HOME}/.config/eog
227blacklist ${HOME}/.config/epiphany 227deny ${HOME}/.config/epiphany
228blacklist ${HOME}/.config/equalx 228deny ${HOME}/.config/equalx
229blacklist ${HOME}/.config/evince 229deny ${HOME}/.config/evince
230blacklist ${HOME}/.config/evolution 230deny ${HOME}/.config/evolution
231blacklist ${HOME}/.config/falkon 231deny ${HOME}/.config/falkon
232blacklist ${HOME}/.config/filezilla 232deny ${HOME}/.config/filezilla
233blacklist ${HOME}/.config/flameshot 233deny ${HOME}/.config/flameshot
234blacklist ${HOME}/.config/flaska.net 234deny ${HOME}/.config/flaska.net
235blacklist ${HOME}/.config/flowblade 235deny ${HOME}/.config/flowblade
236blacklist ${HOME}/.config/font-manager 236deny ${HOME}/.config/font-manager
237blacklist ${HOME}/.config/freecol 237deny ${HOME}/.config/freecol
238blacklist ${HOME}/.config/gajim 238deny ${HOME}/.config/gajim
239blacklist ${HOME}/.config/galculator 239deny ${HOME}/.config/galculator
240blacklist ${HOME}/.config/gconf 240deny ${HOME}/.config/gconf
241blacklist ${HOME}/.config/geany 241deny ${HOME}/.config/geany
242blacklist ${HOME}/.config/geary 242deny ${HOME}/.config/geary
243blacklist ${HOME}/.config/gedit 243deny ${HOME}/.config/gedit
244blacklist ${HOME}/.config/geeqie 244deny ${HOME}/.config/geeqie
245blacklist ${HOME}/.config/ghb 245deny ${HOME}/.config/ghb
246blacklist ${HOME}/.config/ghostwriter 246deny ${HOME}/.config/ghostwriter
247blacklist ${HOME}/.config/git 247deny ${HOME}/.config/git
248blacklist ${HOME}/.config/git-cola 248deny ${HOME}/.config/git-cola
249blacklist ${HOME}/.config/glade.conf 249deny ${HOME}/.config/glade.conf
250blacklist ${HOME}/.config/globaltime 250deny ${HOME}/.config/globaltime
251blacklist ${HOME}/.config/gmpc 251deny ${HOME}/.config/gmpc
252blacklist ${HOME}/.config/gnome-builder 252deny ${HOME}/.config/gnome-builder
253blacklist ${HOME}/.config/gnome-chess 253deny ${HOME}/.config/gnome-chess
254blacklist ${HOME}/.config/gnome-control-center 254deny ${HOME}/.config/gnome-control-center
255blacklist ${HOME}/.config/gnome-initial-setup-done 255deny ${HOME}/.config/gnome-initial-setup-done
256blacklist ${HOME}/.config/gnome-latex 256deny ${HOME}/.config/gnome-latex
257blacklist ${HOME}/.config/gnome-mplayer 257deny ${HOME}/.config/gnome-mplayer
258blacklist ${HOME}/.config/gnome-mpv 258deny ${HOME}/.config/gnome-mpv
259blacklist ${HOME}/.config/gnome-pie 259deny ${HOME}/.config/gnome-pie
260blacklist ${HOME}/.config/gnome-session 260deny ${HOME}/.config/gnome-session
261blacklist ${HOME}/.config/gnote 261deny ${HOME}/.config/gnote
262blacklist ${HOME}/.config/godot 262deny ${HOME}/.config/godot
263blacklist ${HOME}/.config/google-chrome 263deny ${HOME}/.config/google-chrome
264blacklist ${HOME}/.config/google-chrome-beta 264deny ${HOME}/.config/google-chrome-beta
265blacklist ${HOME}/.config/google-chrome-unstable 265deny ${HOME}/.config/google-chrome-unstable
266blacklist ${HOME}/.config/gpicview 266deny ${HOME}/.config/gpicview
267blacklist ${HOME}/.config/gthumb 267deny ${HOME}/.config/gthumb
268blacklist ${HOME}/.config/gummi 268deny ${HOME}/.config/gummi
269blacklist ${HOME}/.config/guvcview2 269deny ${HOME}/.config/guvcview2
270blacklist ${HOME}/.config/gwenviewrc 270deny ${HOME}/.config/gwenviewrc
271blacklist ${HOME}/.config/hexchat 271deny ${HOME}/.config/hexchat
272blacklist ${HOME}/.config/homebank 272deny ${HOME}/.config/homebank
273blacklist ${HOME}/.config/i2p 273deny ${HOME}/.config/i2p
274blacklist ${HOME}/.config/inkscape 274deny ${HOME}/.config/inkscape
275blacklist ${HOME}/.config/inox 275deny ${HOME}/.config/inox
276blacklist ${HOME}/.config/iridium 276deny ${HOME}/.config/iridium
277blacklist ${HOME}/.config/itch 277deny ${HOME}/.config/itch
278blacklist ${HOME}/.config/jami 278deny ${HOME}/.config/jami
279blacklist ${HOME}/.config/jd-gui.cfg 279deny ${HOME}/.config/jd-gui.cfg
280blacklist ${HOME}/.config/k3brc 280deny ${HOME}/.config/k3brc
281blacklist ${HOME}/.config/kaffeinerc 281deny ${HOME}/.config/kaffeinerc
282blacklist ${HOME}/.config/kalgebrarc 282deny ${HOME}/.config/kalgebrarc
283blacklist ${HOME}/.config/katemetainfos 283deny ${HOME}/.config/katemetainfos
284blacklist ${HOME}/.config/katepartrc 284deny ${HOME}/.config/katepartrc
285blacklist ${HOME}/.config/katerc 285deny ${HOME}/.config/katerc
286blacklist ${HOME}/.config/kateschemarc 286deny ${HOME}/.config/kateschemarc
287blacklist ${HOME}/.config/katesyntaxhighlightingrc 287deny ${HOME}/.config/katesyntaxhighlightingrc
288blacklist ${HOME}/.config/katevirc 288deny ${HOME}/.config/katevirc
289blacklist ${HOME}/.config/kazam 289deny ${HOME}/.config/kazam
290blacklist ${HOME}/.config/kdeconnect 290deny ${HOME}/.config/kdeconnect
291blacklist ${HOME}/.config/kdenliverc 291deny ${HOME}/.config/kdenliverc
292blacklist ${HOME}/.config/kdiff3fileitemactionrc 292deny ${HOME}/.config/kdiff3fileitemactionrc
293blacklist ${HOME}/.config/kdiff3rc 293deny ${HOME}/.config/kdiff3rc
294blacklist ${HOME}/.config/kfindrc 294deny ${HOME}/.config/kfindrc
295blacklist ${HOME}/.config/kgetrc 295deny ${HOME}/.config/kgetrc
296blacklist ${HOME}/.config/kid3rc 296deny ${HOME}/.config/kid3rc
297blacklist ${HOME}/.config/klavaro 297deny ${HOME}/.config/klavaro
298blacklist ${HOME}/.config/klipperrc 298deny ${HOME}/.config/klipperrc
299blacklist ${HOME}/.config/kmail2rc 299deny ${HOME}/.config/kmail2rc
300blacklist ${HOME}/.config/kmailsearchindexingrc 300deny ${HOME}/.config/kmailsearchindexingrc
301blacklist ${HOME}/.config/kmplayerrc 301deny ${HOME}/.config/kmplayerrc
302blacklist ${HOME}/.config/knotesrc 302deny ${HOME}/.config/knotesrc
303blacklist ${HOME}/.config/konversationrc 303deny ${HOME}/.config/konversationrc
304blacklist ${HOME}/.config/konversation.notifyrc 304deny ${HOME}/.config/konversation.notifyrc
305blacklist ${HOME}/.config/kritarc 305deny ${HOME}/.config/kritarc
306blacklist ${HOME}/.config/ktorrentrc 306deny ${HOME}/.config/ktorrentrc
307blacklist ${HOME}/.config/ktouch2rc 307deny ${HOME}/.config/ktouch2rc
308blacklist ${HOME}/.config/kube 308deny ${HOME}/.config/kube
309blacklist ${HOME}/.config/kwriterc 309deny ${HOME}/.config/kwriterc
310blacklist ${HOME}/.config/leafpad 310deny ${HOME}/.config/leafpad
311blacklist ${HOME}/.config/libreoffice 311deny ${HOME}/.config/libreoffice
312blacklist ${HOME}/.config/liferea 312deny ${HOME}/.config/liferea
313blacklist ${HOME}/.config/linphone 313deny ${HOME}/.config/linphone
314blacklist ${HOME}/.config/lugaru 314deny ${HOME}/.config/lugaru
315blacklist ${HOME}/.config/lutris 315deny ${HOME}/.config/lutris
316blacklist ${HOME}/.config/lximage-qt 316deny ${HOME}/.config/lximage-qt
317blacklist ${HOME}/.config/mailtransports 317deny ${HOME}/.config/mailtransports
318blacklist ${HOME}/.config/mana 318deny ${HOME}/.config/mana
319blacklist ${HOME}/.config/mate-calc 319deny ${HOME}/.config/mate-calc
320blacklist ${HOME}/.config/mate/eom 320deny ${HOME}/.config/mate/eom
321blacklist ${HOME}/.config/mate/mate-dictionary 321deny ${HOME}/.config/mate/mate-dictionary
322blacklist ${HOME}/.config/matrix-mirage 322deny ${HOME}/.config/matrix-mirage
323blacklist ${HOME}/.config/mcomix 323deny ${HOME}/.config/mcomix
324blacklist ${HOME}/.config/meld 324deny ${HOME}/.config/meld
325blacklist ${HOME}/.config/meteo-qt 325deny ${HOME}/.config/meteo-qt
326blacklist ${HOME}/.config/menulibre.cfg 326deny ${HOME}/.config/menulibre.cfg
327blacklist ${HOME}/.config/mfusion 327deny ${HOME}/.config/mfusion
328blacklist ${HOME}/.config/Microsoft 328deny ${HOME}/.config/Microsoft
329blacklist ${HOME}/.config/microsoft-edge-dev 329deny ${HOME}/.config/microsoft-edge-dev
330blacklist ${HOME}/.config/midori 330deny ${HOME}/.config/midori
331blacklist ${HOME}/.config/mirage 331deny ${HOME}/.config/mirage
332blacklist ${HOME}/.config/mono 332deny ${HOME}/.config/mono
333blacklist ${HOME}/.config/mpDris2 333deny ${HOME}/.config/mpDris2
334blacklist ${HOME}/.config/mpd 334deny ${HOME}/.config/mpd
335blacklist ${HOME}/.config/mps-youtube 335deny ${HOME}/.config/mps-youtube
336blacklist ${HOME}/.config/mpv 336deny ${HOME}/.config/mpv
337blacklist ${HOME}/.config/mupen64plus 337deny ${HOME}/.config/mupen64plus
338blacklist ${HOME}/.config/mutt 338deny ${HOME}/.config/mutt
339blacklist ${HOME}/.config/mutter 339deny ${HOME}/.config/mutter
340blacklist ${HOME}/.config/mypaint 340deny ${HOME}/.config/mypaint
341blacklist ${HOME}/.config/nano 341deny ${HOME}/.config/nano
342blacklist ${HOME}/.config/nautilus 342deny ${HOME}/.config/nautilus
343blacklist ${HOME}/.config/nemo 343deny ${HOME}/.config/nemo
344blacklist ${HOME}/.config/neochatrc 344deny ${HOME}/.config/neochatrc
345blacklist ${HOME}/.config/neochat.notifyrc 345deny ${HOME}/.config/neochat.notifyrc
346blacklist ${HOME}/.config/neomutt 346deny ${HOME}/.config/neomutt
347blacklist ${HOME}/.config/netsurf 347deny ${HOME}/.config/netsurf
348blacklist ${HOME}/.config/newsbeuter 348deny ${HOME}/.config/newsbeuter
349blacklist ${HOME}/.config/newsboat 349deny ${HOME}/.config/newsboat
350blacklist ${HOME}/.config/newsflash 350deny ${HOME}/.config/newsflash
351blacklist ${HOME}/.config/nheko 351deny ${HOME}/.config/nheko
352blacklist ${HOME}/.config/NitroShare 352deny ${HOME}/.config/NitroShare
353blacklist ${HOME}/.config/nomacs 353deny ${HOME}/.config/nomacs
354blacklist ${HOME}/.config/nuclear 354deny ${HOME}/.config/nuclear
355blacklist ${HOME}/.config/obs-studio 355deny ${HOME}/.config/obs-studio
356blacklist ${HOME}/.config/okularpartrc 356deny ${HOME}/.config/okularpartrc
357blacklist ${HOME}/.config/okularrc 357deny ${HOME}/.config/okularrc
358blacklist ${HOME}/.config/onboard 358deny ${HOME}/.config/onboard
359blacklist ${HOME}/.config/onionshare 359deny ${HOME}/.config/onionshare
360blacklist ${HOME}/.config/onlyoffice 360deny ${HOME}/.config/onlyoffice
361blacklist ${HOME}/.config/openmw 361deny ${HOME}/.config/openmw
362blacklist ${HOME}/.config/opera 362deny ${HOME}/.config/opera
363blacklist ${HOME}/.config/opera-beta 363deny ${HOME}/.config/opera-beta
364blacklist ${HOME}/.config/orage 364deny ${HOME}/.config/orage
365blacklist ${HOME}/.config/org.gabmus.gfeeds.json 365deny ${HOME}/.config/org.gabmus.gfeeds.json
366blacklist ${HOME}/.config/org.gabmus.gfeeds.saved_articles 366deny ${HOME}/.config/org.gabmus.gfeeds.saved_articles
367blacklist ${HOME}/.config/org.kde.gwenviewrc 367deny ${HOME}/.config/org.kde.gwenviewrc
368blacklist ${HOME}/.config/otter 368deny ${HOME}/.config/otter
369blacklist ${HOME}/.config/pavucontrol-qt 369deny ${HOME}/.config/pavucontrol-qt
370blacklist ${HOME}/.config/pavucontrol.ini 370deny ${HOME}/.config/pavucontrol.ini
371blacklist ${HOME}/.config/pcmanfm 371deny ${HOME}/.config/pcmanfm
372blacklist ${HOME}/.config/pdfmod 372deny ${HOME}/.config/pdfmod
373blacklist ${HOME}/.config/Pinta 373deny ${HOME}/.config/Pinta
374blacklist ${HOME}/.config/pipe-viewer 374deny ${HOME}/.config/pipe-viewer
375blacklist ${HOME}/.config/pitivi 375deny ${HOME}/.config/pitivi
376blacklist ${HOME}/.config/pix 376deny ${HOME}/.config/pix
377blacklist ${HOME}/.config/pluma 377deny ${HOME}/.config/pluma
378blacklist ${HOME}/.config/ppsspp 378deny ${HOME}/.config/ppsspp
379blacklist ${HOME}/.config/pragha 379deny ${HOME}/.config/pragha
380blacklist ${HOME}/.config/profanity 380deny ${HOME}/.config/profanity
381blacklist ${HOME}/.config/psi 381deny ${HOME}/.config/psi
382blacklist ${HOME}/.config/psi+ 382deny ${HOME}/.config/psi+
383blacklist ${HOME}/.config/qBittorrent 383deny ${HOME}/.config/qBittorrent
384blacklist ${HOME}/.config/qBittorrentrc 384deny ${HOME}/.config/qBittorrentrc
385blacklist ${HOME}/.config/qnapi.ini 385deny ${HOME}/.config/qnapi.ini
386blacklist ${HOME}/.config/qpdfview 386deny ${HOME}/.config/qpdfview
387blacklist ${HOME}/.config/quodlibet 387deny ${HOME}/.config/quodlibet
388blacklist ${HOME}/.config/qupzilla 388deny ${HOME}/.config/qupzilla
389blacklist ${HOME}/.config/qutebrowser 389deny ${HOME}/.config/qutebrowser
390blacklist ${HOME}/.config/ranger 390deny ${HOME}/.config/ranger
391blacklist ${HOME}/.config/redshift 391deny ${HOME}/.config/redshift
392blacklist ${HOME}/.config/redshift.conf 392deny ${HOME}/.config/redshift.conf
393blacklist ${HOME}/.config/remmina 393deny ${HOME}/.config/remmina
394blacklist ${HOME}/.config/ristretto 394deny ${HOME}/.config/ristretto
395blacklist ${HOME}/.config/rtv 395deny ${HOME}/.config/rtv
396blacklist ${HOME}/.config/scribus 396deny ${HOME}/.config/scribus
397blacklist ${HOME}/.config/scribusrc 397deny ${HOME}/.config/scribusrc
398blacklist ${HOME}/.config/sinew.in 398deny ${HOME}/.config/sinew.in
399blacklist ${HOME}/.config/sink 399deny ${HOME}/.config/sink
400blacklist ${HOME}/.config/skypeforlinux 400deny ${HOME}/.config/skypeforlinux
401blacklist ${HOME}/.config/slimjet 401deny ${HOME}/.config/slimjet
402blacklist ${HOME}/.config/smplayer 402deny ${HOME}/.config/smplayer
403blacklist ${HOME}/.config/smtube 403deny ${HOME}/.config/smtube
404blacklist ${HOME}/.config/smuxi 404deny ${HOME}/.config/smuxi
405blacklist ${HOME}/.config/snox 405deny ${HOME}/.config/snox
406blacklist ${HOME}/.config/sound-juicer 406deny ${HOME}/.config/sound-juicer
407blacklist ${HOME}/.config/specialmailcollectionsrc 407deny ${HOME}/.config/specialmailcollectionsrc
408blacklist ${HOME}/.config/spectaclerc 408deny ${HOME}/.config/spectaclerc
409blacklist ${HOME}/.config/spotify 409deny ${HOME}/.config/spotify
410blacklist ${HOME}/.config/sqlitebrowser 410deny ${HOME}/.config/sqlitebrowser
411blacklist ${HOME}/.config/stellarium 411deny ${HOME}/.config/stellarium
412blacklist ${HOME}/.config/strawberry 412deny ${HOME}/.config/strawberry
413blacklist ${HOME}/.config/straw-viewer 413deny ${HOME}/.config/straw-viewer
414blacklist ${HOME}/.config/supertuxkart 414deny ${HOME}/.config/supertuxkart
415blacklist ${HOME}/.config/synfig 415deny ${HOME}/.config/synfig
416blacklist ${HOME}/.config/teams 416deny ${HOME}/.config/teams
417blacklist ${HOME}/.config/teams-for-linux 417deny ${HOME}/.config/teams-for-linux
418blacklist ${HOME}/.config/telepathy-account-widgets 418deny ${HOME}/.config/telepathy-account-widgets
419blacklist ${HOME}/.config/torbrowser 419deny ${HOME}/.config/torbrowser
420blacklist ${HOME}/.config/totem 420deny ${HOME}/.config/totem
421blacklist ${HOME}/.config/tox 421deny ${HOME}/.config/tox
422blacklist ${HOME}/.config/transgui 422deny ${HOME}/.config/transgui
423blacklist ${HOME}/.config/transmission 423deny ${HOME}/.config/transmission
424blacklist ${HOME}/.config/truecraft 424deny ${HOME}/.config/truecraft
425blacklist ${HOME}/.config/tuta_integration 425deny ${HOME}/.config/tuta_integration
426blacklist ${HOME}/.config/tutanota-desktop 426deny ${HOME}/.config/tutanota-desktop
427blacklist ${HOME}/.config/tvbrowser 427deny ${HOME}/.config/tvbrowser
428blacklist ${HOME}/.config/uGet 428deny ${HOME}/.config/uGet
429blacklist ${HOME}/.config/ungoogled-chromium 429deny ${HOME}/.config/ungoogled-chromium
430blacklist ${HOME}/.config/uzbl 430deny ${HOME}/.config/uzbl
431blacklist ${HOME}/.config/viewnior 431deny ${HOME}/.config/viewnior
432blacklist ${HOME}/.config/vivaldi 432deny ${HOME}/.config/vivaldi
433blacklist ${HOME}/.config/vivaldi-snapshot 433deny ${HOME}/.config/vivaldi-snapshot
434blacklist ${HOME}/.config/vlc 434deny ${HOME}/.config/vlc
435blacklist ${HOME}/.config/wesnoth 435deny ${HOME}/.config/wesnoth
436blacklist ${HOME}/.config/wormux 436deny ${HOME}/.config/wormux
437blacklist ${HOME}/.config/Whalebird 437deny ${HOME}/.config/Whalebird
438blacklist ${HOME}/.config/wireshark 438deny ${HOME}/.config/wireshark
439blacklist ${HOME}/.config/xchat 439deny ${HOME}/.config/xchat
440blacklist ${HOME}/.config/xed 440deny ${HOME}/.config/xed
441blacklist ${HOME}/.config/xfburn 441deny ${HOME}/.config/xfburn
442blacklist ${HOME}/.config/xfce4/xfce4-notes.gtkrc 442deny ${HOME}/.config/xfce4/xfce4-notes.gtkrc
443blacklist ${HOME}/.config/xfce4/xfce4-notes.rc 443deny ${HOME}/.config/xfce4/xfce4-notes.rc
444blacklist ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml 444deny ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml
445blacklist ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-mixer.xml 445deny ${HOME}/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-mixer.xml
446blacklist ${HOME}/.config/xfce4-dict 446deny ${HOME}/.config/xfce4-dict
447blacklist ${HOME}/.config/xiaoyong 447deny ${HOME}/.config/xiaoyong
448blacklist ${HOME}/.config/xmms2 448deny ${HOME}/.config/xmms2
449blacklist ${HOME}/.config/xplayer 449deny ${HOME}/.config/xplayer
450blacklist ${HOME}/.config/xreader 450deny ${HOME}/.config/xreader
451blacklist ${HOME}/.config/xviewer 451deny ${HOME}/.config/xviewer
452blacklist ${HOME}/.config/yandex-browser 452deny ${HOME}/.config/yandex-browser
453blacklist ${HOME}/.config/yandex-browser-beta 453deny ${HOME}/.config/yandex-browser-beta
454blacklist ${HOME}/.config/yelp 454deny ${HOME}/.config/yelp
455blacklist ${HOME}/.config/youtube-dl 455deny ${HOME}/.config/youtube-dl
456blacklist ${HOME}/.config/youtube-dlg 456deny ${HOME}/.config/youtube-dlg
457blacklist ${HOME}/.config/youtubemusic-nativefier-040164 457deny ${HOME}/.config/youtubemusic-nativefier-040164
458blacklist ${HOME}/.config/youtube-music-desktop-app 458deny ${HOME}/.config/youtube-music-desktop-app
459blacklist ${HOME}/.config/youtube-viewer 459deny ${HOME}/.config/youtube-viewer
460blacklist ${HOME}/.config/zathura 460deny ${HOME}/.config/zathura
461blacklist ${HOME}/.config/zoomus.conf 461deny ${HOME}/.config/zoomus.conf
462blacklist ${HOME}/.config/Zulip 462deny ${HOME}/.config/Zulip
463blacklist ${HOME}/.conkeror.mozdev.org 463deny ${HOME}/.conkeror.mozdev.org
464blacklist ${HOME}/.crawl 464deny ${HOME}/.crawl
465blacklist ${HOME}/.cups 465deny ${HOME}/.cups
466blacklist ${HOME}/.curl-hsts 466deny ${HOME}/.curl-hsts
467blacklist ${HOME}/.curlrc 467deny ${HOME}/.curlrc
468blacklist ${HOME}/.dashcore 468deny ${HOME}/.dashcore
469blacklist ${HOME}/.devilspie 469deny ${HOME}/.devilspie
470blacklist ${HOME}/.dia 470deny ${HOME}/.dia
471blacklist ${HOME}/.digrc 471deny ${HOME}/.digrc
472blacklist ${HOME}/.dillo 472deny ${HOME}/.dillo
473blacklist ${HOME}/.dooble 473deny ${HOME}/.dooble
474blacklist ${HOME}/.dosbox 474deny ${HOME}/.dosbox
475blacklist ${HOME}/.dropbox* 475deny ${HOME}/.dropbox*
476blacklist ${HOME}/.easystroke 476deny ${HOME}/.easystroke
477blacklist ${HOME}/.electron-cache 477deny ${HOME}/.electron-cache
478blacklist ${HOME}/.electrum* 478deny ${HOME}/.electrum*
479blacklist ${HOME}/.elinks 479deny ${HOME}/.elinks
480blacklist ${HOME}/.emacs 480deny ${HOME}/.emacs
481blacklist ${HOME}/.emacs.d 481deny ${HOME}/.emacs.d
482blacklist ${HOME}/.equalx 482deny ${HOME}/.equalx
483blacklist ${HOME}/.ethereum 483deny ${HOME}/.ethereum
484blacklist ${HOME}/.etr 484deny ${HOME}/.etr
485blacklist ${HOME}/.filezilla 485deny ${HOME}/.filezilla
486blacklist ${HOME}/.firedragon 486deny ${HOME}/.firedragon
487blacklist ${HOME}/.flowblade 487deny ${HOME}/.flowblade
488blacklist ${HOME}/.fltk 488deny ${HOME}/.fltk
489blacklist ${HOME}/.fossamail 489deny ${HOME}/.fossamail
490blacklist ${HOME}/.freeciv 490deny ${HOME}/.freeciv
491blacklist ${HOME}/.freecol 491deny ${HOME}/.freecol
492blacklist ${HOME}/.freemind 492deny ${HOME}/.freemind
493blacklist ${HOME}/.frogatto 493deny ${HOME}/.frogatto
494blacklist ${HOME}/.frozen-bubble 494deny ${HOME}/.frozen-bubble
495blacklist ${HOME}/.funnyboat 495deny ${HOME}/.funnyboat
496blacklist ${HOME}/.gimp* 496deny ${HOME}/.gimp*
497blacklist ${HOME}/.gist 497deny ${HOME}/.gist
498blacklist ${HOME}/.gitconfig 498deny ${HOME}/.gitconfig
499blacklist ${HOME}/.gl-117 499deny ${HOME}/.gl-117
500blacklist ${HOME}/.glaxiumrc 500deny ${HOME}/.glaxiumrc
501blacklist ${HOME}/.gnome/gnome-schedule 501deny ${HOME}/.gnome/gnome-schedule
502blacklist ${HOME}/.googleearth 502deny ${HOME}/.googleearth
503blacklist ${HOME}/.gradle 503deny ${HOME}/.gradle
504blacklist ${HOME}/.gramps 504deny ${HOME}/.gramps
505blacklist ${HOME}/.guayadeque 505deny ${HOME}/.guayadeque
506blacklist ${HOME}/.hashcat 506deny ${HOME}/.hashcat
507blacklist ${HOME}/.hex-a-hop 507deny ${HOME}/.hex-a-hop
508blacklist ${HOME}/.hedgewars 508deny ${HOME}/.hedgewars
509blacklist ${HOME}/.hugin 509deny ${HOME}/.hugin
510blacklist ${HOME}/.i2p 510deny ${HOME}/.i2p
511blacklist ${HOME}/.icedove 511deny ${HOME}/.icedove
512blacklist ${HOME}/.imagej 512deny ${HOME}/.imagej
513blacklist ${HOME}/.inkscape 513deny ${HOME}/.inkscape
514blacklist ${HOME}/.itch 514deny ${HOME}/.itch
515blacklist ${HOME}/.jack-server 515deny ${HOME}/.jack-server
516blacklist ${HOME}/.jack-settings 516deny ${HOME}/.jack-settings
517blacklist ${HOME}/.jak 517deny ${HOME}/.jak
518blacklist ${HOME}/.java 518deny ${HOME}/.java
519blacklist ${HOME}/.jd 519deny ${HOME}/.jd
520blacklist ${HOME}/.jitsi 520deny ${HOME}/.jitsi
521blacklist ${HOME}/.jumpnbump 521deny ${HOME}/.jumpnbump
522blacklist ${HOME}/.kde/share/apps/digikam 522deny ${HOME}/.kde/share/apps/digikam
523blacklist ${HOME}/.kde/share/apps/gwenview 523deny ${HOME}/.kde/share/apps/gwenview
524blacklist ${HOME}/.kde/share/apps/kaffeine 524deny ${HOME}/.kde/share/apps/kaffeine
525blacklist ${HOME}/.kde/share/apps/kcookiejar 525deny ${HOME}/.kde/share/apps/kcookiejar
526blacklist ${HOME}/.kde/share/apps/kget 526deny ${HOME}/.kde/share/apps/kget
527blacklist ${HOME}/.kde/share/apps/khtml 527deny ${HOME}/.kde/share/apps/khtml
528blacklist ${HOME}/.kde/share/apps/klatexformula 528deny ${HOME}/.kde/share/apps/klatexformula
529blacklist ${HOME}/.kde/share/apps/konqsidebartng 529deny ${HOME}/.kde/share/apps/konqsidebartng
530blacklist ${HOME}/.kde/share/apps/konqueror 530deny ${HOME}/.kde/share/apps/konqueror
531blacklist ${HOME}/.kde/share/apps/kopete 531deny ${HOME}/.kde/share/apps/kopete
532blacklist ${HOME}/.kde/share/apps/ktorrent 532deny ${HOME}/.kde/share/apps/ktorrent
533blacklist ${HOME}/.kde/share/apps/okular 533deny ${HOME}/.kde/share/apps/okular
534blacklist ${HOME}/.kde/share/config/baloofilerc 534deny ${HOME}/.kde/share/config/baloofilerc
535blacklist ${HOME}/.kde/share/config/baloorc 535deny ${HOME}/.kde/share/config/baloorc
536blacklist ${HOME}/.kde/share/config/digikam 536deny ${HOME}/.kde/share/config/digikam
537blacklist ${HOME}/.kde/share/config/gwenviewrc 537deny ${HOME}/.kde/share/config/gwenviewrc
538blacklist ${HOME}/.kde/share/config/k3brc 538deny ${HOME}/.kde/share/config/k3brc
539blacklist ${HOME}/.kde/share/config/kaffeinerc 539deny ${HOME}/.kde/share/config/kaffeinerc
540blacklist ${HOME}/.kde/share/config/kcookiejarrc 540deny ${HOME}/.kde/share/config/kcookiejarrc
541blacklist ${HOME}/.kde/share/config/kfindrc 541deny ${HOME}/.kde/share/config/kfindrc
542blacklist ${HOME}/.kde/share/config/kgetrc 542deny ${HOME}/.kde/share/config/kgetrc
543blacklist ${HOME}/.kde/share/config/khtmlrc 543deny ${HOME}/.kde/share/config/khtmlrc
544blacklist ${HOME}/.kde/share/config/klipperrc 544deny ${HOME}/.kde/share/config/klipperrc
545blacklist ${HOME}/.kde/share/config/kmplayerrc 545deny ${HOME}/.kde/share/config/kmplayerrc
546blacklist ${HOME}/.kde/share/config/konq_history 546deny ${HOME}/.kde/share/config/konq_history
547blacklist ${HOME}/.kde/share/config/konqsidebartngrc 547deny ${HOME}/.kde/share/config/konqsidebartngrc
548blacklist ${HOME}/.kde/share/config/konquerorrc 548deny ${HOME}/.kde/share/config/konquerorrc
549blacklist ${HOME}/.kde/share/config/konversationrc 549deny ${HOME}/.kde/share/config/konversationrc
550blacklist ${HOME}/.kde/share/config/kopeterc 550deny ${HOME}/.kde/share/config/kopeterc
551blacklist ${HOME}/.kde/share/config/ktorrentrc 551deny ${HOME}/.kde/share/config/ktorrentrc
552blacklist ${HOME}/.kde/share/config/okularpartrc 552deny ${HOME}/.kde/share/config/okularpartrc
553blacklist ${HOME}/.kde/share/config/okularrc 553deny ${HOME}/.kde/share/config/okularrc
554blacklist ${HOME}/.kde4/share/apps/digikam 554deny ${HOME}/.kde4/share/apps/digikam
555blacklist ${HOME}/.kde4/share/apps/gwenview 555deny ${HOME}/.kde4/share/apps/gwenview
556blacklist ${HOME}/.kde4/share/apps/kaffeine 556deny ${HOME}/.kde4/share/apps/kaffeine
557blacklist ${HOME}/.kde4/share/apps/kcookiejar 557deny ${HOME}/.kde4/share/apps/kcookiejar
558blacklist ${HOME}/.kde4/share/apps/kget 558deny ${HOME}/.kde4/share/apps/kget
559blacklist ${HOME}/.kde4/share/apps/khtml 559deny ${HOME}/.kde4/share/apps/khtml
560blacklist ${HOME}/.kde4/share/apps/konqsidebartng 560deny ${HOME}/.kde4/share/apps/konqsidebartng
561blacklist ${HOME}/.kde4/share/apps/konqueror 561deny ${HOME}/.kde4/share/apps/konqueror
562blacklist ${HOME}/.kde4/share/apps/kopete 562deny ${HOME}/.kde4/share/apps/kopete
563blacklist ${HOME}/.kde4/share/apps/ktorrent 563deny ${HOME}/.kde4/share/apps/ktorrent
564blacklist ${HOME}/.kde4/share/apps/okular 564deny ${HOME}/.kde4/share/apps/okular
565blacklist ${HOME}/.kde4/share/config/baloofilerc 565deny ${HOME}/.kde4/share/config/baloofilerc
566blacklist ${HOME}/.kde4/share/config/baloorc 566deny ${HOME}/.kde4/share/config/baloorc
567blacklist ${HOME}/.kde4/share/config/digikam 567deny ${HOME}/.kde4/share/config/digikam
568blacklist ${HOME}/.kde4/share/config/gwenviewrc 568deny ${HOME}/.kde4/share/config/gwenviewrc
569blacklist ${HOME}/.kde4/share/config/k3brc 569deny ${HOME}/.kde4/share/config/k3brc
570blacklist ${HOME}/.kde4/share/config/kaffeinerc 570deny ${HOME}/.kde4/share/config/kaffeinerc
571blacklist ${HOME}/.kde4/share/config/kcookiejarrc 571deny ${HOME}/.kde4/share/config/kcookiejarrc
572blacklist ${HOME}/.kde4/share/config/kfindrc 572deny ${HOME}/.kde4/share/config/kfindrc
573blacklist ${HOME}/.kde4/share/config/kgetrc 573deny ${HOME}/.kde4/share/config/kgetrc
574blacklist ${HOME}/.kde4/share/config/khtmlrc 574deny ${HOME}/.kde4/share/config/khtmlrc
575blacklist ${HOME}/.kde4/share/config/klipperrc 575deny ${HOME}/.kde4/share/config/klipperrc
576blacklist ${HOME}/.kde4/share/config/konq_history 576deny ${HOME}/.kde4/share/config/konq_history
577blacklist ${HOME}/.kde4/share/config/konqsidebartngrc 577deny ${HOME}/.kde4/share/config/konqsidebartngrc
578blacklist ${HOME}/.kde4/share/config/konquerorrc 578deny ${HOME}/.kde4/share/config/konquerorrc
579blacklist ${HOME}/.kde4/share/config/konversationrc 579deny ${HOME}/.kde4/share/config/konversationrc
580blacklist ${HOME}/.kde4/share/config/kopeterc 580deny ${HOME}/.kde4/share/config/kopeterc
581blacklist ${HOME}/.kde4/share/config/ktorrentrc 581deny ${HOME}/.kde4/share/config/ktorrentrc
582blacklist ${HOME}/.kde4/share/config/okularpartrc 582deny ${HOME}/.kde4/share/config/okularpartrc
583blacklist ${HOME}/.kde4/share/config/okularrc 583deny ${HOME}/.kde4/share/config/okularrc
584blacklist ${HOME}/.killingfloor 584deny ${HOME}/.killingfloor
585blacklist ${HOME}/.kingsoft 585deny ${HOME}/.kingsoft
586blacklist ${HOME}/.kino-history 586deny ${HOME}/.kino-history
587blacklist ${HOME}/.kinorc 587deny ${HOME}/.kinorc
588blacklist ${HOME}/.klatexformula 588deny ${HOME}/.klatexformula
589blacklist ${HOME}/.klei 589deny ${HOME}/.klei
590blacklist ${HOME}/.kodi 590deny ${HOME}/.kodi
591blacklist ${HOME}/.librewolf 591deny ${HOME}/.librewolf
592blacklist ${HOME}/.lincity-ng 592deny ${HOME}/.lincity-ng
593blacklist ${HOME}/.links 593deny ${HOME}/.links
594blacklist ${HOME}/.links2 594deny ${HOME}/.links2
595blacklist ${HOME}/.linphone-history.db 595deny ${HOME}/.linphone-history.db
596blacklist ${HOME}/.linphonerc 596deny ${HOME}/.linphonerc
597blacklist ${HOME}/.lmmsrc.xml 597deny ${HOME}/.lmmsrc.xml
598blacklist ${HOME}/.local/lib/vivaldi 598deny ${HOME}/.local/lib/vivaldi
599blacklist ${HOME}/.local/share/0ad 599deny ${HOME}/.local/share/0ad
600blacklist ${HOME}/.local/share/3909/PapersPlease 600deny ${HOME}/.local/share/3909/PapersPlease
601blacklist ${HOME}/.local/share/Anki2 601deny ${HOME}/.local/share/Anki2
602blacklist ${HOME}/.local/share/Dredmor 602deny ${HOME}/.local/share/Dredmor
603blacklist ${HOME}/.local/share/Empathy 603deny ${HOME}/.local/share/Empathy
604blacklist ${HOME}/.local/share/Enpass 604deny ${HOME}/.local/share/Enpass
605blacklist ${HOME}/.local/share/Flavio Tordini 605deny ${HOME}/.local/share/Flavio Tordini
606blacklist ${HOME}/.local/share/JetBrains 606deny ${HOME}/.local/share/JetBrains
607blacklist ${HOME}/.local/share/KDE/neochat 607deny ${HOME}/.local/share/KDE/neochat
608blacklist ${HOME}/.local/share/Kingsoft 608deny ${HOME}/.local/share/Kingsoft
609blacklist ${HOME}/.local/share/LibreCAD 609deny ${HOME}/.local/share/LibreCAD
610blacklist ${HOME}/.local/share/Mendeley Ltd. 610deny ${HOME}/.local/share/Mendeley Ltd.
611blacklist ${HOME}/.local/share/Mumble 611deny ${HOME}/.local/share/Mumble
612blacklist ${HOME}/.local/share/Nextcloud 612deny ${HOME}/.local/share/Nextcloud
613blacklist ${HOME}/.local/share/PBE 613deny ${HOME}/.local/share/PBE
614blacklist ${HOME}/.local/share/PawelStolowski 614deny ${HOME}/.local/share/PawelStolowski
615blacklist ${HOME}/.local/share/PillarsOfEternity 615deny ${HOME}/.local/share/PillarsOfEternity
616blacklist ${HOME}/.local/share/Psi 616deny ${HOME}/.local/share/Psi
617blacklist ${HOME}/.local/share/QGIS 617deny ${HOME}/.local/share/QGIS
618blacklist ${HOME}/.local/share/QMediathekView 618deny ${HOME}/.local/share/QMediathekView
619blacklist ${HOME}/.local/share/QuiteRss 619deny ${HOME}/.local/share/QuiteRss
620blacklist ${HOME}/.local/share/Ricochet 620deny ${HOME}/.local/share/Ricochet
621blacklist ${HOME}/.local/share/RogueLegacy 621deny ${HOME}/.local/share/RogueLegacy
622blacklist ${HOME}/.local/share/RogueLegacyStorageContainer 622deny ${HOME}/.local/share/RogueLegacyStorageContainer
623blacklist ${HOME}/.local/share/Shortwave 623deny ${HOME}/.local/share/Shortwave
624blacklist ${HOME}/.local/share/Steam 624deny ${HOME}/.local/share/Steam
625blacklist ${HOME}/.local/share/SteamWorldDig 625deny ${HOME}/.local/share/SteamWorldDig
626blacklist ${HOME}/.local/share/SteamWorld Dig 2 626deny ${HOME}/.local/share/SteamWorld Dig 2
627blacklist ${HOME}/.local/share/SuperHexagon 627deny ${HOME}/.local/share/SuperHexagon
628blacklist ${HOME}/.local/share/TelegramDesktop 628deny ${HOME}/.local/share/TelegramDesktop
629blacklist ${HOME}/.local/share/Terraria 629deny ${HOME}/.local/share/Terraria
630blacklist ${HOME}/.local/share/TpLogger 630deny ${HOME}/.local/share/TpLogger
631blacklist ${HOME}/.local/share/Zeal 631deny ${HOME}/.local/share/Zeal
632blacklist ${HOME}/.local/share/akonadi* 632deny ${HOME}/.local/share/akonadi*
633blacklist ${HOME}/.local/share/akregator 633deny ${HOME}/.local/share/akregator
634blacklist ${HOME}/.local/share/agenda 634deny ${HOME}/.local/share/agenda
635blacklist ${HOME}/.local/share/apps/korganizer 635deny ${HOME}/.local/share/apps/korganizer
636blacklist ${HOME}/.local/share/aspyr-media 636deny ${HOME}/.local/share/aspyr-media
637blacklist ${HOME}/.local/share/autokey 637deny ${HOME}/.local/share/autokey
638blacklist ${HOME}/.local/share/authenticator-rs 638deny ${HOME}/.local/share/authenticator-rs
639blacklist ${HOME}/.local/share/backintime 639deny ${HOME}/.local/share/backintime
640blacklist ${HOME}/.local/share/baloo 640deny ${HOME}/.local/share/baloo
641blacklist ${HOME}/.local/share/barrier 641deny ${HOME}/.local/share/barrier
642blacklist ${HOME}/.local/share/bibletime 642deny ${HOME}/.local/share/bibletime
643blacklist ${HOME}/.local/share/bijiben 643deny ${HOME}/.local/share/bijiben
644blacklist ${HOME}/.local/share/bohemiainteractive 644deny ${HOME}/.local/share/bohemiainteractive
645blacklist ${HOME}/.local/share/caja-python 645deny ${HOME}/.local/share/caja-python
646blacklist ${HOME}/.local/share/calligragemini 646deny ${HOME}/.local/share/calligragemini
647blacklist ${HOME}/.local/share/cantata 647deny ${HOME}/.local/share/cantata
648blacklist ${HOME}/.local/share/cdprojektred 648deny ${HOME}/.local/share/cdprojektred
649blacklist ${HOME}/.local/share/clipit 649deny ${HOME}/.local/share/clipit
650blacklist ${HOME}/.local/share/com.github.johnfactotum.Foliate 650deny ${HOME}/.local/share/com.github.johnfactotum.Foliate
651blacklist ${HOME}/.local/share/contacts 651deny ${HOME}/.local/share/contacts
652blacklist ${HOME}/.local/share/cor-games 652deny ${HOME}/.local/share/cor-games
653blacklist ${HOME}/.local/share/data/Mendeley Ltd. 653deny ${HOME}/.local/share/data/Mendeley Ltd.
654blacklist ${HOME}/.local/share/data/Mumble 654deny ${HOME}/.local/share/data/Mumble
655blacklist ${HOME}/.local/share/data/MusE 655deny ${HOME}/.local/share/data/MusE
656blacklist ${HOME}/.local/share/data/MuseScore 656deny ${HOME}/.local/share/data/MuseScore
657blacklist ${HOME}/.local/share/data/nomacs 657deny ${HOME}/.local/share/data/nomacs
658blacklist ${HOME}/.local/share/data/qBittorrent 658deny ${HOME}/.local/share/data/qBittorrent
659blacklist ${HOME}/.local/share/dino 659deny ${HOME}/.local/share/dino
660blacklist ${HOME}/.local/share/dolphin 660deny ${HOME}/.local/share/dolphin
661blacklist ${HOME}/.local/share/dolphin-emu 661deny ${HOME}/.local/share/dolphin-emu
662blacklist ${HOME}/.local/share/emailidentities 662deny ${HOME}/.local/share/emailidentities
663blacklist ${HOME}/.local/share/epiphany 663deny ${HOME}/.local/share/epiphany
664blacklist ${HOME}/.local/share/evolution 664deny ${HOME}/.local/share/evolution
665blacklist ${HOME}/.local/share/FasterThanLight 665deny ${HOME}/.local/share/FasterThanLight
666blacklist ${HOME}/.local/share/feedreader 666deny ${HOME}/.local/share/feedreader
667blacklist ${HOME}/.local/share/feral-interactive 667deny ${HOME}/.local/share/feral-interactive
668blacklist ${HOME}/.local/share/five-or-more 668deny ${HOME}/.local/share/five-or-more
669blacklist ${HOME}/.local/share/freecol 669deny ${HOME}/.local/share/freecol
670blacklist ${HOME}/.local/share/gajim 670deny ${HOME}/.local/share/gajim
671blacklist ${HOME}/.local/share/geary 671deny ${HOME}/.local/share/geary
672blacklist ${HOME}/.local/share/geeqie 672deny ${HOME}/.local/share/geeqie
673blacklist ${HOME}/.local/share/ghostwriter 673deny ${HOME}/.local/share/ghostwriter
674blacklist ${HOME}/.local/share/gitg 674deny ${HOME}/.local/share/gitg
675blacklist ${HOME}/.local/share/gnome-2048 675deny ${HOME}/.local/share/gnome-2048
676blacklist ${HOME}/.local/share/gnome-boxes 676deny ${HOME}/.local/share/gnome-boxes
677blacklist ${HOME}/.local/share/gnome-builder 677deny ${HOME}/.local/share/gnome-builder
678blacklist ${HOME}/.local/share/gnome-chess 678deny ${HOME}/.local/share/gnome-chess
679blacklist ${HOME}/.local/share/gnome-klotski 679deny ${HOME}/.local/share/gnome-klotski
680blacklist ${HOME}/.local/share/gnome-latex 680deny ${HOME}/.local/share/gnome-latex
681blacklist ${HOME}/.local/share/gnome-mines 681deny ${HOME}/.local/share/gnome-mines
682blacklist ${HOME}/.local/share/gnome-music 682deny ${HOME}/.local/share/gnome-music
683blacklist ${HOME}/.local/share/gnome-nibbles 683deny ${HOME}/.local/share/gnome-nibbles
684blacklist ${HOME}/.local/share/gnome-photos 684deny ${HOME}/.local/share/gnome-photos
685blacklist ${HOME}/.local/share/gnome-pomodoro 685deny ${HOME}/.local/share/gnome-pomodoro
686blacklist ${HOME}/.local/share/gnome-recipes 686deny ${HOME}/.local/share/gnome-recipes
687blacklist ${HOME}/.local/share/gnome-ring 687deny ${HOME}/.local/share/gnome-ring
688blacklist ${HOME}/.local/share/gnome-sudoku 688deny ${HOME}/.local/share/gnome-sudoku
689blacklist ${HOME}/.local/share/gnome-twitch 689deny ${HOME}/.local/share/gnome-twitch
690blacklist ${HOME}/.local/share/gnote 690deny ${HOME}/.local/share/gnote
691blacklist ${HOME}/.local/share/godot 691deny ${HOME}/.local/share/godot
692blacklist ${HOME}/.local/share/gradio 692deny ${HOME}/.local/share/gradio
693blacklist ${HOME}/.local/share/gwenview 693deny ${HOME}/.local/share/gwenview
694blacklist ${HOME}/.local/share/i2p 694deny ${HOME}/.local/share/i2p
695blacklist ${HOME}/.local/share/IntoTheBreach 695deny ${HOME}/.local/share/IntoTheBreach
696blacklist ${HOME}/.local/share/jami 696deny ${HOME}/.local/share/jami
697blacklist ${HOME}/.local/share/kaffeine 697deny ${HOME}/.local/share/kaffeine
698blacklist ${HOME}/.local/share/kalgebra 698deny ${HOME}/.local/share/kalgebra
699blacklist ${HOME}/.local/share/kate 699deny ${HOME}/.local/share/kate
700blacklist ${HOME}/.local/share/kdenlive 700deny ${HOME}/.local/share/kdenlive
701blacklist ${HOME}/.local/share/kget 701deny ${HOME}/.local/share/kget
702blacklist ${HOME}/.local/share/kiwix 702deny ${HOME}/.local/share/kiwix
703blacklist ${HOME}/.local/share/kiwix-desktop 703deny ${HOME}/.local/share/kiwix-desktop
704blacklist ${HOME}/.local/share/klavaro 704deny ${HOME}/.local/share/klavaro
705blacklist ${HOME}/.local/share/kmail2 705deny ${HOME}/.local/share/kmail2
706blacklist ${HOME}/.local/share/kmplayer 706deny ${HOME}/.local/share/kmplayer
707blacklist ${HOME}/.local/share/knotes 707deny ${HOME}/.local/share/knotes
708blacklist ${HOME}/.local/share/krita 708deny ${HOME}/.local/share/krita
709blacklist ${HOME}/.local/share/ktorrent 709deny ${HOME}/.local/share/ktorrent
710blacklist ${HOME}/.local/share/ktorrentrc 710deny ${HOME}/.local/share/ktorrentrc
711blacklist ${HOME}/.local/share/ktouch 711deny ${HOME}/.local/share/ktouch
712blacklist ${HOME}/.local/share/kube 712deny ${HOME}/.local/share/kube
713blacklist ${HOME}/.local/share/kwrite 713deny ${HOME}/.local/share/kwrite
714blacklist ${HOME}/.local/share/kxmlgui5/* 714deny ${HOME}/.local/share/kxmlgui5/*
715blacklist ${HOME}/.local/share/liferea 715deny ${HOME}/.local/share/liferea
716blacklist ${HOME}/.local/share/linphone 716deny ${HOME}/.local/share/linphone
717blacklist ${HOME}/.local/share/local-mail 717deny ${HOME}/.local/share/local-mail
718blacklist ${HOME}/.local/share/lollypop 718deny ${HOME}/.local/share/lollypop
719blacklist ${HOME}/.local/share/love 719deny ${HOME}/.local/share/love
720blacklist ${HOME}/.local/share/lugaru 720deny ${HOME}/.local/share/lugaru
721blacklist ${HOME}/.local/share/lutris 721deny ${HOME}/.local/share/lutris
722blacklist ${HOME}/.local/share/man 722deny ${HOME}/.local/share/man
723blacklist ${HOME}/.local/share/mana 723deny ${HOME}/.local/share/mana
724blacklist ${HOME}/.local/share/maps-places.json 724deny ${HOME}/.local/share/maps-places.json
725blacklist ${HOME}/.local/share/matrix-mirage 725deny ${HOME}/.local/share/matrix-mirage
726blacklist ${HOME}/.local/share/mcomix 726deny ${HOME}/.local/share/mcomix
727blacklist ${HOME}/.local/share/meld 727deny ${HOME}/.local/share/meld
728blacklist ${HOME}/.local/share/midori 728deny ${HOME}/.local/share/midori
729blacklist ${HOME}/.local/share/minder 729deny ${HOME}/.local/share/minder
730blacklist ${HOME}/.local/share/mirage 730deny ${HOME}/.local/share/mirage
731blacklist ${HOME}/.local/share/multimc 731deny ${HOME}/.local/share/multimc
732blacklist ${HOME}/.local/share/multimc5 732deny ${HOME}/.local/share/multimc5
733blacklist ${HOME}/.local/share/mupen64plus 733deny ${HOME}/.local/share/mupen64plus
734blacklist ${HOME}/.local/share/mypaint 734deny ${HOME}/.local/share/mypaint
735blacklist ${HOME}/.local/share/nautilus 735deny ${HOME}/.local/share/nautilus
736blacklist ${HOME}/.local/share/nautilus-python 736deny ${HOME}/.local/share/nautilus-python
737blacklist ${HOME}/.local/share/nemo 737deny ${HOME}/.local/share/nemo
738blacklist ${HOME}/.local/share/nemo-python 738deny ${HOME}/.local/share/nemo-python
739blacklist ${HOME}/.local/share/news-flash 739deny ${HOME}/.local/share/news-flash
740blacklist ${HOME}/.local/share/newsbeuter 740deny ${HOME}/.local/share/newsbeuter
741blacklist ${HOME}/.local/share/newsboat 741deny ${HOME}/.local/share/newsboat
742blacklist ${HOME}/.local/share/nheko 742deny ${HOME}/.local/share/nheko
743blacklist ${HOME}/.local/share/nomacs 743deny ${HOME}/.local/share/nomacs
744blacklist ${HOME}/.local/share/notes 744deny ${HOME}/.local/share/notes
745blacklist ${HOME}/.local/share/ocenaudio 745deny ${HOME}/.local/share/ocenaudio
746blacklist ${HOME}/.local/share/okular 746deny ${HOME}/.local/share/okular
747blacklist ${HOME}/.local/share/onlyoffice 747deny ${HOME}/.local/share/onlyoffice
748blacklist ${HOME}/.local/share/openmw 748deny ${HOME}/.local/share/openmw
749blacklist ${HOME}/.local/share/orage 749deny ${HOME}/.local/share/orage
750blacklist ${HOME}/.local/share/org.kde.gwenview 750deny ${HOME}/.local/share/org.kde.gwenview
751blacklist ${HOME}/.local/share/Paradox Interactive 751deny ${HOME}/.local/share/Paradox Interactive
752blacklist ${HOME}/.local/share/pix 752deny ${HOME}/.local/share/pix
753blacklist ${HOME}/.local/share/plasma_notes 753deny ${HOME}/.local/share/plasma_notes
754blacklist ${HOME}/.local/share/profanity 754deny ${HOME}/.local/share/profanity
755blacklist ${HOME}/.local/share/psi 755deny ${HOME}/.local/share/psi
756blacklist ${HOME}/.local/share/psi+ 756deny ${HOME}/.local/share/psi+
757blacklist ${HOME}/.local/share/quadrapassel 757deny ${HOME}/.local/share/quadrapassel
758blacklist ${HOME}/.local/share/qpdfview 758deny ${HOME}/.local/share/qpdfview
759blacklist ${HOME}/.local/share/qutebrowser 759deny ${HOME}/.local/share/qutebrowser
760blacklist ${HOME}/.local/share/remmina 760deny ${HOME}/.local/share/remmina
761blacklist ${HOME}/.local/share/rhythmbox 761deny ${HOME}/.local/share/rhythmbox
762blacklist ${HOME}/.local/share/rtv 762deny ${HOME}/.local/share/rtv
763blacklist ${HOME}/.local/share/scribus 763deny ${HOME}/.local/share/scribus
764blacklist ${HOME}/.local/share/shotwell 764deny ${HOME}/.local/share/shotwell
765blacklist ${HOME}/.local/share/signal-cli 765deny ${HOME}/.local/share/signal-cli
766blacklist ${HOME}/.local/share/sink 766deny ${HOME}/.local/share/sink
767blacklist ${HOME}/.local/share/smuxi 767deny ${HOME}/.local/share/smuxi
768blacklist ${HOME}/.local/share/spotify 768deny ${HOME}/.local/share/spotify
769blacklist ${HOME}/.local/share/steam 769deny ${HOME}/.local/share/steam
770blacklist ${HOME}/.local/share/strawberry 770deny ${HOME}/.local/share/strawberry
771blacklist ${HOME}/.local/share/supertux2 771deny ${HOME}/.local/share/supertux2
772blacklist ${HOME}/.local/share/supertuxkart 772deny ${HOME}/.local/share/supertuxkart
773blacklist ${HOME}/.local/share/swell-foop 773deny ${HOME}/.local/share/swell-foop
774blacklist ${HOME}/.local/share/telepathy 774deny ${HOME}/.local/share/telepathy
775blacklist ${HOME}/.local/share/terasology 775deny ${HOME}/.local/share/terasology
776blacklist ${HOME}/.local/share/torbrowser 776deny ${HOME}/.local/share/torbrowser
777blacklist ${HOME}/.local/share/totem 777deny ${HOME}/.local/share/totem
778blacklist ${HOME}/.local/share/uzbl 778deny ${HOME}/.local/share/uzbl
779blacklist ${HOME}/.local/share/vlc 779deny ${HOME}/.local/share/vlc
780blacklist ${HOME}/.local/share/vpltd 780deny ${HOME}/.local/share/vpltd
781blacklist ${HOME}/.local/share/vulkan 781deny ${HOME}/.local/share/vulkan
782blacklist ${HOME}/.local/share/warsow-2.1 782deny ${HOME}/.local/share/warsow-2.1
783blacklist ${HOME}/.local/share/wesnoth 783deny ${HOME}/.local/share/wesnoth
784blacklist ${HOME}/.local/share/wormux 784deny ${HOME}/.local/share/wormux
785blacklist ${HOME}/.local/share/xplayer 785deny ${HOME}/.local/share/xplayer
786blacklist ${HOME}/.local/share/xreader 786deny ${HOME}/.local/share/xreader
787blacklist ${HOME}/.local/share/zathura 787deny ${HOME}/.local/share/zathura
788blacklist ${HOME}/.lv2 788deny ${HOME}/.lv2
789blacklist ${HOME}/.lyx 789deny ${HOME}/.lyx
790blacklist ${HOME}/.magicor 790deny ${HOME}/.magicor
791blacklist ${HOME}/.masterpdfeditor 791deny ${HOME}/.masterpdfeditor
792blacklist ${HOME}/.mbwarband 792deny ${HOME}/.mbwarband
793blacklist ${HOME}/.mcabber 793deny ${HOME}/.mcabber
794blacklist ${HOME}/.mcabberrc 794deny ${HOME}/.mcabberrc
795blacklist ${HOME}/.mediathek3 795deny ${HOME}/.mediathek3
796blacklist ${HOME}/.megaglest 796deny ${HOME}/.megaglest
797blacklist ${HOME}/.minecraft 797deny ${HOME}/.minecraft
798blacklist ${HOME}/.minetest 798deny ${HOME}/.minetest
799blacklist ${HOME}/.mirrormagic 799deny ${HOME}/.mirrormagic
800blacklist ${HOME}/.moc 800deny ${HOME}/.moc
801blacklist ${HOME}/.moonchild productions/basilisk 801deny ${HOME}/.moonchild productions/basilisk
802blacklist ${HOME}/.moonchild productions/pale moon 802deny ${HOME}/.moonchild productions/pale moon
803blacklist ${HOME}/.mozilla 803deny ${HOME}/.mozilla
804blacklist ${HOME}/.mp3splt-gtk 804deny ${HOME}/.mp3splt-gtk
805blacklist ${HOME}/.mpd 805deny ${HOME}/.mpd
806blacklist ${HOME}/.mpdconf 806deny ${HOME}/.mpdconf
807blacklist ${HOME}/.mplayer 807deny ${HOME}/.mplayer
808blacklist ${HOME}/.msmtprc 808deny ${HOME}/.msmtprc
809blacklist ${HOME}/.multimc5 809deny ${HOME}/.multimc5
810blacklist ${HOME}/.nanorc 810deny ${HOME}/.nanorc
811blacklist ${HOME}/.netactview 811deny ${HOME}/.netactview
812blacklist ${HOME}/.neverball 812deny ${HOME}/.neverball
813blacklist ${HOME}/.newsbeuter 813deny ${HOME}/.newsbeuter
814blacklist ${HOME}/.newsboat 814deny ${HOME}/.newsboat
815blacklist ${HOME}/.newsrc 815deny ${HOME}/.newsrc
816blacklist ${HOME}/.nicotine 816deny ${HOME}/.nicotine
817blacklist ${HOME}/.node-gyp 817deny ${HOME}/.node-gyp
818blacklist ${HOME}/.npm 818deny ${HOME}/.npm
819blacklist ${HOME}/.npmrc 819deny ${HOME}/.npmrc
820blacklist ${HOME}/.nv 820deny ${HOME}/.nv
821blacklist ${HOME}/.nvm 821deny ${HOME}/.nvm
822blacklist ${HOME}/.nylas-mail 822deny ${HOME}/.nylas-mail
823blacklist ${HOME}/.openarena 823deny ${HOME}/.openarena
824blacklist ${HOME}/.opencity 824deny ${HOME}/.opencity
825blacklist ${HOME}/.openinvaders 825deny ${HOME}/.openinvaders
826blacklist ${HOME}/.openshot 826deny ${HOME}/.openshot
827blacklist ${HOME}/.openshot_qt 827deny ${HOME}/.openshot_qt
828blacklist ${HOME}/.openttd 828deny ${HOME}/.openttd
829blacklist ${HOME}/.opera 829deny ${HOME}/.opera
830blacklist ${HOME}/.opera-beta 830deny ${HOME}/.opera-beta
831blacklist ${HOME}/.ostrichriders 831deny ${HOME}/.ostrichriders
832blacklist ${HOME}/.paradoxinteractive 832deny ${HOME}/.paradoxinteractive
833blacklist ${HOME}/.parallelrealities/blobwars 833deny ${HOME}/.parallelrealities/blobwars
834blacklist ${HOME}/.pcsxr 834deny ${HOME}/.pcsxr
835blacklist ${HOME}/.penguin-command 835deny ${HOME}/.penguin-command
836blacklist ${HOME}/.pine-crash 836deny ${HOME}/.pine-crash
837blacklist ${HOME}/.pine-debug1 837deny ${HOME}/.pine-debug1
838blacklist ${HOME}/.pine-debug2 838deny ${HOME}/.pine-debug2
839blacklist ${HOME}/.pine-debug3 839deny ${HOME}/.pine-debug3
840blacklist ${HOME}/.pine-debug4 840deny ${HOME}/.pine-debug4
841blacklist ${HOME}/.pine-interrupted-mail 841deny ${HOME}/.pine-interrupted-mail
842blacklist ${HOME}/.pinerc 842deny ${HOME}/.pinerc
843blacklist ${HOME}/.pinercex 843deny ${HOME}/.pinercex
844blacklist ${HOME}/.pingus 844deny ${HOME}/.pingus
845blacklist ${HOME}/.pioneer 845deny ${HOME}/.pioneer
846blacklist ${HOME}/.purple 846deny ${HOME}/.purple
847blacklist ${HOME}/.pylint.d 847deny ${HOME}/.pylint.d
848blacklist ${HOME}/.qemu-launcher 848deny ${HOME}/.qemu-launcher
849blacklist ${HOME}/.qgis2 849deny ${HOME}/.qgis2
850blacklist ${HOME}/.qmmp 850deny ${HOME}/.qmmp
851blacklist ${HOME}/.quodlibet 851deny ${HOME}/.quodlibet
852blacklist ${HOME}/.redeclipse 852deny ${HOME}/.redeclipse
853blacklist ${HOME}/.remmina 853deny ${HOME}/.remmina
854blacklist ${HOME}/.repo_.gitconfig.json 854deny ${HOME}/.repo_.gitconfig.json
855blacklist ${HOME}/.repoconfig 855deny ${HOME}/.repoconfig
856blacklist ${HOME}/.retroshare 856deny ${HOME}/.retroshare
857blacklist ${HOME}/.ripperXrc 857deny ${HOME}/.ripperXrc
858blacklist ${HOME}/.scorched3d 858deny ${HOME}/.scorched3d
859blacklist ${HOME}/.scribus 859deny ${HOME}/.scribus
860blacklist ${HOME}/.scribusrc 860deny ${HOME}/.scribusrc
861blacklist ${HOME}/.simutrans 861deny ${HOME}/.simutrans
862blacklist ${HOME}/.smartgit/*/passwords 862deny ${HOME}/.smartgit/*/passwords
863blacklist ${HOME}/.ssr 863deny ${HOME}/.ssr
864blacklist ${HOME}/.steam 864deny ${HOME}/.steam
865blacklist ${HOME}/.steampath 865deny ${HOME}/.steampath
866blacklist ${HOME}/.steampid 866deny ${HOME}/.steampid
867blacklist ${HOME}/.stellarium 867deny ${HOME}/.stellarium
868blacklist ${HOME}/.subversion 868deny ${HOME}/.subversion
869blacklist ${HOME}/.surf 869deny ${HOME}/.surf
870blacklist ${HOME}/.suve/colorful 870deny ${HOME}/.suve/colorful
871blacklist ${HOME}/.swb.ini 871deny ${HOME}/.swb.ini
872blacklist ${HOME}/.sword 872deny ${HOME}/.sword
873blacklist ${HOME}/.sylpheed-2.0 873deny ${HOME}/.sylpheed-2.0
874blacklist ${HOME}/.synfig 874deny ${HOME}/.synfig
875blacklist ${HOME}/.tb 875deny ${HOME}/.tb
876blacklist ${HOME}/.tconn 876deny ${HOME}/.tconn
877blacklist ${HOME}/.teeworlds 877deny ${HOME}/.teeworlds
878blacklist ${HOME}/.texlive20* 878deny ${HOME}/.texlive20*
879blacklist ${HOME}/.thunderbird 879deny ${HOME}/.thunderbird
880blacklist ${HOME}/.tilp 880deny ${HOME}/.tilp
881blacklist ${HOME}/.tin 881deny ${HOME}/.tin
882blacklist ${HOME}/.tooling 882deny ${HOME}/.tooling
883blacklist ${HOME}/.tor-browser* 883deny ${HOME}/.tor-browser*
884blacklist ${HOME}/.torcs 884deny ${HOME}/.torcs
885blacklist ${HOME}/.tremulous 885deny ${HOME}/.tremulous
886blacklist ${HOME}/.ts3client 886deny ${HOME}/.ts3client
887blacklist ${HOME}/.tuxguitar* 887deny ${HOME}/.tuxguitar*
888blacklist ${HOME}/.tvbrowser 888deny ${HOME}/.tvbrowser
889blacklist ${HOME}/.unknown-horizons 889deny ${HOME}/.unknown-horizons
890blacklist ${HOME}/.viking 890deny ${HOME}/.viking
891blacklist ${HOME}/.viking-maps 891deny ${HOME}/.viking-maps
892blacklist ${HOME}/.vim 892deny ${HOME}/.vim
893blacklist ${HOME}/.vimrc 893deny ${HOME}/.vimrc
894blacklist ${HOME}/.vmware 894deny ${HOME}/.vmware
895blacklist ${HOME}/.vscode 895deny ${HOME}/.vscode
896blacklist ${HOME}/.vscode-oss 896deny ${HOME}/.vscode-oss
897blacklist ${HOME}/.vst 897deny ${HOME}/.vst
898blacklist ${HOME}/.vultures 898deny ${HOME}/.vultures
899blacklist ${HOME}/.w3m 899deny ${HOME}/.w3m
900blacklist ${HOME}/.warzone2100-3.* 900deny ${HOME}/.warzone2100-3.*
901blacklist ${HOME}/.waterfox 901deny ${HOME}/.waterfox
902blacklist ${HOME}/.weechat 902deny ${HOME}/.weechat
903blacklist ${HOME}/.wget-hsts 903deny ${HOME}/.wget-hsts
904blacklist ${HOME}/.wgetrc 904deny ${HOME}/.wgetrc
905blacklist ${HOME}/.widelands 905deny ${HOME}/.widelands
906blacklist ${HOME}/.wine 906deny ${HOME}/.wine
907blacklist ${HOME}/.wine64 907deny ${HOME}/.wine64
908blacklist ${HOME}/.wireshark 908deny ${HOME}/.wireshark
909blacklist ${HOME}/.wordwarvi 909deny ${HOME}/.wordwarvi
910blacklist ${HOME}/.wormux 910deny ${HOME}/.wormux
911blacklist ${HOME}/.xiphos 911deny ${HOME}/.xiphos
912blacklist ${HOME}/.xmind 912deny ${HOME}/.xmind
913blacklist ${HOME}/.xmms 913deny ${HOME}/.xmms
914blacklist ${HOME}/.xmr-stak 914deny ${HOME}/.xmr-stak
915blacklist ${HOME}/.xonotic 915deny ${HOME}/.xonotic
916blacklist ${HOME}/.xournalpp 916deny ${HOME}/.xournalpp
917blacklist ${HOME}/.xpdfrc 917deny ${HOME}/.xpdfrc
918blacklist ${HOME}/.yarn 918deny ${HOME}/.yarn
919blacklist ${HOME}/.yarn-config 919deny ${HOME}/.yarn-config
920blacklist ${HOME}/.yarncache 920deny ${HOME}/.yarncache
921blacklist ${HOME}/.yarnrc 921deny ${HOME}/.yarnrc
922blacklist ${HOME}/.zoom 922deny ${HOME}/.zoom
923blacklist /tmp/akonadi-* 923deny /tmp/akonadi-*
924blacklist /tmp/.wine-* 924deny /tmp/.wine-*
925blacklist /var/games/nethack 925deny /var/games/nethack
926blacklist /var/games/slashem 926deny /var/games/slashem
927blacklist /var/games/vulturesclaw 927deny /var/games/vulturesclaw
928blacklist /var/games/vultureseye 928deny /var/games/vultureseye
929blacklist /var/lib/games/Maelstrom-Scores 929deny /var/lib/games/Maelstrom-Scores
930 930
931# ${HOME}/.cache directory 931# ${HOME}/.cache directory
932blacklist ${HOME}/.cache/0ad 932deny ${HOME}/.cache/0ad
933blacklist ${HOME}/.cache/8pecxstudios 933deny ${HOME}/.cache/8pecxstudios
934blacklist ${HOME}/.cache/Authenticator 934deny ${HOME}/.cache/Authenticator
935blacklist ${HOME}/.cache/BraveSoftware 935deny ${HOME}/.cache/BraveSoftware
936blacklist ${HOME}/.cache/Clementine 936deny ${HOME}/.cache/Clementine
937blacklist ${HOME}/.cache/ENCOM/Spectral 937deny ${HOME}/.cache/ENCOM/Spectral
938blacklist ${HOME}/.cache/Enox 938deny ${HOME}/.cache/Enox
939blacklist ${HOME}/.cache/Enpass 939deny ${HOME}/.cache/Enpass
940blacklist ${HOME}/.cache/Ferdi 940deny ${HOME}/.cache/Ferdi
941blacklist ${HOME}/.cache/Flavio Tordini 941deny ${HOME}/.cache/Flavio Tordini
942blacklist ${HOME}/.cache/Franz 942deny ${HOME}/.cache/Franz
943blacklist ${HOME}/.cache/INRIA 943deny ${HOME}/.cache/INRIA
944blacklist ${HOME}/.cache/MusicBrainz 944deny ${HOME}/.cache/MusicBrainz
945blacklist ${HOME}/.cache/NewsFlashGTK 945deny ${HOME}/.cache/NewsFlashGTK
946blacklist ${HOME}/.cache/Otter 946deny ${HOME}/.cache/Otter
947blacklist ${HOME}/.cache/PawelStolowski 947deny ${HOME}/.cache/PawelStolowski
948blacklist ${HOME}/.cache/Psi 948deny ${HOME}/.cache/Psi
949blacklist ${HOME}/.cache/QuiteRss 949deny ${HOME}/.cache/QuiteRss
950blacklist ${HOME}/.cache/quodlibet 950deny ${HOME}/.cache/quodlibet
951blacklist ${HOME}/.cache/Quotient/quaternion 951deny ${HOME}/.cache/Quotient/quaternion
952blacklist ${HOME}/.cache/Shortwave 952deny ${HOME}/.cache/Shortwave
953blacklist ${HOME}/.cache/Tox 953deny ${HOME}/.cache/Tox
954blacklist ${HOME}/.cache/Zeal 954deny ${HOME}/.cache/Zeal
955blacklist ${HOME}/.cache/agenda 955deny ${HOME}/.cache/agenda
956blacklist ${HOME}/.cache/akonadi* 956deny ${HOME}/.cache/akonadi*
957blacklist ${HOME}/.cache/atril 957deny ${HOME}/.cache/atril
958blacklist ${HOME}/.cache/attic 958deny ${HOME}/.cache/attic
959blacklist ${HOME}/.cache/babl 959deny ${HOME}/.cache/babl
960blacklist ${HOME}/.cache/bnox 960deny ${HOME}/.cache/bnox
961blacklist ${HOME}/.cache/borg 961deny ${HOME}/.cache/borg
962blacklist ${HOME}/.cache/calibre 962deny ${HOME}/.cache/calibre
963blacklist ${HOME}/.cache/cantata 963deny ${HOME}/.cache/cantata
964blacklist ${HOME}/.cache/champlain 964deny ${HOME}/.cache/champlain
965blacklist ${HOME}/.cache/chromium 965deny ${HOME}/.cache/chromium
966blacklist ${HOME}/.cache/chromium-dev 966deny ${HOME}/.cache/chromium-dev
967blacklist ${HOME}/.cache/cliqz 967deny ${HOME}/.cache/cliqz
968blacklist ${HOME}/.cache/com.github.johnfactotum.Foliate 968deny ${HOME}/.cache/com.github.johnfactotum.Foliate
969blacklist ${HOME}/.cache/darktable 969deny ${HOME}/.cache/darktable
970blacklist ${HOME}/.cache/deja-dup 970deny ${HOME}/.cache/deja-dup
971blacklist ${HOME}/.cache/discover 971deny ${HOME}/.cache/discover
972blacklist ${HOME}/.cache/dnox 972deny ${HOME}/.cache/dnox
973blacklist ${HOME}/.cache/dolphin 973deny ${HOME}/.cache/dolphin
974blacklist ${HOME}/.cache/dolphin-emu 974deny ${HOME}/.cache/dolphin-emu
975blacklist ${HOME}/.cache/ephemeral 975deny ${HOME}/.cache/ephemeral
976blacklist ${HOME}/.cache/epiphany 976deny ${HOME}/.cache/epiphany
977blacklist ${HOME}/.cache/evolution 977deny ${HOME}/.cache/evolution
978blacklist ${HOME}/.cache/falkon 978deny ${HOME}/.cache/falkon
979blacklist ${HOME}/.cache/feedreader 979deny ${HOME}/.cache/feedreader
980blacklist ${HOME}/.cache/firedragon 980deny ${HOME}/.cache/firedragon
981blacklist ${HOME}/.cache/flaska.net/trojita 981deny ${HOME}/.cache/flaska.net/trojita
982blacklist ${HOME}/.cache/folks 982deny ${HOME}/.cache/folks
983blacklist ${HOME}/.cache/font-manager 983deny ${HOME}/.cache/font-manager
984blacklist ${HOME}/.cache/fossamail 984deny ${HOME}/.cache/fossamail
985blacklist ${HOME}/.cache/fractal 985deny ${HOME}/.cache/fractal
986blacklist ${HOME}/.cache/freecol 986deny ${HOME}/.cache/freecol
987blacklist ${HOME}/.cache/gajim 987deny ${HOME}/.cache/gajim
988blacklist ${HOME}/.cache/geary 988deny ${HOME}/.cache/geary
989blacklist ${HOME}/.cache/gegl-0.4 989deny ${HOME}/.cache/gegl-0.4
990blacklist ${HOME}/.cache/geeqie 990deny ${HOME}/.cache/geeqie
991blacklist ${HOME}/.cache/gfeeds 991deny ${HOME}/.cache/gfeeds
992blacklist ${HOME}/.cache/gimp 992deny ${HOME}/.cache/gimp
993blacklist ${HOME}/.cache/gnome-boxes 993deny ${HOME}/.cache/gnome-boxes
994blacklist ${HOME}/.cache/gnome-builder 994deny ${HOME}/.cache/gnome-builder
995blacklist ${HOME}/.cache/gnome-control-center 995deny ${HOME}/.cache/gnome-control-center
996blacklist ${HOME}/.cache/gnome-recipes 996deny ${HOME}/.cache/gnome-recipes
997blacklist ${HOME}/.cache/gnome-screenshot 997deny ${HOME}/.cache/gnome-screenshot
998blacklist ${HOME}/.cache/gnome-software 998deny ${HOME}/.cache/gnome-software
999blacklist ${HOME}/.cache/gnome-twitch 999deny ${HOME}/.cache/gnome-twitch
1000blacklist ${HOME}/.cache/godot 1000deny ${HOME}/.cache/godot
1001blacklist ${HOME}/.cache/google-chrome 1001deny ${HOME}/.cache/google-chrome
1002blacklist ${HOME}/.cache/google-chrome-beta 1002deny ${HOME}/.cache/google-chrome-beta
1003blacklist ${HOME}/.cache/google-chrome-unstable 1003deny ${HOME}/.cache/google-chrome-unstable
1004blacklist ${HOME}/.cache/gradio 1004deny ${HOME}/.cache/gradio
1005blacklist ${HOME}/.cache/gummi 1005deny ${HOME}/.cache/gummi
1006blacklist ${HOME}/.cache/icedove 1006deny ${HOME}/.cache/icedove
1007blacklist ${HOME}/.cache/INRIA/Natron 1007deny ${HOME}/.cache/INRIA/Natron
1008blacklist ${HOME}/.cache/inkscape 1008deny ${HOME}/.cache/inkscape
1009blacklist ${HOME}/.cache/inox 1009deny ${HOME}/.cache/inox
1010blacklist ${HOME}/.cache/iridium 1010deny ${HOME}/.cache/iridium
1011blacklist ${HOME}/.cache/kcmshell5 1011deny ${HOME}/.cache/kcmshell5
1012blacklist ${HOME}/.cache/KDE/neochat 1012deny ${HOME}/.cache/KDE/neochat
1013blacklist ${HOME}/.cache/kdenlive 1013deny ${HOME}/.cache/kdenlive
1014blacklist ${HOME}/.cache/keepassxc 1014deny ${HOME}/.cache/keepassxc
1015blacklist ${HOME}/.cache/kfind 1015deny ${HOME}/.cache/kfind
1016blacklist ${HOME}/.cache/kinfocenter 1016deny ${HOME}/.cache/kinfocenter
1017blacklist ${HOME}/.cache/kmail2 1017deny ${HOME}/.cache/kmail2
1018blacklist ${HOME}/.cache/krunner 1018deny ${HOME}/.cache/krunner
1019blacklist ${HOME}/.cache/krunnerbookmarkrunnerfirefoxdbfile.sqlite* 1019deny ${HOME}/.cache/krunnerbookmarkrunnerfirefoxdbfile.sqlite*
1020blacklist ${HOME}/.cache/kscreenlocker_greet 1020deny ${HOME}/.cache/kscreenlocker_greet
1021blacklist ${HOME}/.cache/ksmserver-logout-greeter 1021deny ${HOME}/.cache/ksmserver-logout-greeter
1022blacklist ${HOME}/.cache/ksplashqml 1022deny ${HOME}/.cache/ksplashqml
1023blacklist ${HOME}/.cache/kube 1023deny ${HOME}/.cache/kube
1024blacklist ${HOME}/.cache/kwin 1024deny ${HOME}/.cache/kwin
1025blacklist ${HOME}/.cache/libgweather 1025deny ${HOME}/.cache/libgweather
1026blacklist ${HOME}/.cache/librewolf 1026deny ${HOME}/.cache/librewolf
1027blacklist ${HOME}/.cache/liferea 1027deny ${HOME}/.cache/liferea
1028blacklist ${HOME}/.cache/lutris 1028deny ${HOME}/.cache/lutris
1029blacklist ${HOME}/.cache/Mendeley Ltd. 1029deny ${HOME}/.cache/Mendeley Ltd.
1030blacklist ${HOME}/.cache/marker 1030deny ${HOME}/.cache/marker
1031blacklist ${HOME}/.cache/matrix-mirage 1031deny ${HOME}/.cache/matrix-mirage
1032blacklist ${HOME}/.cache/microsoft-edge-dev 1032deny ${HOME}/.cache/microsoft-edge-dev
1033blacklist ${HOME}/.cache/midori 1033deny ${HOME}/.cache/midori
1034blacklist ${HOME}/.cache/minetest 1034deny ${HOME}/.cache/minetest
1035blacklist ${HOME}/.cache/mirage 1035deny ${HOME}/.cache/mirage
1036blacklist ${HOME}/.cache/moonchild productions/basilisk 1036deny ${HOME}/.cache/moonchild productions/basilisk
1037blacklist ${HOME}/.cache/moonchild productions/pale moon 1037deny ${HOME}/.cache/moonchild productions/pale moon
1038blacklist ${HOME}/.cache/mozilla 1038deny ${HOME}/.cache/mozilla
1039blacklist ${HOME}/.cache/ms-excel-online 1039deny ${HOME}/.cache/ms-excel-online
1040blacklist ${HOME}/.cache/ms-office-online 1040deny ${HOME}/.cache/ms-office-online
1041blacklist ${HOME}/.cache/ms-onenote-online 1041deny ${HOME}/.cache/ms-onenote-online
1042blacklist ${HOME}/.cache/ms-outlook-online 1042deny ${HOME}/.cache/ms-outlook-online
1043blacklist ${HOME}/.cache/ms-powerpoint-online 1043deny ${HOME}/.cache/ms-powerpoint-online
1044blacklist ${HOME}/.cache/ms-skype-online 1044deny ${HOME}/.cache/ms-skype-online
1045blacklist ${HOME}/.cache/ms-word-online 1045deny ${HOME}/.cache/ms-word-online
1046blacklist ${HOME}/.cache/mutt 1046deny ${HOME}/.cache/mutt
1047blacklist ${HOME}/.cache/mypaint 1047deny ${HOME}/.cache/mypaint
1048blacklist ${HOME}/.cache/nheko 1048deny ${HOME}/.cache/nheko
1049blacklist ${HOME}/.cache/netsurf 1049deny ${HOME}/.cache/netsurf
1050blacklist ${HOME}/.cache/okular 1050deny ${HOME}/.cache/okular
1051blacklist ${HOME}/.cache/opera 1051deny ${HOME}/.cache/opera
1052blacklist ${HOME}/.cache/opera-beta 1052deny ${HOME}/.cache/opera-beta
1053blacklist ${HOME}/.cache/org.gabmus.gfeeds 1053deny ${HOME}/.cache/org.gabmus.gfeeds
1054blacklist ${HOME}/.cache/org.gnome.Books 1054deny ${HOME}/.cache/org.gnome.Books
1055blacklist ${HOME}/.cache/org.gnome.Maps 1055deny ${HOME}/.cache/org.gnome.Maps
1056blacklist ${HOME}/.cache/pdfmod 1056deny ${HOME}/.cache/pdfmod
1057blacklist ${HOME}/.cache/peek 1057deny ${HOME}/.cache/peek
1058blacklist ${HOME}/.cache/pip 1058deny ${HOME}/.cache/pip
1059blacklist ${HOME}/.cache/pipe-viewer 1059deny ${HOME}/.cache/pipe-viewer
1060blacklist ${HOME}/.cache/plasmashell 1060deny ${HOME}/.cache/plasmashell
1061blacklist ${HOME}/.cache/plasmashellbookmarkrunnerfirefoxdbfile.sqlite* 1061deny ${HOME}/.cache/plasmashellbookmarkrunnerfirefoxdbfile.sqlite*
1062blacklist ${HOME}/.cache/psi 1062deny ${HOME}/.cache/psi
1063blacklist ${HOME}/.cache/qBittorrent 1063deny ${HOME}/.cache/qBittorrent
1064blacklist ${HOME}/.cache/qupzilla 1064deny ${HOME}/.cache/qupzilla
1065blacklist ${HOME}/.cache/qutebrowser 1065deny ${HOME}/.cache/qutebrowser
1066blacklist ${HOME}/.cache/rhythmbox 1066deny ${HOME}/.cache/rhythmbox
1067blacklist ${HOME}/.cache/shotwell 1067deny ${HOME}/.cache/shotwell
1068blacklist ${HOME}/.cache/simple-scan 1068deny ${HOME}/.cache/simple-scan
1069blacklist ${HOME}/.cache/slimjet 1069deny ${HOME}/.cache/slimjet
1070blacklist ${HOME}/.cache/smuxi 1070deny ${HOME}/.cache/smuxi
1071blacklist ${HOME}/.cache/snox 1071deny ${HOME}/.cache/snox
1072blacklist ${HOME}/.cache/spotify 1072deny ${HOME}/.cache/spotify
1073blacklist ${HOME}/.cache/strawberry 1073deny ${HOME}/.cache/strawberry
1074blacklist ${HOME}/.cache/straw-viewer 1074deny ${HOME}/.cache/straw-viewer
1075blacklist ${HOME}/.cache/supertuxkart 1075deny ${HOME}/.cache/supertuxkart
1076blacklist ${HOME}/.cache/systemsettings 1076deny ${HOME}/.cache/systemsettings
1077blacklist ${HOME}/.cache/telepathy 1077deny ${HOME}/.cache/telepathy
1078blacklist ${HOME}/.cache/thunderbird 1078deny ${HOME}/.cache/thunderbird
1079blacklist ${HOME}/.cache/torbrowser 1079deny ${HOME}/.cache/torbrowser
1080blacklist ${HOME}/.cache/transmission 1080deny ${HOME}/.cache/transmission
1081blacklist ${HOME}/.cache/ungoogled-chromium 1081deny ${HOME}/.cache/ungoogled-chromium
1082blacklist ${HOME}/.cache/vivaldi 1082deny ${HOME}/.cache/vivaldi
1083blacklist ${HOME}/.cache/vivaldi-snapshot 1083deny ${HOME}/.cache/vivaldi-snapshot
1084blacklist ${HOME}/.cache/vlc 1084deny ${HOME}/.cache/vlc
1085blacklist ${HOME}/.cache/vmware 1085deny ${HOME}/.cache/vmware
1086blacklist ${HOME}/.cache/warsow-2.1 1086deny ${HOME}/.cache/warsow-2.1
1087blacklist ${HOME}/.cache/waterfox 1087deny ${HOME}/.cache/waterfox
1088blacklist ${HOME}/.cache/wesnoth 1088deny ${HOME}/.cache/wesnoth
1089blacklist ${HOME}/.cache/winetricks 1089deny ${HOME}/.cache/winetricks
1090blacklist ${HOME}/.cache/xmms2 1090deny ${HOME}/.cache/xmms2
1091blacklist ${HOME}/.cache/xreader 1091deny ${HOME}/.cache/xreader
1092blacklist ${HOME}/.cache/yandex-browser 1092deny ${HOME}/.cache/yandex-browser
1093blacklist ${HOME}/.cache/yandex-browser-beta 1093deny ${HOME}/.cache/yandex-browser-beta
1094blacklist ${HOME}/.cache/youtube-dl 1094deny ${HOME}/.cache/youtube-dl
1095blacklist ${HOME}/.cache/youtube-viewer 1095deny ${HOME}/.cache/youtube-viewer
diff --git a/etc/inc/disable-shell.inc b/etc/inc/disable-shell.inc
index 8274b0215..da6fb31a3 100644
--- a/etc/inc/disable-shell.inc
+++ b/etc/inc/disable-shell.inc
@@ -2,14 +2,14 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include disable-shell.local 3include disable-shell.local
4 4
5blacklist ${PATH}/bash 5deny ${PATH}/bash
6blacklist ${PATH}/csh 6deny ${PATH}/csh
7blacklist ${PATH}/dash 7deny ${PATH}/dash
8blacklist ${PATH}/fish 8deny ${PATH}/fish
9blacklist ${PATH}/ksh 9deny ${PATH}/ksh
10blacklist ${PATH}/mksh 10deny ${PATH}/mksh
11blacklist ${PATH}/oksh 11deny ${PATH}/oksh
12blacklist ${PATH}/sh 12deny ${PATH}/sh
13blacklist ${PATH}/tclsh 13deny ${PATH}/tclsh
14blacklist ${PATH}/tcsh 14deny ${PATH}/tcsh
15blacklist ${PATH}/zsh 15deny ${PATH}/zsh
diff --git a/etc/inc/disable-xdg.inc b/etc/inc/disable-xdg.inc
index 22acf272d..32aa8c7f6 100644
--- a/etc/inc/disable-xdg.inc
+++ b/etc/inc/disable-xdg.inc
@@ -2,10 +2,10 @@
2# Persistent customizations should go in a .local file. 2# Persistent customizations should go in a .local file.
3include disable-xdg.local 3include disable-xdg.local
4 4
5blacklist ${DOCUMENTS} 5deny ${DOCUMENTS}
6blacklist ${MUSIC} 6deny ${MUSIC}
7blacklist ${PICTURES} 7deny ${PICTURES}
8blacklist ${VIDEOS} 8deny ${VIDEOS}
9 9
10# The following should be considered catch-all directories 10# The following should be considered catch-all directories
11#blacklist ${DESKTOP} 11#blacklist ${DESKTOP}
diff --git a/etc/inc/whitelist-1793-workaround.inc b/etc/inc/whitelist-1793-workaround.inc
index 862837f12..06a424440 100644
--- a/etc/inc/whitelist-1793-workaround.inc
+++ b/etc/inc/whitelist-1793-workaround.inc
@@ -3,27 +3,27 @@
3include whitelist-1793-workaround.local 3include whitelist-1793-workaround.local
4# This works around bug 1793, and allows whitelisting to be used for some KDE applications. 4# This works around bug 1793, and allows whitelisting to be used for some KDE applications.
5 5
6noblacklist ${HOME}/.config/ibus 6nodeny ${HOME}/.config/ibus
7noblacklist ${HOME}/.config/mimeapps.list 7nodeny ${HOME}/.config/mimeapps.list
8noblacklist ${HOME}/.config/pkcs11 8nodeny ${HOME}/.config/pkcs11
9noblacklist ${HOME}/.config/user-dirs.dirs 9nodeny ${HOME}/.config/user-dirs.dirs
10noblacklist ${HOME}/.config/user-dirs.locale 10nodeny ${HOME}/.config/user-dirs.locale
11noblacklist ${HOME}/.config/dconf 11nodeny ${HOME}/.config/dconf
12noblacklist ${HOME}/.config/fontconfig 12nodeny ${HOME}/.config/fontconfig
13noblacklist ${HOME}/.config/gtk-2.0 13nodeny ${HOME}/.config/gtk-2.0
14noblacklist ${HOME}/.config/gtk-3.0 14nodeny ${HOME}/.config/gtk-3.0
15noblacklist ${HOME}/.config/gtk-4.0 15nodeny ${HOME}/.config/gtk-4.0
16noblacklist ${HOME}/.config/gtkrc 16nodeny ${HOME}/.config/gtkrc
17noblacklist ${HOME}/.config/gtkrc-2.0 17nodeny ${HOME}/.config/gtkrc-2.0
18noblacklist ${HOME}/.config/Kvantum 18nodeny ${HOME}/.config/Kvantum
19noblacklist ${HOME}/.config/Trolltech.conf 19nodeny ${HOME}/.config/Trolltech.conf
20noblacklist ${HOME}/.config/QtProject.conf 20nodeny ${HOME}/.config/QtProject.conf
21noblacklist ${HOME}/.config/kdeglobals 21nodeny ${HOME}/.config/kdeglobals
22noblacklist ${HOME}/.config/kio_httprc 22nodeny ${HOME}/.config/kio_httprc
23noblacklist ${HOME}/.config/kioslaverc 23nodeny ${HOME}/.config/kioslaverc
24noblacklist ${HOME}/.config/ksslcablacklist 24nodeny ${HOME}/.config/ksslcablacklist
25noblacklist ${HOME}/.config/qt5ct 25nodeny ${HOME}/.config/qt5ct
26noblacklist ${HOME}/.config/qtcurve 26nodeny ${HOME}/.config/qtcurve
27 27
28blacklist ${HOME}/.config/* 28deny ${HOME}/.config/*
29whitelist ${HOME}/.config 29allow ${HOME}/.config
diff --git a/etc/inc/whitelist-common.inc b/etc/inc/whitelist-common.inc
index fedfb2bc2..11070e372 100644
--- a/etc/inc/whitelist-common.inc
+++ b/etc/inc/whitelist-common.inc
@@ -4,82 +4,82 @@ include whitelist-common.local
4 4
5# common whitelist for all profiles 5# common whitelist for all profiles
6 6
7whitelist ${HOME}/.XCompose 7allow ${HOME}/.XCompose
8whitelist ${HOME}/.alsaequal.bin 8allow ${HOME}/.alsaequal.bin
9whitelist ${HOME}/.asoundrc 9allow ${HOME}/.asoundrc
10whitelist ${HOME}/.config/ibus 10allow ${HOME}/.config/ibus
11whitelist ${HOME}/.config/mimeapps.list 11allow ${HOME}/.config/mimeapps.list
12whitelist ${HOME}/.config/pkcs11 12allow ${HOME}/.config/pkcs11
13read-only ${HOME}/.config/pkcs11 13read-only ${HOME}/.config/pkcs11
14whitelist ${HOME}/.config/user-dirs.dirs 14allow ${HOME}/.config/user-dirs.dirs
15read-only ${HOME}/.config/user-dirs.dirs 15read-only ${HOME}/.config/user-dirs.dirs
16whitelist ${HOME}/.config/user-dirs.locale 16allow ${HOME}/.config/user-dirs.locale
17read-only ${HOME}/.config/user-dirs.locale 17read-only ${HOME}/.config/user-dirs.locale
18whitelist ${HOME}/.drirc 18allow ${HOME}/.drirc
19whitelist ${HOME}/.icons 19allow ${HOME}/.icons
20?HAS_APPIMAGE: whitelist ${HOME}/.local/share/appimagekit 20?HAS_APPIMAGE: whitelist ${HOME}/.local/share/appimagekit
21whitelist ${HOME}/.local/share/applications 21allow ${HOME}/.local/share/applications
22read-only ${HOME}/.local/share/applications 22read-only ${HOME}/.local/share/applications
23whitelist ${HOME}/.local/share/icons 23allow ${HOME}/.local/share/icons
24whitelist ${HOME}/.local/share/mime 24allow ${HOME}/.local/share/mime
25whitelist ${HOME}/.mime.types 25allow ${HOME}/.mime.types
26whitelist ${HOME}/.sndio/cookie 26allow ${HOME}/.sndio/cookie
27whitelist ${HOME}/.uim.d 27allow ${HOME}/.uim.d
28 28
29# dconf 29# dconf
30mkdir ${HOME}/.config/dconf 30mkdir ${HOME}/.config/dconf
31whitelist ${HOME}/.config/dconf 31allow ${HOME}/.config/dconf
32 32
33# fonts 33# fonts
34whitelist ${HOME}/.cache/fontconfig 34allow ${HOME}/.cache/fontconfig
35whitelist ${HOME}/.config/fontconfig 35allow ${HOME}/.config/fontconfig
36whitelist ${HOME}/.fontconfig 36allow ${HOME}/.fontconfig
37whitelist ${HOME}/.fonts 37allow ${HOME}/.fonts
38whitelist ${HOME}/.fonts.conf 38allow ${HOME}/.fonts.conf
39whitelist ${HOME}/.fonts.conf.d 39allow ${HOME}/.fonts.conf.d
40whitelist ${HOME}/.fonts.d 40allow ${HOME}/.fonts.d
41whitelist ${HOME}/.local/share/fonts 41allow ${HOME}/.local/share/fonts
42whitelist ${HOME}/.pangorc 42allow ${HOME}/.pangorc
43 43
44# gtk 44# gtk
45whitelist ${HOME}/.config/gtk-2.0 45allow ${HOME}/.config/gtk-2.0
46whitelist ${HOME}/.config/gtk-3.0 46allow ${HOME}/.config/gtk-3.0
47whitelist ${HOME}/.config/gtk-4.0 47allow ${HOME}/.config/gtk-4.0
48whitelist ${HOME}/.config/gtkrc 48allow ${HOME}/.config/gtkrc
49whitelist ${HOME}/.config/gtkrc-2.0 49allow ${HOME}/.config/gtkrc-2.0
50whitelist ${HOME}/.gnome2 50allow ${HOME}/.gnome2
51whitelist ${HOME}/.gnome2-private 51allow ${HOME}/.gnome2-private
52whitelist ${HOME}/.gtk-2.0 52allow ${HOME}/.gtk-2.0
53whitelist ${HOME}/.gtkrc 53allow ${HOME}/.gtkrc
54whitelist ${HOME}/.gtkrc-2.0 54allow ${HOME}/.gtkrc-2.0
55whitelist ${HOME}/.kde/share/config/gtkrc 55allow ${HOME}/.kde/share/config/gtkrc
56whitelist ${HOME}/.kde/share/config/gtkrc-2.0 56allow ${HOME}/.kde/share/config/gtkrc-2.0
57whitelist ${HOME}/.kde4/share/config/gtkrc 57allow ${HOME}/.kde4/share/config/gtkrc
58whitelist ${HOME}/.kde4/share/config/gtkrc-2.0 58allow ${HOME}/.kde4/share/config/gtkrc-2.0
59whitelist ${HOME}/.local/share/themes 59allow ${HOME}/.local/share/themes
60whitelist ${HOME}/.themes 60allow ${HOME}/.themes
61 61
62# qt/kde 62# qt/kde
63whitelist ${HOME}/.cache/kioexec/krun 63allow ${HOME}/.cache/kioexec/krun
64whitelist ${HOME}/.config/Kvantum 64allow ${HOME}/.config/Kvantum
65whitelist ${HOME}/.config/Trolltech.conf 65allow ${HOME}/.config/Trolltech.conf
66whitelist ${HOME}/.config/QtProject.conf 66allow ${HOME}/.config/QtProject.conf
67whitelist ${HOME}/.config/kdeglobals 67allow ${HOME}/.config/kdeglobals
68whitelist ${HOME}/.config/kio_httprc 68allow ${HOME}/.config/kio_httprc
69whitelist ${HOME}/.config/kioslaverc 69allow ${HOME}/.config/kioslaverc
70whitelist ${HOME}/.config/ksslcablacklist 70allow ${HOME}/.config/ksslcablacklist
71whitelist ${HOME}/.config/qt5ct 71allow ${HOME}/.config/qt5ct
72whitelist ${HOME}/.config/qtcurve 72allow ${HOME}/.config/qtcurve
73whitelist ${HOME}/.kde/share/config/kdeglobals 73allow ${HOME}/.kde/share/config/kdeglobals
74whitelist ${HOME}/.kde/share/config/kio_httprc 74allow ${HOME}/.kde/share/config/kio_httprc
75whitelist ${HOME}/.kde/share/config/kioslaverc 75allow ${HOME}/.kde/share/config/kioslaverc
76whitelist ${HOME}/.kde/share/config/ksslcablacklist 76allow ${HOME}/.kde/share/config/ksslcablacklist
77whitelist ${HOME}/.kde/share/config/oxygenrc 77allow ${HOME}/.kde/share/config/oxygenrc
78whitelist ${HOME}/.kde/share/icons 78allow ${HOME}/.kde/share/icons
79whitelist ${HOME}/.kde4/share/config/kdeglobals 79allow ${HOME}/.kde4/share/config/kdeglobals
80whitelist ${HOME}/.kde4/share/config/kio_httprc 80allow ${HOME}/.kde4/share/config/kio_httprc
81whitelist ${HOME}/.kde4/share/config/kioslaverc 81allow ${HOME}/.kde4/share/config/kioslaverc
82whitelist ${HOME}/.kde4/share/config/ksslcablacklist 82allow ${HOME}/.kde4/share/config/ksslcablacklist
83whitelist ${HOME}/.kde4/share/config/oxygenrc 83allow ${HOME}/.kde4/share/config/oxygenrc
84whitelist ${HOME}/.kde4/share/icons 84allow ${HOME}/.kde4/share/icons
85whitelist ${HOME}/.local/share/qt5ct 85allow ${HOME}/.local/share/qt5ct
diff --git a/etc/inc/whitelist-player-common.inc b/etc/inc/whitelist-player-common.inc
index e5bf36804..d6ae8eab6 100644
--- a/etc/inc/whitelist-player-common.inc
+++ b/etc/inc/whitelist-player-common.inc
@@ -4,8 +4,8 @@ include whitelist-player-common.local
4 4
5# common whitelist for all media players 5# common whitelist for all media players
6 6
7whitelist ${DESKTOP} 7allow ${DESKTOP}
8whitelist ${DOWNLOADS} 8allow ${DOWNLOADS}
9whitelist ${MUSIC} 9allow ${MUSIC}
10whitelist ${PICTURES} 10allow ${PICTURES}
11whitelist ${VIDEOS} 11allow ${VIDEOS}
diff --git a/etc/inc/whitelist-runuser-common.inc b/etc/inc/whitelist-runuser-common.inc
index 48309ffe3..86e5264b9 100644
--- a/etc/inc/whitelist-runuser-common.inc
+++ b/etc/inc/whitelist-runuser-common.inc
@@ -4,13 +4,13 @@ include whitelist-runuser-common.local
4 4
5# common ${RUNUSER} (=/run/user/$UID) whitelist for all profiles 5# common ${RUNUSER} (=/run/user/$UID) whitelist for all profiles
6 6
7whitelist ${RUNUSER}/bus 7allow ${RUNUSER}/bus
8whitelist ${RUNUSER}/dconf 8allow ${RUNUSER}/dconf
9whitelist ${RUNUSER}/gdm/Xauthority 9allow ${RUNUSER}/gdm/Xauthority
10whitelist ${RUNUSER}/ICEauthority 10allow ${RUNUSER}/ICEauthority
11whitelist ${RUNUSER}/.mutter-Xwaylandauth.* 11allow ${RUNUSER}/.mutter-Xwaylandauth.*
12whitelist ${RUNUSER}/pulse/native 12allow ${RUNUSER}/pulse/native
13whitelist ${RUNUSER}/wayland-0 13allow ${RUNUSER}/wayland-0
14whitelist ${RUNUSER}/wayland-1 14allow ${RUNUSER}/wayland-1
15whitelist ${RUNUSER}/xauth_* 15allow ${RUNUSER}/xauth_*
16whitelist ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]] 16allow ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]
diff --git a/etc/inc/whitelist-usr-share-common.inc b/etc/inc/whitelist-usr-share-common.inc
index fe0097934..64296da15 100644
--- a/etc/inc/whitelist-usr-share-common.inc
+++ b/etc/inc/whitelist-usr-share-common.inc
@@ -4,66 +4,66 @@ include whitelist-usr-share-common.local
4 4
5# common /usr/share whitelist for all profiles 5# common /usr/share whitelist for all profiles
6 6
7whitelist /usr/share/alsa 7allow /usr/share/alsa
8whitelist /usr/share/applications 8allow /usr/share/applications
9whitelist /usr/share/ca-certificates 9allow /usr/share/ca-certificates
10whitelist /usr/share/crypto-policies 10allow /usr/share/crypto-policies
11whitelist /usr/share/cursors 11allow /usr/share/cursors
12whitelist /usr/share/dconf 12allow /usr/share/dconf
13whitelist /usr/share/distro-info 13allow /usr/share/distro-info
14whitelist /usr/share/drirc.d 14allow /usr/share/drirc.d
15whitelist /usr/share/enchant 15allow /usr/share/enchant
16whitelist /usr/share/enchant-2 16allow /usr/share/enchant-2
17whitelist /usr/share/file 17allow /usr/share/file
18whitelist /usr/share/fontconfig 18allow /usr/share/fontconfig
19whitelist /usr/share/fonts 19allow /usr/share/fonts
20whitelist /usr/share/fonts-config 20allow /usr/share/fonts-config
21whitelist /usr/share/gir-1.0 21allow /usr/share/gir-1.0
22whitelist /usr/share/gjs-1.0 22allow /usr/share/gjs-1.0
23whitelist /usr/share/glib-2.0 23allow /usr/share/glib-2.0
24whitelist /usr/share/glvnd 24allow /usr/share/glvnd
25whitelist /usr/share/gtk-2.0 25allow /usr/share/gtk-2.0
26whitelist /usr/share/gtk-3.0 26allow /usr/share/gtk-3.0
27whitelist /usr/share/gtk-engines 27allow /usr/share/gtk-engines
28whitelist /usr/share/gtksourceview-3.0 28allow /usr/share/gtksourceview-3.0
29whitelist /usr/share/gtksourceview-4 29allow /usr/share/gtksourceview-4
30whitelist /usr/share/hunspell 30allow /usr/share/hunspell
31whitelist /usr/share/hwdata 31allow /usr/share/hwdata
32whitelist /usr/share/icons 32allow /usr/share/icons
33whitelist /usr/share/icu 33allow /usr/share/icu
34whitelist /usr/share/knotifications5 34allow /usr/share/knotifications5
35whitelist /usr/share/kservices5 35allow /usr/share/kservices5
36whitelist /usr/share/Kvantum 36allow /usr/share/Kvantum
37whitelist /usr/share/kxmlgui5 37allow /usr/share/kxmlgui5
38whitelist /usr/share/libdrm 38allow /usr/share/libdrm
39whitelist /usr/share/libthai 39allow /usr/share/libthai
40whitelist /usr/share/locale 40allow /usr/share/locale
41whitelist /usr/share/mime 41allow /usr/share/mime
42whitelist /usr/share/misc 42allow /usr/share/misc
43whitelist /usr/share/Modules 43allow /usr/share/Modules
44whitelist /usr/share/myspell 44allow /usr/share/myspell
45whitelist /usr/share/p11-kit 45allow /usr/share/p11-kit
46whitelist /usr/share/perl 46allow /usr/share/perl
47whitelist /usr/share/perl5 47allow /usr/share/perl5
48whitelist /usr/share/pixmaps 48allow /usr/share/pixmaps
49whitelist /usr/share/pki 49allow /usr/share/pki
50whitelist /usr/share/plasma 50allow /usr/share/plasma
51whitelist /usr/share/publicsuffix 51allow /usr/share/publicsuffix
52whitelist /usr/share/qt 52allow /usr/share/qt
53whitelist /usr/share/qt4 53allow /usr/share/qt4
54whitelist /usr/share/qt5 54allow /usr/share/qt5
55whitelist /usr/share/qt5ct 55allow /usr/share/qt5ct
56whitelist /usr/share/sounds 56allow /usr/share/sounds
57whitelist /usr/share/tcl8.6 57allow /usr/share/tcl8.6
58whitelist /usr/share/tcltk 58allow /usr/share/tcltk
59whitelist /usr/share/terminfo 59allow /usr/share/terminfo
60whitelist /usr/share/texlive 60allow /usr/share/texlive
61whitelist /usr/share/texmf 61allow /usr/share/texmf
62whitelist /usr/share/themes 62allow /usr/share/themes
63whitelist /usr/share/thumbnail.so 63allow /usr/share/thumbnail.so
64whitelist /usr/share/uim 64allow /usr/share/uim
65whitelist /usr/share/vulkan 65allow /usr/share/vulkan
66whitelist /usr/share/X11 66allow /usr/share/X11
67whitelist /usr/share/xml 67allow /usr/share/xml
68whitelist /usr/share/zenity 68allow /usr/share/zenity
69whitelist /usr/share/zoneinfo 69allow /usr/share/zoneinfo
diff --git a/etc/inc/whitelist-var-common.inc b/etc/inc/whitelist-var-common.inc
index d8ba84ad0..c449e8905 100644
--- a/etc/inc/whitelist-var-common.inc
+++ b/etc/inc/whitelist-var-common.inc
@@ -4,12 +4,12 @@ include whitelist-var-common.local
4 4
5# common /var whitelist for all profiles 5# common /var whitelist for all profiles
6 6
7whitelist /var/lib/aspell 7allow /var/lib/aspell
8whitelist /var/lib/ca-certificates 8allow /var/lib/ca-certificates
9whitelist /var/lib/dbus 9allow /var/lib/dbus
10whitelist /var/lib/menu-xdg 10allow /var/lib/menu-xdg
11whitelist /var/lib/uim 11allow /var/lib/uim
12whitelist /var/cache/fontconfig 12allow /var/cache/fontconfig
13whitelist /var/tmp 13allow /var/tmp
14whitelist /var/run 14allow /var/run
15whitelist /var/lock 15allow /var/lock
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-06-29 03:42:03 +0000