aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@protonmail.com>2021-07-05 07:23:31 -0400
committerLibravatar netblue30 <netblue30@protonmail.com>2021-07-05 07:23:31 -0400
commitfe0f975f447d59977d90c3226cc8c623b31b20b3 (patch)
tree70897a33cde6c716e273d927d18a6be4b54c18a9 /etc/profile-a-l
parentdeprecated whitelist=yes/no in /etc/firejail/firejail.config (diff)
downloadfirejail-fe0f975f4.tar.gz
firejail-fe0f975f4.tar.zst
firejail-fe0f975f4.zip
move whitelist/blacklist to allow/deny
Diffstat (limited to 'etc/profile-a-l')
-rw-r--r--etc/profile-a-l/0ad.profile18
-rw-r--r--etc/profile-a-l/2048-qt.profile8
-rw-r--r--etc/profile-a-l/Cryptocat.profile2
-rw-r--r--etc/profile-a-l/Discord.profile4
-rw-r--r--etc/profile-a-l/DiscordCanary.profile4
-rw-r--r--etc/profile-a-l/Fritzing.profile4
-rw-r--r--etc/profile-a-l/JDownloader.profile6
-rw-r--r--etc/profile-a-l/abiword.profile4
-rw-r--r--etc/profile-a-l/abrowser.profile8
-rw-r--r--etc/profile-a-l/agetpkg.profile6
-rw-r--r--etc/profile-a-l/akonadi_control.profile32
-rw-r--r--etc/profile-a-l/akregator.profile14
-rw-r--r--etc/profile-a-l/alacarte.profile14
-rw-r--r--etc/profile-a-l/alienarena.profile6
-rw-r--r--etc/profile-a-l/alpine.profile46
-rw-r--r--etc/profile-a-l/amarok.profile2
-rw-r--r--etc/profile-a-l/amule.profile6
-rw-r--r--etc/profile-a-l/android-studio.profile14
-rw-r--r--etc/profile-a-l/anki.profile8
-rw-r--r--etc/profile-a-l/anydesk.profile4
-rw-r--r--etc/profile-a-l/aosp.profile14
-rw-r--r--etc/profile-a-l/apostrophe.profile18
-rw-r--r--etc/profile-a-l/arch-audit.profile4
-rw-r--r--etc/profile-a-l/archaudit-report.profile2
-rw-r--r--etc/profile-a-l/archiver-common.profile2
-rw-r--r--etc/profile-a-l/ardour5.profile12
-rw-r--r--etc/profile-a-l/arduino.profile6
-rw-r--r--etc/profile-a-l/aria2c.profile10
-rw-r--r--etc/profile-a-l/ark.profile6
-rw-r--r--etc/profile-a-l/arm.profile4
-rw-r--r--etc/profile-a-l/artha.profile14
-rw-r--r--etc/profile-a-l/assogiate.profile4
-rw-r--r--etc/profile-a-l/asunder.profile10
-rw-r--r--etc/profile-a-l/atom.profile4
-rw-r--r--etc/profile-a-l/atril.profile6
-rw-r--r--etc/profile-a-l/audacious.profile6
-rw-r--r--etc/profile-a-l/audacity.profile6
-rw-r--r--etc/profile-a-l/audio-recorder.profile10
-rw-r--r--etc/profile-a-l/authenticator-rs.profile8
-rw-r--r--etc/profile-a-l/authenticator.profile4
-rw-r--r--etc/profile-a-l/autokey-common.profile4
-rw-r--r--etc/profile-a-l/avidemux.profile12
-rw-r--r--etc/profile-a-l/aweather.profile4
-rw-r--r--etc/profile-a-l/awesome.profile2
-rw-r--r--etc/profile-a-l/ballbuster.profile6
-rw-r--r--etc/profile-a-l/baloo_file.profile12
-rw-r--r--etc/profile-a-l/balsa.profile36
-rw-r--r--etc/profile-a-l/barrier.profile6
-rw-r--r--etc/profile-a-l/basilisk.profile8
-rw-r--r--etc/profile-a-l/bcompare.profile4
-rw-r--r--etc/profile-a-l/beaker.profile4
-rw-r--r--etc/profile-a-l/bibletime.profile20
-rw-r--r--etc/profile-a-l/bijiben.profile14
-rw-r--r--etc/profile-a-l/bitcoin-qt.profile8
-rw-r--r--etc/profile-a-l/bitlbee.profile4
-rw-r--r--etc/profile-a-l/bitwarden.profile4
-rw-r--r--etc/profile-a-l/blackbox.profile2
-rw-r--r--etc/profile-a-l/blender.profile6
-rw-r--r--etc/profile-a-l/bless.profile2
-rw-r--r--etc/profile-a-l/blobby.profile6
-rw-r--r--etc/profile-a-l/blobwars.profile6
-rw-r--r--etc/profile-a-l/bnox.profile8
-rw-r--r--etc/profile-a-l/brackets.profile2
-rw-r--r--etc/profile-a-l/brasero.profile2
-rw-r--r--etc/profile-a-l/brave.profile22
-rw-r--r--etc/profile-a-l/bzflag.profile4
-rw-r--r--etc/profile-a-l/calibre.profile6
-rw-r--r--etc/profile-a-l/calligra.profile2
-rw-r--r--etc/profile-a-l/calligragemini.profile2
-rw-r--r--etc/profile-a-l/calligraplan.profile2
-rw-r--r--etc/profile-a-l/calligraplanwork.profile2
-rw-r--r--etc/profile-a-l/calligrasheets.profile2
-rw-r--r--etc/profile-a-l/calligrastage.profile2
-rw-r--r--etc/profile-a-l/calligrawords.profile2
-rw-r--r--etc/profile-a-l/cameramonitor.profile2
-rw-r--r--etc/profile-a-l/cantata.profile8
-rw-r--r--etc/profile-a-l/cargo.profile10
-rw-r--r--etc/profile-a-l/catfish.profile4
-rw-r--r--etc/profile-a-l/cawbird.profile2
-rw-r--r--etc/profile-a-l/celluloid.profile14
-rw-r--r--etc/profile-a-l/checkbashisms.profile4
-rw-r--r--etc/profile-a-l/cheese.profile10
-rw-r--r--etc/profile-a-l/cherrytree.profile4
-rw-r--r--etc/profile-a-l/chromium-browser-privacy.profile10
-rw-r--r--etc/profile-a-l/chromium-common.profile10
-rw-r--r--etc/profile-a-l/chromium.profile16
-rw-r--r--etc/profile-a-l/cin.profile2
-rw-r--r--etc/profile-a-l/clamav.profile2
-rw-r--r--etc/profile-a-l/claws-mail.profile6
-rw-r--r--etc/profile-a-l/clawsker.profile4
-rw-r--r--etc/profile-a-l/clementine.profile6
-rw-r--r--etc/profile-a-l/clion.profile14
-rw-r--r--etc/profile-a-l/clipgrab.profile6
-rw-r--r--etc/profile-a-l/clipit.profile8
-rw-r--r--etc/profile-a-l/cliqz.profile12
-rw-r--r--etc/profile-a-l/cmus.profile4
-rw-r--r--etc/profile-a-l/code.profile8
-rw-r--r--etc/profile-a-l/colorful.profile6
-rw-r--r--etc/profile-a-l/com.github.bleakgrey.tootle.profile6
-rw-r--r--etc/profile-a-l/com.github.dahenson.agenda.profile12
-rw-r--r--etc/profile-a-l/com.github.johnfactotum.Foliate.profile18
-rw-r--r--etc/profile-a-l/com.github.phase1geo.minder.profile14
-rw-r--r--etc/profile-a-l/conkeror.profile22
-rw-r--r--etc/profile-a-l/conky.profile2
-rw-r--r--etc/profile-a-l/corebird.profile2
-rw-r--r--etc/profile-a-l/cower.profile4
-rw-r--r--etc/profile-a-l/coyim.profile4
-rw-r--r--etc/profile-a-l/cpio.profile4
-rw-r--r--etc/profile-a-l/crawl.profile4
-rw-r--r--etc/profile-a-l/crow.profile4
-rw-r--r--etc/profile-a-l/curl.profile8
-rw-r--r--etc/profile-a-l/cyberfox.profile8
-rw-r--r--etc/profile-a-l/d-feet.profile6
-rw-r--r--etc/profile-a-l/darktable.profile6
-rw-r--r--etc/profile-a-l/dbus-send.profile4
-rw-r--r--etc/profile-a-l/dconf-editor.profile2
-rw-r--r--etc/profile-a-l/dconf.profile4
-rw-r--r--etc/profile-a-l/ddgtk.profile4
-rw-r--r--etc/profile-a-l/deadbeef.profile4
-rw-r--r--etc/profile-a-l/deluge.profile6
-rw-r--r--etc/profile-a-l/desktopeditors.profile6
-rw-r--r--etc/profile-a-l/devhelp.profile6
-rw-r--r--etc/profile-a-l/devilspie.profile6
-rw-r--r--etc/profile-a-l/devilspie2.profile8
-rw-r--r--etc/profile-a-l/dia.profile6
-rw-r--r--etc/profile-a-l/dig.profile10
-rw-r--r--etc/profile-a-l/digikam.profile12
-rw-r--r--etc/profile-a-l/dillo.profile8
-rw-r--r--etc/profile-a-l/dino.profile6
-rw-r--r--etc/profile-a-l/discord-canary.profile4
-rw-r--r--etc/profile-a-l/discord-common.profile4
-rw-r--r--etc/profile-a-l/discord.profile4
-rw-r--r--etc/profile-a-l/display.profile2
-rw-r--r--etc/profile-a-l/dnox.profile8
-rw-r--r--etc/profile-a-l/dnscrypt-proxy.profile10
-rw-r--r--etc/profile-a-l/dnsmasq.profile8
-rw-r--r--etc/profile-a-l/dolphin-emu.profile14
-rw-r--r--etc/profile-a-l/dooble.profile6
-rw-r--r--etc/profile-a-l/dosbox.profile4
-rw-r--r--etc/profile-a-l/dragon.profile8
-rw-r--r--etc/profile-a-l/drawio.profile6
-rw-r--r--etc/profile-a-l/drill.profile6
-rw-r--r--etc/profile-a-l/dropbox.profile14
-rw-r--r--etc/profile-a-l/easystroke.profile4
-rw-r--r--etc/profile-a-l/electron-mail.profile6
-rw-r--r--etc/profile-a-l/electron.profile2
-rw-r--r--etc/profile-a-l/electrum.profile4
-rw-r--r--etc/profile-a-l/element-desktop.profile6
-rw-r--r--etc/profile-a-l/elinks.profile4
-rw-r--r--etc/profile-a-l/emacs.profile4
-rw-r--r--etc/profile-a-l/email-common.profile30
-rw-r--r--etc/profile-a-l/enchant.profile6
-rw-r--r--etc/profile-a-l/enox.profile8
-rw-r--r--etc/profile-a-l/enpass.profile20
-rw-r--r--etc/profile-a-l/eo-common.profile8
-rw-r--r--etc/profile-a-l/eog.profile4
-rw-r--r--etc/profile-a-l/eom.profile4
-rw-r--r--etc/profile-a-l/ephemeral.profile10
-rw-r--r--etc/profile-a-l/epiphany.profile14
-rw-r--r--etc/profile-a-l/equalx.profile18
-rw-r--r--etc/profile-a-l/etr.profile10
-rw-r--r--etc/profile-a-l/evince.profile14
-rw-r--r--etc/profile-a-l/evolution.profile18
-rw-r--r--etc/profile-a-l/exiftool.profile4
-rw-r--r--etc/profile-a-l/falkon.profile12
-rw-r--r--etc/profile-a-l/fbreader.profile4
-rw-r--r--etc/profile-a-l/fdns.profile8
-rw-r--r--etc/profile-a-l/feedreader.profile10
-rw-r--r--etc/profile-a-l/ferdi.profile18
-rw-r--r--etc/profile-a-l/fetchmail.profile4
-rw-r--r--etc/profile-a-l/ffmpeg.profile10
-rw-r--r--etc/profile-a-l/file-roller.profile4
-rw-r--r--etc/profile-a-l/file.profile2
-rw-r--r--etc/profile-a-l/filezilla.profile4
-rw-r--r--etc/profile-a-l/firedragon.profile8
-rw-r--r--etc/profile-a-l/firefox-common-addons.profile130
-rw-r--r--etc/profile-a-l/firefox-common.profile10
-rw-r--r--etc/profile-a-l/firefox-esr.profile2
-rw-r--r--etc/profile-a-l/firefox.profile22
-rw-r--r--etc/profile-a-l/five-or-more.profile6
-rw-r--r--etc/profile-a-l/flameshot.profile8
-rw-r--r--etc/profile-a-l/flashpeak-slimjet.profile8
-rw-r--r--etc/profile-a-l/flowblade.profile4
-rw-r--r--etc/profile-a-l/fluxbox.profile2
-rw-r--r--etc/profile-a-l/font-manager.profile10
-rw-r--r--etc/profile-a-l/fontforge.profile4
-rw-r--r--etc/profile-a-l/fossamail.profile12
-rw-r--r--etc/profile-a-l/four-in-a-row.profile2
-rw-r--r--etc/profile-a-l/fractal.profile6
-rw-r--r--etc/profile-a-l/franz.profile18
-rw-r--r--etc/profile-a-l/freecad.profile4
-rw-r--r--etc/profile-a-l/freeciv.profile4
-rw-r--r--etc/profile-a-l/freecol.profile18
-rw-r--r--etc/profile-a-l/freemind.profile4
-rw-r--r--etc/profile-a-l/freetube.profile4
-rw-r--r--etc/profile-a-l/frogatto.profile8
-rw-r--r--etc/profile-a-l/frozen-bubble.profile4
-rw-r--r--etc/profile-a-l/funnyboat.profile8
-rw-r--r--etc/profile-a-l/gajim.profile24
-rw-r--r--etc/profile-a-l/galculator.profile4
-rw-r--r--etc/profile-a-l/gapplication.profile4
-rw-r--r--etc/profile-a-l/gcloud.profile6
-rw-r--r--etc/profile-a-l/gconf-editor.profile4
-rw-r--r--etc/profile-a-l/gconf.profile10
-rw-r--r--etc/profile-a-l/geany.profile2
-rw-r--r--etc/profile-a-l/geary.profile36
-rw-r--r--etc/profile-a-l/gedit.profile4
-rw-r--r--etc/profile-a-l/geeqie.profile6
-rw-r--r--etc/profile-a-l/gfeeds.profile20
-rw-r--r--etc/profile-a-l/gget.profile6
-rw-r--r--etc/profile-a-l/ghostwriter.profile16
-rw-r--r--etc/profile-a-l/gimp.profile22
-rw-r--r--etc/profile-a-l/gist.profile10
-rw-r--r--etc/profile-a-l/git-cola.profile32
-rw-r--r--etc/profile-a-l/git.profile34
-rw-r--r--etc/profile-a-l/gitg.profile10
-rw-r--r--etc/profile-a-l/github-desktop.profile8
-rw-r--r--etc/profile-a-l/gitter.profile10
-rw-r--r--etc/profile-a-l/gjs.profile8
-rw-r--r--etc/profile-a-l/gl-117.profile6
-rw-r--r--etc/profile-a-l/glaxium.profile6
-rw-r--r--etc/profile-a-l/globaltime.profile2
-rw-r--r--etc/profile-a-l/gmpc.profile10
-rw-r--r--etc/profile-a-l/gnome-2048.profile4
-rw-r--r--etc/profile-a-l/gnome-books.profile4
-rw-r--r--etc/profile-a-l/gnome-builder.profile8
-rw-r--r--etc/profile-a-l/gnome-calendar.profile2
-rw-r--r--etc/profile-a-l/gnome-characters.profile2
-rw-r--r--etc/profile-a-l/gnome-chess.profile8
-rw-r--r--etc/profile-a-l/gnome-clocks.profile4
-rw-r--r--etc/profile-a-l/gnome-contacts.profile2
-rw-r--r--etc/profile-a-l/gnome-documents.profile4
-rw-r--r--etc/profile-a-l/gnome-hexgl.profile2
-rw-r--r--etc/profile-a-l/gnome-keyring.profile14
-rw-r--r--etc/profile-a-l/gnome-klotski.profile4
-rw-r--r--etc/profile-a-l/gnome-latex.profile8
-rw-r--r--etc/profile-a-l/gnome-logs.profile2
-rw-r--r--etc/profile-a-l/gnome-mahjongg.profile2
-rw-r--r--etc/profile-a-l/gnome-maps.profile20
-rw-r--r--etc/profile-a-l/gnome-mines.profile6
-rw-r--r--etc/profile-a-l/gnome-mplayer.profile6
-rw-r--r--etc/profile-a-l/gnome-music.profile4
-rw-r--r--etc/profile-a-l/gnome-nettool.profile2
-rw-r--r--etc/profile-a-l/gnome-nibbles.profile6
-rw-r--r--etc/profile-a-l/gnome-passwordsafe.profile12
-rw-r--r--etc/profile-a-l/gnome-photos.profile2
-rw-r--r--etc/profile-a-l/gnome-pie.profile2
-rw-r--r--etc/profile-a-l/gnome-pomodoro.profile6
-rw-r--r--etc/profile-a-l/gnome-recipes.profile10
-rw-r--r--etc/profile-a-l/gnome-ring.profile2
-rw-r--r--etc/profile-a-l/gnome-robots.profile2
-rw-r--r--etc/profile-a-l/gnome-schedule.profile22
-rw-r--r--etc/profile-a-l/gnome-screenshot.profile4
-rw-r--r--etc/profile-a-l/gnome-sound-recorder.profile4
-rw-r--r--etc/profile-a-l/gnome-sudoku.profile4
-rw-r--r--etc/profile-a-l/gnome-system-log.profile2
-rw-r--r--etc/profile-a-l/gnome-taquin.profile2
-rw-r--r--etc/profile-a-l/gnome-todo.profile2
-rw-r--r--etc/profile-a-l/gnome-twitch.profile8
-rw-r--r--etc/profile-a-l/gnome-weather.profile2
-rw-r--r--etc/profile-a-l/gnote.profile10
-rw-r--r--etc/profile-a-l/gnubik.profile2
-rw-r--r--etc/profile-a-l/godot.profile6
-rw-r--r--etc/profile-a-l/goobox.profile2
-rw-r--r--etc/profile-a-l/google-chrome-beta.profile16
-rw-r--r--etc/profile-a-l/google-chrome-unstable.profile16
-rw-r--r--etc/profile-a-l/google-chrome.profile16
-rw-r--r--etc/profile-a-l/google-earth.profile8
-rw-r--r--etc/profile-a-l/google-play-music-desktop-player.profile4
-rw-r--r--etc/profile-a-l/googler-common.profile8
-rw-r--r--etc/profile-a-l/gpa.profile2
-rw-r--r--etc/profile-a-l/gpg-agent.profile16
-rw-r--r--etc/profile-a-l/gpg.profile16
-rw-r--r--etc/profile-a-l/gpicview.profile4
-rw-r--r--etc/profile-a-l/gpredict.profile4
-rw-r--r--etc/profile-a-l/gradio.profile8
-rw-r--r--etc/profile-a-l/gramps.profile4
-rw-r--r--etc/profile-a-l/gravity-beams-and-evaporating-stars.profile2
-rw-r--r--etc/profile-a-l/gthumb.profile6
-rw-r--r--etc/profile-a-l/gtk-update-icon-cache.profile2
-rw-r--r--etc/profile-a-l/gtk2-youtube-viewer.profile4
-rw-r--r--etc/profile-a-l/gtk3-youtube-viewer.profile4
-rw-r--r--etc/profile-a-l/guayadeque.profile4
-rw-r--r--etc/profile-a-l/gummi.profile4
-rw-r--r--etc/profile-a-l/guvcview.profile12
-rw-r--r--etc/profile-a-l/gwenview.profile22
-rw-r--r--etc/profile-a-l/gzip.profile2
-rw-r--r--etc/profile-a-l/handbrake.profile6
-rw-r--r--etc/profile-a-l/hashcat.profile8
-rw-r--r--etc/profile-a-l/hasher-common.profile2
-rw-r--r--etc/profile-a-l/hedgewars.profile4
-rw-r--r--etc/profile-a-l/hexchat.profile4
-rw-r--r--etc/profile-a-l/highlight.profile2
-rw-r--r--etc/profile-a-l/homebank.profile8
-rw-r--r--etc/profile-a-l/host.profile4
-rw-r--r--etc/profile-a-l/hugin.profile6
-rw-r--r--etc/profile-a-l/hyperrogue.profile6
-rw-r--r--etc/profile-a-l/i2prouter.profile20
-rw-r--r--etc/profile-a-l/i3.profile2
-rw-r--r--etc/profile-a-l/icecat.profile8
-rw-r--r--etc/profile-a-l/icedove.profile12
-rw-r--r--etc/profile-a-l/idea.sh.profile12
-rw-r--r--etc/profile-a-l/imagej.profile2
-rw-r--r--etc/profile-a-l/img2txt.profile8
-rw-r--r--etc/profile-a-l/impressive.profile10
-rw-r--r--etc/profile-a-l/inkscape.profile16
-rw-r--r--etc/profile-a-l/inox.profile8
-rw-r--r--etc/profile-a-l/iridium.profile8
-rw-r--r--etc/profile-a-l/itch.profile8
-rw-r--r--etc/profile-a-l/jami-gnome.profile8
-rw-r--r--etc/profile-a-l/jd-gui.profile2
-rw-r--r--etc/profile-a-l/jerry.profile2
-rw-r--r--etc/profile-a-l/jitsi-meet-desktop.profile6
-rw-r--r--etc/profile-a-l/jitsi.profile2
-rw-r--r--etc/profile-a-l/jumpnbump.profile6
-rw-r--r--etc/profile-a-l/k3b.profile10
-rw-r--r--etc/profile-a-l/kaffeine.profile16
-rw-r--r--etc/profile-a-l/kalgebra.profile6
-rw-r--r--etc/profile-a-l/karbon.profile2
-rw-r--r--etc/profile-a-l/kate.profile28
-rw-r--r--etc/profile-a-l/kazam.profile8
-rw-r--r--etc/profile-a-l/kcalc.profile16
-rw-r--r--etc/profile-a-l/kdenlive.profile8
-rw-r--r--etc/profile-a-l/kdiff3.profile8
-rw-r--r--etc/profile-a-l/keepass.profile16
-rw-r--r--etc/profile-a-l/keepassx.profile10
-rw-r--r--etc/profile-a-l/keepassxc.profile30
-rw-r--r--etc/profile-a-l/kget.profile14
-rw-r--r--etc/profile-a-l/kid3-qt.profile2
-rw-r--r--etc/profile-a-l/kid3.profile6
-rw-r--r--etc/profile-a-l/kino.profile4
-rw-r--r--etc/profile-a-l/kiwix-desktop.profile8
-rw-r--r--etc/profile-a-l/klatexformula.profile4
-rw-r--r--etc/profile-a-l/klavaro.profile8
-rw-r--r--etc/profile-a-l/kmail.profile42
-rw-r--r--etc/profile-a-l/kmplayer.profile10
-rw-r--r--etc/profile-a-l/knotes.profile6
-rw-r--r--etc/profile-a-l/kodi.profile8
-rw-r--r--etc/profile-a-l/konversation.profile10
-rw-r--r--etc/profile-a-l/kopete.profile12
-rw-r--r--etc/profile-a-l/krita.profile8
-rw-r--r--etc/profile-a-l/krunner.profile6
-rw-r--r--etc/profile-a-l/ktorrent.profile30
-rw-r--r--etc/profile-a-l/ktouch.profile8
-rw-r--r--etc/profile-a-l/kube.profile36
-rw-r--r--etc/profile-a-l/kwin_x11.profile8
-rw-r--r--etc/profile-a-l/kwrite.profile18
-rw-r--r--etc/profile-a-l/latex-common.profile2
-rw-r--r--etc/profile-a-l/leafpad.profile2
-rw-r--r--etc/profile-a-l/less.profile4
-rw-r--r--etc/profile-a-l/librecad.profile6
-rw-r--r--etc/profile-a-l/libreoffice.profile6
-rw-r--r--etc/profile-a-l/librewolf.profile16
-rw-r--r--etc/profile-a-l/liferea.profile14
-rw-r--r--etc/profile-a-l/lightsoff.profile2
-rw-r--r--etc/profile-a-l/lincity-ng.profile4
-rw-r--r--etc/profile-a-l/links-common.profile6
-rw-r--r--etc/profile-a-l/links.profile4
-rw-r--r--etc/profile-a-l/links2.profile4
-rw-r--r--etc/profile-a-l/linphone.profile18
-rw-r--r--etc/profile-a-l/lmms.profile6
-rw-r--r--etc/profile-a-l/lollypop.profile4
-rw-r--r--etc/profile-a-l/lugaru.profile8
-rw-r--r--etc/profile-a-l/luminance-hdr.profile4
-rw-r--r--etc/profile-a-l/lutris.profile34
-rw-r--r--etc/profile-a-l/lximage-qt.profile2
-rw-r--r--etc/profile-a-l/lxmusic.profile6
-rw-r--r--etc/profile-a-l/lynx.profile4
-rw-r--r--etc/profile-a-l/lyx.profile14
-rw-r--r--etc/profile-a-l/sway.profile4
370 files changed, 1564 insertions, 1564 deletions
diff --git a/etc/profile-a-l/0ad.profile b/etc/profile-a-l/0ad.profile
index 4009853d3..6f493fff1 100644
--- a/etc/profile-a-l/0ad.profile
+++ b/etc/profile-a-l/0ad.profile
@@ -6,11 +6,11 @@ include 0ad.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/0ad 9nodeny ${HOME}/.cache/0ad
10noblacklist ${HOME}/.config/0ad 10nodeny ${HOME}/.config/0ad
11noblacklist ${HOME}/.local/share/0ad 11nodeny ${HOME}/.local/share/0ad
12 12
13blacklist /usr/libexec 13deny /usr/libexec
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -23,11 +23,11 @@ include disable-xdg.inc
23mkdir ${HOME}/.cache/0ad 23mkdir ${HOME}/.cache/0ad
24mkdir ${HOME}/.config/0ad 24mkdir ${HOME}/.config/0ad
25mkdir ${HOME}/.local/share/0ad 25mkdir ${HOME}/.local/share/0ad
26whitelist ${HOME}/.cache/0ad 26allow ${HOME}/.cache/0ad
27whitelist ${HOME}/.config/0ad 27allow ${HOME}/.config/0ad
28whitelist ${HOME}/.local/share/0ad 28allow ${HOME}/.local/share/0ad
29whitelist /usr/share/0ad 29allow /usr/share/0ad
30whitelist /usr/share/games 30allow /usr/share/games
31include whitelist-common.inc 31include whitelist-common.inc
32include whitelist-usr-share-common.inc 32include whitelist-usr-share-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
diff --git a/etc/profile-a-l/2048-qt.profile b/etc/profile-a-l/2048-qt.profile
index 1d787cba7..3a7b331a7 100644
--- a/etc/profile-a-l/2048-qt.profile
+++ b/etc/profile-a-l/2048-qt.profile
@@ -6,8 +6,8 @@ include 2048-qt.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/2048-qt 9nodeny ${HOME}/.config/2048-qt
10noblacklist ${HOME}/.config/xiaoyong 10nodeny ${HOME}/.config/xiaoyong
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-programs.inc
18 18
19mkdir ${HOME}/.config/2048-qt 19mkdir ${HOME}/.config/2048-qt
20mkdir ${HOME}/.config/xiaoyong 20mkdir ${HOME}/.config/xiaoyong
21whitelist ${HOME}/.config/2048-qt 21allow ${HOME}/.config/2048-qt
22whitelist ${HOME}/.config/xiaoyong 22allow ${HOME}/.config/xiaoyong
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-var-common.inc 24include whitelist-var-common.inc
25 25
diff --git a/etc/profile-a-l/Cryptocat.profile b/etc/profile-a-l/Cryptocat.profile
index 1d86b0fbf..def0ec111 100644
--- a/etc/profile-a-l/Cryptocat.profile
+++ b/etc/profile-a-l/Cryptocat.profile
@@ -5,7 +5,7 @@ include Cryptocat.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/Cryptocat 8nodeny ${HOME}/.config/Cryptocat
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
diff --git a/etc/profile-a-l/Discord.profile b/etc/profile-a-l/Discord.profile
index 3f274b21c..1d3ae49ca 100644
--- a/etc/profile-a-l/Discord.profile
+++ b/etc/profile-a-l/Discord.profile
@@ -5,10 +5,10 @@ include Discord.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/discord 8nodeny ${HOME}/.config/discord
9 9
10mkdir ${HOME}/.config/discord 10mkdir ${HOME}/.config/discord
11whitelist ${HOME}/.config/discord 11allow ${HOME}/.config/discord
12 12
13private-bin Discord 13private-bin Discord
14private-opt Discord 14private-opt Discord
diff --git a/etc/profile-a-l/DiscordCanary.profile b/etc/profile-a-l/DiscordCanary.profile
index d24e73ed8..3c85f187b 100644
--- a/etc/profile-a-l/DiscordCanary.profile
+++ b/etc/profile-a-l/DiscordCanary.profile
@@ -5,10 +5,10 @@ include DiscordCanary.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/discordcanary 8nodeny ${HOME}/.config/discordcanary
9 9
10mkdir ${HOME}/.config/discordcanary 10mkdir ${HOME}/.config/discordcanary
11whitelist ${HOME}/.config/discordcanary 11allow ${HOME}/.config/discordcanary
12 12
13private-bin DiscordCanary 13private-bin DiscordCanary
14private-opt DiscordCanary 14private-opt DiscordCanary
diff --git a/etc/profile-a-l/Fritzing.profile b/etc/profile-a-l/Fritzing.profile
index 7dc6b5ff0..8f746581f 100644
--- a/etc/profile-a-l/Fritzing.profile
+++ b/etc/profile-a-l/Fritzing.profile
@@ -6,8 +6,8 @@ include Fritzing.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/Fritzing 9nodeny ${HOME}/.config/Fritzing
10noblacklist ${DOCUMENTS} 10nodeny ${DOCUMENTS}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/JDownloader.profile b/etc/profile-a-l/JDownloader.profile
index d10b70796..9a00c3230 100644
--- a/etc/profile-a-l/JDownloader.profile
+++ b/etc/profile-a-l/JDownloader.profile
@@ -5,7 +5,7 @@ include JDownloader.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.jd 8nodeny ${HOME}/.jd
9 9
10# Allow java (blacklisted by disable-devel.inc) 10# Allow java (blacklisted by disable-devel.inc)
11include allow-java.inc 11include allow-java.inc
@@ -19,8 +19,8 @@ include disable-programs.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21mkdir ${HOME}/.jd 21mkdir ${HOME}/.jd
22whitelist ${HOME}/.jd 22allow ${HOME}/.jd
23whitelist ${DOWNLOADS} 23allow ${DOWNLOADS}
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
26 26
diff --git a/etc/profile-a-l/abiword.profile b/etc/profile-a-l/abiword.profile
index 75da9a956..2a92c7db4 100644
--- a/etc/profile-a-l/abiword.profile
+++ b/etc/profile-a-l/abiword.profile
@@ -6,7 +6,7 @@ include abiword.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/abiword 9nodeny ${HOME}/.config/abiword
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,7 +16,7 @@ include disable-passwdmgr.inc
16include disable-programs.inc 16include disable-programs.inc
17include disable-shell.inc 17include disable-shell.inc
18 18
19whitelist /usr/share/abiword-3.0 19allow /usr/share/abiword-3.0
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-runuser-common.inc 21include whitelist-runuser-common.inc
22include whitelist-var-common.inc 22include whitelist-var-common.inc
diff --git a/etc/profile-a-l/abrowser.profile b/etc/profile-a-l/abrowser.profile
index 2e6e8f1af..70ddcec20 100644
--- a/etc/profile-a-l/abrowser.profile
+++ b/etc/profile-a-l/abrowser.profile
@@ -5,13 +5,13 @@ include abrowser.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.cache/mozilla 8nodeny ${HOME}/.cache/mozilla
9noblacklist ${HOME}/.mozilla 9nodeny ${HOME}/.mozilla
10 10
11mkdir ${HOME}/.cache/mozilla/abrowser 11mkdir ${HOME}/.cache/mozilla/abrowser
12mkdir ${HOME}/.mozilla 12mkdir ${HOME}/.mozilla
13whitelist ${HOME}/.cache/mozilla/abrowser 13allow ${HOME}/.cache/mozilla/abrowser
14whitelist ${HOME}/.mozilla 14allow ${HOME}/.mozilla
15 15
16# private-etc must first be enabled in firefox-common.profile 16# private-etc must first be enabled in firefox-common.profile
17#private-etc abrowser 17#private-etc abrowser
diff --git a/etc/profile-a-l/agetpkg.profile b/etc/profile-a-l/agetpkg.profile
index 34f59769e..d32586c5b 100644
--- a/etc/profile-a-l/agetpkg.profile
+++ b/etc/profile-a-l/agetpkg.profile
@@ -7,8 +7,8 @@ include agetpkg.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist /tmp/.X11-unix 10deny /tmp/.X11-unix
11blacklist ${RUNUSER}/wayland-* 11deny ${RUNUSER}/wayland-*
12 12
13# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
14#include allow-python2.inc 14#include allow-python2.inc
@@ -23,7 +23,7 @@ include disable-programs.inc
23include disable-shell.inc 23include disable-shell.inc
24include disable-xdg.inc 24include disable-xdg.inc
25 25
26whitelist ${DOWNLOADS} 26allow ${DOWNLOADS}
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc 29include whitelist-var-common.inc
diff --git a/etc/profile-a-l/akonadi_control.profile b/etc/profile-a-l/akonadi_control.profile
index 37fdb38b5..7b1d1445f 100644
--- a/etc/profile-a-l/akonadi_control.profile
+++ b/etc/profile-a-l/akonadi_control.profile
@@ -4,22 +4,22 @@ include akonadi_control.local
4# Persistent global definitions 4# Persistent global definitions
5include globals.local 5include globals.local
6 6
7noblacklist ${HOME}/.cache/akonadi* 7nodeny ${HOME}/.cache/akonadi*
8noblacklist ${HOME}/.config/akonadi* 8nodeny ${HOME}/.config/akonadi*
9noblacklist ${HOME}/.config/baloorc 9nodeny ${HOME}/.config/baloorc
10noblacklist ${HOME}/.config/emaildefaults 10nodeny ${HOME}/.config/emaildefaults
11noblacklist ${HOME}/.config/emailidentities 11nodeny ${HOME}/.config/emailidentities
12noblacklist ${HOME}/.config/kmail2rc 12nodeny ${HOME}/.config/kmail2rc
13noblacklist ${HOME}/.config/mailtransports 13nodeny ${HOME}/.config/mailtransports
14noblacklist ${HOME}/.config/specialmailcollectionsrc 14nodeny ${HOME}/.config/specialmailcollectionsrc
15noblacklist ${HOME}/.local/share/akonadi* 15nodeny ${HOME}/.local/share/akonadi*
16noblacklist ${HOME}/.local/share/apps/korganizer 16nodeny ${HOME}/.local/share/apps/korganizer
17noblacklist ${HOME}/.local/share/contacts 17nodeny ${HOME}/.local/share/contacts
18noblacklist ${HOME}/.local/share/local-mail 18nodeny ${HOME}/.local/share/local-mail
19noblacklist ${HOME}/.local/share/notes 19nodeny ${HOME}/.local/share/notes
20noblacklist /sbin 20nodeny /sbin
21noblacklist /tmp/akonadi-* 21nodeny /tmp/akonadi-*
22noblacklist /usr/sbin 22nodeny /usr/sbin
23 23
24include disable-common.inc 24include disable-common.inc
25include disable-devel.inc 25include disable-devel.inc
diff --git a/etc/profile-a-l/akregator.profile b/etc/profile-a-l/akregator.profile
index 38fcd2dc1..b2323547c 100644
--- a/etc/profile-a-l/akregator.profile
+++ b/etc/profile-a-l/akregator.profile
@@ -6,9 +6,9 @@ include akregator.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/akregatorrc 9nodeny ${HOME}/.config/akregatorrc
10noblacklist ${HOME}/.local/share/akregator 10nodeny ${HOME}/.local/share/akregator
11noblacklist ${HOME}/.local/share/kxmlgui5/akregator 11nodeny ${HOME}/.local/share/kxmlgui5/akregator
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -21,10 +21,10 @@ include disable-shell.inc
21mkfile ${HOME}/.config/akregatorrc 21mkfile ${HOME}/.config/akregatorrc
22mkdir ${HOME}/.local/share/akregator 22mkdir ${HOME}/.local/share/akregator
23mkdir ${HOME}/.local/share/kxmlgui5/akregator 23mkdir ${HOME}/.local/share/kxmlgui5/akregator
24whitelist ${HOME}/.config/akregatorrc 24allow ${HOME}/.config/akregatorrc
25whitelist ${HOME}/.local/share/akregator 25allow ${HOME}/.local/share/akregator
26whitelist ${HOME}/.local/share/kssl 26allow ${HOME}/.local/share/kssl
27whitelist ${HOME}/.local/share/kxmlgui5/akregator 27allow ${HOME}/.local/share/kxmlgui5/akregator
28include whitelist-common.inc 28include whitelist-common.inc
29include whitelist-var-common.inc 29include whitelist-var-common.inc
30 30
diff --git a/etc/profile-a-l/alacarte.profile b/etc/profile-a-l/alacarte.profile
index 4c6d68020..ca6c8d887 100644
--- a/etc/profile-a-l/alacarte.profile
+++ b/etc/profile-a-l/alacarte.profile
@@ -19,13 +19,13 @@ include disable-passwdmgr.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21# Whitelist your system icon directory,varies by distro 21# Whitelist your system icon directory,varies by distro
22whitelist /usr/share/alacarte 22allow /usr/share/alacarte
23whitelist /usr/share/app-info 23allow /usr/share/app-info
24whitelist /usr/share/desktop-directories 24allow /usr/share/desktop-directories
25whitelist /usr/share/icons 25allow /usr/share/icons
26whitelist /var/lib/app-info/icons 26allow /var/lib/app-info/icons
27whitelist /var/lib/flatpak/exports/share/applications 27allow /var/lib/flatpak/exports/share/applications
28whitelist /var/lib/flatpak/exports/share/icons 28allow /var/lib/flatpak/exports/share/icons
29include whitelist-runuser-common.inc 29include whitelist-runuser-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/alienarena.profile b/etc/profile-a-l/alienarena.profile
index 81ee6bd46..220c3345d 100644
--- a/etc/profile-a-l/alienarena.profile
+++ b/etc/profile-a-l/alienarena.profile
@@ -6,7 +6,7 @@ include alienarena.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/cor-games 9nodeny ${HOME}/.local/share/cor-games
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.local/share/cor-games 20mkdir ${HOME}/.local/share/cor-games
21whitelist ${HOME}/.local/share/cor-games 21allow ${HOME}/.local/share/cor-games
22whitelist /usr/share/alienarena 22allow /usr/share/alienarena
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/alpine.profile b/etc/profile-a-l/alpine.profile
index 0b5cf0df0..6fa3edfa1 100644
--- a/etc/profile-a-l/alpine.profile
+++ b/etc/profile-a-l/alpine.profile
@@ -10,28 +10,28 @@ include globals.local
10# Workaround for bug https://github.com/netblue30/firejail/issues/2747 10# Workaround for bug https://github.com/netblue30/firejail/issues/2747
11# firejail --private-bin=sh --include='${CFG}/allow-bin-sh.inc' --profile=alpine sh -c '(alpine)' 11# firejail --private-bin=sh --include='${CFG}/allow-bin-sh.inc' --profile=alpine sh -c '(alpine)'
12 12
13noblacklist /var/mail 13nodeny /var/mail
14noblacklist /var/spool/mail 14nodeny /var/spool/mail
15noblacklist ${DOCUMENTS} 15nodeny ${DOCUMENTS}
16noblacklist ${HOME}/.addressbook 16nodeny ${HOME}/.addressbook
17noblacklist ${HOME}/.alpine-smime 17nodeny ${HOME}/.alpine-smime
18noblacklist ${HOME}/.mailcap 18nodeny ${HOME}/.mailcap
19noblacklist ${HOME}/.mh_profile 19nodeny ${HOME}/.mh_profile
20noblacklist ${HOME}/.mime.types 20nodeny ${HOME}/.mime.types
21noblacklist ${HOME}/.newsrc 21nodeny ${HOME}/.newsrc
22noblacklist ${HOME}/.pine-crash 22nodeny ${HOME}/.pine-crash
23noblacklist ${HOME}/.pine-debug1 23nodeny ${HOME}/.pine-debug1
24noblacklist ${HOME}/.pine-debug2 24nodeny ${HOME}/.pine-debug2
25noblacklist ${HOME}/.pine-debug3 25nodeny ${HOME}/.pine-debug3
26noblacklist ${HOME}/.pine-debug4 26nodeny ${HOME}/.pine-debug4
27noblacklist ${HOME}/.pine-interrupted-mail 27nodeny ${HOME}/.pine-interrupted-mail
28noblacklist ${HOME}/.pinerc 28nodeny ${HOME}/.pinerc
29noblacklist ${HOME}/.pinercex 29nodeny ${HOME}/.pinercex
30noblacklist ${HOME}/.signature 30nodeny ${HOME}/.signature
31noblacklist ${HOME}/mail 31nodeny ${HOME}/mail
32 32
33blacklist /tmp/.X11-unix 33deny /tmp/.X11-unix
34blacklist ${RUNUSER}/wayland-* 34deny ${RUNUSER}/wayland-*
35 35
36include disable-common.inc 36include disable-common.inc
37include disable-devel.inc 37include disable-devel.inc
@@ -60,8 +60,8 @@ include disable-xdg.inc
60#whitelist ${HOME}/.pine-debug4 60#whitelist ${HOME}/.pine-debug4
61#whitelist ${HOME}/.signature 61#whitelist ${HOME}/.signature
62#whitelist ${HOME}/mail 62#whitelist ${HOME}/mail
63whitelist /var/mail 63allow /var/mail
64whitelist /var/spool/mail 64allow /var/spool/mail
65#include whitelist-common.inc 65#include whitelist-common.inc
66include whitelist-runuser-common.inc 66include whitelist-runuser-common.inc
67include whitelist-usr-share-common.inc 67include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/amarok.profile b/etc/profile-a-l/amarok.profile
index a7caddc4c..03aba36e4 100644
--- a/etc/profile-a-l/amarok.profile
+++ b/etc/profile-a-l/amarok.profile
@@ -6,7 +6,7 @@ include amarok.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${MUSIC} 9nodeny ${MUSIC}
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/amule.profile b/etc/profile-a-l/amule.profile
index e3c4164ee..00039a7e9 100644
--- a/etc/profile-a-l/amule.profile
+++ b/etc/profile-a-l/amule.profile
@@ -6,7 +6,7 @@ include amule.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.aMule 9nodeny ${HOME}/.aMule
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,8 +16,8 @@ include disable-passwdmgr.inc
16include disable-programs.inc 16include disable-programs.inc
17 17
18mkdir ${HOME}/.aMule 18mkdir ${HOME}/.aMule
19whitelist ${DOWNLOADS} 19allow ${DOWNLOADS}
20whitelist ${HOME}/.aMule 20allow ${HOME}/.aMule
21include whitelist-common.inc 21include whitelist-common.inc
22 22
23caps.drop all 23caps.drop all
diff --git a/etc/profile-a-l/android-studio.profile b/etc/profile-a-l/android-studio.profile
index 5a21744cf..5bf6ed773 100644
--- a/etc/profile-a-l/android-studio.profile
+++ b/etc/profile-a-l/android-studio.profile
@@ -5,13 +5,13 @@ include android-studio.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/Google 8nodeny ${HOME}/.config/Google
9noblacklist ${HOME}/.AndroidStudio* 9nodeny ${HOME}/.AndroidStudio*
10noblacklist ${HOME}/.android 10nodeny ${HOME}/.android
11noblacklist ${HOME}/.jack-server 11nodeny ${HOME}/.jack-server
12noblacklist ${HOME}/.jack-settings 12nodeny ${HOME}/.jack-settings
13noblacklist ${HOME}/.local/share/JetBrains 13nodeny ${HOME}/.local/share/JetBrains
14noblacklist ${HOME}/.tooling 14nodeny ${HOME}/.tooling
15 15
16# Allows files commonly used by IDEs 16# Allows files commonly used by IDEs
17include allow-common-devel.inc 17include allow-common-devel.inc
diff --git a/etc/profile-a-l/anki.profile b/etc/profile-a-l/anki.profile
index ef60e91c2..ec99fe6c2 100644
--- a/etc/profile-a-l/anki.profile
+++ b/etc/profile-a-l/anki.profile
@@ -6,8 +6,8 @@ include anki.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${DOCUMENTS} 9nodeny ${DOCUMENTS}
10noblacklist ${HOME}/.local/share/Anki2 10nodeny ${HOME}/.local/share/Anki2
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
@@ -23,8 +23,8 @@ include disable-shell.inc
23include disable-xdg.inc 23include disable-xdg.inc
24 24
25mkdir ${HOME}/.local/share/Anki2 25mkdir ${HOME}/.local/share/Anki2
26whitelist ${DOCUMENTS} 26allow ${DOCUMENTS}
27whitelist ${HOME}/.local/share/Anki2 27allow ${HOME}/.local/share/Anki2
28include whitelist-common.inc 28include whitelist-common.inc
29include whitelist-var-common.inc 29include whitelist-var-common.inc
30 30
diff --git a/etc/profile-a-l/anydesk.profile b/etc/profile-a-l/anydesk.profile
index fdaf10259..cb30ed8da 100644
--- a/etc/profile-a-l/anydesk.profile
+++ b/etc/profile-a-l/anydesk.profile
@@ -5,7 +5,7 @@ include anydesk.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.anydesk 8nodeny ${HOME}/.anydesk
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16 16
17mkdir ${HOME}/.anydesk 17mkdir ${HOME}/.anydesk
18whitelist ${HOME}/.anydesk 18allow ${HOME}/.anydesk
19include whitelist-common.inc 19include whitelist-common.inc
20 20
21caps.drop all 21caps.drop all
diff --git a/etc/profile-a-l/aosp.profile b/etc/profile-a-l/aosp.profile
index e7b09283e..d647a4657 100644
--- a/etc/profile-a-l/aosp.profile
+++ b/etc/profile-a-l/aosp.profile
@@ -5,13 +5,13 @@ include aosp.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.android 8nodeny ${HOME}/.android
9noblacklist ${HOME}/.bash_history 9nodeny ${HOME}/.bash_history
10noblacklist ${HOME}/.jack-server 10nodeny ${HOME}/.jack-server
11noblacklist ${HOME}/.jack-settings 11nodeny ${HOME}/.jack-settings
12noblacklist ${HOME}/.repo_.gitconfig.json 12nodeny ${HOME}/.repo_.gitconfig.json
13noblacklist ${HOME}/.repoconfig 13nodeny ${HOME}/.repoconfig
14noblacklist ${HOME}/.tooling 14nodeny ${HOME}/.tooling
15 15
16# Allows files commonly used by IDEs 16# Allows files commonly used by IDEs
17include allow-common-devel.inc 17include allow-common-devel.inc
diff --git a/etc/profile-a-l/apostrophe.profile b/etc/profile-a-l/apostrophe.profile
index 01566314f..020ae2812 100644
--- a/etc/profile-a-l/apostrophe.profile
+++ b/etc/profile-a-l/apostrophe.profile
@@ -6,9 +6,9 @@ include apostrophe.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.texlive20* 9nodeny ${HOME}/.texlive20*
10noblacklist ${DOCUMENTS} 10nodeny ${DOCUMENTS}
11noblacklist ${PICTURES} 11nodeny ${PICTURES}
12 12
13# Allow lua (blacklisted by disable-interpreters.inc) 13# Allow lua (blacklisted by disable-interpreters.inc)
14include allow-lua.inc 14include allow-lua.inc
@@ -31,12 +31,12 @@ include disable-programs.inc
31include disable-shell.inc 31include disable-shell.inc
32include disable-xdg.inc 32include disable-xdg.inc
33 33
34whitelist /usr/libexec/webkit2gtk-4.0 34allow /usr/libexec/webkit2gtk-4.0
35whitelist /usr/share/apostrophe 35allow /usr/share/apostrophe
36whitelist /usr/share/texlive 36allow /usr/share/texlive
37whitelist /usr/share/texmf 37allow /usr/share/texmf
38whitelist /usr/share/pandoc-* 38allow /usr/share/pandoc-*
39whitelist /usr/share/perl5 39allow /usr/share/perl5
40include whitelist-runuser-common.inc 40include whitelist-runuser-common.inc
41include whitelist-usr-share-common.inc 41include whitelist-usr-share-common.inc
42include whitelist-var-common.inc 42include whitelist-var-common.inc
diff --git a/etc/profile-a-l/arch-audit.profile b/etc/profile-a-l/arch-audit.profile
index accabb6f5..8c71dd574 100644
--- a/etc/profile-a-l/arch-audit.profile
+++ b/etc/profile-a-l/arch-audit.profile
@@ -7,7 +7,7 @@ include arch-audit.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist /var/lib/pacman 10nodeny /var/lib/pacman
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -18,7 +18,7 @@ include disable-programs.inc
18include disable-shell.inc 18include disable-shell.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21whitelist /usr/share/arch-audit 21allow /usr/share/arch-audit
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23 23
24apparmor 24apparmor
diff --git a/etc/profile-a-l/archaudit-report.profile b/etc/profile-a-l/archaudit-report.profile
index 19c37f90e..0915ede33 100644
--- a/etc/profile-a-l/archaudit-report.profile
+++ b/etc/profile-a-l/archaudit-report.profile
@@ -6,7 +6,7 @@ include archaudit-report.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist /var/lib/pacman 9nodeny /var/lib/pacman
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/archiver-common.profile b/etc/profile-a-l/archiver-common.profile
index 1fab4606b..5b859ceb1 100644
--- a/etc/profile-a-l/archiver-common.profile
+++ b/etc/profile-a-l/archiver-common.profile
@@ -4,7 +4,7 @@ include archiver-common.local
4 4
5# common profile for archiver/compression tools 5# common profile for archiver/compression tools
6 6
7blacklist ${RUNUSER} 7deny ${RUNUSER}
8 8
9# Comment/uncomment the relevant include file(s) in your archiver-common.local 9# Comment/uncomment the relevant include file(s) in your archiver-common.local
10# to (un)restrict file access for **all** archivers. Another option is to do this **per archiver** 10# to (un)restrict file access for **all** archivers. Another option is to do this **per archiver**
diff --git a/etc/profile-a-l/ardour5.profile b/etc/profile-a-l/ardour5.profile
index 84b1d6c18..960948afc 100644
--- a/etc/profile-a-l/ardour5.profile
+++ b/etc/profile-a-l/ardour5.profile
@@ -5,12 +5,12 @@ include ardour5.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/ardour4 8nodeny ${HOME}/.config/ardour4
9noblacklist ${HOME}/.config/ardour5 9nodeny ${HOME}/.config/ardour5
10noblacklist ${HOME}/.lv2 10nodeny ${HOME}/.lv2
11noblacklist ${HOME}/.vst 11nodeny ${HOME}/.vst
12noblacklist ${DOCUMENTS} 12nodeny ${DOCUMENTS}
13noblacklist ${MUSIC} 13nodeny ${MUSIC}
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/arduino.profile b/etc/profile-a-l/arduino.profile
index fd1ca9a09..88f14fbfe 100644
--- a/etc/profile-a-l/arduino.profile
+++ b/etc/profile-a-l/arduino.profile
@@ -6,9 +6,9 @@ include arduino.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.arduino15 9nodeny ${HOME}/.arduino15
10noblacklist ${HOME}/Arduino 10nodeny ${HOME}/Arduino
11noblacklist ${DOCUMENTS} 11nodeny ${DOCUMENTS}
12 12
13# Allow java (blacklisted by disable-devel.inc) 13# Allow java (blacklisted by disable-devel.inc)
14include allow-java.inc 14include allow-java.inc
diff --git a/etc/profile-a-l/aria2c.profile b/etc/profile-a-l/aria2c.profile
index 22b8ecd65..be56011f0 100644
--- a/etc/profile-a-l/aria2c.profile
+++ b/etc/profile-a-l/aria2c.profile
@@ -6,12 +6,12 @@ include aria2c.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.aria2 9nodeny ${HOME}/.aria2
10noblacklist ${HOME}/.config/aria2 10nodeny ${HOME}/.config/aria2
11noblacklist ${HOME}/.netrc 11nodeny ${HOME}/.netrc
12 12
13blacklist /tmp/.X11-unix 13deny /tmp/.X11-unix
14blacklist ${RUNUSER}/wayland-* 14deny ${RUNUSER}/wayland-*
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/ark.profile b/etc/profile-a-l/ark.profile
index a63dd8f5f..031c57080 100644
--- a/etc/profile-a-l/ark.profile
+++ b/etc/profile-a-l/ark.profile
@@ -6,8 +6,8 @@ include ark.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/arkrc 9nodeny ${HOME}/.config/arkrc
10noblacklist ${HOME}/.local/share/kxmlgui5/ark 10nodeny ${HOME}/.local/share/kxmlgui5/ark
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -16,7 +16,7 @@ include disable-interpreters.inc
16include disable-passwdmgr.inc 16include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18 18
19whitelist /usr/share/ark 19allow /usr/share/ark
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
22 22
diff --git a/etc/profile-a-l/arm.profile b/etc/profile-a-l/arm.profile
index 2c8b630ce..9ed8076be 100644
--- a/etc/profile-a-l/arm.profile
+++ b/etc/profile-a-l/arm.profile
@@ -6,7 +6,7 @@ include arm.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.arm 9nodeny ${HOME}/.arm
10 10
11# Allow python (blacklisted by disable-interpreters.inc) 11# Allow python (blacklisted by disable-interpreters.inc)
12include allow-python2.inc 12include allow-python2.inc
@@ -20,7 +20,7 @@ include disable-passwdmgr.inc
20include disable-programs.inc 20include disable-programs.inc
21 21
22mkdir ${HOME}/.arm 22mkdir ${HOME}/.arm
23whitelist ${HOME}/.arm 23allow ${HOME}/.arm
24include whitelist-common.inc 24include whitelist-common.inc
25 25
26caps.drop all 26caps.drop all
diff --git a/etc/profile-a-l/artha.profile b/etc/profile-a-l/artha.profile
index fab72b7d3..7cfac4915 100644
--- a/etc/profile-a-l/artha.profile
+++ b/etc/profile-a-l/artha.profile
@@ -6,12 +6,12 @@ include artha.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/artha.conf 9nodeny ${HOME}/.config/artha.conf
10noblacklist ${HOME}/.config/artha.log 10nodeny ${HOME}/.config/artha.log
11noblacklist ${HOME}/.config/enchant 11nodeny ${HOME}/.config/enchant
12 12
13blacklist /tmp/.X11-unix 13deny /tmp/.X11-unix
14blacklist ${RUNUSER}/wayland-* 14deny ${RUNUSER}/wayland-*
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
@@ -28,8 +28,8 @@ include disable-xdg.inc
28#whitelist ${HOME}/.config/artha.conf 28#whitelist ${HOME}/.config/artha.conf
29#whitelist ${HOME}/.config/artha.log 29#whitelist ${HOME}/.config/artha.log
30#whitelist ${HOME}/.config/enchant 30#whitelist ${HOME}/.config/enchant
31whitelist /usr/share/artha 31allow /usr/share/artha
32whitelist /usr/share/wordnet 32allow /usr/share/wordnet
33#include whitelist-common.inc 33#include whitelist-common.inc
34include whitelist-usr-share-common.inc 34include whitelist-usr-share-common.inc
35include whitelist-var-common.inc 35include whitelist-var-common.inc
diff --git a/etc/profile-a-l/assogiate.profile b/etc/profile-a-l/assogiate.profile
index 977fe30a4..f2251c210 100644
--- a/etc/profile-a-l/assogiate.profile
+++ b/etc/profile-a-l/assogiate.profile
@@ -6,7 +6,7 @@ include assogiate.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${PICTURES} 9nodeny ${PICTURES}
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-programs.inc
17include disable-shell.inc 17include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20whitelist ${PICTURES} 20allow ${PICTURES}
21include whitelist-common.inc 21include whitelist-common.inc
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
diff --git a/etc/profile-a-l/asunder.profile b/etc/profile-a-l/asunder.profile
index c97fd691a..e65072266 100644
--- a/etc/profile-a-l/asunder.profile
+++ b/etc/profile-a-l/asunder.profile
@@ -6,11 +6,11 @@ include asunder.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/asunder 9nodeny ${HOME}/.config/asunder
10noblacklist ${HOME}/.asunder_album_genre 10nodeny ${HOME}/.asunder_album_genre
11noblacklist ${HOME}/.asunder_album_title 11nodeny ${HOME}/.asunder_album_title
12noblacklist ${HOME}/.asunder_album_artist 12nodeny ${HOME}/.asunder_album_artist
13noblacklist ${MUSIC} 13nodeny ${MUSIC}
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/atom.profile b/etc/profile-a-l/atom.profile
index 5f237ac59..ea3038537 100644
--- a/etc/profile-a-l/atom.profile
+++ b/etc/profile-a-l/atom.profile
@@ -18,8 +18,8 @@ ignore include whitelist-var-common.inc
18ignore apparmor 18ignore apparmor
19ignore disable-mnt 19ignore disable-mnt
20 20
21noblacklist ${HOME}/.atom 21nodeny ${HOME}/.atom
22noblacklist ${HOME}/.config/Atom 22nodeny ${HOME}/.config/Atom
23 23
24# Allows files commonly used by IDEs 24# Allows files commonly used by IDEs
25include allow-common-devel.inc 25include allow-common-devel.inc
diff --git a/etc/profile-a-l/atril.profile b/etc/profile-a-l/atril.profile
index 1c3ed66ff..8ae8617cf 100644
--- a/etc/profile-a-l/atril.profile
+++ b/etc/profile-a-l/atril.profile
@@ -6,9 +6,9 @@ include atril.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/atril 9nodeny ${HOME}/.cache/atril
10noblacklist ${HOME}/.config/atril 10nodeny ${HOME}/.config/atril
11noblacklist ${DOCUMENTS} 11nodeny ${DOCUMENTS}
12 12
13#noblacklist ${HOME}/.local/share 13#noblacklist ${HOME}/.local/share
14# it seems to use only ${HOME}/.local/share/webkitgtk 14# it seems to use only ${HOME}/.local/share/webkitgtk
diff --git a/etc/profile-a-l/audacious.profile b/etc/profile-a-l/audacious.profile
index f9f209786..53baf0a2a 100644
--- a/etc/profile-a-l/audacious.profile
+++ b/etc/profile-a-l/audacious.profile
@@ -6,9 +6,9 @@ include audacious.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/Audaciousrc 9nodeny ${HOME}/.config/Audaciousrc
10noblacklist ${HOME}/.config/audacious 10nodeny ${HOME}/.config/audacious
11noblacklist ${MUSIC} 11nodeny ${MUSIC}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/audacity.profile b/etc/profile-a-l/audacity.profile
index a2de8436a..c244846e1 100644
--- a/etc/profile-a-l/audacity.profile
+++ b/etc/profile-a-l/audacity.profile
@@ -6,9 +6,9 @@ include audacity.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.audacity-data 9nodeny ${HOME}/.audacity-data
10noblacklist ${DOCUMENTS} 10nodeny ${DOCUMENTS}
11noblacklist ${MUSIC} 11nodeny ${MUSIC}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/audio-recorder.profile b/etc/profile-a-l/audio-recorder.profile
index 2c7fdc812..534792cc6 100644
--- a/etc/profile-a-l/audio-recorder.profile
+++ b/etc/profile-a-l/audio-recorder.profile
@@ -7,7 +7,7 @@ include audio-recorder.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${MUSIC} 10nodeny ${MUSIC}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -17,10 +17,10 @@ include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20whitelist ${MUSIC} 20allow ${MUSIC}
21whitelist ${DOWNLOADS} 21allow ${DOWNLOADS}
22whitelist /usr/share/audio-recorder 22allow /usr/share/audio-recorder
23whitelist /usr/share/gstreamer-1.0 23allow /usr/share/gstreamer-1.0
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
diff --git a/etc/profile-a-l/authenticator-rs.profile b/etc/profile-a-l/authenticator-rs.profile
index 2ebe35dd5..0d6eb6a21 100644
--- a/etc/profile-a-l/authenticator-rs.profile
+++ b/etc/profile-a-l/authenticator-rs.profile
@@ -6,7 +6,7 @@ include authenticator-rs.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/authenticator-rs 9nodeny ${HOME}/.local/share/authenticator-rs
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,9 +18,9 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.local/share/authenticator-rs 20mkdir ${HOME}/.local/share/authenticator-rs
21whitelist ${HOME}/.local/share/authenticator-rs 21allow ${HOME}/.local/share/authenticator-rs
22whitelist ${DOWNLOADS} 22allow ${DOWNLOADS}
23whitelist /usr/share/uk.co.grumlimited.authenticator-rs 23allow /usr/share/uk.co.grumlimited.authenticator-rs
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-runuser-common.inc 25include whitelist-runuser-common.inc
26include whitelist-usr-share-common.inc 26include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/authenticator.profile b/etc/profile-a-l/authenticator.profile
index 42d9cd56a..55d967e3e 100644
--- a/etc/profile-a-l/authenticator.profile
+++ b/etc/profile-a-l/authenticator.profile
@@ -6,8 +6,8 @@ include authenticator.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/Authenticator 9nodeny ${HOME}/.cache/Authenticator
10noblacklist ${HOME}/.config/Authenticator 10nodeny ${HOME}/.config/Authenticator
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13#include allow-python2.inc 13#include allow-python2.inc
diff --git a/etc/profile-a-l/autokey-common.profile b/etc/profile-a-l/autokey-common.profile
index 891928e5a..a5b3b22f6 100644
--- a/etc/profile-a-l/autokey-common.profile
+++ b/etc/profile-a-l/autokey-common.profile
@@ -7,8 +7,8 @@ include autokey-common.local
7# added by caller profile 7# added by caller profile
8#include globals.local 8#include globals.local
9 9
10noblacklist ${HOME}/.config/autokey 10nodeny ${HOME}/.config/autokey
11noblacklist ${HOME}/.local/share/autokey 11nodeny ${HOME}/.local/share/autokey
12 12
13# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
14include allow-python2.inc 14include allow-python2.inc
diff --git a/etc/profile-a-l/avidemux.profile b/etc/profile-a-l/avidemux.profile
index 1ecc03da1..0feb05d75 100644
--- a/etc/profile-a-l/avidemux.profile
+++ b/etc/profile-a-l/avidemux.profile
@@ -5,9 +5,9 @@ include avidemux.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.avidemux6 8nodeny ${HOME}/.avidemux6
9noblacklist ${HOME}/.config/avidemux3_qt5rc 9nodeny ${HOME}/.config/avidemux3_qt5rc
10noblacklist ${VIDEOS} 10nodeny ${VIDEOS}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -20,9 +20,9 @@ include disable-xdg.inc
20 20
21mkdir ${HOME}/.avidemux6 21mkdir ${HOME}/.avidemux6
22mkdir ${HOME}/.config/avidemux3_qt5rc 22mkdir ${HOME}/.config/avidemux3_qt5rc
23whitelist ${HOME}/.avidemux6 23allow ${HOME}/.avidemux6
24whitelist ${HOME}/.config/avidemux3_qt5rc 24allow ${HOME}/.config/avidemux3_qt5rc
25whitelist ${VIDEOS} 25allow ${VIDEOS}
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-runuser-common.inc 27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/aweather.profile b/etc/profile-a-l/aweather.profile
index a57ad4014..abe9fdb24 100644
--- a/etc/profile-a-l/aweather.profile
+++ b/etc/profile-a-l/aweather.profile
@@ -6,7 +6,7 @@ include aweather.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/aweather 9nodeny ${HOME}/.config/aweather
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,7 +16,7 @@ include disable-programs.inc
16include disable-shell.inc 16include disable-shell.inc
17 17
18mkdir ${HOME}/.config/aweather 18mkdir ${HOME}/.config/aweather
19whitelist ${HOME}/.config/aweather 19allow ${HOME}/.config/aweather
20include whitelist-common.inc 20include whitelist-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
22 22
diff --git a/etc/profile-a-l/awesome.profile b/etc/profile-a-l/awesome.profile
index 5d1bf5071..58f4f5e96 100644
--- a/etc/profile-a-l/awesome.profile
+++ b/etc/profile-a-l/awesome.profile
@@ -7,7 +7,7 @@ include awesome.local
7include globals.local 7include globals.local
8 8
9# all applications started in awesome will run in this profile 9# all applications started in awesome will run in this profile
10noblacklist ${HOME}/.config/awesome 10nodeny ${HOME}/.config/awesome
11include disable-common.inc 11include disable-common.inc
12 12
13caps.drop all 13caps.drop all
diff --git a/etc/profile-a-l/ballbuster.profile b/etc/profile-a-l/ballbuster.profile
index 3952921a3..46bb0b44e 100644
--- a/etc/profile-a-l/ballbuster.profile
+++ b/etc/profile-a-l/ballbuster.profile
@@ -6,7 +6,7 @@ include ballbuster.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.ballbuster.hs 9nodeny ${HOME}/.ballbuster.hs
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkfile ${HOME}/.ballbuster.hs 20mkfile ${HOME}/.ballbuster.hs
21whitelist ${HOME}/.ballbuster.hs 21allow ${HOME}/.ballbuster.hs
22whitelist /usr/share/ballbuster 22allow /usr/share/ballbuster
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/baloo_file.profile b/etc/profile-a-l/baloo_file.profile
index fe86d9b80..2b10883f7 100644
--- a/etc/profile-a-l/baloo_file.profile
+++ b/etc/profile-a-l/baloo_file.profile
@@ -12,12 +12,12 @@ include globals.local
12# read-write ${HOME}/.local/share/baloo 12# read-write ${HOME}/.local/share/baloo
13# ignore read-write 13# ignore read-write
14 14
15noblacklist ${HOME}/.config/baloofilerc 15nodeny ${HOME}/.config/baloofilerc
16noblacklist ${HOME}/.kde/share/config/baloofilerc 16nodeny ${HOME}/.kde/share/config/baloofilerc
17noblacklist ${HOME}/.kde/share/config/baloorc 17nodeny ${HOME}/.kde/share/config/baloorc
18noblacklist ${HOME}/.kde4/share/config/baloofilerc 18nodeny ${HOME}/.kde4/share/config/baloofilerc
19noblacklist ${HOME}/.kde4/share/config/baloorc 19nodeny ${HOME}/.kde4/share/config/baloorc
20noblacklist ${HOME}/.local/share/baloo 20nodeny ${HOME}/.local/share/baloo
21 21
22include disable-common.inc 22include disable-common.inc
23include disable-devel.inc 23include disable-devel.inc
diff --git a/etc/profile-a-l/balsa.profile b/etc/profile-a-l/balsa.profile
index 8c69652c5..1e74443aa 100644
--- a/etc/profile-a-l/balsa.profile
+++ b/etc/profile-a-l/balsa.profile
@@ -6,13 +6,13 @@ include balsa.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.balsa 9nodeny ${HOME}/.balsa
10noblacklist ${HOME}/.gnupg 10nodeny ${HOME}/.gnupg
11noblacklist ${HOME}/.mozilla 11nodeny ${HOME}/.mozilla
12noblacklist ${HOME}/.signature 12nodeny ${HOME}/.signature
13noblacklist ${HOME}/mail 13nodeny ${HOME}/mail
14noblacklist /var/mail 14nodeny /var/mail
15noblacklist /var/spool/mail 15nodeny /var/spool/mail
16 16
17include disable-common.inc 17include disable-common.inc
18include disable-devel.inc 18include disable-devel.inc
@@ -27,17 +27,17 @@ mkdir ${HOME}/.balsa
27mkdir ${HOME}/.gnupg 27mkdir ${HOME}/.gnupg
28mkfile ${HOME}/.signature 28mkfile ${HOME}/.signature
29mkdir ${HOME}/mail 29mkdir ${HOME}/mail
30whitelist ${HOME}/.balsa 30allow ${HOME}/.balsa
31whitelist ${HOME}/.gnupg 31allow ${HOME}/.gnupg
32whitelist ${HOME}/.mozilla/firefox/profiles.ini 32allow ${HOME}/.mozilla/firefox/profiles.ini
33whitelist ${HOME}/.signature 33allow ${HOME}/.signature
34whitelist ${HOME}/mail 34allow ${HOME}/mail
35whitelist ${RUNUSER}/gnupg 35allow ${RUNUSER}/gnupg
36whitelist /usr/share/balsa 36allow /usr/share/balsa
37whitelist /usr/share/gnupg 37allow /usr/share/gnupg
38whitelist /usr/share/gnupg2 38allow /usr/share/gnupg2
39whitelist /var/mail 39allow /var/mail
40whitelist /var/spool/mail 40allow /var/spool/mail
41include whitelist-common.inc 41include whitelist-common.inc
42include whitelist-runuser-common.inc 42include whitelist-runuser-common.inc
43include whitelist-usr-share-common.inc 43include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/barrier.profile b/etc/profile-a-l/barrier.profile
index 7b50e9199..fcea9b3ba 100644
--- a/etc/profile-a-l/barrier.profile
+++ b/etc/profile-a-l/barrier.profile
@@ -6,9 +6,9 @@ include barrier.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/Debauchee/Barrier.conf 9nodeny ${HOME}/.config/Debauchee/Barrier.conf
10noblacklist ${HOME}/.local/share/barrier 10nodeny ${HOME}/.local/share/barrier
11noblacklist ${PATH}/openssl 11nodeny ${PATH}/openssl
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/basilisk.profile b/etc/profile-a-l/basilisk.profile
index 8dc3847a0..547c67fc8 100644
--- a/etc/profile-a-l/basilisk.profile
+++ b/etc/profile-a-l/basilisk.profile
@@ -5,13 +5,13 @@ include basilisk.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.cache/moonchild productions/basilisk 8nodeny ${HOME}/.cache/moonchild productions/basilisk
9noblacklist ${HOME}/.moonchild productions/basilisk 9nodeny ${HOME}/.moonchild productions/basilisk
10 10
11mkdir ${HOME}/.cache/moonchild productions/basilisk 11mkdir ${HOME}/.cache/moonchild productions/basilisk
12mkdir ${HOME}/.moonchild productions 12mkdir ${HOME}/.moonchild productions
13whitelist ${HOME}/.cache/moonchild productions/basilisk 13allow ${HOME}/.cache/moonchild productions/basilisk
14whitelist ${HOME}/.moonchild productions 14allow ${HOME}/.moonchild productions
15 15
16# Basilisk can use the full firejail seccomp filter (unlike firefox >= 60) 16# Basilisk can use the full firejail seccomp filter (unlike firefox >= 60)
17seccomp 17seccomp
diff --git a/etc/profile-a-l/bcompare.profile b/etc/profile-a-l/bcompare.profile
index 3ecaea7fe..a1d2b1e73 100644
--- a/etc/profile-a-l/bcompare.profile
+++ b/etc/profile-a-l/bcompare.profile
@@ -7,10 +7,10 @@ include bcompare.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${HOME}/.config/bcompare 10nodeny ${HOME}/.config/bcompare
11# In case the user decides to include disable-programs.inc, still allow 11# In case the user decides to include disable-programs.inc, still allow
12# KDE's Gwenview to view images via right click -> Open With -> Associated Application 12# KDE's Gwenview to view images via right click -> Open With -> Associated Application
13noblacklist ${HOME}/.config/gwenviewrc 13nodeny ${HOME}/.config/gwenviewrc
14 14
15# Add the next line to your bcompare.local if you don't need to compare files in disable-common.inc. 15# Add the next line to your bcompare.local if you don't need to compare files in disable-common.inc.
16#include disable-common.inc 16#include disable-common.inc
diff --git a/etc/profile-a-l/beaker.profile b/etc/profile-a-l/beaker.profile
index f3a9568bd..588f460a8 100644
--- a/etc/profile-a-l/beaker.profile
+++ b/etc/profile-a-l/beaker.profile
@@ -19,10 +19,10 @@ ignore private-cache
19ignore private-dev 19ignore private-dev
20ignore private-tmp 20ignore private-tmp
21 21
22noblacklist ${HOME}/.config/Beaker Browser 22nodeny ${HOME}/.config/Beaker Browser
23 23
24mkdir ${HOME}/.config/Beaker Browser 24mkdir ${HOME}/.config/Beaker Browser
25whitelist ${HOME}/.config/Beaker Browser 25allow ${HOME}/.config/Beaker Browser
26 26
27# Redirect 27# Redirect
28include electron.profile 28include electron.profile
diff --git a/etc/profile-a-l/bibletime.profile b/etc/profile-a-l/bibletime.profile
index c7a82afbd..717d7258d 100644
--- a/etc/profile-a-l/bibletime.profile
+++ b/etc/profile-a-l/bibletime.profile
@@ -6,11 +6,11 @@ include bibletime.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.bibletime 9nodeny ${HOME}/.bibletime
10noblacklist ${HOME}/.sword 10nodeny ${HOME}/.sword
11noblacklist ${HOME}/.local/share/bibletime 11nodeny ${HOME}/.local/share/bibletime
12 12
13blacklist ${HOME}/.bashrc 13deny ${HOME}/.bashrc
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -22,12 +22,12 @@ include disable-programs.inc
22mkdir ${HOME}/.bibletime 22mkdir ${HOME}/.bibletime
23mkdir ${HOME}/.sword 23mkdir ${HOME}/.sword
24mkdir ${HOME}/.local/share/bibletime 24mkdir ${HOME}/.local/share/bibletime
25whitelist ${HOME}/.bibletime 25allow ${HOME}/.bibletime
26whitelist ${HOME}/.sword 26allow ${HOME}/.sword
27whitelist ${HOME}/.local/share/bibletime 27allow ${HOME}/.local/share/bibletime
28whitelist /usr/share/bibletime 28allow /usr/share/bibletime
29whitelist /usr/share/doc/bibletime 29allow /usr/share/doc/bibletime
30whitelist /usr/share/sword 30allow /usr/share/sword
31include whitelist-common.inc 31include whitelist-common.inc
32include whitelist-usr-share-common.inc 32include whitelist-usr-share-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
diff --git a/etc/profile-a-l/bijiben.profile b/etc/profile-a-l/bijiben.profile
index 854fe5cb9..b02fcc3e0 100644
--- a/etc/profile-a-l/bijiben.profile
+++ b/etc/profile-a-l/bijiben.profile
@@ -6,7 +6,7 @@ include bijiben.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/bijiben 9nodeny ${HOME}/.local/share/bijiben
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,12 +18,12 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.local/share/bijiben 20mkdir ${HOME}/.local/share/bijiben
21whitelist ${HOME}/.local/share/bijiben 21allow ${HOME}/.local/share/bijiben
22whitelist ${HOME}/.cache/tracker 22allow ${HOME}/.cache/tracker
23whitelist /usr/libexec/webkit2gtk-4.0 23allow /usr/libexec/webkit2gtk-4.0
24whitelist /usr/share/bijiben 24allow /usr/share/bijiben
25whitelist /usr/share/tracker 25allow /usr/share/tracker
26whitelist /usr/share/tracker3 26allow /usr/share/tracker3
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/bitcoin-qt.profile b/etc/profile-a-l/bitcoin-qt.profile
index 932db9b73..c4ec0f820 100644
--- a/etc/profile-a-l/bitcoin-qt.profile
+++ b/etc/profile-a-l/bitcoin-qt.profile
@@ -6,8 +6,8 @@ include bitcoin-qt.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.bitcoin 9nodeny ${HOME}/.bitcoin
10noblacklist ${HOME}/.config/Bitcoin 10nodeny ${HOME}/.config/Bitcoin
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -19,8 +19,8 @@ include disable-shell.inc
19 19
20mkdir ${HOME}/.bitcoin 20mkdir ${HOME}/.bitcoin
21mkdir ${HOME}/.config/Bitcoin 21mkdir ${HOME}/.config/Bitcoin
22whitelist ${HOME}/.bitcoin 22allow ${HOME}/.bitcoin
23whitelist ${HOME}/.config/Bitcoin 23allow ${HOME}/.config/Bitcoin
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
26 26
diff --git a/etc/profile-a-l/bitlbee.profile b/etc/profile-a-l/bitlbee.profile
index dd7651979..0f000b26b 100644
--- a/etc/profile-a-l/bitlbee.profile
+++ b/etc/profile-a-l/bitlbee.profile
@@ -8,8 +8,8 @@ include globals.local
8 8
9ignore noexec ${HOME} 9ignore noexec ${HOME}
10 10
11noblacklist /sbin 11nodeny /sbin
12noblacklist /usr/sbin 12nodeny /usr/sbin
13# noblacklist /var/log 13# noblacklist /var/log
14 14
15include disable-common.inc 15include disable-common.inc
diff --git a/etc/profile-a-l/bitwarden.profile b/etc/profile-a-l/bitwarden.profile
index ba2eb2ea7..4b292d72a 100644
--- a/etc/profile-a-l/bitwarden.profile
+++ b/etc/profile-a-l/bitwarden.profile
@@ -11,12 +11,12 @@ ignore include whitelist-usr-share-common.inc
11 11
12ignore noexec /tmp 12ignore noexec /tmp
13 13
14noblacklist ${HOME}/.config/Bitwarden 14nodeny ${HOME}/.config/Bitwarden
15 15
16include disable-shell.inc 16include disable-shell.inc
17 17
18mkdir ${HOME}/.config/Bitwarden 18mkdir ${HOME}/.config/Bitwarden
19whitelist ${HOME}/.config/Bitwarden 19allow ${HOME}/.config/Bitwarden
20 20
21machine-id 21machine-id
22no3d 22no3d
diff --git a/etc/profile-a-l/blackbox.profile b/etc/profile-a-l/blackbox.profile
index 233f9a96f..616ad6801 100644
--- a/etc/profile-a-l/blackbox.profile
+++ b/etc/profile-a-l/blackbox.profile
@@ -7,7 +7,7 @@ include blackbox.local
7include globals.local 7include globals.local
8 8
9# all applications started in blackbox will run in this profile 9# all applications started in blackbox will run in this profile
10noblacklist ${HOME}/.blackbox 10nodeny ${HOME}/.blackbox
11include disable-common.inc 11include disable-common.inc
12 12
13caps.drop all 13caps.drop all
diff --git a/etc/profile-a-l/blender.profile b/etc/profile-a-l/blender.profile
index 701ae431e..8d0b5616f 100644
--- a/etc/profile-a-l/blender.profile
+++ b/etc/profile-a-l/blender.profile
@@ -6,7 +6,7 @@ include blender.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/blender 9nodeny ${HOME}/.config/blender
10 10
11# Allow python (blacklisted by disable-interpreters.inc) 11# Allow python (blacklisted by disable-interpreters.inc)
12include allow-python2.inc 12include allow-python2.inc
@@ -20,8 +20,8 @@ include disable-passwdmgr.inc
20include disable-programs.inc 20include disable-programs.inc
21 21
22# Allow usage of AMD GPU by OpenCL 22# Allow usage of AMD GPU by OpenCL
23noblacklist /sys/module 23nodeny /sys/module
24whitelist /sys/module/amdgpu 24allow /sys/module/amdgpu
25read-only /sys/module/amdgpu 25read-only /sys/module/amdgpu
26 26
27caps.drop all 27caps.drop all
diff --git a/etc/profile-a-l/bless.profile b/etc/profile-a-l/bless.profile
index 80dc750f7..ca5f96eee 100644
--- a/etc/profile-a-l/bless.profile
+++ b/etc/profile-a-l/bless.profile
@@ -6,7 +6,7 @@ include bless.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/bless 9nodeny ${HOME}/.config/bless
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/blobby.profile b/etc/profile-a-l/blobby.profile
index 229c20293..ee2a73b54 100644
--- a/etc/profile-a-l/blobby.profile
+++ b/etc/profile-a-l/blobby.profile
@@ -4,7 +4,7 @@ include blobby.local
4# Persistent global definitions 4# Persistent global definitions
5include globals.local 5include globals.local
6 6
7noblacklist ${HOME}/.blobby 7nodeny ${HOME}/.blobby
8 8
9include disable-common.inc 9include disable-common.inc
10include disable-devel.inc 10include disable-devel.inc
@@ -16,9 +16,9 @@ include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18mkdir ${HOME}/.blobby 18mkdir ${HOME}/.blobby
19whitelist ${HOME}/.blobby 19allow ${HOME}/.blobby
20include whitelist-common.inc 20include whitelist-common.inc
21whitelist /usr/share/blobby 21allow /usr/share/blobby
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/blobwars.profile b/etc/profile-a-l/blobwars.profile
index 904710cb5..e0be5261e 100644
--- a/etc/profile-a-l/blobwars.profile
+++ b/etc/profile-a-l/blobwars.profile
@@ -6,7 +6,7 @@ include blobwars.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.parallelrealities/blobwars 9nodeny ${HOME}/.parallelrealities/blobwars
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.parallelrealities/blobwars 20mkdir ${HOME}/.parallelrealities/blobwars
21whitelist ${HOME}/.parallelrealities/blobwars 21allow ${HOME}/.parallelrealities/blobwars
22whitelist /usr/share/blobwars 22allow /usr/share/blobwars
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
diff --git a/etc/profile-a-l/bnox.profile b/etc/profile-a-l/bnox.profile
index 6e8f0d7d1..dcfd5d8d2 100644
--- a/etc/profile-a-l/bnox.profile
+++ b/etc/profile-a-l/bnox.profile
@@ -10,13 +10,13 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13noblacklist ${HOME}/.cache/bnox 13nodeny ${HOME}/.cache/bnox
14noblacklist ${HOME}/.config/bnox 14nodeny ${HOME}/.config/bnox
15 15
16mkdir ${HOME}/.cache/bnox 16mkdir ${HOME}/.cache/bnox
17mkdir ${HOME}/.config/bnox 17mkdir ${HOME}/.config/bnox
18whitelist ${HOME}/.cache/bnox 18allow ${HOME}/.cache/bnox
19whitelist ${HOME}/.config/bnox 19allow ${HOME}/.config/bnox
20 20
21# Redirect 21# Redirect
22include chromium-common.profile 22include chromium-common.profile
diff --git a/etc/profile-a-l/brackets.profile b/etc/profile-a-l/brackets.profile
index 0cbac049a..a14bb8fef 100644
--- a/etc/profile-a-l/brackets.profile
+++ b/etc/profile-a-l/brackets.profile
@@ -5,7 +5,7 @@ include brackets.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/Brackets 8nodeny ${HOME}/.config/Brackets
9#noblacklist /opt/brackets 9#noblacklist /opt/brackets
10#noblacklist /opt/google 10#noblacklist /opt/google
11 11
diff --git a/etc/profile-a-l/brasero.profile b/etc/profile-a-l/brasero.profile
index 417a6b3e0..a78882409 100644
--- a/etc/profile-a-l/brasero.profile
+++ b/etc/profile-a-l/brasero.profile
@@ -6,7 +6,7 @@ include brasero.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/brasero 9nodeny ${HOME}/.config/brasero
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/brave.profile b/etc/profile-a-l/brave.profile
index 09548c761..bc2d7a6a1 100644
--- a/etc/profile-a-l/brave.profile
+++ b/etc/profile-a-l/brave.profile
@@ -14,24 +14,24 @@ ignore noexec /tmp
14# Alternatively you can add 'ignore apparmor' to your brave.local. 14# Alternatively you can add 'ignore apparmor' to your brave.local.
15ignore noexec ${HOME} 15ignore noexec ${HOME}
16 16
17noblacklist ${HOME}/.cache/BraveSoftware 17nodeny ${HOME}/.cache/BraveSoftware
18noblacklist ${HOME}/.config/BraveSoftware 18nodeny ${HOME}/.config/BraveSoftware
19noblacklist ${HOME}/.config/brave 19nodeny ${HOME}/.config/brave
20noblacklist ${HOME}/.config/brave-flags.conf 20nodeny ${HOME}/.config/brave-flags.conf
21# brave uses gpg for built-in password manager 21# brave uses gpg for built-in password manager
22noblacklist ${HOME}/.gnupg 22nodeny ${HOME}/.gnupg
23 23
24mkdir ${HOME}/.cache/BraveSoftware 24mkdir ${HOME}/.cache/BraveSoftware
25mkdir ${HOME}/.config/BraveSoftware 25mkdir ${HOME}/.config/BraveSoftware
26mkdir ${HOME}/.config/brave 26mkdir ${HOME}/.config/brave
27whitelist ${HOME}/.cache/BraveSoftware 27allow ${HOME}/.cache/BraveSoftware
28whitelist ${HOME}/.config/BraveSoftware 28allow ${HOME}/.config/BraveSoftware
29whitelist ${HOME}/.config/brave 29allow ${HOME}/.config/brave
30whitelist ${HOME}/.config/brave-flags.conf 30allow ${HOME}/.config/brave-flags.conf
31whitelist ${HOME}/.gnupg 31allow ${HOME}/.gnupg
32 32
33# Brave sandbox needs read access to /proc/config.gz 33# Brave sandbox needs read access to /proc/config.gz
34noblacklist /proc/config.gz 34nodeny /proc/config.gz
35 35
36# Redirect 36# Redirect
37include chromium-common.profile 37include chromium-common.profile
diff --git a/etc/profile-a-l/bzflag.profile b/etc/profile-a-l/bzflag.profile
index bda96bbb3..62ca041c2 100644
--- a/etc/profile-a-l/bzflag.profile
+++ b/etc/profile-a-l/bzflag.profile
@@ -6,7 +6,7 @@ include bzflag.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.bzf 9nodeny ${HOME}/.bzf
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,7 +18,7 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.bzf 20mkdir ${HOME}/.bzf
21whitelist ${HOME}/.bzf 21allow ${HOME}/.bzf
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/calibre.profile b/etc/profile-a-l/calibre.profile
index 83571397b..99706620c 100644
--- a/etc/profile-a-l/calibre.profile
+++ b/etc/profile-a-l/calibre.profile
@@ -6,9 +6,9 @@ include calibre.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/calibre 9nodeny ${HOME}/.cache/calibre
10noblacklist ${HOME}/.config/calibre 10nodeny ${HOME}/.config/calibre
11noblacklist ${DOCUMENTS} 11nodeny ${DOCUMENTS}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/calligra.profile b/etc/profile-a-l/calligra.profile
index fcff47662..36ecc06a0 100644
--- a/etc/profile-a-l/calligra.profile
+++ b/etc/profile-a-l/calligra.profile
@@ -6,7 +6,7 @@ include calligra.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/kxmlgui5/calligra 9nodeny ${HOME}/.local/share/kxmlgui5/calligra
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/calligragemini.profile b/etc/profile-a-l/calligragemini.profile
index 006c307ab..76123c96a 100644
--- a/etc/profile-a-l/calligragemini.profile
+++ b/etc/profile-a-l/calligragemini.profile
@@ -6,7 +6,7 @@ include calligragemini.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9noblacklist ${HOME}/.local/share/calligragemini 9nodeny ${HOME}/.local/share/calligragemini
10 10
11# Redirect 11# Redirect
12include calligra.profile 12include calligra.profile
diff --git a/etc/profile-a-l/calligraplan.profile b/etc/profile-a-l/calligraplan.profile
index 81dbd4dcd..5fb1e16da 100644
--- a/etc/profile-a-l/calligraplan.profile
+++ b/etc/profile-a-l/calligraplan.profile
@@ -6,7 +6,7 @@ include calligraplan.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9noblacklist ${HOME}/.local/share/kxmlgui5/calligraplan 9nodeny ${HOME}/.local/share/kxmlgui5/calligraplan
10 10
11# Redirect 11# Redirect
12include calligra.profile 12include calligra.profile
diff --git a/etc/profile-a-l/calligraplanwork.profile b/etc/profile-a-l/calligraplanwork.profile
index bba91b66b..c176bfea1 100644
--- a/etc/profile-a-l/calligraplanwork.profile
+++ b/etc/profile-a-l/calligraplanwork.profile
@@ -6,7 +6,7 @@ include calligraplanwork.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9noblacklist ${HOME}/.local/share/kxmlgui5/calligraplanwork 9nodeny ${HOME}/.local/share/kxmlgui5/calligraplanwork
10 10
11# Redirect 11# Redirect
12include calligra.profile 12include calligra.profile
diff --git a/etc/profile-a-l/calligrasheets.profile b/etc/profile-a-l/calligrasheets.profile
index 7bc296047..b7ac68945 100644
--- a/etc/profile-a-l/calligrasheets.profile
+++ b/etc/profile-a-l/calligrasheets.profile
@@ -6,7 +6,7 @@ include calligrasheets.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9noblacklist ${HOME}/.local/share/kxmlgui5/calligrasheets 9nodeny ${HOME}/.local/share/kxmlgui5/calligrasheets
10 10
11# Redirect 11# Redirect
12include calligra.profile 12include calligra.profile
diff --git a/etc/profile-a-l/calligrastage.profile b/etc/profile-a-l/calligrastage.profile
index 7694abbe4..1258fec56 100644
--- a/etc/profile-a-l/calligrastage.profile
+++ b/etc/profile-a-l/calligrastage.profile
@@ -6,7 +6,7 @@ include calligrastage.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9noblacklist ${HOME}/.local/share/kxmlgui5/calligrastage 9nodeny ${HOME}/.local/share/kxmlgui5/calligrastage
10 10
11# Redirect 11# Redirect
12include calligra.profile 12include calligra.profile
diff --git a/etc/profile-a-l/calligrawords.profile b/etc/profile-a-l/calligrawords.profile
index d69d56a95..c2b6c8041 100644
--- a/etc/profile-a-l/calligrawords.profile
+++ b/etc/profile-a-l/calligrawords.profile
@@ -6,7 +6,7 @@ include calligrawords.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9noblacklist ${HOME}/.local/share/kxmlgui5/calligrawords 9nodeny ${HOME}/.local/share/kxmlgui5/calligrawords
10 10
11# Redirect 11# Redirect
12include calligra.profile 12include calligra.profile
diff --git a/etc/profile-a-l/cameramonitor.profile b/etc/profile-a-l/cameramonitor.profile
index 74c7cc34b..390ae383c 100644
--- a/etc/profile-a-l/cameramonitor.profile
+++ b/etc/profile-a-l/cameramonitor.profile
@@ -20,7 +20,7 @@ include disable-programs.inc
20include disable-shell.inc 20include disable-shell.inc
21include disable-xdg.inc 21include disable-xdg.inc
22 22
23whitelist /usr/share/cameramonitor 23allow /usr/share/cameramonitor
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
diff --git a/etc/profile-a-l/cantata.profile b/etc/profile-a-l/cantata.profile
index 96f88a7c4..77bdc09e0 100644
--- a/etc/profile-a-l/cantata.profile
+++ b/etc/profile-a-l/cantata.profile
@@ -6,10 +6,10 @@ include cantata.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/cantata 9nodeny ${HOME}/.cache/cantata
10noblacklist ${HOME}/.config/cantata 10nodeny ${HOME}/.config/cantata
11noblacklist ${HOME}/.local/share/cantata 11nodeny ${HOME}/.local/share/cantata
12noblacklist ${MUSIC} 12nodeny ${MUSIC}
13 13
14# Allow perl (blacklisted by disable-interpreters.inc) 14# Allow perl (blacklisted by disable-interpreters.inc)
15include allow-perl.inc 15include allow-perl.inc
diff --git a/etc/profile-a-l/cargo.profile b/etc/profile-a-l/cargo.profile
index 7cf04c550..9c53af84f 100644
--- a/etc/profile-a-l/cargo.profile
+++ b/etc/profile-a-l/cargo.profile
@@ -10,11 +10,11 @@ include globals.local
10ignore noexec ${HOME} 10ignore noexec ${HOME}
11ignore noexec /tmp 11ignore noexec /tmp
12 12
13blacklist /tmp/.X11-unix 13deny /tmp/.X11-unix
14blacklist ${RUNUSER} 14deny ${RUNUSER}
15 15
16noblacklist ${HOME}/.cargo/credentials 16nodeny ${HOME}/.cargo/credentials
17noblacklist ${HOME}/.cargo/credentials.toml 17nodeny ${HOME}/.cargo/credentials.toml
18 18
19# Allows files commonly used by IDEs 19# Allows files commonly used by IDEs
20include allow-common-devel.inc 20include allow-common-devel.inc
@@ -34,7 +34,7 @@ include disable-xdg.inc
34#whitelist ${HOME}/.cargo 34#whitelist ${HOME}/.cargo
35#whitelist ${HOME}/.rustup 35#whitelist ${HOME}/.rustup
36#include whitelist-common.inc 36#include whitelist-common.inc
37whitelist /usr/share/pkgconfig 37allow /usr/share/pkgconfig
38include whitelist-runuser-common.inc 38include whitelist-runuser-common.inc
39include whitelist-usr-share-common.inc 39include whitelist-usr-share-common.inc
40include whitelist-var-common.inc 40include whitelist-var-common.inc
diff --git a/etc/profile-a-l/catfish.profile b/etc/profile-a-l/catfish.profile
index 009d3a049..4ea53ea6b 100644
--- a/etc/profile-a-l/catfish.profile
+++ b/etc/profile-a-l/catfish.profile
@@ -9,7 +9,7 @@ include globals.local
9# We can't blacklist much since catfish 9# We can't blacklist much since catfish
10# is for finding files/content 10# is for finding files/content
11 11
12noblacklist ${HOME}/.config/catfish 12nodeny ${HOME}/.config/catfish
13 13
14# Allow python (blacklisted by disable-interpreters.inc) 14# Allow python (blacklisted by disable-interpreters.inc)
15include allow-python2.inc 15include allow-python2.inc
@@ -21,7 +21,7 @@ include disable-interpreters.inc
21include disable-passwdmgr.inc 21include disable-passwdmgr.inc
22# include disable-programs.inc 22# include disable-programs.inc
23 23
24whitelist /var/lib/mlocate 24allow /var/lib/mlocate
25include whitelist-var-common.inc 25include whitelist-var-common.inc
26 26
27apparmor 27apparmor
diff --git a/etc/profile-a-l/cawbird.profile b/etc/profile-a-l/cawbird.profile
index 6e137010c..d7aee1902 100644
--- a/etc/profile-a-l/cawbird.profile
+++ b/etc/profile-a-l/cawbird.profile
@@ -6,7 +6,7 @@ include cawbird.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/cawbird 9nodeny ${HOME}/.config/cawbird
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/celluloid.profile b/etc/profile-a-l/celluloid.profile
index 1c539cc93..d6f4306ba 100644
--- a/etc/profile-a-l/celluloid.profile
+++ b/etc/profile-a-l/celluloid.profile
@@ -6,9 +6,9 @@ include celluloid.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/celluloid 9nodeny ${HOME}/.config/celluloid
10noblacklist ${HOME}/.config/gnome-mpv 10nodeny ${HOME}/.config/gnome-mpv
11noblacklist ${HOME}/.config/youtube-dl 11nodeny ${HOME}/.config/youtube-dl
12 12
13# Allow lua (blacklisted by disable-interpreters.inc) 13# Allow lua (blacklisted by disable-interpreters.inc)
14include allow-lua.inc 14include allow-lua.inc
@@ -17,7 +17,7 @@ include allow-lua.inc
17include allow-python2.inc 17include allow-python2.inc
18include allow-python3.inc 18include allow-python3.inc
19 19
20blacklist /usr/libexec 20deny /usr/libexec
21 21
22include disable-common.inc 22include disable-common.inc
23include disable-devel.inc 23include disable-devel.inc
@@ -30,9 +30,9 @@ read-only ${DESKTOP}
30mkdir ${HOME}/.config/celluloid 30mkdir ${HOME}/.config/celluloid
31mkdir ${HOME}/.config/gnome-mpv 31mkdir ${HOME}/.config/gnome-mpv
32mkdir ${HOME}/.config/youtube-dl 32mkdir ${HOME}/.config/youtube-dl
33whitelist ${HOME}/.config/celluloid 33allow ${HOME}/.config/celluloid
34whitelist ${HOME}/.config/gnome-mpv 34allow ${HOME}/.config/gnome-mpv
35whitelist ${HOME}/.config/youtube-dl 35allow ${HOME}/.config/youtube-dl
36include whitelist-common.inc 36include whitelist-common.inc
37include whitelist-player-common.inc 37include whitelist-player-common.inc
38include whitelist-runuser-common.inc 38include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/checkbashisms.profile b/etc/profile-a-l/checkbashisms.profile
index 24939fc70..0f61084e0 100644
--- a/etc/profile-a-l/checkbashisms.profile
+++ b/etc/profile-a-l/checkbashisms.profile
@@ -7,9 +7,9 @@ include checkbashisms.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER}/wayland-* 10deny ${RUNUSER}/wayland-*
11 11
12noblacklist ${DOCUMENTS} 12nodeny ${DOCUMENTS}
13 13
14# Allow perl (blacklisted by disable-interpreters.inc) 14# Allow perl (blacklisted by disable-interpreters.inc)
15include allow-perl.inc 15include allow-perl.inc
diff --git a/etc/profile-a-l/cheese.profile b/etc/profile-a-l/cheese.profile
index aca1f5876..bde3e1311 100644
--- a/etc/profile-a-l/cheese.profile
+++ b/etc/profile-a-l/cheese.profile
@@ -6,8 +6,8 @@ include cheese.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${VIDEOS} 9nodeny ${VIDEOS}
10noblacklist ${PICTURES} 10nodeny ${PICTURES}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -17,9 +17,9 @@ include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20whitelist ${VIDEOS} 20allow ${VIDEOS}
21whitelist ${PICTURES} 21allow ${PICTURES}
22whitelist /usr/share/gnome-video-effects 22allow /usr/share/gnome-video-effects
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/cherrytree.profile b/etc/profile-a-l/cherrytree.profile
index 7621b3c8c..d5dedd81d 100644
--- a/etc/profile-a-l/cherrytree.profile
+++ b/etc/profile-a-l/cherrytree.profile
@@ -6,8 +6,8 @@ include cherrytree.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/cherrytree 9nodeny ${HOME}/.config/cherrytree
10noblacklist ${DOCUMENTS} 10nodeny ${DOCUMENTS}
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/chromium-browser-privacy.profile b/etc/profile-a-l/chromium-browser-privacy.profile
index 8803a4d9d..64c45772a 100644
--- a/etc/profile-a-l/chromium-browser-privacy.profile
+++ b/etc/profile-a-l/chromium-browser-privacy.profile
@@ -3,15 +3,15 @@
3# Persistent local customizations 3# Persistent local customizations
4include chromium-browser-privacy.local 4include chromium-browser-privacy.local
5 5
6noblacklist ${HOME}/.cache/ungoogled-chromium 6nodeny ${HOME}/.cache/ungoogled-chromium
7noblacklist ${HOME}/.config/ungoogled-chromium 7nodeny ${HOME}/.config/ungoogled-chromium
8 8
9blacklist /usr/libexec 9deny /usr/libexec
10 10
11mkdir ${HOME}/.cache/ungoogled-chromium 11mkdir ${HOME}/.cache/ungoogled-chromium
12mkdir ${HOME}/.config/ungoogled-chromium 12mkdir ${HOME}/.config/ungoogled-chromium
13whitelist ${HOME}/.cache/ungoogled-chromium 13allow ${HOME}/.cache/ungoogled-chromium
14whitelist ${HOME}/.config/ungoogled-chromium 14allow ${HOME}/.config/ungoogled-chromium
15 15
16# private-bin basename,bash,cat,chromium-browser-privacy,dirname,mkdir,readlink,sed,touch,which,xdg-settings 16# private-bin basename,bash,cat,chromium-browser-privacy,dirname,mkdir,readlink,sed,touch,which,xdg-settings
17 17
diff --git a/etc/profile-a-l/chromium-common.profile b/etc/profile-a-l/chromium-common.profile
index b0e0254d4..dbeb715d4 100644
--- a/etc/profile-a-l/chromium-common.profile
+++ b/etc/profile-a-l/chromium-common.profile
@@ -9,8 +9,8 @@ include chromium-common.local
9# noexec ${HOME} breaks DRM binaries. 9# noexec ${HOME} breaks DRM binaries.
10?BROWSER_ALLOW_DRM: ignore noexec ${HOME} 10?BROWSER_ALLOW_DRM: ignore noexec ${HOME}
11 11
12noblacklist ${HOME}/.pki 12nodeny ${HOME}/.pki
13noblacklist ${HOME}/.local/share/pki 13nodeny ${HOME}/.local/share/pki
14 14
15# Add the next line to your chromium-common.local if you want Google Chrome/Chromium browser 15# Add the next line to your chromium-common.local if you want Google Chrome/Chromium browser
16# to have access to Gnome extensions (extensions.gnome.org) via browser connector 16# to have access to Gnome extensions (extensions.gnome.org) via browser connector
@@ -26,9 +26,9 @@ include disable-xdg.inc
26 26
27mkdir ${HOME}/.pki 27mkdir ${HOME}/.pki
28mkdir ${HOME}/.local/share/pki 28mkdir ${HOME}/.local/share/pki
29whitelist ${DOWNLOADS} 29allow ${DOWNLOADS}
30whitelist ${HOME}/.pki 30allow ${HOME}/.pki
31whitelist ${HOME}/.local/share/pki 31allow ${HOME}/.local/share/pki
32include whitelist-common.inc 32include whitelist-common.inc
33include whitelist-runuser-common.inc 33include whitelist-runuser-common.inc
34include whitelist-usr-share-common.inc 34include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/chromium.profile b/etc/profile-a-l/chromium.profile
index 9ac33aa1c..ea92e90a8 100644
--- a/etc/profile-a-l/chromium.profile
+++ b/etc/profile-a-l/chromium.profile
@@ -6,17 +6,17 @@ include chromium.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/chromium 9nodeny ${HOME}/.cache/chromium
10noblacklist ${HOME}/.config/chromium 10nodeny ${HOME}/.config/chromium
11noblacklist ${HOME}/.config/chromium-flags.conf 11nodeny ${HOME}/.config/chromium-flags.conf
12 12
13mkdir ${HOME}/.cache/chromium 13mkdir ${HOME}/.cache/chromium
14mkdir ${HOME}/.config/chromium 14mkdir ${HOME}/.config/chromium
15whitelist ${HOME}/.cache/chromium 15allow ${HOME}/.cache/chromium
16whitelist ${HOME}/.config/chromium 16allow ${HOME}/.config/chromium
17whitelist ${HOME}/.config/chromium-flags.conf 17allow ${HOME}/.config/chromium-flags.conf
18whitelist /usr/share/chromium 18allow /usr/share/chromium
19whitelist /usr/share/mozilla/extensions 19allow /usr/share/mozilla/extensions
20 20
21# private-bin chromium,chromium-browser,chromedriver 21# private-bin chromium,chromium-browser,chromedriver
22 22
diff --git a/etc/profile-a-l/cin.profile b/etc/profile-a-l/cin.profile
index e1f9523c4..c967e1c96 100644
--- a/etc/profile-a-l/cin.profile
+++ b/etc/profile-a-l/cin.profile
@@ -5,7 +5,7 @@ include cin.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.bcast5 8nodeny ${HOME}/.bcast5
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
diff --git a/etc/profile-a-l/clamav.profile b/etc/profile-a-l/clamav.profile
index e403c2c41..0efbcd4f2 100644
--- a/etc/profile-a-l/clamav.profile
+++ b/etc/profile-a-l/clamav.profile
@@ -7,7 +7,7 @@ include clamav.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER}/wayland-* 10deny ${RUNUSER}/wayland-*
11 11
12include disable-exec.inc 12include disable-exec.inc
13 13
diff --git a/etc/profile-a-l/claws-mail.profile b/etc/profile-a-l/claws-mail.profile
index 691657fa0..3e4e1f2a1 100644
--- a/etc/profile-a-l/claws-mail.profile
+++ b/etc/profile-a-l/claws-mail.profile
@@ -6,17 +6,17 @@ include claws-mail.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.claws-mail 9nodeny ${HOME}/.claws-mail
10 10
11mkdir ${HOME}/.claws-mail 11mkdir ${HOME}/.claws-mail
12whitelist ${HOME}/.claws-mail 12allow ${HOME}/.claws-mail
13 13
14# Add the below lines to your claws-mail.local if you use python-based plugins. 14# Add the below lines to your claws-mail.local if you use python-based plugins.
15# Allow python (blacklisted by disable-interpreters.inc) 15# Allow python (blacklisted by disable-interpreters.inc)
16#include allow-python2.inc 16#include allow-python2.inc
17#include allow-python3.inc 17#include allow-python3.inc
18 18
19whitelist /usr/share/doc/claws-mail 19allow /usr/share/doc/claws-mail
20 20
21# private-bin claws-mail,curl,gpg,gpg2,gpg-agent,gpgsm,gpgme-config,pinentry,pinentry-gtk-2 21# private-bin claws-mail,curl,gpg,gpg2,gpg-agent,gpgsm,gpgme-config,pinentry,pinentry-gtk-2
22 22
diff --git a/etc/profile-a-l/clawsker.profile b/etc/profile-a-l/clawsker.profile
index 9b62a1f73..ee64391d9 100644
--- a/etc/profile-a-l/clawsker.profile
+++ b/etc/profile-a-l/clawsker.profile
@@ -6,7 +6,7 @@ include clawsker.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.claws-mail 9nodeny ${HOME}/.claws-mail
10 10
11# Allow perl (blacklisted by disable-interpreters.inc) 11# Allow perl (blacklisted by disable-interpreters.inc)
12include allow-perl.inc 12include allow-perl.inc
@@ -19,7 +19,7 @@ include disable-passwdmgr.inc
19include disable-programs.inc 19include disable-programs.inc
20 20
21mkdir ${HOME}/.claws-mail 21mkdir ${HOME}/.claws-mail
22whitelist ${HOME}/.claws-mail 22allow ${HOME}/.claws-mail
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
diff --git a/etc/profile-a-l/clementine.profile b/etc/profile-a-l/clementine.profile
index fa33795c1..f9c0006f9 100644
--- a/etc/profile-a-l/clementine.profile
+++ b/etc/profile-a-l/clementine.profile
@@ -6,9 +6,9 @@ include clementine.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/Clementine 9nodeny ${HOME}/.cache/Clementine
10noblacklist ${HOME}/.config/Clementine 10nodeny ${HOME}/.config/Clementine
11noblacklist ${MUSIC} 11nodeny ${MUSIC}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/clion.profile b/etc/profile-a-l/clion.profile
index 22cecff09..42903777a 100644
--- a/etc/profile-a-l/clion.profile
+++ b/etc/profile-a-l/clion.profile
@@ -5,13 +5,13 @@ include clion.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.CLion* 8nodeny ${HOME}/.CLion*
9noblacklist ${HOME}/.config/git 9nodeny ${HOME}/.config/git
10noblacklist ${HOME}/.gitconfig 10nodeny ${HOME}/.gitconfig
11noblacklist ${HOME}/.git-credentials 11nodeny ${HOME}/.git-credentials
12noblacklist ${HOME}/.java 12nodeny ${HOME}/.java
13noblacklist ${HOME}/.local/share/JetBrains 13nodeny ${HOME}/.local/share/JetBrains
14noblacklist ${HOME}/.tooling 14nodeny ${HOME}/.tooling
15 15
16# Allow ssh (blacklisted by disable-common.inc) 16# Allow ssh (blacklisted by disable-common.inc)
17include allow-ssh.inc 17include allow-ssh.inc
diff --git a/etc/profile-a-l/clipgrab.profile b/etc/profile-a-l/clipgrab.profile
index c8258da07..89f8d96f0 100644
--- a/etc/profile-a-l/clipgrab.profile
+++ b/etc/profile-a-l/clipgrab.profile
@@ -6,9 +6,9 @@ include clipgrab.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/Philipp Schmieder 9nodeny ${HOME}/.config/Philipp Schmieder
10noblacklist ${HOME}/.pki 10nodeny ${HOME}/.pki
11noblacklist ${VIDEOS} 11nodeny ${VIDEOS}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/clipit.profile b/etc/profile-a-l/clipit.profile
index d421903a3..4a2a5171b 100644
--- a/etc/profile-a-l/clipit.profile
+++ b/etc/profile-a-l/clipit.profile
@@ -6,8 +6,8 @@ include clipit.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/clipit 9nodeny ${HOME}/.config/clipit
10noblacklist ${HOME}/.local/share/clipit 10nodeny ${HOME}/.local/share/clipit
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -19,8 +19,8 @@ include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/clipit 20mkdir ${HOME}/.config/clipit
21mkdir ${HOME}/.local/share/clipit 21mkdir ${HOME}/.local/share/clipit
22whitelist ${HOME}/.config/clipit 22allow ${HOME}/.config/clipit
23whitelist ${HOME}/.local/share/clipit 23allow ${HOME}/.local/share/clipit
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
diff --git a/etc/profile-a-l/cliqz.profile b/etc/profile-a-l/cliqz.profile
index d0b8cc0ef..22c6ef882 100644
--- a/etc/profile-a-l/cliqz.profile
+++ b/etc/profile-a-l/cliqz.profile
@@ -5,16 +5,16 @@ include cliqz.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.cache/cliqz 8nodeny ${HOME}/.cache/cliqz
9noblacklist ${HOME}/.cliqz 9nodeny ${HOME}/.cliqz
10noblacklist ${HOME}/.config/cliqz 10nodeny ${HOME}/.config/cliqz
11 11
12mkdir ${HOME}/.cache/cliqz 12mkdir ${HOME}/.cache/cliqz
13mkdir ${HOME}/.cliqz 13mkdir ${HOME}/.cliqz
14mkdir ${HOME}/.config/cliqz 14mkdir ${HOME}/.config/cliqz
15whitelist ${HOME}/.cache/cliqz 15allow ${HOME}/.cache/cliqz
16whitelist ${HOME}/.cliqz 16allow ${HOME}/.cliqz
17whitelist ${HOME}/.config/cliqz 17allow ${HOME}/.config/cliqz
18 18
19# private-etc must first be enabled in firefox-common.profile 19# private-etc must first be enabled in firefox-common.profile
20#private-etc cliqz 20#private-etc cliqz
diff --git a/etc/profile-a-l/cmus.profile b/etc/profile-a-l/cmus.profile
index bcd557787..51e53209f 100644
--- a/etc/profile-a-l/cmus.profile
+++ b/etc/profile-a-l/cmus.profile
@@ -6,8 +6,8 @@ include cmus.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/cmus 9nodeny ${HOME}/.config/cmus
10noblacklist ${MUSIC} 10nodeny ${MUSIC}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/code.profile b/etc/profile-a-l/code.profile
index e19b78908..1933c66fa 100644
--- a/etc/profile-a-l/code.profile
+++ b/etc/profile-a-l/code.profile
@@ -5,10 +5,10 @@ include code.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/Code 8nodeny ${HOME}/.config/Code
9noblacklist ${HOME}/.config/Code - OSS 9nodeny ${HOME}/.config/Code - OSS
10noblacklist ${HOME}/.vscode 10nodeny ${HOME}/.vscode
11noblacklist ${HOME}/.vscode-oss 11nodeny ${HOME}/.vscode-oss
12 12
13# Allows files commonly used by IDEs 13# Allows files commonly used by IDEs
14include allow-common-devel.inc 14include allow-common-devel.inc
diff --git a/etc/profile-a-l/colorful.profile b/etc/profile-a-l/colorful.profile
index bd6d8f5b0..efa7f516c 100644
--- a/etc/profile-a-l/colorful.profile
+++ b/etc/profile-a-l/colorful.profile
@@ -6,7 +6,7 @@ include colorful.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.suve/colorful 9nodeny ${HOME}/.suve/colorful
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.suve/colorful 20mkdir ${HOME}/.suve/colorful
21whitelist ${HOME}/.suve/colorful 21allow ${HOME}/.suve/colorful
22whitelist /usr/share/suve 22allow /usr/share/suve
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/com.github.bleakgrey.tootle.profile b/etc/profile-a-l/com.github.bleakgrey.tootle.profile
index c8bdfec23..34b662959 100644
--- a/etc/profile-a-l/com.github.bleakgrey.tootle.profile
+++ b/etc/profile-a-l/com.github.bleakgrey.tootle.profile
@@ -6,7 +6,7 @@ include com.github.bleakgrey.tootle.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/com.github.bleakgrey.tootle 9nodeny ${HOME}/.config/com.github.bleakgrey.tootle
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/com.github.bleakgrey.tootle 20mkdir ${HOME}/.config/com.github.bleakgrey.tootle
21whitelist ${DOWNLOADS} 21allow ${DOWNLOADS}
22whitelist ${HOME}/.config/com.github.bleakgrey.tootle 22allow ${HOME}/.config/com.github.bleakgrey.tootle
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/com.github.dahenson.agenda.profile b/etc/profile-a-l/com.github.dahenson.agenda.profile
index b467a0f7a..4e26e4925 100644
--- a/etc/profile-a-l/com.github.dahenson.agenda.profile
+++ b/etc/profile-a-l/com.github.dahenson.agenda.profile
@@ -6,9 +6,9 @@ include com.github.dahenson.agenda.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/agenda 9nodeny ${HOME}/.cache/agenda
10noblacklist ${HOME}/.config/agenda 10nodeny ${HOME}/.config/agenda
11noblacklist ${HOME}/.local/share/agenda 11nodeny ${HOME}/.local/share/agenda
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -22,9 +22,9 @@ include disable-xdg.inc
22mkdir ${HOME}/.cache/agenda 22mkdir ${HOME}/.cache/agenda
23mkdir ${HOME}/.config/agenda 23mkdir ${HOME}/.config/agenda
24mkdir ${HOME}/.local/share/agenda 24mkdir ${HOME}/.local/share/agenda
25whitelist ${HOME}/.cache/agenda 25allow ${HOME}/.cache/agenda
26whitelist ${HOME}/.config/agenda 26allow ${HOME}/.config/agenda
27whitelist ${HOME}/.local/share/agenda 27allow ${HOME}/.local/share/agenda
28include whitelist-common.inc 28include whitelist-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
30include whitelist-runuser-common.inc 30include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/com.github.johnfactotum.Foliate.profile b/etc/profile-a-l/com.github.johnfactotum.Foliate.profile
index c13f9618b..bbfc1fe41 100644
--- a/etc/profile-a-l/com.github.johnfactotum.Foliate.profile
+++ b/etc/profile-a-l/com.github.johnfactotum.Foliate.profile
@@ -6,9 +6,9 @@ include foliate.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${DOCUMENTS} 9nodeny ${DOCUMENTS}
10noblacklist ${HOME}/.cache/com.github.johnfactotum.Foliate 10nodeny ${HOME}/.cache/com.github.johnfactotum.Foliate
11noblacklist ${HOME}/.local/share/com.github.johnfactotum.Foliate 11nodeny ${HOME}/.local/share/com.github.johnfactotum.Foliate
12 12
13# Allow gjs (blacklisted by disable-interpreters.inc) 13# Allow gjs (blacklisted by disable-interpreters.inc)
14include allow-gjs.inc 14include allow-gjs.inc
@@ -24,12 +24,12 @@ include disable-xdg.inc
24 24
25mkdir ${HOME}/.cache/com.github.johnfactotum.Foliate 25mkdir ${HOME}/.cache/com.github.johnfactotum.Foliate
26mkdir ${HOME}/.local/share/com.github.johnfactotum.Foliate 26mkdir ${HOME}/.local/share/com.github.johnfactotum.Foliate
27whitelist ${HOME}/.cache/com.github.johnfactotum.Foliate 27allow ${HOME}/.cache/com.github.johnfactotum.Foliate
28whitelist ${HOME}/.local/share/com.github.johnfactotum.Foliate 28allow ${HOME}/.local/share/com.github.johnfactotum.Foliate
29whitelist ${DOCUMENTS} 29allow ${DOCUMENTS}
30whitelist ${DOWNLOADS} 30allow ${DOWNLOADS}
31whitelist /usr/share/com.github.johnfactotum.Foliate 31allow /usr/share/com.github.johnfactotum.Foliate
32whitelist /usr/share/hyphen 32allow /usr/share/hyphen
33include whitelist-common.inc 33include whitelist-common.inc
34include whitelist-usr-share-common.inc 34include whitelist-usr-share-common.inc
35include whitelist-var-common.inc 35include whitelist-var-common.inc
diff --git a/etc/profile-a-l/com.github.phase1geo.minder.profile b/etc/profile-a-l/com.github.phase1geo.minder.profile
index d0402d188..3e9acc6c8 100644
--- a/etc/profile-a-l/com.github.phase1geo.minder.profile
+++ b/etc/profile-a-l/com.github.phase1geo.minder.profile
@@ -6,9 +6,9 @@ include com.github.phase1geo.minder.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/minder 9nodeny ${HOME}/.local/share/minder
10noblacklist ${DOCUMENTS} 10nodeny ${DOCUMENTS}
11noblacklist ${PICTURES} 11nodeny ${PICTURES}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -20,10 +20,10 @@ include disable-shell.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22mkdir ${HOME}/.local/share/minder 22mkdir ${HOME}/.local/share/minder
23whitelist ${HOME}/.local/share/minder 23allow ${HOME}/.local/share/minder
24whitelist ${DOCUMENTS} 24allow ${DOCUMENTS}
25whitelist ${DOWNLOADS} 25allow ${DOWNLOADS}
26whitelist ${PICTURES} 26allow ${PICTURES}
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/conkeror.profile b/etc/profile-a-l/conkeror.profile
index 38edf0d21..6cc9ec551 100644
--- a/etc/profile-a-l/conkeror.profile
+++ b/etc/profile-a-l/conkeror.profile
@@ -5,23 +5,23 @@ include conkeror.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.conkeror.mozdev.org 8nodeny ${HOME}/.conkeror.mozdev.org
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-programs.inc 11include disable-programs.inc
12 12
13mkdir ${HOME}/.conkeror.mozdev.org 13mkdir ${HOME}/.conkeror.mozdev.org
14mkfile ${HOME}/.conkerorrc 14mkfile ${HOME}/.conkerorrc
15whitelist ${HOME}/.conkeror.mozdev.org 15allow ${HOME}/.conkeror.mozdev.org
16whitelist ${HOME}/.conkerorrc 16allow ${HOME}/.conkerorrc
17whitelist ${HOME}/.lastpass 17allow ${HOME}/.lastpass
18whitelist ${HOME}/.pentadactyl 18allow ${HOME}/.pentadactyl
19whitelist ${HOME}/.pentadactylrc 19allow ${HOME}/.pentadactylrc
20whitelist ${HOME}/.vimperator 20allow ${HOME}/.vimperator
21whitelist ${HOME}/.vimperatorrc 21allow ${HOME}/.vimperatorrc
22whitelist ${HOME}/.zotero 22allow ${HOME}/.zotero
23whitelist ${HOME}/dwhelper 23allow ${HOME}/dwhelper
24whitelist ${DOWNLOADS} 24allow ${DOWNLOADS}
25include whitelist-common.inc 25include whitelist-common.inc
26 26
27caps.drop all 27caps.drop all
diff --git a/etc/profile-a-l/conky.profile b/etc/profile-a-l/conky.profile
index eaa18739d..1b3fe6651 100644
--- a/etc/profile-a-l/conky.profile
+++ b/etc/profile-a-l/conky.profile
@@ -6,7 +6,7 @@ include conky.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${PICTURES} 9nodeny ${PICTURES}
10 10
11# Allow lua (blacklisted by disable-interpreters.inc) 11# Allow lua (blacklisted by disable-interpreters.inc)
12include allow-lua.inc 12include allow-lua.inc
diff --git a/etc/profile-a-l/corebird.profile b/etc/profile-a-l/corebird.profile
index 2fb446e2a..266c404ee 100644
--- a/etc/profile-a-l/corebird.profile
+++ b/etc/profile-a-l/corebird.profile
@@ -6,7 +6,7 @@ include corebird.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/corebird 9nodeny ${HOME}/.config/corebird
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/cower.profile b/etc/profile-a-l/cower.profile
index 1635995dc..0a1353e40 100644
--- a/etc/profile-a-l/cower.profile
+++ b/etc/profile-a-l/cower.profile
@@ -7,8 +7,8 @@ include cower.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${HOME}/.config/cower 10nodeny ${HOME}/.config/cower
11noblacklist /var/lib/pacman 11nodeny /var/lib/pacman
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/coyim.profile b/etc/profile-a-l/coyim.profile
index 7ece35c2b..5e48c8022 100644
--- a/etc/profile-a-l/coyim.profile
+++ b/etc/profile-a-l/coyim.profile
@@ -6,7 +6,7 @@ include coyim.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/coyim 9nodeny ${HOME}/.config/coyim
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,7 +18,7 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/coyim 20mkdir ${HOME}/.config/coyim
21whitelist ${HOME}/.config/coyim 21allow ${HOME}/.config/coyim
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/cpio.profile b/etc/profile-a-l/cpio.profile
index bdc4f21a6..dec8c086b 100644
--- a/etc/profile-a-l/cpio.profile
+++ b/etc/profile-a-l/cpio.profile
@@ -7,8 +7,8 @@ include cpio.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist /sbin 10nodeny /sbin
11noblacklist /usr/sbin 11nodeny /usr/sbin
12 12
13# Redirect 13# Redirect
14include archiver-common.profile 14include archiver-common.profile
diff --git a/etc/profile-a-l/crawl.profile b/etc/profile-a-l/crawl.profile
index b10216895..81292c01c 100644
--- a/etc/profile-a-l/crawl.profile
+++ b/etc/profile-a-l/crawl.profile
@@ -6,7 +6,7 @@ include crawl-tiles.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.crawl 9nodeny ${HOME}/.crawl
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19mkdir ${HOME}/.crawl 19mkdir ${HOME}/.crawl
20whitelist ${HOME}/.crawl 20allow ${HOME}/.crawl
21include whitelist-common.inc 21include whitelist-common.inc
22include whitelist-var-common.inc 22include whitelist-var-common.inc
23 23
diff --git a/etc/profile-a-l/crow.profile b/etc/profile-a-l/crow.profile
index 02b15ecc2..36bd93778 100644
--- a/etc/profile-a-l/crow.profile
+++ b/etc/profile-a-l/crow.profile
@@ -8,8 +8,8 @@ include globals.local
8 8
9mkdir ${HOME}/.config/crow 9mkdir ${HOME}/.config/crow
10mkdir ${HOME}/.cache/gstreamer-1.0 10mkdir ${HOME}/.cache/gstreamer-1.0
11whitelist ${HOME}/.config/crow 11allow ${HOME}/.config/crow
12whitelist ${HOME}/.cache/gstreamer-1.0 12allow ${HOME}/.cache/gstreamer-1.0
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
diff --git a/etc/profile-a-l/curl.profile b/etc/profile-a-l/curl.profile
index c9867c5d7..4950b7a4c 100644
--- a/etc/profile-a-l/curl.profile
+++ b/etc/profile-a-l/curl.profile
@@ -12,11 +12,11 @@ include globals.local
12# Technically this file can be anywhere but let's assume users have it in ${HOME}/.curl-hsts. 12# Technically this file can be anywhere but let's assume users have it in ${HOME}/.curl-hsts.
13# If your setup diverts, add 'blacklist /path/to/curl/hsts/file' to your disable-programs.local 13# If your setup diverts, add 'blacklist /path/to/curl/hsts/file' to your disable-programs.local
14# and 'noblacklist /path/to/curl/hsts/file' to curl.local to keep the sandbox logic intact. 14# and 'noblacklist /path/to/curl/hsts/file' to curl.local to keep the sandbox logic intact.
15noblacklist ${HOME}/.curl-hsts 15nodeny ${HOME}/.curl-hsts
16noblacklist ${HOME}/.curlrc 16nodeny ${HOME}/.curlrc
17 17
18blacklist /tmp/.X11-unix 18deny /tmp/.X11-unix
19blacklist ${RUNUSER} 19deny ${RUNUSER}
20 20
21include disable-common.inc 21include disable-common.inc
22include disable-exec.inc 22include disable-exec.inc
diff --git a/etc/profile-a-l/cyberfox.profile b/etc/profile-a-l/cyberfox.profile
index d1fff0004..49f972e4a 100644
--- a/etc/profile-a-l/cyberfox.profile
+++ b/etc/profile-a-l/cyberfox.profile
@@ -5,13 +5,13 @@ include cyberfox.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.8pecxstudios 8nodeny ${HOME}/.8pecxstudios
9noblacklist ${HOME}/.cache/8pecxstudios 9nodeny ${HOME}/.cache/8pecxstudios
10 10
11mkdir ${HOME}/.8pecxstudios 11mkdir ${HOME}/.8pecxstudios
12mkdir ${HOME}/.cache/8pecxstudios 12mkdir ${HOME}/.cache/8pecxstudios
13whitelist ${HOME}/.8pecxstudios 13allow ${HOME}/.8pecxstudios
14whitelist ${HOME}/.cache/8pecxstudios 14allow ${HOME}/.cache/8pecxstudios
15 15
16# private-bin cyberfox,dbus-launch,dbus-send,env,sh,which 16# private-bin cyberfox,dbus-launch,dbus-send,env,sh,which
17# private-etc must first be enabled in firefox-common.profile 17# private-etc must first be enabled in firefox-common.profile
diff --git a/etc/profile-a-l/d-feet.profile b/etc/profile-a-l/d-feet.profile
index ba1e7adad..c7ce1730a 100644
--- a/etc/profile-a-l/d-feet.profile
+++ b/etc/profile-a-l/d-feet.profile
@@ -6,7 +6,7 @@ include d-feet.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/d-feet 9nodeny ${HOME}/.config/d-feet
10 10
11# Allow python (disabled by disable-interpreters.inc) 11# Allow python (disabled by disable-interpreters.inc)
12include allow-python2.inc 12include allow-python2.inc
@@ -22,8 +22,8 @@ include disable-shell.inc
22include disable-xdg.inc 22include disable-xdg.inc
23 23
24mkdir ${HOME}/.config/d-feet 24mkdir ${HOME}/.config/d-feet
25whitelist ${HOME}/.config/d-feet 25allow ${HOME}/.config/d-feet
26whitelist /usr/share/d-feet 26allow /usr/share/d-feet
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/darktable.profile b/etc/profile-a-l/darktable.profile
index 61fa52928..4d51c255e 100644
--- a/etc/profile-a-l/darktable.profile
+++ b/etc/profile-a-l/darktable.profile
@@ -6,9 +6,9 @@ include darktable.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/darktable 9nodeny ${HOME}/.cache/darktable
10noblacklist ${HOME}/.config/darktable 10nodeny ${HOME}/.config/darktable
11noblacklist ${PICTURES} 11nodeny ${PICTURES}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/dbus-send.profile b/etc/profile-a-l/dbus-send.profile
index 67a61bb60..745042d6f 100644
--- a/etc/profile-a-l/dbus-send.profile
+++ b/etc/profile-a-l/dbus-send.profile
@@ -7,8 +7,8 @@ include dbus-send.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist /tmp/.X11-unix 10deny /tmp/.X11-unix
11blacklist ${RUNUSER}/wayland-* 11deny ${RUNUSER}/wayland-*
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/dconf-editor.profile b/etc/profile-a-l/dconf-editor.profile
index 0c221850a..c1231c6cf 100644
--- a/etc/profile-a-l/dconf-editor.profile
+++ b/etc/profile-a-l/dconf-editor.profile
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18whitelist ${HOME}/.local/share/glib-2.0 18allow ${HOME}/.local/share/glib-2.0
19include whitelist-common.inc 19include whitelist-common.inc
20include whitelist-runuser-common.inc 20include whitelist-runuser-common.inc
21include whitelist-usr-share-common.inc 21include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/dconf.profile b/etc/profile-a-l/dconf.profile
index be7514cbf..b9d385adf 100644
--- a/etc/profile-a-l/dconf.profile
+++ b/etc/profile-a-l/dconf.profile
@@ -6,7 +6,7 @@ include dconf.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9blacklist ${RUNUSER}/wayland-* 9deny ${RUNUSER}/wayland-*
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,7 +16,7 @@ include disable-passwdmgr.inc
16include disable-programs.inc 16include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19whitelist ${HOME}/.local/share/glib-2.0 19allow ${HOME}/.local/share/glib-2.0
20# dconf paths are whitelisted by the following 20# dconf paths are whitelisted by the following
21include whitelist-common.inc 21include whitelist-common.inc
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/ddgtk.profile b/etc/profile-a-l/ddgtk.profile
index 5b95b74be..09fa7a07a 100644
--- a/etc/profile-a-l/ddgtk.profile
+++ b/etc/profile-a-l/ddgtk.profile
@@ -18,8 +18,8 @@ include disable-passwdmgr.inc
18include disable-programs.inc 18include disable-programs.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21whitelist ${DOWNLOADS} 21allow ${DOWNLOADS}
22whitelist /usr/share/ddgtk 22allow /usr/share/ddgtk
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
diff --git a/etc/profile-a-l/deadbeef.profile b/etc/profile-a-l/deadbeef.profile
index a221ebbd7..25fa944a1 100644
--- a/etc/profile-a-l/deadbeef.profile
+++ b/etc/profile-a-l/deadbeef.profile
@@ -6,8 +6,8 @@ include deadbeef.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/deadbeef 9nodeny ${HOME}/.config/deadbeef
10noblacklist ${MUSIC} 10nodeny ${MUSIC}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/deluge.profile b/etc/profile-a-l/deluge.profile
index ad7aa6ed5..d41a4a023 100644
--- a/etc/profile-a-l/deluge.profile
+++ b/etc/profile-a-l/deluge.profile
@@ -6,7 +6,7 @@ include deluge.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/deluge 9nodeny ${HOME}/.config/deluge
10 10
11# Allow python (blacklisted by disable-interpreters.inc) 11# Allow python (blacklisted by disable-interpreters.inc)
12include allow-python2.inc 12include allow-python2.inc
@@ -20,8 +20,8 @@ include disable-passwdmgr.inc
20include disable-programs.inc 20include disable-programs.inc
21 21
22mkdir ${HOME}/.config/deluge 22mkdir ${HOME}/.config/deluge
23whitelist ${DOWNLOADS} 23allow ${DOWNLOADS}
24whitelist ${HOME}/.config/deluge 24allow ${HOME}/.config/deluge
25include whitelist-common.inc 25include whitelist-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
27 27
diff --git a/etc/profile-a-l/desktopeditors.profile b/etc/profile-a-l/desktopeditors.profile
index 212cdab60..aed4355d5 100644
--- a/etc/profile-a-l/desktopeditors.profile
+++ b/etc/profile-a-l/desktopeditors.profile
@@ -6,9 +6,9 @@ include desktopeditors.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/onlyoffice 9nodeny ${HOME}/.config/onlyoffice
10noblacklist ${HOME}/.local/share/onlyoffice 10nodeny ${HOME}/.local/share/onlyoffice
11noblacklist ${HOME}/.pki 11nodeny ${HOME}/.pki
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/devhelp.profile b/etc/profile-a-l/devhelp.profile
index 5007f8e74..dc0f290fb 100644
--- a/etc/profile-a-l/devhelp.profile
+++ b/etc/profile-a-l/devhelp.profile
@@ -16,9 +16,9 @@ include disable-programs.inc
16include disable-shell.inc 16include disable-shell.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19whitelist /usr/share/devhelp 19allow /usr/share/devhelp
20whitelist /usr/share/doc 20allow /usr/share/doc
21whitelist /usr/share/gtk-doc/html 21allow /usr/share/gtk-doc/html
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
24 24
diff --git a/etc/profile-a-l/devilspie.profile b/etc/profile-a-l/devilspie.profile
index 6267b5709..631f15f93 100644
--- a/etc/profile-a-l/devilspie.profile
+++ b/etc/profile-a-l/devilspie.profile
@@ -6,9 +6,9 @@ include devilspie.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9blacklist ${RUNUSER}/wayland-* 9deny ${RUNUSER}/wayland-*
10 10
11noblacklist ${HOME}/.devilspie 11nodeny ${HOME}/.devilspie
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -19,7 +19,7 @@ include disable-programs.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21mkdir ${HOME}/.devilspie 21mkdir ${HOME}/.devilspie
22whitelist ${HOME}/.devilspie 22allow ${HOME}/.devilspie
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
diff --git a/etc/profile-a-l/devilspie2.profile b/etc/profile-a-l/devilspie2.profile
index 9eab3f536..140c9da0f 100644
--- a/etc/profile-a-l/devilspie2.profile
+++ b/etc/profile-a-l/devilspie2.profile
@@ -6,17 +6,17 @@ include devilspie2.local
6# Persistent global definitions 6# Persistent global definitions
7#include globals.local 7#include globals.local
8 8
9blacklist ${HOME}/.devilspie 9deny ${HOME}/.devilspie
10 10
11blacklist ${RUNUSER}/wayland-* 11deny ${RUNUSER}/wayland-*
12 12
13noblacklist ${HOME}/.config/devilspie2 13nodeny ${HOME}/.config/devilspie2
14 14
15# Allow lua (blacklisted by disable-interpreters.inc) 15# Allow lua (blacklisted by disable-interpreters.inc)
16include allow-lua.inc 16include allow-lua.inc
17 17
18mkdir ${HOME}/.config/devilspie2 18mkdir ${HOME}/.config/devilspie2
19whitelist ${HOME}/.config/devilspie2 19allow ${HOME}/.config/devilspie2
20 20
21private-bin devilspie2 21private-bin devilspie2
22 22
diff --git a/etc/profile-a-l/dia.profile b/etc/profile-a-l/dia.profile
index 531734b7d..2a808238b 100644
--- a/etc/profile-a-l/dia.profile
+++ b/etc/profile-a-l/dia.profile
@@ -6,8 +6,8 @@ include dia.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.dia 9nodeny ${HOME}/.dia
10noblacklist ${DOCUMENTS} 10nodeny ${DOCUMENTS}
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
@@ -25,7 +25,7 @@ include disable-xdg.inc
25#whitelist ${HOME}/.dia 25#whitelist ${HOME}/.dia
26#whitelist ${DOCUMENTS} 26#whitelist ${DOCUMENTS}
27#include whitelist-common.inc 27#include whitelist-common.inc
28whitelist /usr/share/dia 28allow /usr/share/dia
29include whitelist-runuser-common.inc 29include whitelist-runuser-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/dig.profile b/etc/profile-a-l/dig.profile
index 247159a8a..2d683b811 100644
--- a/etc/profile-a-l/dig.profile
+++ b/etc/profile-a-l/dig.profile
@@ -7,11 +7,11 @@ include dig.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${HOME}/.digrc 10nodeny ${HOME}/.digrc
11noblacklist ${PATH}/dig 11nodeny ${PATH}/dig
12 12
13blacklist /tmp/.X11-unix 13deny /tmp/.X11-unix
14blacklist ${RUNUSER} 14deny ${RUNUSER}
15 15
16include disable-common.inc 16include disable-common.inc
17# include disable-devel.inc 17# include disable-devel.inc
@@ -22,7 +22,7 @@ include disable-programs.inc
22include disable-xdg.inc 22include disable-xdg.inc
23 23
24#mkfile ${HOME}/.digrc - see #903 24#mkfile ${HOME}/.digrc - see #903
25whitelist ${HOME}/.digrc 25allow ${HOME}/.digrc
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-usr-share-common.inc 27include whitelist-usr-share-common.inc
28include whitelist-var-common.inc 28include whitelist-var-common.inc
diff --git a/etc/profile-a-l/digikam.profile b/etc/profile-a-l/digikam.profile
index 2ca7bd400..124b50952 100644
--- a/etc/profile-a-l/digikam.profile
+++ b/etc/profile-a-l/digikam.profile
@@ -6,12 +6,12 @@ include digikam.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/digikam 9nodeny ${HOME}/.config/digikam
10noblacklist ${HOME}/.config/digikamrc 10nodeny ${HOME}/.config/digikamrc
11noblacklist ${HOME}/.kde/share/apps/digikam 11nodeny ${HOME}/.kde/share/apps/digikam
12noblacklist ${HOME}/.kde4/share/apps/digikam 12nodeny ${HOME}/.kde4/share/apps/digikam
13noblacklist ${HOME}/.local/share/kxmlgui5/digikam 13nodeny ${HOME}/.local/share/kxmlgui5/digikam
14noblacklist ${PICTURES} 14nodeny ${PICTURES}
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/dillo.profile b/etc/profile-a-l/dillo.profile
index 9871a6095..883466f4d 100644
--- a/etc/profile-a-l/dillo.profile
+++ b/etc/profile-a-l/dillo.profile
@@ -6,7 +6,7 @@ include dillo.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.dillo 9nodeny ${HOME}/.dillo
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,9 +16,9 @@ include disable-programs.inc
16 16
17mkdir ${HOME}/.dillo 17mkdir ${HOME}/.dillo
18mkdir ${HOME}/.fltk 18mkdir ${HOME}/.fltk
19whitelist ${DOWNLOADS} 19allow ${DOWNLOADS}
20whitelist ${HOME}/.dillo 20allow ${HOME}/.dillo
21whitelist ${HOME}/.fltk 21allow ${HOME}/.fltk
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/dino.profile b/etc/profile-a-l/dino.profile
index c3174b35f..3078bef71 100644
--- a/etc/profile-a-l/dino.profile
+++ b/etc/profile-a-l/dino.profile
@@ -6,7 +6,7 @@ include dino.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/dino 9nodeny ${HOME}/.local/share/dino
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,8 +17,8 @@ include disable-programs.inc
17include disable-shell.inc 17include disable-shell.inc
18 18
19mkdir ${HOME}/.local/share/dino 19mkdir ${HOME}/.local/share/dino
20whitelist ${HOME}/.local/share/dino 20allow ${HOME}/.local/share/dino
21whitelist ${DOWNLOADS} 21allow ${DOWNLOADS}
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-runuser-common.inc 23include whitelist-runuser-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/discord-canary.profile b/etc/profile-a-l/discord-canary.profile
index 43db95b8a..1c53cd211 100644
--- a/etc/profile-a-l/discord-canary.profile
+++ b/etc/profile-a-l/discord-canary.profile
@@ -5,10 +5,10 @@ include discord-canary.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/discordcanary 8nodeny ${HOME}/.config/discordcanary
9 9
10mkdir ${HOME}/.config/discordcanary 10mkdir ${HOME}/.config/discordcanary
11whitelist ${HOME}/.config/discordcanary 11allow ${HOME}/.config/discordcanary
12 12
13private-bin discord-canary,electron,electron[0-9],electron[0-9][0-9] 13private-bin discord-canary,electron,electron[0-9],electron[0-9][0-9]
14private-opt discord-canary 14private-opt discord-canary
diff --git a/etc/profile-a-l/discord-common.profile b/etc/profile-a-l/discord-common.profile
index 19e7bd9ab..6bee1901c 100644
--- a/etc/profile-a-l/discord-common.profile
+++ b/etc/profile-a-l/discord-common.profile
@@ -20,8 +20,8 @@ ignore dbus-system none
20ignore noexec ${HOME} 20ignore noexec ${HOME}
21ignore novideo 21ignore novideo
22 22
23whitelist ${HOME}/.config/BetterDiscord 23allow ${HOME}/.config/BetterDiscord
24whitelist ${HOME}/.local/share/betterdiscordctl 24allow ${HOME}/.local/share/betterdiscordctl
25 25
26private-bin bash,cut,echo,egrep,fish,grep,head,sed,sh,tclsh,tr,xdg-mime,xdg-open,zsh 26private-bin bash,cut,echo,egrep,fish,grep,head,sed,sh,tclsh,tr,xdg-mime,xdg-open,zsh
27private-etc alternatives,ca-certificates,crypto-policies,fonts,group,ld.so.cache,localtime,login.defs,machine-id,password,pki,pulse,resolv.conf,ssl 27private-etc alternatives,ca-certificates,crypto-policies,fonts,group,ld.so.cache,localtime,login.defs,machine-id,password,pki,pulse,resolv.conf,ssl
diff --git a/etc/profile-a-l/discord.profile b/etc/profile-a-l/discord.profile
index 8ef02a30f..658d3fc83 100644
--- a/etc/profile-a-l/discord.profile
+++ b/etc/profile-a-l/discord.profile
@@ -5,10 +5,10 @@ include discord.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/discord 8nodeny ${HOME}/.config/discord
9 9
10mkdir ${HOME}/.config/discord 10mkdir ${HOME}/.config/discord
11whitelist ${HOME}/.config/discord 11allow ${HOME}/.config/discord
12 12
13private-bin discord 13private-bin discord
14private-opt discord 14private-opt discord
diff --git a/etc/profile-a-l/display.profile b/etc/profile-a-l/display.profile
index 11f3fd36e..4474b97d2 100644
--- a/etc/profile-a-l/display.profile
+++ b/etc/profile-a-l/display.profile
@@ -5,7 +5,7 @@ include display.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${PICTURES} 8nodeny ${PICTURES}
9 9
10# Allow python (blacklisted by disable-interpreters.inc) 10# Allow python (blacklisted by disable-interpreters.inc)
11include allow-python2.inc 11include allow-python2.inc
diff --git a/etc/profile-a-l/dnox.profile b/etc/profile-a-l/dnox.profile
index 51ba6f8b7..8c3d6211b 100644
--- a/etc/profile-a-l/dnox.profile
+++ b/etc/profile-a-l/dnox.profile
@@ -10,13 +10,13 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13noblacklist ${HOME}/.cache/dnox 13nodeny ${HOME}/.cache/dnox
14noblacklist ${HOME}/.config/dnox 14nodeny ${HOME}/.config/dnox
15 15
16mkdir ${HOME}/.cache/dnox 16mkdir ${HOME}/.cache/dnox
17mkdir ${HOME}/.config/dnox 17mkdir ${HOME}/.config/dnox
18whitelist ${HOME}/.cache/dnox 18allow ${HOME}/.cache/dnox
19whitelist ${HOME}/.config/dnox 19allow ${HOME}/.config/dnox
20 20
21# Redirect 21# Redirect
22include chromium-common.profile 22include chromium-common.profile
diff --git a/etc/profile-a-l/dnscrypt-proxy.profile b/etc/profile-a-l/dnscrypt-proxy.profile
index f8fb1a331..dbcef36f8 100644
--- a/etc/profile-a-l/dnscrypt-proxy.profile
+++ b/etc/profile-a-l/dnscrypt-proxy.profile
@@ -7,11 +7,11 @@ include dnscrypt-proxy.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist /tmp/.X11-unix 10deny /tmp/.X11-unix
11blacklist ${RUNUSER}/wayland-* 11deny ${RUNUSER}/wayland-*
12 12
13noblacklist /sbin 13nodeny /sbin
14noblacklist /usr/sbin 14nodeny /usr/sbin
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
@@ -21,7 +21,7 @@ include disable-passwdmgr.inc
21include disable-programs.inc 21include disable-programs.inc
22include disable-xdg.inc 22include disable-xdg.inc
23 23
24whitelist /usr/share/dnscrypt-proxy 24allow /usr/share/dnscrypt-proxy
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
27 27
diff --git a/etc/profile-a-l/dnsmasq.profile b/etc/profile-a-l/dnsmasq.profile
index 01398c2b2..b1acbf392 100644
--- a/etc/profile-a-l/dnsmasq.profile
+++ b/etc/profile-a-l/dnsmasq.profile
@@ -7,11 +7,11 @@ include dnsmasq.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist /sbin 10nodeny /sbin
11noblacklist /usr/sbin 11nodeny /usr/sbin
12 12
13blacklist /tmp/.X11-unix 13deny /tmp/.X11-unix
14blacklist ${RUNUSER}/wayland-* 14deny ${RUNUSER}/wayland-*
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/dolphin-emu.profile b/etc/profile-a-l/dolphin-emu.profile
index 49feec32e..15b312ecb 100644
--- a/etc/profile-a-l/dolphin-emu.profile
+++ b/etc/profile-a-l/dolphin-emu.profile
@@ -8,9 +8,9 @@ include globals.local
8 8
9# Note: you must whitelist your games folder in your dolphin-emu.local. 9# Note: you must whitelist your games folder in your dolphin-emu.local.
10 10
11noblacklist ${HOME}/.cache/dolphin-emu 11nodeny ${HOME}/.cache/dolphin-emu
12noblacklist ${HOME}/.config/dolphin-emu 12nodeny ${HOME}/.config/dolphin-emu
13noblacklist ${HOME}/.local/share/dolphin-emu 13nodeny ${HOME}/.local/share/dolphin-emu
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -24,10 +24,10 @@ include disable-xdg.inc
24mkdir ${HOME}/.cache/dolphin-emu 24mkdir ${HOME}/.cache/dolphin-emu
25mkdir ${HOME}/.config/dolphin-emu 25mkdir ${HOME}/.config/dolphin-emu
26mkdir ${HOME}/.local/share/dolphin-emu 26mkdir ${HOME}/.local/share/dolphin-emu
27whitelist ${HOME}/.cache/dolphin-emu 27allow ${HOME}/.cache/dolphin-emu
28whitelist ${HOME}/.config/dolphin-emu 28allow ${HOME}/.config/dolphin-emu
29whitelist ${HOME}/.local/share/dolphin-emu 29allow ${HOME}/.local/share/dolphin-emu
30whitelist /usr/share/dolphin-emu 30allow /usr/share/dolphin-emu
31include whitelist-common.inc 31include whitelist-common.inc
32include whitelist-runuser-common.inc 32include whitelist-runuser-common.inc
33include whitelist-usr-share-common.inc 33include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/dooble.profile b/etc/profile-a-l/dooble.profile
index 37a4113cb..3b0adcc36 100644
--- a/etc/profile-a-l/dooble.profile
+++ b/etc/profile-a-l/dooble.profile
@@ -7,7 +7,7 @@ include dooble-qt4.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${HOME}/.dooble 10nodeny ${HOME}/.dooble
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -17,8 +17,8 @@ include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18 18
19mkdir ${HOME}/.dooble 19mkdir ${HOME}/.dooble
20whitelist ${DOWNLOADS} 20allow ${DOWNLOADS}
21whitelist ${HOME}/.dooble 21allow ${HOME}/.dooble
22include whitelist-common.inc 22include whitelist-common.inc
23 23
24caps.drop all 24caps.drop all
diff --git a/etc/profile-a-l/dosbox.profile b/etc/profile-a-l/dosbox.profile
index 988f66f28..29e506764 100644
--- a/etc/profile-a-l/dosbox.profile
+++ b/etc/profile-a-l/dosbox.profile
@@ -6,8 +6,8 @@ include dosbox.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.dosbox 9nodeny ${HOME}/.dosbox
10noblacklist ${DOCUMENTS} 10nodeny ${DOCUMENTS}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/dragon.profile b/etc/profile-a-l/dragon.profile
index 8fa01d504..90ca11774 100644
--- a/etc/profile-a-l/dragon.profile
+++ b/etc/profile-a-l/dragon.profile
@@ -6,9 +6,9 @@ include dragon.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/dragonplayerrc 9nodeny ${HOME}/.config/dragonplayerrc
10noblacklist ${MUSIC} 10nodeny ${MUSIC}
11noblacklist ${VIDEOS} 11nodeny ${VIDEOS}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -19,7 +19,7 @@ include disable-programs.inc
19include disable-shell.inc 19include disable-shell.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22whitelist /usr/share/dragonplayer 22allow /usr/share/dragonplayer
23include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
24include whitelist-var-common.inc 24include whitelist-var-common.inc
25 25
diff --git a/etc/profile-a-l/drawio.profile b/etc/profile-a-l/drawio.profile
index 82d96e405..84a77ce34 100644
--- a/etc/profile-a-l/drawio.profile
+++ b/etc/profile-a-l/drawio.profile
@@ -6,7 +6,7 @@ include drawio.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/draw.io 9nodeny ${HOME}/.config/draw.io
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/draw.io 20mkdir ${HOME}/.config/draw.io
21whitelist ${HOME}/.config/draw.io 21allow ${HOME}/.config/draw.io
22whitelist ${DOWNLOADS} 22allow ${DOWNLOADS}
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
diff --git a/etc/profile-a-l/drill.profile b/etc/profile-a-l/drill.profile
index 068bd88d8..e177fd60e 100644
--- a/etc/profile-a-l/drill.profile
+++ b/etc/profile-a-l/drill.profile
@@ -7,10 +7,10 @@ include drill.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${PATH}/drill 10nodeny ${PATH}/drill
11 11
12blacklist /tmp/.X11-unix 12deny /tmp/.X11-unix
13blacklist ${RUNUSER} 13deny ${RUNUSER}
14 14
15include disable-common.inc 15include disable-common.inc
16# include disable-devel.inc 16# include disable-devel.inc
diff --git a/etc/profile-a-l/dropbox.profile b/etc/profile-a-l/dropbox.profile
index b3b2aaf40..274cdd478 100644
--- a/etc/profile-a-l/dropbox.profile
+++ b/etc/profile-a-l/dropbox.profile
@@ -5,9 +5,9 @@ include dropbox.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/autostart 8nodeny ${HOME}/.config/autostart
9noblacklist ${HOME}/.dropbox 9nodeny ${HOME}/.dropbox
10noblacklist ${HOME}/.dropbox-dist 10nodeny ${HOME}/.dropbox-dist
11 11
12# Allow python3 (blacklisted by disable-interpreters.inc) 12# Allow python3 (blacklisted by disable-interpreters.inc)
13include allow-python3.inc 13include allow-python3.inc
@@ -22,10 +22,10 @@ mkdir ${HOME}/.dropbox
22mkdir ${HOME}/.dropbox-dist 22mkdir ${HOME}/.dropbox-dist
23mkdir ${HOME}/Dropbox 23mkdir ${HOME}/Dropbox
24mkfile ${HOME}/.config/autostart/dropbox.desktop 24mkfile ${HOME}/.config/autostart/dropbox.desktop
25whitelist ${HOME}/.config/autostart/dropbox.desktop 25allow ${HOME}/.config/autostart/dropbox.desktop
26whitelist ${HOME}/.dropbox 26allow ${HOME}/.dropbox
27whitelist ${HOME}/.dropbox-dist 27allow ${HOME}/.dropbox-dist
28whitelist ${HOME}/Dropbox 28allow ${HOME}/Dropbox
29include whitelist-common.inc 29include whitelist-common.inc
30 30
31caps.drop all 31caps.drop all
diff --git a/etc/profile-a-l/easystroke.profile b/etc/profile-a-l/easystroke.profile
index 38e4b16f7..da54fec34 100644
--- a/etc/profile-a-l/easystroke.profile
+++ b/etc/profile-a-l/easystroke.profile
@@ -6,7 +6,7 @@ include easystroke.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.easystroke 9nodeny ${HOME}/.easystroke
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19mkdir ${HOME}/.easystroke 19mkdir ${HOME}/.easystroke
20whitelist ${HOME}/.easystroke 20allow ${HOME}/.easystroke
21include whitelist-common.inc 21include whitelist-common.inc
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
diff --git a/etc/profile-a-l/electron-mail.profile b/etc/profile-a-l/electron-mail.profile
index 278dd6cbd..10e57371e 100644
--- a/etc/profile-a-l/electron-mail.profile
+++ b/etc/profile-a-l/electron-mail.profile
@@ -6,7 +6,7 @@ include electron-mail.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/electron-mail 9nodeny ${HOME}/.config/electron-mail
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/electron-mail 20mkdir ${HOME}/.config/electron-mail
21whitelist ${HOME}/.config/electron-mail 21allow ${HOME}/.config/electron-mail
22whitelist ${DOWNLOADS} 22allow ${DOWNLOADS}
23 23
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-runuser-common.inc 25include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/electron.profile b/etc/profile-a-l/electron.profile
index 493af79d4..e8d8d35c4 100644
--- a/etc/profile-a-l/electron.profile
+++ b/etc/profile-a-l/electron.profile
@@ -12,7 +12,7 @@ include disable-passwdmgr.inc
12include disable-programs.inc 12include disable-programs.inc
13include disable-xdg.inc 13include disable-xdg.inc
14 14
15whitelist ${DOWNLOADS} 15allow ${DOWNLOADS}
16include whitelist-common.inc 16include whitelist-common.inc
17include whitelist-runuser-common.inc 17include whitelist-runuser-common.inc
18include whitelist-usr-share-common.inc 18include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/electrum.profile b/etc/profile-a-l/electrum.profile
index ad636d71a..f6691017c 100644
--- a/etc/profile-a-l/electrum.profile
+++ b/etc/profile-a-l/electrum.profile
@@ -6,7 +6,7 @@ include electrum.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.electrum 9nodeny ${HOME}/.electrum
10 10
11# Allow python (blacklisted by disable-interpreters.inc) 11# Allow python (blacklisted by disable-interpreters.inc)
12include allow-python2.inc 12include allow-python2.inc
@@ -22,7 +22,7 @@ include disable-shell.inc
22include disable-xdg.inc 22include disable-xdg.inc
23 23
24mkdir ${HOME}/.electrum 24mkdir ${HOME}/.electrum
25whitelist ${HOME}/.electrum 25allow ${HOME}/.electrum
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-var-common.inc 27include whitelist-var-common.inc
28 28
diff --git a/etc/profile-a-l/element-desktop.profile b/etc/profile-a-l/element-desktop.profile
index 48a826f2e..ec28866b8 100644
--- a/etc/profile-a-l/element-desktop.profile
+++ b/etc/profile-a-l/element-desktop.profile
@@ -9,11 +9,11 @@ include element-desktop.local
9 9
10ignore dbus-user none 10ignore dbus-user none
11 11
12noblacklist ${HOME}/.config/Element 12nodeny ${HOME}/.config/Element
13 13
14mkdir ${HOME}/.config/Element 14mkdir ${HOME}/.config/Element
15whitelist ${HOME}/.config/Element 15allow ${HOME}/.config/Element
16whitelist /opt/Element 16allow /opt/Element
17 17
18private-opt Element 18private-opt Element
19 19
diff --git a/etc/profile-a-l/elinks.profile b/etc/profile-a-l/elinks.profile
index 5a29eb24b..30dca05cb 100644
--- a/etc/profile-a-l/elinks.profile
+++ b/etc/profile-a-l/elinks.profile
@@ -7,10 +7,10 @@ include elinks.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${HOME}/.elinks 10nodeny ${HOME}/.elinks
11 11
12mkdir ${HOME}/.elinks 12mkdir ${HOME}/.elinks
13whitelist ${HOME}/.elinks 13allow ${HOME}/.elinks
14 14
15private-bin elinks 15private-bin elinks
16 16
diff --git a/etc/profile-a-l/emacs.profile b/etc/profile-a-l/emacs.profile
index 55bf743ef..f0e0e2830 100644
--- a/etc/profile-a-l/emacs.profile
+++ b/etc/profile-a-l/emacs.profile
@@ -6,8 +6,8 @@ include emacs.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.emacs 9nodeny ${HOME}/.emacs
10noblacklist ${HOME}/.emacs.d 10nodeny ${HOME}/.emacs.d
11# Add the next line to your emacs.local if you need gpg support. 11# Add the next line to your emacs.local if you need gpg support.
12#noblacklist ${HOME}/.gnupg 12#noblacklist ${HOME}/.gnupg
13 13
diff --git a/etc/profile-a-l/email-common.profile b/etc/profile-a-l/email-common.profile
index 6c9a8a6ea..5fc72d340 100644
--- a/etc/profile-a-l/email-common.profile
+++ b/etc/profile-a-l/email-common.profile
@@ -7,14 +7,14 @@ include email-common.local
7# added by caller profile 7# added by caller profile
8#include globals.local 8#include globals.local
9 9
10noblacklist ${HOME}/.gnupg 10nodeny ${HOME}/.gnupg
11noblacklist ${HOME}/.mozilla 11nodeny ${HOME}/.mozilla
12noblacklist ${HOME}/.signature 12nodeny ${HOME}/.signature
13# when storing mail outside the default ${HOME}/Mail path, 'noblacklist' the custom path in your email-common.local 13# when storing mail outside the default ${HOME}/Mail path, 'noblacklist' the custom path in your email-common.local
14# and 'blacklist' it in your disable-common.local too so it is kept hidden from other applications 14# and 'blacklist' it in your disable-common.local too so it is kept hidden from other applications
15noblacklist ${HOME}/Mail 15nodeny ${HOME}/Mail
16 16
17noblacklist ${DOCUMENTS} 17nodeny ${DOCUMENTS}
18 18
19include disable-common.inc 19include disable-common.inc
20include disable-devel.inc 20include disable-devel.inc
@@ -27,17 +27,17 @@ include disable-xdg.inc
27mkdir ${HOME}/.gnupg 27mkdir ${HOME}/.gnupg
28mkfile ${HOME}/.config/mimeapps.list 28mkfile ${HOME}/.config/mimeapps.list
29mkfile ${HOME}/.signature 29mkfile ${HOME}/.signature
30whitelist ${HOME}/.config/mimeapps.list 30allow ${HOME}/.config/mimeapps.list
31whitelist ${HOME}/.mozilla/firefox/profiles.ini 31allow ${HOME}/.mozilla/firefox/profiles.ini
32whitelist ${HOME}/.gnupg 32allow ${HOME}/.gnupg
33whitelist ${HOME}/.signature 33allow ${HOME}/.signature
34whitelist ${DOCUMENTS} 34allow ${DOCUMENTS}
35whitelist ${DOWNLOADS} 35allow ${DOWNLOADS}
36# when storing mail outside the default ${HOME}/Mail path, 'whitelist' the custom path in your email-common.local 36# when storing mail outside the default ${HOME}/Mail path, 'whitelist' the custom path in your email-common.local
37whitelist ${HOME}/Mail 37allow ${HOME}/Mail
38whitelist ${RUNUSER}/gnupg 38allow ${RUNUSER}/gnupg
39whitelist /usr/share/gnupg 39allow /usr/share/gnupg
40whitelist /usr/share/gnupg2 40allow /usr/share/gnupg2
41include whitelist-common.inc 41include whitelist-common.inc
42include whitelist-runuser-common.inc 42include whitelist-runuser-common.inc
43include whitelist-usr-share-common.inc 43include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/enchant.profile b/etc/profile-a-l/enchant.profile
index ac17b1726..36015b702 100644
--- a/etc/profile-a-l/enchant.profile
+++ b/etc/profile-a-l/enchant.profile
@@ -6,9 +6,9 @@ include enchant.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9blacklist ${RUNUSER}/wayland-* 9deny ${RUNUSER}/wayland-*
10 10
11noblacklist ${HOME}/.config/enchant 11nodeny ${HOME}/.config/enchant
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -19,7 +19,7 @@ include disable-programs.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21mkdir ${HOME}/.config/enchant 21mkdir ${HOME}/.config/enchant
22whitelist ${HOME}/.config/enchant 22allow ${HOME}/.config/enchant
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/enox.profile b/etc/profile-a-l/enox.profile
index d982433e2..9a1d89bba 100644
--- a/etc/profile-a-l/enox.profile
+++ b/etc/profile-a-l/enox.profile
@@ -10,15 +10,15 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13noblacklist ${HOME}/.cache/Enox 13nodeny ${HOME}/.cache/Enox
14noblacklist ${HOME}/.config/Enox 14nodeny ${HOME}/.config/Enox
15 15
16#mkdir ${HOME}/.cache/dnox 16#mkdir ${HOME}/.cache/dnox
17#mkdir ${HOME}/.config/dnox 17#mkdir ${HOME}/.config/dnox
18mkdir ${HOME}/.cache/Enox 18mkdir ${HOME}/.cache/Enox
19mkdir ${HOME}/.config/Enox 19mkdir ${HOME}/.config/Enox
20whitelist ${HOME}/.cache/Enox 20allow ${HOME}/.cache/Enox
21whitelist ${HOME}/.config/Enox 21allow ${HOME}/.config/Enox
22 22
23# Redirect 23# Redirect
24include chromium-common.profile 24include chromium-common.profile
diff --git a/etc/profile-a-l/enpass.profile b/etc/profile-a-l/enpass.profile
index c4123b4c2..5d8f8a0b9 100644
--- a/etc/profile-a-l/enpass.profile
+++ b/etc/profile-a-l/enpass.profile
@@ -6,11 +6,11 @@ include enpass.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/Enpass 9nodeny ${HOME}/.cache/Enpass
10noblacklist ${HOME}/.config/sinew.in 10nodeny ${HOME}/.config/sinew.in
11noblacklist ${HOME}/.config/Sinew Software Systems 11nodeny ${HOME}/.config/Sinew Software Systems
12noblacklist ${HOME}/.local/share/Enpass 12nodeny ${HOME}/.local/share/Enpass
13noblacklist ${DOCUMENTS} 13nodeny ${DOCUMENTS}
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -24,11 +24,11 @@ mkdir ${HOME}/.cache/Enpass
24mkfile ${HOME}/.config/sinew.in 24mkfile ${HOME}/.config/sinew.in
25mkdir ${HOME}/.config/Sinew Software Systems 25mkdir ${HOME}/.config/Sinew Software Systems
26mkdir ${HOME}/.local/share/Enpass 26mkdir ${HOME}/.local/share/Enpass
27whitelist ${HOME}/.cache/Enpass 27allow ${HOME}/.cache/Enpass
28whitelist ${HOME}/.config/sinew.in 28allow ${HOME}/.config/sinew.in
29whitelist ${HOME}/.config/Sinew Software Systems 29allow ${HOME}/.config/Sinew Software Systems
30whitelist ${HOME}/.local/share/Enpass 30allow ${HOME}/.local/share/Enpass
31whitelist ${DOCUMENTS} 31allow ${DOCUMENTS}
32include whitelist-common.inc 32include whitelist-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
34 34
diff --git a/etc/profile-a-l/eo-common.profile b/etc/profile-a-l/eo-common.profile
index fe7913e77..ff7040e5c 100644
--- a/etc/profile-a-l/eo-common.profile
+++ b/etc/profile-a-l/eo-common.profile
@@ -7,11 +7,11 @@ include eo-common.local
7# added by caller profile 7# added by caller profile
8#include globals.local 8#include globals.local
9 9
10noblacklist ${HOME}/.local/share/Trash 10nodeny ${HOME}/.local/share/Trash
11noblacklist ${HOME}/.Steam 11nodeny ${HOME}/.Steam
12noblacklist ${HOME}/.steam 12nodeny ${HOME}/.steam
13 13
14blacklist /usr/libexec 14deny /usr/libexec
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/eog.profile b/etc/profile-a-l/eog.profile
index 5892374bd..e8592c7df 100644
--- a/etc/profile-a-l/eog.profile
+++ b/etc/profile-a-l/eog.profile
@@ -6,9 +6,9 @@ include eog.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/eog 9nodeny ${HOME}/.config/eog
10 10
11whitelist /usr/share/eog 11allow /usr/share/eog
12 12
13# private-bin, private-etc and private-lib break 'Open With' / 'Open in file manager'. 13# private-bin, private-etc and private-lib break 'Open With' / 'Open in file manager'.
14# Add the next lines to your eog.local if you need that functionality. 14# Add the next lines to your eog.local if you need that functionality.
diff --git a/etc/profile-a-l/eom.profile b/etc/profile-a-l/eom.profile
index 7143a8e03..323f5ade2 100644
--- a/etc/profile-a-l/eom.profile
+++ b/etc/profile-a-l/eom.profile
@@ -6,9 +6,9 @@ include eom.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/mate/eom 9nodeny ${HOME}/.config/mate/eom
10 10
11whitelist /usr/share/eom 11allow /usr/share/eom
12 12
13# private-bin, private-etc and private-lib break 'Open With' / 'Open in file manager'. 13# private-bin, private-etc and private-lib break 'Open With' / 'Open in file manager'.
14# Add the next lines to your eom.local if you need that functionality. 14# Add the next lines to your eom.local if you need that functionality.
diff --git a/etc/profile-a-l/ephemeral.profile b/etc/profile-a-l/ephemeral.profile
index 131d68951..3657742b9 100644
--- a/etc/profile-a-l/ephemeral.profile
+++ b/etc/profile-a-l/ephemeral.profile
@@ -9,8 +9,8 @@ include globals.local
9# enforce private-cache 9# enforce private-cache
10#noblacklist ${HOME}/.cache/ephemeral 10#noblacklist ${HOME}/.cache/ephemeral
11 11
12noblacklist ${HOME}/.pki 12nodeny ${HOME}/.pki
13noblacklist ${HOME}/.local/share/pki 13nodeny ${HOME}/.local/share/pki
14 14
15# noexec ${HOME} breaks DRM binaries. 15# noexec ${HOME} breaks DRM binaries.
16?BROWSER_ALLOW_DRM: ignore noexec ${HOME} 16?BROWSER_ALLOW_DRM: ignore noexec ${HOME}
@@ -27,9 +27,9 @@ mkdir ${HOME}/.pki
27mkdir ${HOME}/.local/share/pki 27mkdir ${HOME}/.local/share/pki
28# enforce private-cache 28# enforce private-cache
29#whitelist ${HOME}/.cache/ephemeral 29#whitelist ${HOME}/.cache/ephemeral
30whitelist ${HOME}/.pki 30allow ${HOME}/.pki
31whitelist ${HOME}/.local/share/pki 31allow ${HOME}/.local/share/pki
32whitelist ${DOWNLOADS} 32allow ${DOWNLOADS}
33include whitelist-common.inc 33include whitelist-common.inc
34include whitelist-usr-share-common.inc 34include whitelist-usr-share-common.inc
35include whitelist-var-common.inc 35include whitelist-var-common.inc
diff --git a/etc/profile-a-l/epiphany.profile b/etc/profile-a-l/epiphany.profile
index 225811226..daedb2193 100644
--- a/etc/profile-a-l/epiphany.profile
+++ b/etc/profile-a-l/epiphany.profile
@@ -9,9 +9,9 @@ include globals.local
9# Note: Epiphany use bwrap since 3.34 and can not be firejailed any more. 9# Note: Epiphany use bwrap since 3.34 and can not be firejailed any more.
10# See https://github.com/netblue30/firejail/issues/2995 10# See https://github.com/netblue30/firejail/issues/2995
11 11
12noblacklist ${HOME}/.cache/epiphany 12nodeny ${HOME}/.cache/epiphany
13noblacklist ${HOME}/.config/epiphany 13nodeny ${HOME}/.config/epiphany
14noblacklist ${HOME}/.local/share/epiphany 14nodeny ${HOME}/.local/share/epiphany
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
@@ -21,10 +21,10 @@ include disable-programs.inc
21mkdir ${HOME}/.cache/epiphany 21mkdir ${HOME}/.cache/epiphany
22mkdir ${HOME}/.config/epiphany 22mkdir ${HOME}/.config/epiphany
23mkdir ${HOME}/.local/share/epiphany 23mkdir ${HOME}/.local/share/epiphany
24whitelist ${DOWNLOADS} 24allow ${DOWNLOADS}
25whitelist ${HOME}/.cache/epiphany 25allow ${HOME}/.cache/epiphany
26whitelist ${HOME}/.config/epiphany 26allow ${HOME}/.config/epiphany
27whitelist ${HOME}/.local/share/epiphany 27allow ${HOME}/.local/share/epiphany
28include whitelist-common.inc 28include whitelist-common.inc
29 29
30caps.drop all 30caps.drop all
diff --git a/etc/profile-a-l/equalx.profile b/etc/profile-a-l/equalx.profile
index 964d3b7ca..ac957870c 100644
--- a/etc/profile-a-l/equalx.profile
+++ b/etc/profile-a-l/equalx.profile
@@ -6,8 +6,8 @@ include equalx.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/equalx 9nodeny ${HOME}/.config/equalx
10noblacklist ${HOME}/.equalx 10nodeny ${HOME}/.equalx
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -20,13 +20,13 @@ include disable-xdg.inc
20 20
21mkdir ${HOME}/.config/equalx 21mkdir ${HOME}/.config/equalx
22mkdir ${HOME}/.equalx 22mkdir ${HOME}/.equalx
23whitelist ${HOME}/.config/equalx 23allow ${HOME}/.config/equalx
24whitelist ${HOME}/.equalx 24allow ${HOME}/.equalx
25whitelist /usr/share/poppler 25allow /usr/share/poppler
26whitelist /usr/share/ghostscript 26allow /usr/share/ghostscript
27whitelist /usr/share/texlive 27allow /usr/share/texlive
28whitelist /usr/share/equalx 28allow /usr/share/equalx
29whitelist /var/lib/texmf 29allow /var/lib/texmf
30include whitelist-common.inc 30include whitelist-common.inc
31include whitelist-runuser-common.inc 31include whitelist-runuser-common.inc
32include whitelist-usr-share-common.inc 32include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/etr.profile b/etc/profile-a-l/etr.profile
index fdff1e4b5..a2f46b757 100644
--- a/etc/profile-a-l/etr.profile
+++ b/etc/profile-a-l/etr.profile
@@ -6,9 +6,9 @@ include etr.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.etr 9nodeny ${HOME}/.etr
10 10
11blacklist /usr/libexec 11deny /usr/libexec
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -20,10 +20,10 @@ include disable-shell.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22mkdir ${HOME}/.etr 22mkdir ${HOME}/.etr
23whitelist ${HOME}/.etr 23allow ${HOME}/.etr
24whitelist /usr/share/etr 24allow /usr/share/etr
25# Debian version 25# Debian version
26whitelist /usr/share/games/etr 26allow /usr/share/games/etr
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/evince.profile b/etc/profile-a-l/evince.profile
index a9e39b15c..ce2617ad6 100644
--- a/etc/profile-a-l/evince.profile
+++ b/etc/profile-a-l/evince.profile
@@ -10,10 +10,10 @@ include globals.local
10# Add the next line to your evince.local if you need bookmarks support. This also needs additional dbus-user filtering (see below). 10# Add the next line to your evince.local if you need bookmarks support. This also needs additional dbus-user filtering (see below).
11#noblacklist ${HOME}/.local/share/gvfs-metadata 11#noblacklist ${HOME}/.local/share/gvfs-metadata
12 12
13noblacklist ${HOME}/.config/evince 13nodeny ${HOME}/.config/evince
14noblacklist ${DOCUMENTS} 14nodeny ${DOCUMENTS}
15 15
16blacklist /usr/libexec 16deny /usr/libexec
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
@@ -24,10 +24,10 @@ include disable-programs.inc
24include disable-shell.inc 24include disable-shell.inc
25include disable-xdg.inc 25include disable-xdg.inc
26 26
27whitelist /usr/share/doc 27allow /usr/share/doc
28whitelist /usr/share/evince 28allow /usr/share/evince
29whitelist /usr/share/poppler 29allow /usr/share/poppler
30whitelist /usr/share/tracker 30allow /usr/share/tracker
31include whitelist-runuser-common.inc 31include whitelist-runuser-common.inc
32include whitelist-usr-share-common.inc 32include whitelist-usr-share-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
diff --git a/etc/profile-a-l/evolution.profile b/etc/profile-a-l/evolution.profile
index 7222493ac..142498a28 100644
--- a/etc/profile-a-l/evolution.profile
+++ b/etc/profile-a-l/evolution.profile
@@ -6,15 +6,15 @@ include evolution.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist /var/mail 9nodeny /var/mail
10noblacklist /var/spool/mail 10nodeny /var/spool/mail
11noblacklist ${HOME}/.bogofilter 11nodeny ${HOME}/.bogofilter
12noblacklist ${HOME}/.cache/evolution 12nodeny ${HOME}/.cache/evolution
13noblacklist ${HOME}/.config/evolution 13nodeny ${HOME}/.config/evolution
14noblacklist ${HOME}/.gnupg 14nodeny ${HOME}/.gnupg
15noblacklist ${HOME}/.local/share/evolution 15nodeny ${HOME}/.local/share/evolution
16noblacklist ${HOME}/.pki 16nodeny ${HOME}/.pki
17noblacklist ${HOME}/.local/share/pki 17nodeny ${HOME}/.local/share/pki
18 18
19include disable-common.inc 19include disable-common.inc
20include disable-devel.inc 20include disable-devel.inc
diff --git a/etc/profile-a-l/exiftool.profile b/etc/profile-a-l/exiftool.profile
index 7b09a2c64..216814989 100644
--- a/etc/profile-a-l/exiftool.profile
+++ b/etc/profile-a-l/exiftool.profile
@@ -6,7 +6,7 @@ include exiftool.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9blacklist ${RUNUSER}/wayland-* 9deny ${RUNUSER}/wayland-*
10 10
11# Allow perl (blacklisted by disable-interpreters.inc) 11# Allow perl (blacklisted by disable-interpreters.inc)
12include allow-perl.inc 12include allow-perl.inc
@@ -18,7 +18,7 @@ include disable-interpreters.inc
18include disable-passwdmgr.inc 18include disable-passwdmgr.inc
19include disable-programs.inc 19include disable-programs.inc
20 20
21whitelist /usr/share/perl-image-exiftool 21allow /usr/share/perl-image-exiftool
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/falkon.profile b/etc/profile-a-l/falkon.profile
index b2061db79..9bb42945b 100644
--- a/etc/profile-a-l/falkon.profile
+++ b/etc/profile-a-l/falkon.profile
@@ -6,8 +6,8 @@ include falkon.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/falkon 9nodeny ${HOME}/.cache/falkon
10noblacklist ${HOME}/.config/falkon 10nodeny ${HOME}/.config/falkon
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -19,10 +19,10 @@ include disable-xdg.inc
19 19
20mkdir ${HOME}/.cache/falkon 20mkdir ${HOME}/.cache/falkon
21mkdir ${HOME}/.config/falkon 21mkdir ${HOME}/.config/falkon
22whitelist ${DOWNLOADS} 22allow ${DOWNLOADS}
23whitelist ${HOME}/.cache/falkon 23allow ${HOME}/.cache/falkon
24whitelist ${HOME}/.config/falkon 24allow ${HOME}/.config/falkon
25whitelist /usr/share/falkon 25allow /usr/share/falkon
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-runuser-common.inc 27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/fbreader.profile b/etc/profile-a-l/fbreader.profile
index 8e81000fd..d141c6ed5 100644
--- a/etc/profile-a-l/fbreader.profile
+++ b/etc/profile-a-l/fbreader.profile
@@ -6,8 +6,8 @@ include fbreader.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.FBReader 9nodeny ${HOME}/.FBReader
10noblacklist ${DOCUMENTS} 10nodeny ${DOCUMENTS}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/fdns.profile b/etc/profile-a-l/fdns.profile
index 31cb1776c..17a365053 100644
--- a/etc/profile-a-l/fdns.profile
+++ b/etc/profile-a-l/fdns.profile
@@ -5,11 +5,11 @@ include fdns.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist /sbin 8nodeny /sbin
9noblacklist /usr/sbin 9nodeny /usr/sbin
10 10
11blacklist /tmp/.X11-unix 11deny /tmp/.X11-unix
12blacklist ${RUNUSER}/wayland-* 12deny ${RUNUSER}/wayland-*
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
diff --git a/etc/profile-a-l/feedreader.profile b/etc/profile-a-l/feedreader.profile
index 664ec2da6..359be083e 100644
--- a/etc/profile-a-l/feedreader.profile
+++ b/etc/profile-a-l/feedreader.profile
@@ -6,8 +6,8 @@ include feedreader.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/feedreader 9nodeny ${HOME}/.cache/feedreader
10noblacklist ${HOME}/.local/share/feedreader 10nodeny ${HOME}/.local/share/feedreader
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -20,9 +20,9 @@ include disable-xdg.inc
20 20
21mkdir ${HOME}/.cache/feedreader 21mkdir ${HOME}/.cache/feedreader
22mkdir ${HOME}/.local/share/feedreader 22mkdir ${HOME}/.local/share/feedreader
23whitelist ${HOME}/.cache/feedreader 23allow ${HOME}/.cache/feedreader
24whitelist ${HOME}/.local/share/feedreader 24allow ${HOME}/.local/share/feedreader
25whitelist /usr/share/feedreader 25allow /usr/share/feedreader
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-runuser-common.inc 27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/ferdi.profile b/etc/profile-a-l/ferdi.profile
index a2372ec8a..f60055f37 100644
--- a/etc/profile-a-l/ferdi.profile
+++ b/etc/profile-a-l/ferdi.profile
@@ -7,10 +7,10 @@ include globals.local
7 7
8ignore noexec /tmp 8ignore noexec /tmp
9 9
10noblacklist ${HOME}/.cache/Ferdi 10nodeny ${HOME}/.cache/Ferdi
11noblacklist ${HOME}/.config/Ferdi 11nodeny ${HOME}/.config/Ferdi
12noblacklist ${HOME}/.pki 12nodeny ${HOME}/.pki
13noblacklist ${HOME}/.local/share/pki 13nodeny ${HOME}/.local/share/pki
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -22,11 +22,11 @@ mkdir ${HOME}/.cache/Ferdi
22mkdir ${HOME}/.config/Ferdi 22mkdir ${HOME}/.config/Ferdi
23mkdir ${HOME}/.pki 23mkdir ${HOME}/.pki
24mkdir ${HOME}/.local/share/pki 24mkdir ${HOME}/.local/share/pki
25whitelist ${DOWNLOADS} 25allow ${DOWNLOADS}
26whitelist ${HOME}/.cache/Ferdi 26allow ${HOME}/.cache/Ferdi
27whitelist ${HOME}/.config/Ferdi 27allow ${HOME}/.config/Ferdi
28whitelist ${HOME}/.pki 28allow ${HOME}/.pki
29whitelist ${HOME}/.local/share/pki 29allow ${HOME}/.local/share/pki
30include whitelist-common.inc 30include whitelist-common.inc
31 31
32caps.drop all 32caps.drop all
diff --git a/etc/profile-a-l/fetchmail.profile b/etc/profile-a-l/fetchmail.profile
index 7358ed5c7..1e06ec29a 100644
--- a/etc/profile-a-l/fetchmail.profile
+++ b/etc/profile-a-l/fetchmail.profile
@@ -6,8 +6,8 @@ include fetchmail.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.fetchmailrc 9nodeny ${HOME}/.fetchmailrc
10noblacklist ${HOME}/.netrc 10nodeny ${HOME}/.netrc
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/ffmpeg.profile b/etc/profile-a-l/ffmpeg.profile
index 13ef1beb9..1a64183ab 100644
--- a/etc/profile-a-l/ffmpeg.profile
+++ b/etc/profile-a-l/ffmpeg.profile
@@ -7,8 +7,8 @@ include ffmpeg.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${MUSIC} 10nodeny ${MUSIC}
11noblacklist ${VIDEOS} 11nodeny ${VIDEOS}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -19,9 +19,9 @@ include disable-programs.inc
19include disable-shell.inc 19include disable-shell.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22whitelist /usr/share/devedeng 22allow /usr/share/devedeng
23whitelist /usr/share/ffmpeg 23allow /usr/share/ffmpeg
24whitelist /usr/share/qtchooser 24allow /usr/share/qtchooser
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
27 27
diff --git a/etc/profile-a-l/file-roller.profile b/etc/profile-a-l/file-roller.profile
index 4e651ed61..9f140850f 100644
--- a/etc/profile-a-l/file-roller.profile
+++ b/etc/profile-a-l/file-roller.profile
@@ -13,8 +13,8 @@ include disable-interpreters.inc
13include disable-passwdmgr.inc 13include disable-passwdmgr.inc
14include disable-programs.inc 14include disable-programs.inc
15 15
16whitelist /usr/libexec/file-roller 16allow /usr/libexec/file-roller
17whitelist /usr/share/file-roller 17allow /usr/share/file-roller
18include whitelist-runuser-common.inc 18include whitelist-runuser-common.inc
19include whitelist-usr-share-common.inc 19include whitelist-usr-share-common.inc
20include whitelist-var-common.inc 20include whitelist-var-common.inc
diff --git a/etc/profile-a-l/file.profile b/etc/profile-a-l/file.profile
index 5c7583605..426d1e72d 100644
--- a/etc/profile-a-l/file.profile
+++ b/etc/profile-a-l/file.profile
@@ -7,7 +7,7 @@ include file.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER} 10deny ${RUNUSER}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-exec.inc 13include disable-exec.inc
diff --git a/etc/profile-a-l/filezilla.profile b/etc/profile-a-l/filezilla.profile
index dc5def54f..d9e0e9da0 100644
--- a/etc/profile-a-l/filezilla.profile
+++ b/etc/profile-a-l/filezilla.profile
@@ -6,8 +6,8 @@ include filezilla.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/filezilla 9nodeny ${HOME}/.config/filezilla
10noblacklist ${HOME}/.filezilla 10nodeny ${HOME}/.filezilla
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/firedragon.profile b/etc/profile-a-l/firedragon.profile
index 77487161e..e22424794 100644
--- a/etc/profile-a-l/firedragon.profile
+++ b/etc/profile-a-l/firedragon.profile
@@ -6,13 +6,13 @@ include firedragon.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/firedragon 9nodeny ${HOME}/.cache/firedragon
10noblacklist ${HOME}/.firedragon 10nodeny ${HOME}/.firedragon
11 11
12mkdir ${HOME}/.cache/firedragon 12mkdir ${HOME}/.cache/firedragon
13mkdir ${HOME}/.firedragon 13mkdir ${HOME}/.firedragon
14whitelist ${HOME}/.cache/firedragon 14allow ${HOME}/.cache/firedragon
15whitelist ${HOME}/.firedragon 15allow ${HOME}/.firedragon
16 16
17# Add the next lines to your firedragon.local if you want to use the migration wizard. 17# Add the next lines to your firedragon.local if you want to use the migration wizard.
18#noblacklist ${HOME}/.mozilla 18#noblacklist ${HOME}/.mozilla
diff --git a/etc/profile-a-l/firefox-common-addons.profile b/etc/profile-a-l/firefox-common-addons.profile
index d282f9a60..7e2e8760d 100644
--- a/etc/profile-a-l/firefox-common-addons.profile
+++ b/etc/profile-a-l/firefox-common-addons.profile
@@ -5,74 +5,74 @@ include firefox-common-addons.local
5ignore include whitelist-runuser-common.inc 5ignore include whitelist-runuser-common.inc
6ignore private-cache 6ignore private-cache
7 7
8noblacklist ${HOME}/.cache/youtube-dl 8nodeny ${HOME}/.cache/youtube-dl
9noblacklist ${HOME}/.config/kgetrc 9nodeny ${HOME}/.config/kgetrc
10noblacklist ${HOME}/.config/mpv 10nodeny ${HOME}/.config/mpv
11noblacklist ${HOME}/.config/okularpartrc 11nodeny ${HOME}/.config/okularpartrc
12noblacklist ${HOME}/.config/okularrc 12nodeny ${HOME}/.config/okularrc
13noblacklist ${HOME}/.config/qpdfview 13nodeny ${HOME}/.config/qpdfview
14noblacklist ${HOME}/.config/youtube-dl 14nodeny ${HOME}/.config/youtube-dl
15noblacklist ${HOME}/.kde/share/apps/kget 15nodeny ${HOME}/.kde/share/apps/kget
16noblacklist ${HOME}/.kde/share/apps/okular 16nodeny ${HOME}/.kde/share/apps/okular
17noblacklist ${HOME}/.kde/share/config/kgetrc 17nodeny ${HOME}/.kde/share/config/kgetrc
18noblacklist ${HOME}/.kde/share/config/okularpartrc 18nodeny ${HOME}/.kde/share/config/okularpartrc
19noblacklist ${HOME}/.kde/share/config/okularrc 19nodeny ${HOME}/.kde/share/config/okularrc
20noblacklist ${HOME}/.kde4/share/apps/kget 20nodeny ${HOME}/.kde4/share/apps/kget
21noblacklist ${HOME}/.kde4/share/apps/okular 21nodeny ${HOME}/.kde4/share/apps/okular
22noblacklist ${HOME}/.kde4/share/config/kgetrc 22nodeny ${HOME}/.kde4/share/config/kgetrc
23noblacklist ${HOME}/.kde4/share/config/okularpartrc 23nodeny ${HOME}/.kde4/share/config/okularpartrc
24noblacklist ${HOME}/.kde4/share/config/okularrc 24nodeny ${HOME}/.kde4/share/config/okularrc
25noblacklist ${HOME}/.local/share/kget 25nodeny ${HOME}/.local/share/kget
26noblacklist ${HOME}/.local/share/kxmlgui5/okular 26nodeny ${HOME}/.local/share/kxmlgui5/okular
27noblacklist ${HOME}/.local/share/okular 27nodeny ${HOME}/.local/share/okular
28noblacklist ${HOME}/.local/share/qpdfview 28nodeny ${HOME}/.local/share/qpdfview
29noblacklist ${HOME}/.netrc 29nodeny ${HOME}/.netrc
30 30
31whitelist ${HOME}/.cache/gnome-mplayer/plugin 31allow ${HOME}/.cache/gnome-mplayer/plugin
32whitelist ${HOME}/.cache/youtube-dl/youtube-sigfuncs 32allow ${HOME}/.cache/youtube-dl/youtube-sigfuncs
33whitelist ${HOME}/.config/gnome-mplayer 33allow ${HOME}/.config/gnome-mplayer
34whitelist ${HOME}/.config/kgetrc 34allow ${HOME}/.config/kgetrc
35whitelist ${HOME}/.config/mpv 35allow ${HOME}/.config/mpv
36whitelist ${HOME}/.config/okularpartrc 36allow ${HOME}/.config/okularpartrc
37whitelist ${HOME}/.config/okularrc 37allow ${HOME}/.config/okularrc
38whitelist ${HOME}/.config/pipelight-silverlight5.1 38allow ${HOME}/.config/pipelight-silverlight5.1
39whitelist ${HOME}/.config/pipelight-widevine 39allow ${HOME}/.config/pipelight-widevine
40whitelist ${HOME}/.config/qpdfview 40allow ${HOME}/.config/qpdfview
41whitelist ${HOME}/.config/youtube-dl 41allow ${HOME}/.config/youtube-dl
42whitelist ${HOME}/.kde/share/apps/kget 42allow ${HOME}/.kde/share/apps/kget
43whitelist ${HOME}/.kde/share/apps/okular 43allow ${HOME}/.kde/share/apps/okular
44whitelist ${HOME}/.kde/share/config/kgetrc 44allow ${HOME}/.kde/share/config/kgetrc
45whitelist ${HOME}/.kde/share/config/okularpartrc 45allow ${HOME}/.kde/share/config/okularpartrc
46whitelist ${HOME}/.kde/share/config/okularrc 46allow ${HOME}/.kde/share/config/okularrc
47whitelist ${HOME}/.kde4/share/apps/kget 47allow ${HOME}/.kde4/share/apps/kget
48whitelist ${HOME}/.kde4/share/apps/okular 48allow ${HOME}/.kde4/share/apps/okular
49whitelist ${HOME}/.kde4/share/config/kgetrc 49allow ${HOME}/.kde4/share/config/kgetrc
50whitelist ${HOME}/.kde4/share/config/okularpartrc 50allow ${HOME}/.kde4/share/config/okularpartrc
51whitelist ${HOME}/.kde4/share/config/okularrc 51allow ${HOME}/.kde4/share/config/okularrc
52whitelist ${HOME}/.keysnail.js 52allow ${HOME}/.keysnail.js
53whitelist ${HOME}/.lastpass 53allow ${HOME}/.lastpass
54whitelist ${HOME}/.local/share/kget 54allow ${HOME}/.local/share/kget
55whitelist ${HOME}/.local/share/kxmlgui5/okular 55allow ${HOME}/.local/share/kxmlgui5/okular
56whitelist ${HOME}/.local/share/okular 56allow ${HOME}/.local/share/okular
57whitelist ${HOME}/.local/share/qpdfview 57allow ${HOME}/.local/share/qpdfview
58whitelist ${HOME}/.local/share/tridactyl 58allow ${HOME}/.local/share/tridactyl
59whitelist ${HOME}/.netrc 59allow ${HOME}/.netrc
60whitelist ${HOME}/.pentadactyl 60allow ${HOME}/.pentadactyl
61whitelist ${HOME}/.pentadactylrc 61allow ${HOME}/.pentadactylrc
62whitelist ${HOME}/.tridactylrc 62allow ${HOME}/.tridactylrc
63whitelist ${HOME}/.vimperator 63allow ${HOME}/.vimperator
64whitelist ${HOME}/.vimperatorrc 64allow ${HOME}/.vimperatorrc
65whitelist ${HOME}/.wine-pipelight 65allow ${HOME}/.wine-pipelight
66whitelist ${HOME}/.wine-pipelight64 66allow ${HOME}/.wine-pipelight64
67whitelist ${HOME}/.zotero 67allow ${HOME}/.zotero
68whitelist ${HOME}/dwhelper 68allow ${HOME}/dwhelper
69whitelist /usr/share/lua 69allow /usr/share/lua
70whitelist /usr/share/lua* 70allow /usr/share/lua*
71whitelist /usr/share/vulkan 71allow /usr/share/vulkan
72 72
73# GNOME Shell integration (chrome-gnome-shell) needs dbus and python 73# GNOME Shell integration (chrome-gnome-shell) needs dbus and python
74noblacklist ${HOME}/.local/share/gnome-shell 74nodeny ${HOME}/.local/share/gnome-shell
75whitelist ${HOME}/.local/share/gnome-shell 75allow ${HOME}/.local/share/gnome-shell
76dbus-user.talk ca.desrt.dconf 76dbus-user.talk ca.desrt.dconf
77dbus-user.talk org.gnome.ChromeGnomeShell 77dbus-user.talk org.gnome.ChromeGnomeShell
78dbus-user.talk org.gnome.Shell 78dbus-user.talk org.gnome.Shell
diff --git a/etc/profile-a-l/firefox-common.profile b/etc/profile-a-l/firefox-common.profile
index 8b74ed979..cb0fae5dc 100644
--- a/etc/profile-a-l/firefox-common.profile
+++ b/etc/profile-a-l/firefox-common.profile
@@ -12,8 +12,8 @@ include firefox-common.local
12# Add the next line to your firefox-common.local to allow access to common programs/addons/plugins. 12# Add the next line to your firefox-common.local to allow access to common programs/addons/plugins.
13#include firefox-common-addons.profile 13#include firefox-common-addons.profile
14 14
15noblacklist ${HOME}/.pki 15nodeny ${HOME}/.pki
16noblacklist ${HOME}/.local/share/pki 16nodeny ${HOME}/.local/share/pki
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
@@ -23,9 +23,9 @@ include disable-programs.inc
23 23
24mkdir ${HOME}/.pki 24mkdir ${HOME}/.pki
25mkdir ${HOME}/.local/share/pki 25mkdir ${HOME}/.local/share/pki
26whitelist ${DOWNLOADS} 26allow ${DOWNLOADS}
27whitelist ${HOME}/.pki 27allow ${HOME}/.pki
28whitelist ${HOME}/.local/share/pki 28allow ${HOME}/.local/share/pki
29include whitelist-common.inc 29include whitelist-common.inc
30include whitelist-runuser-common.inc 30include whitelist-runuser-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/firefox-esr.profile b/etc/profile-a-l/firefox-esr.profile
index 5e69fdb51..4fd315fdf 100644
--- a/etc/profile-a-l/firefox-esr.profile
+++ b/etc/profile-a-l/firefox-esr.profile
@@ -6,7 +6,7 @@ include firefox-esr.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9whitelist /usr/share/firefox-esr 9allow /usr/share/firefox-esr
10 10
11# Redirect 11# Redirect
12include firefox.profile 12include firefox.profile
diff --git a/etc/profile-a-l/firefox.profile b/etc/profile-a-l/firefox.profile
index 3ad67734d..8acfe7c2a 100644
--- a/etc/profile-a-l/firefox.profile
+++ b/etc/profile-a-l/firefox.profile
@@ -14,27 +14,27 @@ include globals.local
14# https://github.com/netblue30/firejail/wiki/Frequently-Asked-Questions#how-do-i-run-two-instances-of-firefox 14# https://github.com/netblue30/firejail/wiki/Frequently-Asked-Questions#how-do-i-run-two-instances-of-firefox
15# https://github.com/netblue30/firejail/issues/4206#issuecomment-824806968 15# https://github.com/netblue30/firejail/issues/4206#issuecomment-824806968
16 16
17noblacklist ${HOME}/.cache/mozilla 17nodeny ${HOME}/.cache/mozilla
18noblacklist ${HOME}/.mozilla 18nodeny ${HOME}/.mozilla
19 19
20blacklist /usr/libexec 20deny /usr/libexec
21 21
22mkdir ${HOME}/.cache/mozilla/firefox 22mkdir ${HOME}/.cache/mozilla/firefox
23mkdir ${HOME}/.mozilla 23mkdir ${HOME}/.mozilla
24whitelist ${HOME}/.cache/mozilla/firefox 24allow ${HOME}/.cache/mozilla/firefox
25whitelist ${HOME}/.mozilla 25allow ${HOME}/.mozilla
26 26
27# Add one of the following whitelist options to your firefox.local to enable KeePassXC Plugin support. 27# Add one of the following whitelist options to your firefox.local to enable KeePassXC Plugin support.
28# NOTE: start KeePassXC before Firefox and keep it open to allow communication between them. 28# NOTE: start KeePassXC before Firefox and keep it open to allow communication between them.
29#whitelist ${RUNUSER}/kpxc_server 29#whitelist ${RUNUSER}/kpxc_server
30#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer 30#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer
31 31
32whitelist /usr/share/doc 32allow /usr/share/doc
33whitelist /usr/share/firefox 33allow /usr/share/firefox
34whitelist /usr/share/gnome-shell/search-providers/firefox-search-provider.ini 34allow /usr/share/gnome-shell/search-providers/firefox-search-provider.ini
35whitelist /usr/share/gtk-doc/html 35allow /usr/share/gtk-doc/html
36whitelist /usr/share/mozilla 36allow /usr/share/mozilla
37whitelist /usr/share/webext 37allow /usr/share/webext
38include whitelist-usr-share-common.inc 38include whitelist-usr-share-common.inc
39 39
40# firefox requires a shell to launch on Arch - add the next line to your firefox.local to enable private-bin. 40# firefox requires a shell to launch on Arch - add the next line to your firefox.local to enable private-bin.
diff --git a/etc/profile-a-l/five-or-more.profile b/etc/profile-a-l/five-or-more.profile
index 2c86d3ac7..bd1becaf0 100644
--- a/etc/profile-a-l/five-or-more.profile
+++ b/etc/profile-a-l/five-or-more.profile
@@ -6,12 +6,12 @@ include five-or-more.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/five-or-more 9nodeny ${HOME}/.local/share/five-or-more
10 10
11mkdir ${HOME}/.local/share/five-or-more 11mkdir ${HOME}/.local/share/five-or-more
12whitelist ${HOME}/.local/share/five-or-more 12allow ${HOME}/.local/share/five-or-more
13 13
14whitelist /usr/share/five-or-more 14allow /usr/share/five-or-more
15 15
16private-bin five-or-more 16private-bin five-or-more
17 17
diff --git a/etc/profile-a-l/flameshot.profile b/etc/profile-a-l/flameshot.profile
index 55af96c84..f16a65536 100644
--- a/etc/profile-a-l/flameshot.profile
+++ b/etc/profile-a-l/flameshot.profile
@@ -7,9 +7,9 @@ include flameshot.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${PICTURES} 10nodeny ${PICTURES}
11noblacklist ${HOME}/.config/Dharkael 11nodeny ${HOME}/.config/Dharkael
12noblacklist ${HOME}/.config/flameshot 12nodeny ${HOME}/.config/flameshot
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
@@ -25,7 +25,7 @@ include disable-xdg.inc
25#whitelist ${PICTURES} 25#whitelist ${PICTURES}
26#whitelist ${HOME}/.config/Dharkael 26#whitelist ${HOME}/.config/Dharkael
27#whitelist ${HOME}/.config/flameshot 27#whitelist ${HOME}/.config/flameshot
28whitelist /usr/share/flameshot 28allow /usr/share/flameshot
29#include whitelist-common.inc 29#include whitelist-common.inc
30include whitelist-runuser-common.inc 30include whitelist-runuser-common.inc
31include whitelist-usr-share-common.inc 31include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/flashpeak-slimjet.profile b/etc/profile-a-l/flashpeak-slimjet.profile
index 310fb378f..af114e129 100644
--- a/etc/profile-a-l/flashpeak-slimjet.profile
+++ b/etc/profile-a-l/flashpeak-slimjet.profile
@@ -10,13 +10,13 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13noblacklist ${HOME}/.cache/slimjet 13nodeny ${HOME}/.cache/slimjet
14noblacklist ${HOME}/.config/slimjet 14nodeny ${HOME}/.config/slimjet
15 15
16mkdir ${HOME}/.cache/slimjet 16mkdir ${HOME}/.cache/slimjet
17mkdir ${HOME}/.config/slimjet 17mkdir ${HOME}/.config/slimjet
18whitelist ${HOME}/.cache/slimjet 18allow ${HOME}/.cache/slimjet
19whitelist ${HOME}/.config/slimjet 19allow ${HOME}/.config/slimjet
20 20
21# Redirect 21# Redirect
22include chromium-common.profile 22include chromium-common.profile
diff --git a/etc/profile-a-l/flowblade.profile b/etc/profile-a-l/flowblade.profile
index a4421e3ce..505763fb9 100644
--- a/etc/profile-a-l/flowblade.profile
+++ b/etc/profile-a-l/flowblade.profile
@@ -6,8 +6,8 @@ include flowblade.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/flowblade 9nodeny ${HOME}/.config/flowblade
10noblacklist ${HOME}/.flowblade 10nodeny ${HOME}/.flowblade
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/fluxbox.profile b/etc/profile-a-l/fluxbox.profile
index 1210f365c..a22c0e103 100644
--- a/etc/profile-a-l/fluxbox.profile
+++ b/etc/profile-a-l/fluxbox.profile
@@ -7,7 +7,7 @@ include fluxbox.local
7include globals.local 7include globals.local
8 8
9# all applications started in fluxbox will run in this profile 9# all applications started in fluxbox will run in this profile
10noblacklist ${HOME}/.fluxbox 10nodeny ${HOME}/.fluxbox
11include disable-common.inc 11include disable-common.inc
12 12
13caps.drop all 13caps.drop all
diff --git a/etc/profile-a-l/font-manager.profile b/etc/profile-a-l/font-manager.profile
index cd0129436..ff9167c1a 100644
--- a/etc/profile-a-l/font-manager.profile
+++ b/etc/profile-a-l/font-manager.profile
@@ -6,8 +6,8 @@ include font-manager.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/font-manager 9nodeny ${HOME}/.cache/font-manager
10noblacklist ${HOME}/.config/font-manager 10nodeny ${HOME}/.config/font-manager
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
@@ -24,9 +24,9 @@ include disable-xdg.inc
24 24
25mkdir ${HOME}/.cache/font-manager 25mkdir ${HOME}/.cache/font-manager
26mkdir ${HOME}/.config/font-manager 26mkdir ${HOME}/.config/font-manager
27whitelist ${HOME}/.cache/font-manager 27allow ${HOME}/.cache/font-manager
28whitelist ${HOME}/.config/font-manager 28allow ${HOME}/.config/font-manager
29whitelist /usr/share/font-manager 29allow /usr/share/font-manager
30include whitelist-common.inc 30include whitelist-common.inc
31include whitelist-usr-share-common.inc 31include whitelist-usr-share-common.inc
32include whitelist-var-common.inc 32include whitelist-var-common.inc
diff --git a/etc/profile-a-l/fontforge.profile b/etc/profile-a-l/fontforge.profile
index bd1495877..64c7655e2 100644
--- a/etc/profile-a-l/fontforge.profile
+++ b/etc/profile-a-l/fontforge.profile
@@ -6,8 +6,8 @@ include fontforge.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.FontForge 9nodeny ${HOME}/.FontForge
10noblacklist ${DOCUMENTS} 10nodeny ${DOCUMENTS}
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/fossamail.profile b/etc/profile-a-l/fossamail.profile
index 2d700d336..5e5a12794 100644
--- a/etc/profile-a-l/fossamail.profile
+++ b/etc/profile-a-l/fossamail.profile
@@ -6,16 +6,16 @@ include fossamail.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9noblacklist ${HOME}/.cache/fossamail 9nodeny ${HOME}/.cache/fossamail
10noblacklist ${HOME}/.fossamail 10nodeny ${HOME}/.fossamail
11noblacklist ${HOME}/.gnupg 11nodeny ${HOME}/.gnupg
12 12
13mkdir ${HOME}/.cache/fossamail 13mkdir ${HOME}/.cache/fossamail
14mkdir ${HOME}/.fossamail 14mkdir ${HOME}/.fossamail
15mkdir ${HOME}/.gnupg 15mkdir ${HOME}/.gnupg
16whitelist ${HOME}/.cache/fossamail 16allow ${HOME}/.cache/fossamail
17whitelist ${HOME}/.fossamail 17allow ${HOME}/.fossamail
18whitelist ${HOME}/.gnupg 18allow ${HOME}/.gnupg
19include whitelist-common.inc 19include whitelist-common.inc
20 20
21# allow browsers 21# allow browsers
diff --git a/etc/profile-a-l/four-in-a-row.profile b/etc/profile-a-l/four-in-a-row.profile
index eb0c43ca5..97fd4a626 100644
--- a/etc/profile-a-l/four-in-a-row.profile
+++ b/etc/profile-a-l/four-in-a-row.profile
@@ -9,7 +9,7 @@ include globals.local
9ignore machine-id 9ignore machine-id
10ignore nosound 10ignore nosound
11 11
12whitelist /usr/share/four-in-a-row 12allow /usr/share/four-in-a-row
13 13
14private-bin four-in-a-row 14private-bin four-in-a-row
15 15
diff --git a/etc/profile-a-l/fractal.profile b/etc/profile-a-l/fractal.profile
index 1b1d031b4..8edc9b02d 100644
--- a/etc/profile-a-l/fractal.profile
+++ b/etc/profile-a-l/fractal.profile
@@ -6,7 +6,7 @@ include fractal.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/fractal 9nodeny ${HOME}/.cache/fractal
10 10
11# Allow python (blacklisted by disable-interpreters.inc) 11# Allow python (blacklisted by disable-interpreters.inc)
12include allow-python2.inc 12include allow-python2.inc
@@ -22,8 +22,8 @@ include disable-shell.inc
22include disable-xdg.inc 22include disable-xdg.inc
23 23
24mkdir ${HOME}/.cache/fractal 24mkdir ${HOME}/.cache/fractal
25whitelist ${HOME}/.cache/fractal 25allow ${HOME}/.cache/fractal
26whitelist ${DOWNLOADS} 26allow ${DOWNLOADS}
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/franz.profile b/etc/profile-a-l/franz.profile
index 9b780a572..1a8ec8f99 100644
--- a/etc/profile-a-l/franz.profile
+++ b/etc/profile-a-l/franz.profile
@@ -7,10 +7,10 @@ include globals.local
7 7
8ignore noexec /tmp 8ignore noexec /tmp
9 9
10noblacklist ${HOME}/.cache/Franz 10nodeny ${HOME}/.cache/Franz
11noblacklist ${HOME}/.config/Franz 11nodeny ${HOME}/.config/Franz
12noblacklist ${HOME}/.pki 12nodeny ${HOME}/.pki
13noblacklist ${HOME}/.local/share/pki 13nodeny ${HOME}/.local/share/pki
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -22,11 +22,11 @@ mkdir ${HOME}/.cache/Franz
22mkdir ${HOME}/.config/Franz 22mkdir ${HOME}/.config/Franz
23mkdir ${HOME}/.pki 23mkdir ${HOME}/.pki
24mkdir ${HOME}/.local/share/pki 24mkdir ${HOME}/.local/share/pki
25whitelist ${DOWNLOADS} 25allow ${DOWNLOADS}
26whitelist ${HOME}/.cache/Franz 26allow ${HOME}/.cache/Franz
27whitelist ${HOME}/.config/Franz 27allow ${HOME}/.config/Franz
28whitelist ${HOME}/.pki 28allow ${HOME}/.pki
29whitelist ${HOME}/.local/share/pki 29allow ${HOME}/.local/share/pki
30include whitelist-common.inc 30include whitelist-common.inc
31 31
32caps.drop all 32caps.drop all
diff --git a/etc/profile-a-l/freecad.profile b/etc/profile-a-l/freecad.profile
index 8043d0530..a45ad4c7a 100644
--- a/etc/profile-a-l/freecad.profile
+++ b/etc/profile-a-l/freecad.profile
@@ -6,8 +6,8 @@ include freecad.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/FreeCAD 9nodeny ${HOME}/.config/FreeCAD
10noblacklist ${DOCUMENTS} 10nodeny ${DOCUMENTS}
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/freeciv.profile b/etc/profile-a-l/freeciv.profile
index 23c19682c..20abd4056 100644
--- a/etc/profile-a-l/freeciv.profile
+++ b/etc/profile-a-l/freeciv.profile
@@ -6,7 +6,7 @@ include freeciv.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.freeciv 9nodeny ${HOME}/.freeciv
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19mkdir ${HOME}/.freeciv 19mkdir ${HOME}/.freeciv
20whitelist ${HOME}/.freeciv 20allow ${HOME}/.freeciv
21include whitelist-common.inc 21include whitelist-common.inc
22include whitelist-var-common.inc 22include whitelist-var-common.inc
23 23
diff --git a/etc/profile-a-l/freecol.profile b/etc/profile-a-l/freecol.profile
index 93fa7da03..79ccf4101 100644
--- a/etc/profile-a-l/freecol.profile
+++ b/etc/profile-a-l/freecol.profile
@@ -6,10 +6,10 @@ include freecol.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.freecol 9nodeny ${HOME}/.freecol
10noblacklist ${HOME}/.cache/freecol 10nodeny ${HOME}/.cache/freecol
11noblacklist ${HOME}/.config/freecol 11nodeny ${HOME}/.config/freecol
12noblacklist ${HOME}/.local/share/freecol 12nodeny ${HOME}/.local/share/freecol
13 13
14# Allow java (blacklisted by disable-devel.inc) 14# Allow java (blacklisted by disable-devel.inc)
15include allow-java.inc 15include allow-java.inc
@@ -26,11 +26,11 @@ mkdir ${HOME}/.java
26mkdir ${HOME}/.cache/freecol 26mkdir ${HOME}/.cache/freecol
27mkdir ${HOME}/.config/freecol 27mkdir ${HOME}/.config/freecol
28mkdir ${HOME}/.local/share/freecol 28mkdir ${HOME}/.local/share/freecol
29whitelist ${HOME}/.freecol 29allow ${HOME}/.freecol
30whitelist ${HOME}/.java 30allow ${HOME}/.java
31whitelist ${HOME}/.cache/freecol 31allow ${HOME}/.cache/freecol
32whitelist ${HOME}/.config/freecol 32allow ${HOME}/.config/freecol
33whitelist ${HOME}/.local/share/freecol 33allow ${HOME}/.local/share/freecol
34include whitelist-common.inc 34include whitelist-common.inc
35include whitelist-var-common.inc 35include whitelist-var-common.inc
36 36
diff --git a/etc/profile-a-l/freemind.profile b/etc/profile-a-l/freemind.profile
index 699177039..ba52dd208 100644
--- a/etc/profile-a-l/freemind.profile
+++ b/etc/profile-a-l/freemind.profile
@@ -6,8 +6,8 @@ include freemind.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${DOCUMENTS} 9nodeny ${DOCUMENTS}
10noblacklist ${HOME}/.freemind 10nodeny ${HOME}/.freemind
11 11
12# Allow java (blacklisted by disable-devel.inc) 12# Allow java (blacklisted by disable-devel.inc)
13include allow-java.inc 13include allow-java.inc
diff --git a/etc/profile-a-l/freetube.profile b/etc/profile-a-l/freetube.profile
index e6aff533d..4c321322c 100644
--- a/etc/profile-a-l/freetube.profile
+++ b/etc/profile-a-l/freetube.profile
@@ -6,12 +6,12 @@ include freetube.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/FreeTube 9nodeny ${HOME}/.config/FreeTube
10 10
11include disable-shell.inc 11include disable-shell.inc
12 12
13mkdir ${HOME}/.config/FreeTube 13mkdir ${HOME}/.config/FreeTube
14whitelist ${HOME}/.config/FreeTube 14allow ${HOME}/.config/FreeTube
15 15
16private-bin freetube 16private-bin freetube
17private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,mime.types,nsswitch.conf,pki,pulse,resolv.conf,ssl,X11,xdg 17private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,mime.types,nsswitch.conf,pki,pulse,resolv.conf,ssl,X11,xdg
diff --git a/etc/profile-a-l/frogatto.profile b/etc/profile-a-l/frogatto.profile
index b4ad81046..3a6dfcfd6 100644
--- a/etc/profile-a-l/frogatto.profile
+++ b/etc/profile-a-l/frogatto.profile
@@ -6,7 +6,7 @@ include frogatto.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.frogatto 9nodeny ${HOME}/.frogatto
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,9 +17,9 @@ include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19mkdir ${HOME}/.frogatto 19mkdir ${HOME}/.frogatto
20whitelist ${HOME}/.frogatto 20allow ${HOME}/.frogatto
21whitelist /usr/libexec/frogatto 21allow /usr/libexec/frogatto
22whitelist /usr/share/frogatto 22allow /usr/share/frogatto
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/frozen-bubble.profile b/etc/profile-a-l/frozen-bubble.profile
index 76352e41e..12eca8eb0 100644
--- a/etc/profile-a-l/frozen-bubble.profile
+++ b/etc/profile-a-l/frozen-bubble.profile
@@ -6,7 +6,7 @@ include frozen-bubble.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.frozen-bubble 9nodeny ${HOME}/.frozen-bubble
10 10
11# Allow perl (blacklisted by disable-interpreters.inc) 11# Allow perl (blacklisted by disable-interpreters.inc)
12include allow-perl.inc 12include allow-perl.inc
@@ -20,7 +20,7 @@ include disable-programs.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22mkdir ${HOME}/.frozen-bubble 22mkdir ${HOME}/.frozen-bubble
23whitelist ${HOME}/.frozen-bubble 23allow ${HOME}/.frozen-bubble
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-runuser-common.inc 25include whitelist-runuser-common.inc
26include whitelist-usr-share-common.inc 26include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/funnyboat.profile b/etc/profile-a-l/funnyboat.profile
index 8852925b1..07030df4b 100644
--- a/etc/profile-a-l/funnyboat.profile
+++ b/etc/profile-a-l/funnyboat.profile
@@ -5,7 +5,7 @@ include funnyboat.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.funnyboat 8nodeny ${HOME}/.funnyboat
9 9
10ignore noexec /dev/shm 10ignore noexec /dev/shm
11include allow-python2.inc 11include allow-python2.inc
@@ -21,12 +21,12 @@ include disable-programs.inc
21include disable-xdg.inc 21include disable-xdg.inc
22 22
23mkdir ${HOME}/.funnyboat 23mkdir ${HOME}/.funnyboat
24whitelist ${HOME}/.funnyboat 24allow ${HOME}/.funnyboat
25include whitelist-common.inc 25include whitelist-common.inc
26include whitelist-runuser-common.inc 26include whitelist-runuser-common.inc
27whitelist /usr/share/funnyboat 27allow /usr/share/funnyboat
28# Debian: 28# Debian:
29whitelist /usr/share/games/funnyboat 29allow /usr/share/games/funnyboat
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
32 32
diff --git a/etc/profile-a-l/gajim.profile b/etc/profile-a-l/gajim.profile
index ed3f0357d..4cd2cb1e6 100644
--- a/etc/profile-a-l/gajim.profile
+++ b/etc/profile-a-l/gajim.profile
@@ -6,10 +6,10 @@ include gajim.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.gnupg 9nodeny ${HOME}/.gnupg
10noblacklist ${HOME}/.cache/gajim 10nodeny ${HOME}/.cache/gajim
11noblacklist ${HOME}/.config/gajim 11nodeny ${HOME}/.config/gajim
12noblacklist ${HOME}/.local/share/gajim 12nodeny ${HOME}/.local/share/gajim
13 13
14# Allow python (blacklisted by disable-interpreters.inc) 14# Allow python (blacklisted by disable-interpreters.inc)
15#include allow-python2.inc 15#include allow-python2.inc
@@ -28,14 +28,14 @@ mkdir ${HOME}/.gnupg
28mkdir ${HOME}/.cache/gajim 28mkdir ${HOME}/.cache/gajim
29mkdir ${HOME}/.config/gajim 29mkdir ${HOME}/.config/gajim
30mkdir ${HOME}/.local/share/gajim 30mkdir ${HOME}/.local/share/gajim
31whitelist ${HOME}/.gnupg 31allow ${HOME}/.gnupg
32whitelist ${HOME}/.cache/gajim 32allow ${HOME}/.cache/gajim
33whitelist ${HOME}/.config/gajim 33allow ${HOME}/.config/gajim
34whitelist ${HOME}/.local/share/gajim 34allow ${HOME}/.local/share/gajim
35whitelist ${DOWNLOADS} 35allow ${DOWNLOADS}
36whitelist ${RUNUSER}/gnupg 36allow ${RUNUSER}/gnupg
37whitelist /usr/share/gnupg 37allow /usr/share/gnupg
38whitelist /usr/share/gnupg2 38allow /usr/share/gnupg2
39include whitelist-common.inc 39include whitelist-common.inc
40include whitelist-runuser-common.inc 40include whitelist-runuser-common.inc
41include whitelist-usr-share-common.inc 41include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/galculator.profile b/etc/profile-a-l/galculator.profile
index 550b3808b..0b1b595a6 100644
--- a/etc/profile-a-l/galculator.profile
+++ b/etc/profile-a-l/galculator.profile
@@ -6,7 +6,7 @@ include galculator.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/galculator 9nodeny ${HOME}/.config/galculator
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,7 +18,7 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/galculator 20mkdir ${HOME}/.config/galculator
21whitelist ${HOME}/.config/galculator 21allow ${HOME}/.config/galculator
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/gapplication.profile b/etc/profile-a-l/gapplication.profile
index 3a8c055f2..00b830234 100644
--- a/etc/profile-a-l/gapplication.profile
+++ b/etc/profile-a-l/gapplication.profile
@@ -6,8 +6,8 @@ include gapplication.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9blacklist ${RUNUSER}/wayland-* 9deny ${RUNUSER}/wayland-*
10blacklist /usr/libexec 10deny /usr/libexec
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/gcloud.profile b/etc/profile-a-l/gcloud.profile
index 388f4c0df..896a100fc 100644
--- a/etc/profile-a-l/gcloud.profile
+++ b/etc/profile-a-l/gcloud.profile
@@ -8,9 +8,9 @@ include globals.local
8# noexec ${HOME} will break user-local installs of gcloud tooling 8# noexec ${HOME} will break user-local installs of gcloud tooling
9ignore noexec ${HOME} 9ignore noexec ${HOME}
10 10
11noblacklist ${HOME}/.boto 11nodeny ${HOME}/.boto
12noblacklist ${HOME}/.config/gcloud 12nodeny ${HOME}/.config/gcloud
13noblacklist /var/run/docker.sock 13nodeny /var/run/docker.sock
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/gconf-editor.profile b/etc/profile-a-l/gconf-editor.profile
index cb39174e5..8f72f0b34 100644
--- a/etc/profile-a-l/gconf-editor.profile
+++ b/etc/profile-a-l/gconf-editor.profile
@@ -7,9 +7,9 @@ include gconf-editor.local
7# added by included profile 7# added by included profile
8#include globals.local 8#include globals.local
9 9
10blacklist /tmp/.X11-unix 10deny /tmp/.X11-unix
11 11
12whitelist /usr/share/gconf-editor 12allow /usr/share/gconf-editor
13 13
14ignore x11 none 14ignore x11 none
15 15
diff --git a/etc/profile-a-l/gconf.profile b/etc/profile-a-l/gconf.profile
index fec1a555a..8c7013574 100644
--- a/etc/profile-a-l/gconf.profile
+++ b/etc/profile-a-l/gconf.profile
@@ -6,9 +6,9 @@ include gconf.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9blacklist ${RUNUSER}/wayland-* 9deny ${RUNUSER}/wayland-*
10 10
11noblacklist ${HOME}/.config/gconf 11nodeny ${HOME}/.config/gconf
12 12
13# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
14include allow-python2.inc 14include allow-python2.inc
@@ -23,9 +23,9 @@ include disable-programs.inc
23include disable-xdg.inc 23include disable-xdg.inc
24 24
25mkdir ${HOME}/.config/gconf 25mkdir ${HOME}/.config/gconf
26whitelist ${HOME}/.config/gconf 26allow ${HOME}/.config/gconf
27whitelist /usr/share/GConf 27allow /usr/share/GConf
28whitelist /usr/share/gconf 28allow /usr/share/gconf
29include whitelist-common.inc 29include whitelist-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/geany.profile b/etc/profile-a-l/geany.profile
index 6fdb9b37a..706a85c75 100644
--- a/etc/profile-a-l/geany.profile
+++ b/etc/profile-a-l/geany.profile
@@ -6,7 +6,7 @@ include geany.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/geany 9nodeny ${HOME}/.config/geany
10 10
11# Allows files commonly used by IDEs 11# Allows files commonly used by IDEs
12include allow-common-devel.inc 12include allow-common-devel.inc
diff --git a/etc/profile-a-l/geary.profile b/etc/profile-a-l/geary.profile
index 74e135a7c..512fc1e59 100644
--- a/etc/profile-a-l/geary.profile
+++ b/etc/profile-a-l/geary.profile
@@ -6,14 +6,14 @@ include geary.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/evolution 9nodeny ${HOME}/.cache/evolution
10noblacklist ${HOME}/.cache/folks 10nodeny ${HOME}/.cache/folks
11noblacklist ${HOME}/.cache/geary 11nodeny ${HOME}/.cache/geary
12noblacklist ${HOME}/.config/evolution 12nodeny ${HOME}/.config/evolution
13noblacklist ${HOME}/.config/geary 13nodeny ${HOME}/.config/geary
14noblacklist ${HOME}/.local/share/evolution 14nodeny ${HOME}/.local/share/evolution
15noblacklist ${HOME}/.local/share/geary 15nodeny ${HOME}/.local/share/geary
16noblacklist ${HOME}/.mozilla 16nodeny ${HOME}/.mozilla
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
@@ -31,16 +31,16 @@ mkdir ${HOME}/.config/evolution
31mkdir ${HOME}/.config/geary 31mkdir ${HOME}/.config/geary
32mkdir ${HOME}/.local/share/evolution 32mkdir ${HOME}/.local/share/evolution
33mkdir ${HOME}/.local/share/geary 33mkdir ${HOME}/.local/share/geary
34whitelist ${DOWNLOADS} 34allow ${DOWNLOADS}
35whitelist ${HOME}/.cache/evolution 35allow ${HOME}/.cache/evolution
36whitelist ${HOME}/.cache/folks 36allow ${HOME}/.cache/folks
37whitelist ${HOME}/.cache/geary 37allow ${HOME}/.cache/geary
38whitelist ${HOME}/.config/evolution 38allow ${HOME}/.config/evolution
39whitelist ${HOME}/.config/geary 39allow ${HOME}/.config/geary
40whitelist ${HOME}/.local/share/evolution 40allow ${HOME}/.local/share/evolution
41whitelist ${HOME}/.local/share/geary 41allow ${HOME}/.local/share/geary
42whitelist ${HOME}/.mozilla/firefox/profiles.ini 42allow ${HOME}/.mozilla/firefox/profiles.ini
43whitelist /usr/share/geary 43allow /usr/share/geary
44include whitelist-common.inc 44include whitelist-common.inc
45include whitelist-runuser-common.inc 45include whitelist-runuser-common.inc
46include whitelist-usr-share-common.inc 46include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gedit.profile b/etc/profile-a-l/gedit.profile
index 108b7041d..f11540374 100644
--- a/etc/profile-a-l/gedit.profile
+++ b/etc/profile-a-l/gedit.profile
@@ -6,8 +6,8 @@ include gedit.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/enchant 9nodeny ${HOME}/.config/enchant
10noblacklist ${HOME}/.config/gedit 10nodeny ${HOME}/.config/gedit
11 11
12# Allows files commonly used by IDEs 12# Allows files commonly used by IDEs
13include allow-common-devel.inc 13include allow-common-devel.inc
diff --git a/etc/profile-a-l/geeqie.profile b/etc/profile-a-l/geeqie.profile
index dd33b3fb5..8ec3bbaf9 100644
--- a/etc/profile-a-l/geeqie.profile
+++ b/etc/profile-a-l/geeqie.profile
@@ -6,9 +6,9 @@ include geeqie.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/geeqie 9nodeny ${HOME}/.cache/geeqie
10noblacklist ${HOME}/.config/geeqie 10nodeny ${HOME}/.config/geeqie
11noblacklist ${HOME}/.local/share/geeqie 11nodeny ${HOME}/.local/share/geeqie
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/gfeeds.profile b/etc/profile-a-l/gfeeds.profile
index f894a42ca..1661da639 100644
--- a/etc/profile-a-l/gfeeds.profile
+++ b/etc/profile-a-l/gfeeds.profile
@@ -6,10 +6,10 @@ include gfeeds.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/gfeeds 9nodeny ${HOME}/.cache/gfeeds
10noblacklist ${HOME}/.cache/org.gabmus.gfeeds 10nodeny ${HOME}/.cache/org.gabmus.gfeeds
11noblacklist ${HOME}/.config/org.gabmus.gfeeds.json 11nodeny ${HOME}/.config/org.gabmus.gfeeds.json
12noblacklist ${HOME}/.config/org.gabmus.gfeeds.saved_articles 12nodeny ${HOME}/.config/org.gabmus.gfeeds.saved_articles
13 13
14# Allow python (blacklisted by disable-interpreters.inc) 14# Allow python (blacklisted by disable-interpreters.inc)
15include allow-python3.inc 15include allow-python3.inc
@@ -27,12 +27,12 @@ mkdir ${HOME}/.cache/gfeeds
27mkdir ${HOME}/.cache/org.gabmus.gfeeds 27mkdir ${HOME}/.cache/org.gabmus.gfeeds
28mkfile ${HOME}/.config/org.gabmus.gfeeds.json 28mkfile ${HOME}/.config/org.gabmus.gfeeds.json
29mkdir ${HOME}/.config/org.gabmus.gfeeds.saved_articles 29mkdir ${HOME}/.config/org.gabmus.gfeeds.saved_articles
30whitelist ${HOME}/.cache/gfeeds 30allow ${HOME}/.cache/gfeeds
31whitelist ${HOME}/.cache/org.gabmus.gfeeds 31allow ${HOME}/.cache/org.gabmus.gfeeds
32whitelist ${HOME}/.config/org.gabmus.gfeeds.json 32allow ${HOME}/.config/org.gabmus.gfeeds.json
33whitelist ${HOME}/.config/org.gabmus.gfeeds.saved_articles 33allow ${HOME}/.config/org.gabmus.gfeeds.saved_articles
34whitelist /usr/libexec/webkit2gtk-4.0 34allow /usr/libexec/webkit2gtk-4.0
35whitelist /usr/share/gfeeds 35allow /usr/share/gfeeds
36include whitelist-common.inc 36include whitelist-common.inc
37include whitelist-runuser-common.inc 37include whitelist-runuser-common.inc
38include whitelist-usr-share-common.inc 38include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gget.profile b/etc/profile-a-l/gget.profile
index d9c5a0d9a..06929dbe3 100644
--- a/etc/profile-a-l/gget.profile
+++ b/etc/profile-a-l/gget.profile
@@ -7,8 +7,8 @@ include gget.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist /tmp/.X11-unix 10deny /tmp/.X11-unix
11blacklist ${RUNUSER} 11deny ${RUNUSER}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -19,7 +19,7 @@ include disable-programs.inc
19include disable-shell.inc 19include disable-shell.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22whitelist ${DOWNLOADS} 22allow ${DOWNLOADS}
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/ghostwriter.profile b/etc/profile-a-l/ghostwriter.profile
index 276ab76df..0577fe24f 100644
--- a/etc/profile-a-l/ghostwriter.profile
+++ b/etc/profile-a-l/ghostwriter.profile
@@ -6,10 +6,10 @@ include ghostwriter.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/ghostwriter 9nodeny ${HOME}/.config/ghostwriter
10noblacklist ${HOME}/.local/share/ghostwriter 10nodeny ${HOME}/.local/share/ghostwriter
11noblacklist ${DOCUMENTS} 11nodeny ${DOCUMENTS}
12noblacklist ${PICTURES} 12nodeny ${PICTURES}
13 13
14include allow-lua.inc 14include allow-lua.inc
15 15
@@ -22,10 +22,10 @@ include disable-programs.inc
22include disable-shell.inc 22include disable-shell.inc
23include disable-xdg.inc 23include disable-xdg.inc
24 24
25whitelist /usr/share/ghostwriter 25allow /usr/share/ghostwriter
26whitelist /usr/share/mozilla-dicts 26allow /usr/share/mozilla-dicts
27whitelist /usr/share/texlive 27allow /usr/share/texlive
28whitelist /usr/share/pandoc* 28allow /usr/share/pandoc*
29include whitelist-runuser-common.inc 29include whitelist-runuser-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gimp.profile b/etc/profile-a-l/gimp.profile
index dfc1304d1..de9db8d0f 100644
--- a/etc/profile-a-l/gimp.profile
+++ b/etc/profile-a-l/gimp.profile
@@ -18,13 +18,13 @@ include globals.local
18# If you are not using external plugins, you can add 'noexec ${HOME}' to your gimp.local. 18# If you are not using external plugins, you can add 'noexec ${HOME}' to your gimp.local.
19ignore noexec ${HOME} 19ignore noexec ${HOME}
20 20
21noblacklist ${HOME}/.cache/babl 21nodeny ${HOME}/.cache/babl
22noblacklist ${HOME}/.cache/gegl-0.4 22nodeny ${HOME}/.cache/gegl-0.4
23noblacklist ${HOME}/.cache/gimp 23nodeny ${HOME}/.cache/gimp
24noblacklist ${HOME}/.config/GIMP 24nodeny ${HOME}/.config/GIMP
25noblacklist ${HOME}/.gimp* 25nodeny ${HOME}/.gimp*
26noblacklist ${DOCUMENTS} 26nodeny ${DOCUMENTS}
27noblacklist ${PICTURES} 27nodeny ${PICTURES}
28 28
29include disable-common.inc 29include disable-common.inc
30include disable-exec.inc 30include disable-exec.inc
@@ -33,10 +33,10 @@ include disable-passwdmgr.inc
33include disable-programs.inc 33include disable-programs.inc
34include disable-xdg.inc 34include disable-xdg.inc
35 35
36whitelist /usr/share/gegl-0.4 36allow /usr/share/gegl-0.4
37whitelist /usr/share/gimp 37allow /usr/share/gimp
38whitelist /usr/share/mypaint-data 38allow /usr/share/mypaint-data
39whitelist /usr/share/lensfun 39allow /usr/share/lensfun
40include whitelist-usr-share-common.inc 40include whitelist-usr-share-common.inc
41include whitelist-var-common.inc 41include whitelist-var-common.inc
42 42
diff --git a/etc/profile-a-l/gist.profile b/etc/profile-a-l/gist.profile
index 661c3a375..e601d3ab0 100644
--- a/etc/profile-a-l/gist.profile
+++ b/etc/profile-a-l/gist.profile
@@ -7,10 +7,10 @@ include gist.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist /tmp/.X11-unix 10deny /tmp/.X11-unix
11blacklist ${RUNUSER}/wayland-* 11deny ${RUNUSER}/wayland-*
12 12
13noblacklist ${HOME}/.gist 13nodeny ${HOME}/.gist
14 14
15# Allow ruby (blacklisted by disable-interpreters.inc) 15# Allow ruby (blacklisted by disable-interpreters.inc)
16include allow-ruby.inc 16include allow-ruby.inc
@@ -24,8 +24,8 @@ include disable-programs.inc
24include disable-xdg.inc 24include disable-xdg.inc
25 25
26mkdir ${HOME}/.gist 26mkdir ${HOME}/.gist
27whitelist ${HOME}/.gist 27allow ${HOME}/.gist
28whitelist ${DOWNLOADS} 28allow ${DOWNLOADS}
29include whitelist-common.inc 29include whitelist-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/git-cola.profile b/etc/profile-a-l/git-cola.profile
index 5e4249376..74b7506cf 100644
--- a/etc/profile-a-l/git-cola.profile
+++ b/etc/profile-a-l/git-cola.profile
@@ -8,12 +8,12 @@ include globals.local
8 8
9ignore noexec ${HOME} 9ignore noexec ${HOME}
10 10
11noblacklist ${HOME}/.gitconfig 11nodeny ${HOME}/.gitconfig
12noblacklist ${HOME}/.git-credentials 12nodeny ${HOME}/.git-credentials
13noblacklist ${HOME}/.gnupg 13nodeny ${HOME}/.gnupg
14noblacklist ${HOME}/.subversion 14nodeny ${HOME}/.subversion
15noblacklist ${HOME}/.config/git 15nodeny ${HOME}/.config/git
16noblacklist ${HOME}/.config/git-cola 16nodeny ${HOME}/.config/git-cola
17# Add your editor/diff viewer config paths and the next line to your git-cola.local to load settings. 17# Add your editor/diff viewer config paths and the next line to your git-cola.local to load settings.
18#noblacklist ${HOME}/ 18#noblacklist ${HOME}/
19 19
@@ -32,17 +32,17 @@ include disable-passwdmgr.inc
32include disable-programs.inc 32include disable-programs.inc
33include disable-xdg.inc 33include disable-xdg.inc
34 34
35whitelist ${RUNUSER}/gnupg 35allow ${RUNUSER}/gnupg
36whitelist ${RUNUSER}/keyring 36allow ${RUNUSER}/keyring
37# Add additional whitelist paths below /usr/share to your git-cola.local to support your editor/diff viewer. 37# Add additional whitelist paths below /usr/share to your git-cola.local to support your editor/diff viewer.
38whitelist /usr/share/git 38allow /usr/share/git
39whitelist /usr/share/git-cola 39allow /usr/share/git-cola
40whitelist /usr/share/git-core 40allow /usr/share/git-core
41whitelist /usr/share/git-gui 41allow /usr/share/git-gui
42whitelist /usr/share/gitk 42allow /usr/share/gitk
43whitelist /usr/share/gitweb 43allow /usr/share/gitweb
44whitelist /usr/share/gnupg 44allow /usr/share/gnupg
45whitelist /usr/share/gnupg2 45allow /usr/share/gnupg2
46include whitelist-runuser-common.inc 46include whitelist-runuser-common.inc
47include whitelist-usr-share-common.inc 47include whitelist-usr-share-common.inc
48include whitelist-var-common.inc 48include whitelist-var-common.inc
diff --git a/etc/profile-a-l/git.profile b/etc/profile-a-l/git.profile
index bfa0081c6..680e91085 100644
--- a/etc/profile-a-l/git.profile
+++ b/etc/profile-a-l/git.profile
@@ -7,33 +7,33 @@ include git.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${HOME}/.config/git 10nodeny ${HOME}/.config/git
11noblacklist ${HOME}/.config/nano 11nodeny ${HOME}/.config/nano
12noblacklist ${HOME}/.emacs 12nodeny ${HOME}/.emacs
13noblacklist ${HOME}/.emacs.d 13nodeny ${HOME}/.emacs.d
14noblacklist ${HOME}/.gitconfig 14nodeny ${HOME}/.gitconfig
15noblacklist ${HOME}/.git-credentials 15nodeny ${HOME}/.git-credentials
16noblacklist ${HOME}/.gnupg 16nodeny ${HOME}/.gnupg
17noblacklist ${HOME}/.nanorc 17nodeny ${HOME}/.nanorc
18noblacklist ${HOME}/.vim 18nodeny ${HOME}/.vim
19noblacklist ${HOME}/.viminfo 19nodeny ${HOME}/.viminfo
20 20
21# Allow ssh (blacklisted by disable-common.inc) 21# Allow ssh (blacklisted by disable-common.inc)
22include allow-ssh.inc 22include allow-ssh.inc
23 23
24blacklist /tmp/.X11-unix 24deny /tmp/.X11-unix
25blacklist ${RUNUSER}/wayland-* 25deny ${RUNUSER}/wayland-*
26 26
27include disable-common.inc 27include disable-common.inc
28include disable-exec.inc 28include disable-exec.inc
29include disable-passwdmgr.inc 29include disable-passwdmgr.inc
30include disable-programs.inc 30include disable-programs.inc
31 31
32whitelist /usr/share/git 32allow /usr/share/git
33whitelist /usr/share/git-core 33allow /usr/share/git-core
34whitelist /usr/share/gitgui 34allow /usr/share/gitgui
35whitelist /usr/share/gitweb 35allow /usr/share/gitweb
36whitelist /usr/share/nano 36allow /usr/share/nano
37include whitelist-usr-share-common.inc 37include whitelist-usr-share-common.inc
38include whitelist-var-common.inc 38include whitelist-var-common.inc
39 39
diff --git a/etc/profile-a-l/gitg.profile b/etc/profile-a-l/gitg.profile
index 05d7dffa9..d313b5022 100644
--- a/etc/profile-a-l/gitg.profile
+++ b/etc/profile-a-l/gitg.profile
@@ -6,10 +6,10 @@ include gitg.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/git 9nodeny ${HOME}/.config/git
10noblacklist ${HOME}/.gitconfig 10nodeny ${HOME}/.gitconfig
11noblacklist ${HOME}/.git-credentials 11nodeny ${HOME}/.git-credentials
12noblacklist ${HOME}/.local/share/gitg 12nodeny ${HOME}/.local/share/gitg
13 13
14# Allow ssh (blacklisted by disable-common.inc) 14# Allow ssh (blacklisted by disable-common.inc)
15include allow-ssh.inc 15include allow-ssh.inc
@@ -29,7 +29,7 @@ include disable-programs.inc
29#whitelist ${HOME}/.ssh 29#whitelist ${HOME}/.ssh
30#include whitelist-common.inc 30#include whitelist-common.inc
31 31
32whitelist /usr/share/gitg 32allow /usr/share/gitg
33include whitelist-runuser-common.inc 33include whitelist-runuser-common.inc
34include whitelist-usr-share-common.inc 34include whitelist-usr-share-common.inc
35include whitelist-var-common.inc 35include whitelist-var-common.inc
diff --git a/etc/profile-a-l/github-desktop.profile b/etc/profile-a-l/github-desktop.profile
index 325c54ced..81b534a74 100644
--- a/etc/profile-a-l/github-desktop.profile
+++ b/etc/profile-a-l/github-desktop.profile
@@ -22,10 +22,10 @@ ignore apparmor
22ignore dbus-user none 22ignore dbus-user none
23ignore dbus-system none 23ignore dbus-system none
24 24
25noblacklist ${HOME}/.config/GitHub Desktop 25nodeny ${HOME}/.config/GitHub Desktop
26noblacklist ${HOME}/.config/git 26nodeny ${HOME}/.config/git
27noblacklist ${HOME}/.gitconfig 27nodeny ${HOME}/.gitconfig
28noblacklist ${HOME}/.git-credentials 28nodeny ${HOME}/.git-credentials
29 29
30# no3d 30# no3d
31nosound 31nosound
diff --git a/etc/profile-a-l/gitter.profile b/etc/profile-a-l/gitter.profile
index 460e2b990..2d1694ef7 100644
--- a/etc/profile-a-l/gitter.profile
+++ b/etc/profile-a-l/gitter.profile
@@ -5,8 +5,8 @@ include gitter.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/autostart 8nodeny ${HOME}/.config/autostart
9noblacklist ${HOME}/.config/Gitter 9nodeny ${HOME}/.config/Gitter
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,9 +16,9 @@ include disable-passwdmgr.inc
16include disable-programs.inc 16include disable-programs.inc
17 17
18mkdir ${HOME}/.config/Gitter 18mkdir ${HOME}/.config/Gitter
19whitelist ${DOWNLOADS} 19allow ${DOWNLOADS}
20whitelist ${HOME}/.config/autostart 20allow ${HOME}/.config/autostart
21whitelist ${HOME}/.config/Gitter 21allow ${HOME}/.config/Gitter
22include whitelist-var-common.inc 22include whitelist-var-common.inc
23 23
24caps.drop all 24caps.drop all
diff --git a/etc/profile-a-l/gjs.profile b/etc/profile-a-l/gjs.profile
index ed68b3c2d..e00bb1dbf 100644
--- a/etc/profile-a-l/gjs.profile
+++ b/etc/profile-a-l/gjs.profile
@@ -8,10 +8,10 @@ include globals.local
8 8
9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
10 10
11noblacklist ${HOME}/.cache/libgweather 11nodeny ${HOME}/.cache/libgweather
12noblacklist ${HOME}/.cache/org.gnome.Books 12nodeny ${HOME}/.cache/org.gnome.Books
13noblacklist ${HOME}/.config/libreoffice 13nodeny ${HOME}/.config/libreoffice
14noblacklist ${HOME}/.local/share/gnome-photos 14nodeny ${HOME}/.local/share/gnome-photos
15 15
16# Allow gjs (blacklisted by disable-interpreters.inc) 16# Allow gjs (blacklisted by disable-interpreters.inc)
17include allow-gjs.inc 17include allow-gjs.inc
diff --git a/etc/profile-a-l/gl-117.profile b/etc/profile-a-l/gl-117.profile
index c8cefc67e..a3236c2be 100644
--- a/etc/profile-a-l/gl-117.profile
+++ b/etc/profile-a-l/gl-117.profile
@@ -6,7 +6,7 @@ include gl-117.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.gl-117 9nodeny ${HOME}/.gl-117
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.gl-117 20mkdir ${HOME}/.gl-117
21whitelist ${HOME}/.gl-117 21allow ${HOME}/.gl-117
22whitelist /usr/share/gl-117 22allow /usr/share/gl-117
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/glaxium.profile b/etc/profile-a-l/glaxium.profile
index ee7af0546..ec894a5f3 100644
--- a/etc/profile-a-l/glaxium.profile
+++ b/etc/profile-a-l/glaxium.profile
@@ -6,7 +6,7 @@ include glaxium.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.glaxiumrc 9nodeny ${HOME}/.glaxiumrc
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkfile ${HOME}/.glaxiumrc 20mkfile ${HOME}/.glaxiumrc
21whitelist ${HOME}/.glaxiumrc 21allow ${HOME}/.glaxiumrc
22whitelist /usr/share/glaxium 22allow /usr/share/glaxium
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/globaltime.profile b/etc/profile-a-l/globaltime.profile
index 14b3ef811..e091b811f 100644
--- a/etc/profile-a-l/globaltime.profile
+++ b/etc/profile-a-l/globaltime.profile
@@ -5,7 +5,7 @@ include globaltime.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/globaltime 8nodeny ${HOME}/.config/globaltime
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
diff --git a/etc/profile-a-l/gmpc.profile b/etc/profile-a-l/gmpc.profile
index b3aad8b2c..79397d28f 100644
--- a/etc/profile-a-l/gmpc.profile
+++ b/etc/profile-a-l/gmpc.profile
@@ -6,8 +6,8 @@ include gmpc.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/gmpc 9nodeny ${HOME}/.config/gmpc
10noblacklist ${MUSIC} 10nodeny ${MUSIC}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -18,9 +18,9 @@ include disable-programs.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/gmpc 20mkdir ${HOME}/.config/gmpc
21whitelist ${HOME}/.config/gmpc 21allow ${HOME}/.config/gmpc
22whitelist ${MUSIC} 22allow ${MUSIC}
23whitelist /usr/share/gmpc 23allow /usr/share/gmpc
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-2048.profile b/etc/profile-a-l/gnome-2048.profile
index 777c81dbe..c723f6e46 100644
--- a/etc/profile-a-l/gnome-2048.profile
+++ b/etc/profile-a-l/gnome-2048.profile
@@ -6,10 +6,10 @@ include gnome-2048.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/gnome-2048 9nodeny ${HOME}/.local/share/gnome-2048
10 10
11mkdir ${HOME}/.local/share/gnome-2048 11mkdir ${HOME}/.local/share/gnome-2048
12whitelist ${HOME}/.local/share/gnome-2048 12allow ${HOME}/.local/share/gnome-2048
13 13
14private-bin gnome-2048 14private-bin gnome-2048
15 15
diff --git a/etc/profile-a-l/gnome-books.profile b/etc/profile-a-l/gnome-books.profile
index 34a7f557c..2ed5fa76b 100644
--- a/etc/profile-a-l/gnome-books.profile
+++ b/etc/profile-a-l/gnome-books.profile
@@ -7,8 +7,8 @@ include globals.local
7 7
8# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 8# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
9 9
10noblacklist ${HOME}/.cache/org.gnome.Books 10nodeny ${HOME}/.cache/org.gnome.Books
11noblacklist ${DOCUMENTS} 11nodeny ${DOCUMENTS}
12 12
13# Allow gjs (blacklisted by disable-interpreters.inc) 13# Allow gjs (blacklisted by disable-interpreters.inc)
14include allow-gjs.inc 14include allow-gjs.inc
diff --git a/etc/profile-a-l/gnome-builder.profile b/etc/profile-a-l/gnome-builder.profile
index 37ca5aeff..7dd1c6e22 100644
--- a/etc/profile-a-l/gnome-builder.profile
+++ b/etc/profile-a-l/gnome-builder.profile
@@ -6,11 +6,11 @@ include gnome-builder.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.bash_history 9nodeny ${HOME}/.bash_history
10 10
11noblacklist ${HOME}/.cache/gnome-builder 11nodeny ${HOME}/.cache/gnome-builder
12noblacklist ${HOME}/.config/gnome-builder 12nodeny ${HOME}/.config/gnome-builder
13noblacklist ${HOME}/.local/share/gnome-builder 13nodeny ${HOME}/.local/share/gnome-builder
14 14
15# Allows files commonly used by IDEs 15# Allows files commonly used by IDEs
16include allow-common-devel.inc 16include allow-common-devel.inc
diff --git a/etc/profile-a-l/gnome-calendar.profile b/etc/profile-a-l/gnome-calendar.profile
index 03acd66aa..d91fbaa4b 100644
--- a/etc/profile-a-l/gnome-calendar.profile
+++ b/etc/profile-a-l/gnome-calendar.profile
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18whitelist /usr/share/libgweather 18allow /usr/share/libgweather
19include whitelist-common.inc 19include whitelist-common.inc
20include whitelist-runuser-common.inc 20include whitelist-runuser-common.inc
21include whitelist-usr-share-common.inc 21include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-characters.profile b/etc/profile-a-l/gnome-characters.profile
index 741fe9bf7..806d7e571 100644
--- a/etc/profile-a-l/gnome-characters.profile
+++ b/etc/profile-a-l/gnome-characters.profile
@@ -18,7 +18,7 @@ include disable-programs.inc
18include disable-shell.inc 18include disable-shell.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21whitelist /usr/share/org.gnome.Characters 21allow /usr/share/org.gnome.Characters
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-runuser-common.inc 23include whitelist-runuser-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-chess.profile b/etc/profile-a-l/gnome-chess.profile
index bd39f625c..095210565 100644
--- a/etc/profile-a-l/gnome-chess.profile
+++ b/etc/profile-a-l/gnome-chess.profile
@@ -6,8 +6,8 @@ include gnome-chess.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/gnome-chess 9nodeny ${HOME}/.config/gnome-chess
10noblacklist ${HOME}/.local/share/gnome-chess 10nodeny ${HOME}/.local/share/gnome-chess
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -22,8 +22,8 @@ include disable-xdg.inc
22#whitelist ${HOME}/.local/share/gnome-chess 22#whitelist ${HOME}/.local/share/gnome-chess
23#include whitelist-common.inc 23#include whitelist-common.inc
24 24
25whitelist /usr/share/gnuchess 25allow /usr/share/gnuchess
26whitelist /usr/share/gnome-chess 26allow /usr/share/gnome-chess
27include whitelist-runuser-common.inc 27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc 29include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-clocks.profile b/etc/profile-a-l/gnome-clocks.profile
index 1e7c70b84..7e2d458fd 100644
--- a/etc/profile-a-l/gnome-clocks.profile
+++ b/etc/profile-a-l/gnome-clocks.profile
@@ -15,8 +15,8 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18whitelist /usr/share/gnome-clocks 18allow /usr/share/gnome-clocks
19whitelist /usr/share/libgweather 19allow /usr/share/libgweather
20include whitelist-common.inc 20include whitelist-common.inc
21include whitelist-runuser-common.inc 21include whitelist-runuser-common.inc
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-contacts.profile b/etc/profile-a-l/gnome-contacts.profile
index dcc6163b6..7902fa169 100644
--- a/etc/profile-a-l/gnome-contacts.profile
+++ b/etc/profile-a-l/gnome-contacts.profile
@@ -6,7 +6,7 @@ include gnome-contacts.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${DOCUMENTS} 9nodeny ${DOCUMENTS}
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/gnome-documents.profile b/etc/profile-a-l/gnome-documents.profile
index 29ad67af8..0f601149f 100644
--- a/etc/profile-a-l/gnome-documents.profile
+++ b/etc/profile-a-l/gnome-documents.profile
@@ -8,8 +8,8 @@ include globals.local
8 8
9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
10 10
11noblacklist ${HOME}/.config/libreoffice 11nodeny ${HOME}/.config/libreoffice
12noblacklist ${DOCUMENTS} 12nodeny ${DOCUMENTS}
13 13
14# Allow gjs (blacklisted by disable-interpreters.inc) 14# Allow gjs (blacklisted by disable-interpreters.inc)
15include allow-gjs.inc 15include allow-gjs.inc
diff --git a/etc/profile-a-l/gnome-hexgl.profile b/etc/profile-a-l/gnome-hexgl.profile
index 2db956faf..50c3e2c6f 100644
--- a/etc/profile-a-l/gnome-hexgl.profile
+++ b/etc/profile-a-l/gnome-hexgl.profile
@@ -16,7 +16,7 @@ include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18mkdir ${HOME}/.cache/mesa_shader_cache 18mkdir ${HOME}/.cache/mesa_shader_cache
19whitelist /usr/share/gnome-hexgl 19allow /usr/share/gnome-hexgl
20include whitelist-runuser-common.inc 20include whitelist-runuser-common.inc
21include whitelist-usr-share-common.inc 21include whitelist-usr-share-common.inc
22include whitelist-var-common.inc 22include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-keyring.profile b/etc/profile-a-l/gnome-keyring.profile
index 25b4c47de..62a5a34ea 100644
--- a/etc/profile-a-l/gnome-keyring.profile
+++ b/etc/profile-a-l/gnome-keyring.profile
@@ -7,7 +7,7 @@ include gnome-keyring.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${HOME}/.gnupg 10nodeny ${HOME}/.gnupg
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -18,12 +18,12 @@ include disable-programs.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.gnupg 20mkdir ${HOME}/.gnupg
21whitelist ${HOME}/.gnupg 21allow ${HOME}/.gnupg
22whitelist ${DOWNLOADS} 22allow ${DOWNLOADS}
23whitelist ${RUNUSER}/gnupg 23allow ${RUNUSER}/gnupg
24whitelist ${RUNUSER}/keyring 24allow ${RUNUSER}/keyring
25whitelist /usr/share/gnupg 25allow /usr/share/gnupg
26whitelist /usr/share/gnupg2 26allow /usr/share/gnupg2
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-klotski.profile b/etc/profile-a-l/gnome-klotski.profile
index c67a5c0da..ed074f944 100644
--- a/etc/profile-a-l/gnome-klotski.profile
+++ b/etc/profile-a-l/gnome-klotski.profile
@@ -6,10 +6,10 @@ include gnome-klotski.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/gnome-klotski 9nodeny ${HOME}/.local/share/gnome-klotski
10 10
11mkdir ${HOME}/.local/share/gnome-klotski 11mkdir ${HOME}/.local/share/gnome-klotski
12whitelist ${HOME}/.local/share/gnome-klotski 12allow ${HOME}/.local/share/gnome-klotski
13 13
14private-bin gnome-klotski 14private-bin gnome-klotski
15 15
diff --git a/etc/profile-a-l/gnome-latex.profile b/etc/profile-a-l/gnome-latex.profile
index 1a7eafeca..4a03a7ff5 100644
--- a/etc/profile-a-l/gnome-latex.profile
+++ b/etc/profile-a-l/gnome-latex.profile
@@ -6,8 +6,8 @@ include gnome-latex.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/gnome-latex 9nodeny ${HOME}/.config/gnome-latex
10noblacklist ${HOME}/.local/share/gnome-latex 10nodeny ${HOME}/.local/share/gnome-latex
11 11
12# Allow perl (blacklisted by disable-interpreters.inc) 12# Allow perl (blacklisted by disable-interpreters.inc)
13include allow-perl.inc 13include allow-perl.inc
@@ -19,8 +19,8 @@ include disable-interpreters.inc
19include disable-passwdmgr.inc 19include disable-passwdmgr.inc
20include disable-programs.inc 20include disable-programs.inc
21 21
22whitelist /usr/share/gnome-latex 22allow /usr/share/gnome-latex
23whitelist /usr/share/texlive 23allow /usr/share/texlive
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26# May cause issues. 26# May cause issues.
diff --git a/etc/profile-a-l/gnome-logs.profile b/etc/profile-a-l/gnome-logs.profile
index 9d2ea7b7b..fcc02dc76 100644
--- a/etc/profile-a-l/gnome-logs.profile
+++ b/etc/profile-a-l/gnome-logs.profile
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18whitelist /var/log/journal 18allow /var/log/journal
19include whitelist-runuser-common.inc 19include whitelist-runuser-common.inc
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-mahjongg.profile b/etc/profile-a-l/gnome-mahjongg.profile
index 42409dce8..e21f03efe 100644
--- a/etc/profile-a-l/gnome-mahjongg.profile
+++ b/etc/profile-a-l/gnome-mahjongg.profile
@@ -6,7 +6,7 @@ include gnome-mahjongg.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9whitelist /usr/share/gnome-mahjongg 9allow /usr/share/gnome-mahjongg
10 10
11private-bin gnome-mahjongg 11private-bin gnome-mahjongg
12 12
diff --git a/etc/profile-a-l/gnome-maps.profile b/etc/profile-a-l/gnome-maps.profile
index 23aab343f..cf4eceee3 100644
--- a/etc/profile-a-l/gnome-maps.profile
+++ b/etc/profile-a-l/gnome-maps.profile
@@ -11,14 +11,14 @@ include globals.local
11 11
12# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 12# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
13 13
14noblacklist ${HOME}/.cache/champlain 14nodeny ${HOME}/.cache/champlain
15noblacklist ${HOME}/.cache/org.gnome.Maps 15nodeny ${HOME}/.cache/org.gnome.Maps
16noblacklist ${HOME}/.local/share/maps-places.json 16nodeny ${HOME}/.local/share/maps-places.json
17 17
18# Allow gjs (blacklisted by disable-interpreters.inc) 18# Allow gjs (blacklisted by disable-interpreters.inc)
19include allow-gjs.inc 19include allow-gjs.inc
20 20
21blacklist /usr/libexec 21deny /usr/libexec
22 22
23include disable-common.inc 23include disable-common.inc
24include disable-devel.inc 24include disable-devel.inc
@@ -31,12 +31,12 @@ include disable-xdg.inc
31 31
32mkdir ${HOME}/.cache/champlain 32mkdir ${HOME}/.cache/champlain
33mkfile ${HOME}/.local/share/maps-places.json 33mkfile ${HOME}/.local/share/maps-places.json
34whitelist ${HOME}/.cache/champlain 34allow ${HOME}/.cache/champlain
35whitelist ${HOME}/.local/share/maps-places.json 35allow ${HOME}/.local/share/maps-places.json
36whitelist ${DOWNLOADS} 36allow ${DOWNLOADS}
37whitelist ${PICTURES} 37allow ${PICTURES}
38whitelist /usr/share/gnome-maps 38allow /usr/share/gnome-maps
39whitelist /usr/share/libgweather 39allow /usr/share/libgweather
40include whitelist-common.inc 40include whitelist-common.inc
41include whitelist-runuser-common.inc 41include whitelist-runuser-common.inc
42include whitelist-usr-share-common.inc 42include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-mines.profile b/etc/profile-a-l/gnome-mines.profile
index 4fe8986c2..1b2949bc5 100644
--- a/etc/profile-a-l/gnome-mines.profile
+++ b/etc/profile-a-l/gnome-mines.profile
@@ -6,11 +6,11 @@ include gnome-mines.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/gnome-mines 9nodeny ${HOME}/.local/share/gnome-mines
10 10
11mkdir ${HOME}/.local/share/gnome-mines 11mkdir ${HOME}/.local/share/gnome-mines
12whitelist ${HOME}/.local/share/gnome-mines 12allow ${HOME}/.local/share/gnome-mines
13whitelist /usr/share/gnome-mines 13allow /usr/share/gnome-mines
14 14
15private-bin gnome-mines 15private-bin gnome-mines
16 16
diff --git a/etc/profile-a-l/gnome-mplayer.profile b/etc/profile-a-l/gnome-mplayer.profile
index 43fe71f5e..c1cbc796a 100644
--- a/etc/profile-a-l/gnome-mplayer.profile
+++ b/etc/profile-a-l/gnome-mplayer.profile
@@ -6,9 +6,9 @@ include gnome-mplayer.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/gnome-mplayer 9nodeny ${HOME}/.config/gnome-mplayer
10noblacklist ${MUSIC} 10nodeny ${MUSIC}
11noblacklist ${VIDEOS} 11nodeny ${VIDEOS}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/gnome-music.profile b/etc/profile-a-l/gnome-music.profile
index 2fcbe9910..8fd0826c4 100644
--- a/etc/profile-a-l/gnome-music.profile
+++ b/etc/profile-a-l/gnome-music.profile
@@ -6,8 +6,8 @@ include gnome-music.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/gnome-music 9nodeny ${HOME}/.local/share/gnome-music
10noblacklist ${MUSIC} 10nodeny ${MUSIC}
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/gnome-nettool.profile b/etc/profile-a-l/gnome-nettool.profile
index 814751db3..a929582f8 100644
--- a/etc/profile-a-l/gnome-nettool.profile
+++ b/etc/profile-a-l/gnome-nettool.profile
@@ -14,7 +14,7 @@ include disable-passwdmgr.inc
14include disable-programs.inc 14include disable-programs.inc
15include disable-xdg.inc 15include disable-xdg.inc
16 16
17whitelist /usr/share/gnome-nettool 17allow /usr/share/gnome-nettool
18#include whitelist-common.inc -- see #903 18#include whitelist-common.inc -- see #903
19include whitelist-runuser-common.inc 19include whitelist-runuser-common.inc
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-nibbles.profile b/etc/profile-a-l/gnome-nibbles.profile
index b22810d34..d4c037a41 100644
--- a/etc/profile-a-l/gnome-nibbles.profile
+++ b/etc/profile-a-l/gnome-nibbles.profile
@@ -9,11 +9,11 @@ include globals.local
9ignore machine-id 9ignore machine-id
10ignore nosound 10ignore nosound
11 11
12noblacklist ${HOME}/.local/share/gnome-nibbles 12nodeny ${HOME}/.local/share/gnome-nibbles
13 13
14mkdir ${HOME}/.local/share/gnome-nibbles 14mkdir ${HOME}/.local/share/gnome-nibbles
15whitelist ${HOME}/.local/share/gnome-nibbles 15allow ${HOME}/.local/share/gnome-nibbles
16whitelist /usr/share/gnome-nibbles 16allow /usr/share/gnome-nibbles
17 17
18private-bin gnome-nibbles 18private-bin gnome-nibbles
19 19
diff --git a/etc/profile-a-l/gnome-passwordsafe.profile b/etc/profile-a-l/gnome-passwordsafe.profile
index fee5f88b9..d2cf828cc 100644
--- a/etc/profile-a-l/gnome-passwordsafe.profile
+++ b/etc/profile-a-l/gnome-passwordsafe.profile
@@ -6,14 +6,14 @@ include gnome-passwordsafe.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${DOCUMENTS} 9nodeny ${DOCUMENTS}
10noblacklist ${HOME}/*.kdb 10nodeny ${HOME}/*.kdb
11noblacklist ${HOME}/*.kdbx 11nodeny ${HOME}/*.kdbx
12 12
13# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
14include allow-python3.inc 14include allow-python3.inc
15 15
16blacklist /usr/libexec 16deny /usr/libexec
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
@@ -24,8 +24,8 @@ include disable-programs.inc
24include disable-shell.inc 24include disable-shell.inc
25include disable-xdg.inc 25include disable-xdg.inc
26 26
27whitelist /usr/share/cracklib 27allow /usr/share/cracklib
28whitelist /usr/share/passwordsafe 28allow /usr/share/passwordsafe
29include whitelist-runuser-common.inc 29include whitelist-runuser-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-photos.profile b/etc/profile-a-l/gnome-photos.profile
index 58bf3f349..3702da2c7 100644
--- a/etc/profile-a-l/gnome-photos.profile
+++ b/etc/profile-a-l/gnome-photos.profile
@@ -8,7 +8,7 @@ include globals.local
8 8
9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
10 10
11noblacklist ${HOME}/.local/share/gnome-photos 11nodeny ${HOME}/.local/share/gnome-photos
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/gnome-pie.profile b/etc/profile-a-l/gnome-pie.profile
index 41903b136..e9ae2bcb0 100644
--- a/etc/profile-a-l/gnome-pie.profile
+++ b/etc/profile-a-l/gnome-pie.profile
@@ -6,7 +6,7 @@ include gnome-pie.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/gnome-pie 9nodeny ${HOME}/.config/gnome-pie
10 10
11#include disable-common.inc 11#include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/gnome-pomodoro.profile b/etc/profile-a-l/gnome-pomodoro.profile
index c2ba7556d..bec23910c 100644
--- a/etc/profile-a-l/gnome-pomodoro.profile
+++ b/etc/profile-a-l/gnome-pomodoro.profile
@@ -6,7 +6,7 @@ include gnome-pomodoro.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/gnome-pomodoro 9nodeny ${HOME}/.local/share/gnome-pomodoro
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,8 +17,8 @@ include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19mkdir ${HOME}/.local/share/gnome-pomodoro 19mkdir ${HOME}/.local/share/gnome-pomodoro
20whitelist ${HOME}/.local/share/gnome-pomodoro 20allow ${HOME}/.local/share/gnome-pomodoro
21whitelist /usr/share/gnome-pomodoro 21allow /usr/share/gnome-pomodoro
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/gnome-recipes.profile b/etc/profile-a-l/gnome-recipes.profile
index 48c98ebe0..5ef33fdd8 100644
--- a/etc/profile-a-l/gnome-recipes.profile
+++ b/etc/profile-a-l/gnome-recipes.profile
@@ -7,8 +7,8 @@ include gnome-recipes.local
7include globals.local 7include globals.local
8 8
9 9
10noblacklist ${HOME}/.cache/gnome-recipes 10nodeny ${HOME}/.cache/gnome-recipes
11noblacklist ${HOME}/.local/share/gnome-recipes 11nodeny ${HOME}/.local/share/gnome-recipes
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -20,9 +20,9 @@ include disable-shell.inc
20 20
21mkdir ${HOME}/.cache/gnome-recipes 21mkdir ${HOME}/.cache/gnome-recipes
22mkdir ${HOME}/.local/share/gnome-recipes 22mkdir ${HOME}/.local/share/gnome-recipes
23whitelist ${HOME}/.cache/gnome-recipes 23allow ${HOME}/.cache/gnome-recipes
24whitelist ${HOME}/.local/share/gnome-recipes 24allow ${HOME}/.local/share/gnome-recipes
25whitelist /usr/share/gnome-recipes 25allow /usr/share/gnome-recipes
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-usr-share-common.inc 27include whitelist-usr-share-common.inc
28include whitelist-var-common.inc 28include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-ring.profile b/etc/profile-a-l/gnome-ring.profile
index 78ceb9c4f..b34d264f4 100644
--- a/etc/profile-a-l/gnome-ring.profile
+++ b/etc/profile-a-l/gnome-ring.profile
@@ -5,7 +5,7 @@ include gnome-ring.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.local/share/gnome-ring 8nodeny ${HOME}/.local/share/gnome-ring
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
diff --git a/etc/profile-a-l/gnome-robots.profile b/etc/profile-a-l/gnome-robots.profile
index 8835f2b93..836d4e2b2 100644
--- a/etc/profile-a-l/gnome-robots.profile
+++ b/etc/profile-a-l/gnome-robots.profile
@@ -9,7 +9,7 @@ include globals.local
9ignore machine-id 9ignore machine-id
10ignore nosound 10ignore nosound
11 11
12whitelist /usr/share/gnome-robots 12allow /usr/share/gnome-robots
13 13
14private-bin gnome-robots 14private-bin gnome-robots
15 15
diff --git a/etc/profile-a-l/gnome-schedule.profile b/etc/profile-a-l/gnome-schedule.profile
index 69c90b33d..146f8bc4e 100644
--- a/etc/profile-a-l/gnome-schedule.profile
+++ b/etc/profile-a-l/gnome-schedule.profile
@@ -6,17 +6,17 @@ include gnome-schedule.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.gnome/gnome-schedule 9nodeny ${HOME}/.gnome/gnome-schedule
10 10
11# Needs at and crontab to read/write user cron 11# Needs at and crontab to read/write user cron
12noblacklist ${PATH}/at 12nodeny ${PATH}/at
13noblacklist ${PATH}/crontab 13nodeny ${PATH}/crontab
14 14
15# Needs access to these files/dirs 15# Needs access to these files/dirs
16noblacklist /etc/cron.allow 16nodeny /etc/cron.allow
17noblacklist /etc/cron.deny 17nodeny /etc/cron.deny
18noblacklist /etc/shadow 18nodeny /etc/shadow
19noblacklist /var/spool/cron 19nodeny /var/spool/cron
20 20
21# cron job testing needs a terminal, resulting in sandbox escape (see disable-common.inc) 21# cron job testing needs a terminal, resulting in sandbox escape (see disable-common.inc)
22# add 'noblacklist ${PATH}/your-terminal' to gnome-schedule.local if you need that functionality 22# add 'noblacklist ${PATH}/your-terminal' to gnome-schedule.local if you need that functionality
@@ -34,10 +34,10 @@ include disable-programs.inc
34include disable-xdg.inc 34include disable-xdg.inc
35 35
36mkfile ${HOME}/.gnome/gnome-schedule 36mkfile ${HOME}/.gnome/gnome-schedule
37whitelist ${HOME}/.gnome/gnome-schedule 37allow ${HOME}/.gnome/gnome-schedule
38whitelist /usr/share/gnome-schedule 38allow /usr/share/gnome-schedule
39whitelist /var/spool/atd 39allow /var/spool/atd
40whitelist /var/spool/cron 40allow /var/spool/cron
41include whitelist-common.inc 41include whitelist-common.inc
42include whitelist-runuser-common.inc 42include whitelist-runuser-common.inc
43include whitelist-usr-share-common.inc 43include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-screenshot.profile b/etc/profile-a-l/gnome-screenshot.profile
index b683b6f6c..175549e99 100644
--- a/etc/profile-a-l/gnome-screenshot.profile
+++ b/etc/profile-a-l/gnome-screenshot.profile
@@ -6,8 +6,8 @@ include gnome-screenshot.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${PICTURES} 9nodeny ${PICTURES}
10noblacklist ${HOME}/.cache/gnome-screenshot 10nodeny ${HOME}/.cache/gnome-screenshot
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/gnome-sound-recorder.profile b/etc/profile-a-l/gnome-sound-recorder.profile
index 34f5fdeff..c2fb14fa4 100644
--- a/etc/profile-a-l/gnome-sound-recorder.profile
+++ b/etc/profile-a-l/gnome-sound-recorder.profile
@@ -6,8 +6,8 @@ include gnome-sound-recorder.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${MUSIC} 9nodeny ${MUSIC}
10noblacklist ${HOME}/.local/share/Trash 10nodeny ${HOME}/.local/share/Trash
11 11
12# Allow gjs (blacklisted by disable-interpreters.inc) 12# Allow gjs (blacklisted by disable-interpreters.inc)
13include allow-gjs.inc 13include allow-gjs.inc
diff --git a/etc/profile-a-l/gnome-sudoku.profile b/etc/profile-a-l/gnome-sudoku.profile
index 12fd48a86..3b7835e52 100644
--- a/etc/profile-a-l/gnome-sudoku.profile
+++ b/etc/profile-a-l/gnome-sudoku.profile
@@ -6,10 +6,10 @@ include gnome-sudoku.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/gnome-sudoku 9nodeny ${HOME}/.local/share/gnome-sudoku
10 10
11mkdir ${HOME}/.local/share/gnome-sudoku 11mkdir ${HOME}/.local/share/gnome-sudoku
12whitelist ${HOME}/.local/share/gnome-sudoku 12allow ${HOME}/.local/share/gnome-sudoku
13 13
14private-bin gnome-sudoku 14private-bin gnome-sudoku
15 15
diff --git a/etc/profile-a-l/gnome-system-log.profile b/etc/profile-a-l/gnome-system-log.profile
index 8a818695d..6978f7cab 100644
--- a/etc/profile-a-l/gnome-system-log.profile
+++ b/etc/profile-a-l/gnome-system-log.profile
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18whitelist /var/log 18allow /var/log
19include whitelist-common.inc 19include whitelist-common.inc
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-taquin.profile b/etc/profile-a-l/gnome-taquin.profile
index 2341334f7..ac87cf70f 100644
--- a/etc/profile-a-l/gnome-taquin.profile
+++ b/etc/profile-a-l/gnome-taquin.profile
@@ -9,7 +9,7 @@ include globals.local
9ignore machine-id 9ignore machine-id
10ignore nosound 10ignore nosound
11 11
12whitelist /usr/share/gnome-taquin 12allow /usr/share/gnome-taquin
13 13
14private-bin gnome-taquin 14private-bin gnome-taquin
15 15
diff --git a/etc/profile-a-l/gnome-todo.profile b/etc/profile-a-l/gnome-todo.profile
index 3b147cd48..092fd58a3 100644
--- a/etc/profile-a-l/gnome-todo.profile
+++ b/etc/profile-a-l/gnome-todo.profile
@@ -18,7 +18,7 @@ include disable-programs.inc
18include disable-shell.inc 18include disable-shell.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21whitelist /usr/share/gnome-todo 21allow /usr/share/gnome-todo
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/gnome-twitch.profile b/etc/profile-a-l/gnome-twitch.profile
index b8ec195d3..d76872ea6 100644
--- a/etc/profile-a-l/gnome-twitch.profile
+++ b/etc/profile-a-l/gnome-twitch.profile
@@ -6,8 +6,8 @@ include gnome-twitch.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/gnome-twitch 9nodeny ${HOME}/.cache/gnome-twitch
10noblacklist ${HOME}/.local/share/gnome-twitch 10nodeny ${HOME}/.local/share/gnome-twitch
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-programs.inc
18 18
19mkdir ${HOME}/.cache/gnome-twitch 19mkdir ${HOME}/.cache/gnome-twitch
20mkdir ${HOME}/.local/share/gnome-twitch 20mkdir ${HOME}/.local/share/gnome-twitch
21whitelist ${HOME}/.cache/gnome-twitch 21allow ${HOME}/.cache/gnome-twitch
22whitelist ${HOME}/.local/share/gnome-twitch 22allow ${HOME}/.local/share/gnome-twitch
23include whitelist-common.inc 23include whitelist-common.inc
24 24
25caps.drop all 25caps.drop all
diff --git a/etc/profile-a-l/gnome-weather.profile b/etc/profile-a-l/gnome-weather.profile
index 2e08fa41d..6f557ff8d 100644
--- a/etc/profile-a-l/gnome-weather.profile
+++ b/etc/profile-a-l/gnome-weather.profile
@@ -8,7 +8,7 @@ include globals.local
8 8
9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
10 10
11noblacklist ${HOME}/.cache/libgweather 11nodeny ${HOME}/.cache/libgweather
12 12
13# Allow gjs (blacklisted by disable-interpreters.inc) 13# Allow gjs (blacklisted by disable-interpreters.inc)
14include allow-gjs.inc 14include allow-gjs.inc
diff --git a/etc/profile-a-l/gnote.profile b/etc/profile-a-l/gnote.profile
index c3014a288..261efefac 100644
--- a/etc/profile-a-l/gnote.profile
+++ b/etc/profile-a-l/gnote.profile
@@ -6,8 +6,8 @@ include gnote.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/gnote 9nodeny ${HOME}/.config/gnote
10noblacklist ${HOME}/.local/share/gnote 10nodeny ${HOME}/.local/share/gnote
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -20,9 +20,9 @@ include disable-xdg.inc
20 20
21mkdir ${HOME}/.config/gnote 21mkdir ${HOME}/.config/gnote
22mkdir ${HOME}/.local/share/gnote 22mkdir ${HOME}/.local/share/gnote
23whitelist ${HOME}/.config/gnote 23allow ${HOME}/.config/gnote
24whitelist ${HOME}/.local/share/gnote 24allow ${HOME}/.local/share/gnote
25whitelist /usr/share/gnote 25allow /usr/share/gnote
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-runuser-common.inc 27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnubik.profile b/etc/profile-a-l/gnubik.profile
index 22851ce9f..e6fbca26f 100644
--- a/etc/profile-a-l/gnubik.profile
+++ b/etc/profile-a-l/gnubik.profile
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18whitelist /usr/share/gnubik 18allow /usr/share/gnubik
19include whitelist-common.inc 19include whitelist-common.inc
20include whitelist-runuser-common.inc 20include whitelist-runuser-common.inc
21include whitelist-usr-share-common.inc 21include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/godot.profile b/etc/profile-a-l/godot.profile
index 09ca17caa..f35a53ca4 100644
--- a/etc/profile-a-l/godot.profile
+++ b/etc/profile-a-l/godot.profile
@@ -6,9 +6,9 @@ include godot.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/godot 9nodeny ${HOME}/.cache/godot
10noblacklist ${HOME}/.config/godot 10nodeny ${HOME}/.config/godot
11noblacklist ${HOME}/.local/share/godot 11nodeny ${HOME}/.local/share/godot
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/goobox.profile b/etc/profile-a-l/goobox.profile
index 8399d77c4..95dd41c2a 100644
--- a/etc/profile-a-l/goobox.profile
+++ b/etc/profile-a-l/goobox.profile
@@ -6,7 +6,7 @@ include goobox.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${MUSIC} 9nodeny ${MUSIC}
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/google-chrome-beta.profile b/etc/profile-a-l/google-chrome-beta.profile
index ebe5e870b..07f0e587d 100644
--- a/etc/profile-a-l/google-chrome-beta.profile
+++ b/etc/profile-a-l/google-chrome-beta.profile
@@ -10,19 +10,19 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13noblacklist ${HOME}/.cache/google-chrome-beta 13nodeny ${HOME}/.cache/google-chrome-beta
14noblacklist ${HOME}/.config/google-chrome-beta 14nodeny ${HOME}/.config/google-chrome-beta
15 15
16noblacklist ${HOME}/.config/chrome-beta-flags.conf 16nodeny ${HOME}/.config/chrome-beta-flags.conf
17noblacklist ${HOME}/.config/chrome-beta-flags.config 17nodeny ${HOME}/.config/chrome-beta-flags.config
18 18
19mkdir ${HOME}/.cache/google-chrome-beta 19mkdir ${HOME}/.cache/google-chrome-beta
20mkdir ${HOME}/.config/google-chrome-beta 20mkdir ${HOME}/.config/google-chrome-beta
21whitelist ${HOME}/.cache/google-chrome-beta 21allow ${HOME}/.cache/google-chrome-beta
22whitelist ${HOME}/.config/google-chrome-beta 22allow ${HOME}/.config/google-chrome-beta
23 23
24whitelist ${HOME}/.config/chrome-beta-flags.conf 24allow ${HOME}/.config/chrome-beta-flags.conf
25whitelist ${HOME}/.config/chrome-beta-flags.config 25allow ${HOME}/.config/chrome-beta-flags.config
26 26
27# Redirect 27# Redirect
28include chromium-common.profile 28include chromium-common.profile
diff --git a/etc/profile-a-l/google-chrome-unstable.profile b/etc/profile-a-l/google-chrome-unstable.profile
index 4d303f71b..229904411 100644
--- a/etc/profile-a-l/google-chrome-unstable.profile
+++ b/etc/profile-a-l/google-chrome-unstable.profile
@@ -10,19 +10,19 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13noblacklist ${HOME}/.cache/google-chrome-unstable 13nodeny ${HOME}/.cache/google-chrome-unstable
14noblacklist ${HOME}/.config/google-chrome-unstable 14nodeny ${HOME}/.config/google-chrome-unstable
15 15
16noblacklist ${HOME}/.config/chrome-unstable-flags.conf 16nodeny ${HOME}/.config/chrome-unstable-flags.conf
17noblacklist ${HOME}/.config/chrome-unstable-flags.config 17nodeny ${HOME}/.config/chrome-unstable-flags.config
18 18
19mkdir ${HOME}/.cache/google-chrome-unstable 19mkdir ${HOME}/.cache/google-chrome-unstable
20mkdir ${HOME}/.config/google-chrome-unstable 20mkdir ${HOME}/.config/google-chrome-unstable
21whitelist ${HOME}/.cache/google-chrome-unstable 21allow ${HOME}/.cache/google-chrome-unstable
22whitelist ${HOME}/.config/google-chrome-unstable 22allow ${HOME}/.config/google-chrome-unstable
23 23
24whitelist ${HOME}/.config/chrome-unstable-flags.conf 24allow ${HOME}/.config/chrome-unstable-flags.conf
25whitelist ${HOME}/.config/chrome-unstable-flags.config 25allow ${HOME}/.config/chrome-unstable-flags.config
26 26
27# Redirect 27# Redirect
28include chromium-common.profile 28include chromium-common.profile
diff --git a/etc/profile-a-l/google-chrome.profile b/etc/profile-a-l/google-chrome.profile
index ed2595f72..f61642f17 100644
--- a/etc/profile-a-l/google-chrome.profile
+++ b/etc/profile-a-l/google-chrome.profile
@@ -10,19 +10,19 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13noblacklist ${HOME}/.cache/google-chrome 13nodeny ${HOME}/.cache/google-chrome
14noblacklist ${HOME}/.config/google-chrome 14nodeny ${HOME}/.config/google-chrome
15 15
16noblacklist ${HOME}/.config/chrome-flags.conf 16nodeny ${HOME}/.config/chrome-flags.conf
17noblacklist ${HOME}/.config/chrome-flags.config 17nodeny ${HOME}/.config/chrome-flags.config
18 18
19mkdir ${HOME}/.cache/google-chrome 19mkdir ${HOME}/.cache/google-chrome
20mkdir ${HOME}/.config/google-chrome 20mkdir ${HOME}/.config/google-chrome
21whitelist ${HOME}/.cache/google-chrome 21allow ${HOME}/.cache/google-chrome
22whitelist ${HOME}/.config/google-chrome 22allow ${HOME}/.config/google-chrome
23 23
24whitelist ${HOME}/.config/chrome-flags.conf 24allow ${HOME}/.config/chrome-flags.conf
25whitelist ${HOME}/.config/chrome-flags.config 25allow ${HOME}/.config/chrome-flags.config
26 26
27# Redirect 27# Redirect
28include chromium-common.profile 28include chromium-common.profile
diff --git a/etc/profile-a-l/google-earth.profile b/etc/profile-a-l/google-earth.profile
index 65ac04771..6039f7cbd 100644
--- a/etc/profile-a-l/google-earth.profile
+++ b/etc/profile-a-l/google-earth.profile
@@ -5,8 +5,8 @@ include google-earth.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/Google 8nodeny ${HOME}/.config/Google
9noblacklist ${HOME}/.googleearth 9nodeny ${HOME}/.googleearth
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,8 +17,8 @@ include disable-programs.inc
17 17
18mkdir ${HOME}/.config/Google 18mkdir ${HOME}/.config/Google
19mkdir ${HOME}/.googleearth 19mkdir ${HOME}/.googleearth
20whitelist ${HOME}/.config/Google 20allow ${HOME}/.config/Google
21whitelist ${HOME}/.googleearth 21allow ${HOME}/.googleearth
22include whitelist-common.inc 22include whitelist-common.inc
23 23
24caps.drop all 24caps.drop all
diff --git a/etc/profile-a-l/google-play-music-desktop-player.profile b/etc/profile-a-l/google-play-music-desktop-player.profile
index a7aabe105..fdb65b93c 100644
--- a/etc/profile-a-l/google-play-music-desktop-player.profile
+++ b/etc/profile-a-l/google-play-music-desktop-player.profile
@@ -8,7 +8,7 @@ include globals.local
8# noexec /tmp breaks mpris support 8# noexec /tmp breaks mpris support
9ignore noexec /tmp 9ignore noexec /tmp
10 10
11noblacklist ${HOME}/.config/Google Play Music Desktop Player 11nodeny ${HOME}/.config/Google Play Music Desktop Player
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -20,7 +20,7 @@ include disable-programs.inc
20mkdir ${HOME}/.config/Google Play Music Desktop Player 20mkdir ${HOME}/.config/Google Play Music Desktop Player
21# whitelist ${HOME}/.config/pulse 21# whitelist ${HOME}/.config/pulse
22# whitelist ${HOME}/.pulse 22# whitelist ${HOME}/.pulse
23whitelist ${HOME}/.config/Google Play Music Desktop Player 23allow ${HOME}/.config/Google Play Music Desktop Player
24include whitelist-common.inc 24include whitelist-common.inc
25 25
26caps.drop all 26caps.drop all
diff --git a/etc/profile-a-l/googler-common.profile b/etc/profile-a-l/googler-common.profile
index 2d0bce52b..952c9c1d4 100644
--- a/etc/profile-a-l/googler-common.profile
+++ b/etc/profile-a-l/googler-common.profile
@@ -7,10 +7,10 @@ include googler-common.local
7# added by caller profile 7# added by caller profile
8#include globals.local 8#include globals.local
9 9
10blacklist /tmp/.X11-unix 10deny /tmp/.X11-unix
11blacklist ${RUNUSER} 11deny ${RUNUSER}
12 12
13noblacklist ${HOME}/.w3m 13nodeny ${HOME}/.w3m
14 14
15# Allow /bin/sh (blacklisted by disable-shell.inc) 15# Allow /bin/sh (blacklisted by disable-shell.inc)
16include allow-bin-sh.inc 16include allow-bin-sh.inc
@@ -26,7 +26,7 @@ include disable-programs.inc
26include disable-shell.inc 26include disable-shell.inc
27include disable-xdg.inc 27include disable-xdg.inc
28 28
29whitelist ${HOME}/.w3m 29allow ${HOME}/.w3m
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
32 32
diff --git a/etc/profile-a-l/gpa.profile b/etc/profile-a-l/gpa.profile
index 37b4f0b1c..9b8da361b 100644
--- a/etc/profile-a-l/gpa.profile
+++ b/etc/profile-a-l/gpa.profile
@@ -6,7 +6,7 @@ include gpa.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.gnupg 9nodeny ${HOME}/.gnupg
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/gpg-agent.profile b/etc/profile-a-l/gpg-agent.profile
index 7f0b614b1..5fa66bb55 100644
--- a/etc/profile-a-l/gpg-agent.profile
+++ b/etc/profile-a-l/gpg-agent.profile
@@ -7,10 +7,10 @@ include gpg-agent.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${HOME}/.gnupg 10nodeny ${HOME}/.gnupg
11 11
12blacklist /tmp/.X11-unix 12deny /tmp/.X11-unix
13blacklist ${RUNUSER}/wayland-* 13deny ${RUNUSER}/wayland-*
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -20,11 +20,11 @@ include disable-programs.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22mkdir ${HOME}/.gnupg 22mkdir ${HOME}/.gnupg
23whitelist ${HOME}/.gnupg 23allow ${HOME}/.gnupg
24whitelist ${RUNUSER}/gnupg 24allow ${RUNUSER}/gnupg
25whitelist ${RUNUSER}/keyring 25allow ${RUNUSER}/keyring
26whitelist /usr/share/gnupg 26allow /usr/share/gnupg
27whitelist /usr/share/gnupg2 27allow /usr/share/gnupg2
28include whitelist-common.inc 28include whitelist-common.inc
29include whitelist-runuser-common.inc 29include whitelist-runuser-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gpg.profile b/etc/profile-a-l/gpg.profile
index 4a4d6527c..2ad896abe 100644
--- a/etc/profile-a-l/gpg.profile
+++ b/etc/profile-a-l/gpg.profile
@@ -7,10 +7,10 @@ include gpg.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${HOME}/.gnupg 10nodeny ${HOME}/.gnupg
11 11
12blacklist /tmp/.X11-unix 12deny /tmp/.X11-unix
13blacklist ${RUNUSER}/wayland-* 13deny ${RUNUSER}/wayland-*
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -18,11 +18,11 @@ include disable-interpreters.inc
18include disable-passwdmgr.inc 18include disable-passwdmgr.inc
19include disable-programs.inc 19include disable-programs.inc
20 20
21whitelist ${RUNUSER}/gnupg 21allow ${RUNUSER}/gnupg
22whitelist ${RUNUSER}/keyring 22allow ${RUNUSER}/keyring
23whitelist /usr/share/gnupg 23allow /usr/share/gnupg
24whitelist /usr/share/gnupg2 24allow /usr/share/gnupg2
25whitelist /usr/share/pacman/keyrings 25allow /usr/share/pacman/keyrings
26include whitelist-runuser-common.inc 26include whitelist-runuser-common.inc
27include whitelist-usr-share-common.inc 27include whitelist-usr-share-common.inc
28include whitelist-var-common.inc 28include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gpicview.profile b/etc/profile-a-l/gpicview.profile
index fa53c26c8..0552dc3d7 100644
--- a/etc/profile-a-l/gpicview.profile
+++ b/etc/profile-a-l/gpicview.profile
@@ -6,7 +6,7 @@ include gpicview.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/gpicview 9nodeny ${HOME}/.config/gpicview
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,7 +16,7 @@ include disable-passwdmgr.inc
16include disable-programs.inc 16include disable-programs.inc
17include disable-shell.inc 17include disable-shell.inc
18 18
19whitelist /usr/share/gpicview 19allow /usr/share/gpicview
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
22 22
diff --git a/etc/profile-a-l/gpredict.profile b/etc/profile-a-l/gpredict.profile
index 253d644f1..c9e62a73f 100644
--- a/etc/profile-a-l/gpredict.profile
+++ b/etc/profile-a-l/gpredict.profile
@@ -6,7 +6,7 @@ include gpredict.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/Gpredict 9nodeny ${HOME}/.config/Gpredict
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-programs.inc
17include disable-shell.inc 17include disable-shell.inc
18 18
19mkdir ${HOME}/.config/Gpredict 19mkdir ${HOME}/.config/Gpredict
20whitelist ${HOME}/.config/Gpredict 20allow ${HOME}/.config/Gpredict
21include whitelist-common.inc 21include whitelist-common.inc
22 22
23caps.drop all 23caps.drop all
diff --git a/etc/profile-a-l/gradio.profile b/etc/profile-a-l/gradio.profile
index 2b4c536d2..2aebe2338 100644
--- a/etc/profile-a-l/gradio.profile
+++ b/etc/profile-a-l/gradio.profile
@@ -5,8 +5,8 @@ include gradio.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.cache/gradio 8nodeny ${HOME}/.cache/gradio
9noblacklist ${HOME}/.local/share/gradio 9nodeny ${HOME}/.local/share/gradio
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-xdg.inc
18 18
19mkdir ${HOME}/.cache/gradio 19mkdir ${HOME}/.cache/gradio
20mkdir ${HOME}/.local/share/gradio 20mkdir ${HOME}/.local/share/gradio
21whitelist ${HOME}/.cache/gradio 21allow ${HOME}/.cache/gradio
22whitelist ${HOME}/.local/share/gradio 22allow ${HOME}/.local/share/gradio
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gramps.profile b/etc/profile-a-l/gramps.profile
index c7e0c2977..53f0baccb 100644
--- a/etc/profile-a-l/gramps.profile
+++ b/etc/profile-a-l/gramps.profile
@@ -6,7 +6,7 @@ include gramps.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.gramps 9nodeny ${HOME}/.gramps
10 10
11# Allow python (blacklisted by disable-interpreters.inc) 11# Allow python (blacklisted by disable-interpreters.inc)
12#include allow-python2.inc 12#include allow-python2.inc
@@ -21,7 +21,7 @@ include disable-programs.inc
21include disable-xdg.inc 21include disable-xdg.inc
22 22
23mkdir ${HOME}/.gramps 23mkdir ${HOME}/.gramps
24whitelist ${HOME}/.gramps 24allow ${HOME}/.gramps
25include whitelist-common.inc 25include whitelist-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
27 27
diff --git a/etc/profile-a-l/gravity-beams-and-evaporating-stars.profile b/etc/profile-a-l/gravity-beams-and-evaporating-stars.profile
index 890ba2560..ecc871c2e 100644
--- a/etc/profile-a-l/gravity-beams-and-evaporating-stars.profile
+++ b/etc/profile-a-l/gravity-beams-and-evaporating-stars.profile
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18whitelist /usr/share/gravity-beams-and-evaporating-stars 18allow /usr/share/gravity-beams-and-evaporating-stars
19include whitelist-common.inc 19include whitelist-common.inc
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gthumb.profile b/etc/profile-a-l/gthumb.profile
index 5927e8c4d..9a4f7b4fb 100644
--- a/etc/profile-a-l/gthumb.profile
+++ b/etc/profile-a-l/gthumb.profile
@@ -6,9 +6,9 @@ include gthumb.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/gthumb 9nodeny ${HOME}/.config/gthumb
10noblacklist ${HOME}/.Steam 10nodeny ${HOME}/.Steam
11noblacklist ${HOME}/.steam 11nodeny ${HOME}/.steam
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/gtk-update-icon-cache.profile b/etc/profile-a-l/gtk-update-icon-cache.profile
index c8addae75..d6bb9902a 100644
--- a/etc/profile-a-l/gtk-update-icon-cache.profile
+++ b/etc/profile-a-l/gtk-update-icon-cache.profile
@@ -7,7 +7,7 @@ include gtk-update-icon-cache.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER}/wayland-* 10deny ${RUNUSER}/wayland-*
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/gtk2-youtube-viewer.profile b/etc/profile-a-l/gtk2-youtube-viewer.profile
index 787c7bd90..8241de43a 100644
--- a/etc/profile-a-l/gtk2-youtube-viewer.profile
+++ b/etc/profile-a-l/gtk2-youtube-viewer.profile
@@ -8,8 +8,8 @@ include gtk2-youtube-viewer.local
8 8
9ignore quiet 9ignore quiet
10 10
11noblacklist /tmp/.X11-unix 11nodeny /tmp/.X11-unix
12noblacklist ${RUNUSER} 12nodeny ${RUNUSER}
13 13
14include whitelist-runuser-common.inc 14include whitelist-runuser-common.inc
15 15
diff --git a/etc/profile-a-l/gtk3-youtube-viewer.profile b/etc/profile-a-l/gtk3-youtube-viewer.profile
index 988882622..6ea4ebbdc 100644
--- a/etc/profile-a-l/gtk3-youtube-viewer.profile
+++ b/etc/profile-a-l/gtk3-youtube-viewer.profile
@@ -8,8 +8,8 @@ include gtk3-youtube-viewer.local
8 8
9ignore quiet 9ignore quiet
10 10
11noblacklist /tmp/.X11-unix 11nodeny /tmp/.X11-unix
12noblacklist ${RUNUSER} 12nodeny ${RUNUSER}
13 13
14include whitelist-runuser-common.inc 14include whitelist-runuser-common.inc
15 15
diff --git a/etc/profile-a-l/guayadeque.profile b/etc/profile-a-l/guayadeque.profile
index 3d2b71e9d..731bcad1d 100644
--- a/etc/profile-a-l/guayadeque.profile
+++ b/etc/profile-a-l/guayadeque.profile
@@ -5,8 +5,8 @@ include guayadeque.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.guayadeque 8nodeny ${HOME}/.guayadeque
9noblacklist ${MUSIC} 9nodeny ${MUSIC}
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/gummi.profile b/etc/profile-a-l/gummi.profile
index 2223c37a1..5cdc2cc18 100644
--- a/etc/profile-a-l/gummi.profile
+++ b/etc/profile-a-l/gummi.profile
@@ -5,8 +5,8 @@ include gummi.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.cache/gummi 8nodeny ${HOME}/.cache/gummi
9noblacklist ${HOME}/.config/gummi 9nodeny ${HOME}/.config/gummi
10 10
11# Allow lua (blacklisted by disable-interpreters.inc) 11# Allow lua (blacklisted by disable-interpreters.inc)
12include allow-lua.inc 12include allow-lua.inc
diff --git a/etc/profile-a-l/guvcview.profile b/etc/profile-a-l/guvcview.profile
index 9221ca31c..3404f5177 100644
--- a/etc/profile-a-l/guvcview.profile
+++ b/etc/profile-a-l/guvcview.profile
@@ -6,10 +6,10 @@ include guvcview.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/guvcview2 9nodeny ${HOME}/.config/guvcview2
10 10
11noblacklist ${PICTURES} 11nodeny ${PICTURES}
12noblacklist ${VIDEOS} 12nodeny ${VIDEOS}
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
@@ -21,9 +21,9 @@ include disable-shell.inc
21include disable-xdg.inc 21include disable-xdg.inc
22 22
23mkdir ${HOME}/.config/guvcview2 23mkdir ${HOME}/.config/guvcview2
24whitelist ${HOME}/.config/guvcview2 24allow ${HOME}/.config/guvcview2
25whitelist ${PICTURES} 25allow ${PICTURES}
26whitelist ${VIDEOS} 26allow ${VIDEOS}
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gwenview.profile b/etc/profile-a-l/gwenview.profile
index d33e2a673..132b5a2e2 100644
--- a/etc/profile-a-l/gwenview.profile
+++ b/etc/profile-a-l/gwenview.profile
@@ -6,17 +6,17 @@ include gwenview.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/GIMP 9nodeny ${HOME}/.config/GIMP
10noblacklist ${HOME}/.config/gwenviewrc 10nodeny ${HOME}/.config/gwenviewrc
11noblacklist ${HOME}/.config/org.kde.gwenviewrc 11nodeny ${HOME}/.config/org.kde.gwenviewrc
12noblacklist ${HOME}/.gimp* 12nodeny ${HOME}/.gimp*
13noblacklist ${HOME}/.kde/share/apps/gwenview 13nodeny ${HOME}/.kde/share/apps/gwenview
14noblacklist ${HOME}/.kde/share/config/gwenviewrc 14nodeny ${HOME}/.kde/share/config/gwenviewrc
15noblacklist ${HOME}/.kde4/share/apps/gwenview 15nodeny ${HOME}/.kde4/share/apps/gwenview
16noblacklist ${HOME}/.kde4/share/config/gwenviewrc 16nodeny ${HOME}/.kde4/share/config/gwenviewrc
17noblacklist ${HOME}/.local/share/gwenview 17nodeny ${HOME}/.local/share/gwenview
18noblacklist ${HOME}/.local/share/kxmlgui5/gwenview 18nodeny ${HOME}/.local/share/kxmlgui5/gwenview
19noblacklist ${HOME}/.local/share/org.kde.gwenview 19nodeny ${HOME}/.local/share/org.kde.gwenview
20 20
21include disable-common.inc 21include disable-common.inc
22include disable-devel.inc 22include disable-devel.inc
diff --git a/etc/profile-a-l/gzip.profile b/etc/profile-a-l/gzip.profile
index b261c16f4..46c98bdc2 100644
--- a/etc/profile-a-l/gzip.profile
+++ b/etc/profile-a-l/gzip.profile
@@ -9,7 +9,7 @@ include globals.local
9 9
10# Arch Linux (based distributions) need access to /var/lib/pacman. As we drop 10# Arch Linux (based distributions) need access to /var/lib/pacman. As we drop
11# all capabilities this is automatically read-only. 11# all capabilities this is automatically read-only.
12noblacklist /var/lib/pacman 12nodeny /var/lib/pacman
13 13
14# Redirect 14# Redirect
15include archiver-common.profile 15include archiver-common.profile
diff --git a/etc/profile-a-l/handbrake.profile b/etc/profile-a-l/handbrake.profile
index 847e1ec1e..c102ac4cb 100644
--- a/etc/profile-a-l/handbrake.profile
+++ b/etc/profile-a-l/handbrake.profile
@@ -6,9 +6,9 @@ include handbrake.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/ghb 9nodeny ${HOME}/.config/ghb
10noblacklist ${MUSIC} 10nodeny ${MUSIC}
11noblacklist ${VIDEOS} 11nodeny ${VIDEOS}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/hashcat.profile b/etc/profile-a-l/hashcat.profile
index aab4b0c21..d98a1b554 100644
--- a/etc/profile-a-l/hashcat.profile
+++ b/etc/profile-a-l/hashcat.profile
@@ -7,11 +7,11 @@ include hashcat.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER}/wayland-* 10deny ${RUNUSER}/wayland-*
11 11
12noblacklist ${HOME}/.hashcat 12nodeny ${HOME}/.hashcat
13noblacklist /usr/include 13nodeny /usr/include
14noblacklist ${DOCUMENTS} 14nodeny ${DOCUMENTS}
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/hasher-common.profile b/etc/profile-a-l/hasher-common.profile
index 44584f26b..1c2a44e06 100644
--- a/etc/profile-a-l/hasher-common.profile
+++ b/etc/profile-a-l/hasher-common.profile
@@ -4,7 +4,7 @@ include hasher-common.local
4 4
5# common profile for hasher/checksum tools 5# common profile for hasher/checksum tools
6 6
7blacklist ${RUNUSER} 7deny ${RUNUSER}
8 8
9# Comment/uncomment the relevant include file(s) in your hasher-common.local 9# Comment/uncomment the relevant include file(s) in your hasher-common.local
10# to (un)restrict file access for **all** hashers. Another option is to do this **per hasher** 10# to (un)restrict file access for **all** hashers. Another option is to do this **per hasher**
diff --git a/etc/profile-a-l/hedgewars.profile b/etc/profile-a-l/hedgewars.profile
index c0675d8ec..90833af91 100644
--- a/etc/profile-a-l/hedgewars.profile
+++ b/etc/profile-a-l/hedgewars.profile
@@ -6,7 +6,7 @@ include hedgewars.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.hedgewars 9nodeny ${HOME}/.hedgewars
10 10
11include allow-lua.inc 11include allow-lua.inc
12 12
@@ -17,7 +17,7 @@ include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18 18
19mkdir ${HOME}/.hedgewars 19mkdir ${HOME}/.hedgewars
20whitelist ${HOME}/.hedgewars 20allow ${HOME}/.hedgewars
21include whitelist-common.inc 21include whitelist-common.inc
22 22
23caps.drop all 23caps.drop all
diff --git a/etc/profile-a-l/hexchat.profile b/etc/profile-a-l/hexchat.profile
index b887de147..993efb591 100644
--- a/etc/profile-a-l/hexchat.profile
+++ b/etc/profile-a-l/hexchat.profile
@@ -6,7 +6,7 @@ include hexchat.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/hexchat 9nodeny ${HOME}/.config/hexchat
10 10
11# Allow /bin/sh (blacklisted by disable-shell.inc) 11# Allow /bin/sh (blacklisted by disable-shell.inc)
12include allow-bin-sh.inc 12include allow-bin-sh.inc
@@ -28,7 +28,7 @@ include disable-shell.inc
28include disable-xdg.inc 28include disable-xdg.inc
29 29
30mkdir ${HOME}/.config/hexchat 30mkdir ${HOME}/.config/hexchat
31whitelist ${HOME}/.config/hexchat 31allow ${HOME}/.config/hexchat
32include whitelist-common.inc 32include whitelist-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
34 34
diff --git a/etc/profile-a-l/highlight.profile b/etc/profile-a-l/highlight.profile
index 643736ac7..53db642dc 100644
--- a/etc/profile-a-l/highlight.profile
+++ b/etc/profile-a-l/highlight.profile
@@ -6,7 +6,7 @@ include highlight.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9blacklist ${RUNUSER} 9deny ${RUNUSER}
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/homebank.profile b/etc/profile-a-l/homebank.profile
index 199b1a5e5..ef259cc00 100644
--- a/etc/profile-a-l/homebank.profile
+++ b/etc/profile-a-l/homebank.profile
@@ -6,7 +6,7 @@ include homebank.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/homebank 9nodeny ${HOME}/.config/homebank
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,9 +18,9 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/homebank 20mkdir ${HOME}/.config/homebank
21whitelist ${DOWNLOADS} 21allow ${DOWNLOADS}
22whitelist ${HOME}/.config/homebank 22allow ${HOME}/.config/homebank
23whitelist /usr/share/homebank 23allow /usr/share/homebank
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-runuser-common.inc 25include whitelist-runuser-common.inc
26include whitelist-usr-share-common.inc 26include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/host.profile b/etc/profile-a-l/host.profile
index 00d9f7a76..63e1be259 100644
--- a/etc/profile-a-l/host.profile
+++ b/etc/profile-a-l/host.profile
@@ -7,8 +7,8 @@ include host.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER} 10deny ${RUNUSER}
11noblacklist ${PATH}/host 11nodeny ${PATH}/host
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/hugin.profile b/etc/profile-a-l/hugin.profile
index 267712c87..db5cd29cc 100644
--- a/etc/profile-a-l/hugin.profile
+++ b/etc/profile-a-l/hugin.profile
@@ -6,9 +6,9 @@ include hugin.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.hugin 9nodeny ${HOME}/.hugin
10noblacklist ${DOCUMENTS} 10nodeny ${DOCUMENTS}
11noblacklist ${PICTURES} 11nodeny ${PICTURES}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/hyperrogue.profile b/etc/profile-a-l/hyperrogue.profile
index e66ffd7e1..1fb33ceb8 100644
--- a/etc/profile-a-l/hyperrogue.profile
+++ b/etc/profile-a-l/hyperrogue.profile
@@ -6,7 +6,7 @@ include hyperrogue.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/hyperrogue.ini 9nodeny ${HOME}/hyperrogue.ini
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkfile ${HOME}/hyperrogue.ini 20mkfile ${HOME}/hyperrogue.ini
21whitelist ${HOME}/hyperrogue.ini 21allow ${HOME}/hyperrogue.ini
22whitelist /usr/share/hyperrogue 22allow /usr/share/hyperrogue
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
diff --git a/etc/profile-a-l/i2prouter.profile b/etc/profile-a-l/i2prouter.profile
index 47c984175..c8a2e8a04 100644
--- a/etc/profile-a-l/i2prouter.profile
+++ b/etc/profile-a-l/i2prouter.profile
@@ -14,12 +14,12 @@ include globals.local
14# Only needed when i2prouter binary resides in home directory (official I2P java installer does so). 14# Only needed when i2prouter binary resides in home directory (official I2P java installer does so).
15ignore noexec ${HOME} 15ignore noexec ${HOME}
16 16
17noblacklist ${HOME}/.config/i2p 17nodeny ${HOME}/.config/i2p
18noblacklist ${HOME}/.i2p 18nodeny ${HOME}/.i2p
19noblacklist ${HOME}/.local/share/i2p 19nodeny ${HOME}/.local/share/i2p
20noblacklist ${HOME}/i2p 20nodeny ${HOME}/i2p
21# Only needed when wrapper resides in /usr/sbin/ (Ubuntu official I2P PPA package does so). 21# Only needed when wrapper resides in /usr/sbin/ (Ubuntu official I2P PPA package does so).
22noblacklist /usr/sbin 22nodeny /usr/sbin
23 23
24# Allow java (blacklisted by disable-devel.inc) 24# Allow java (blacklisted by disable-devel.inc)
25include allow-java.inc 25include allow-java.inc
@@ -36,12 +36,12 @@ mkdir ${HOME}/.config/i2p
36mkdir ${HOME}/.i2p 36mkdir ${HOME}/.i2p
37mkdir ${HOME}/.local/share/i2p 37mkdir ${HOME}/.local/share/i2p
38mkdir ${HOME}/i2p 38mkdir ${HOME}/i2p
39whitelist ${HOME}/.config/i2p 39allow ${HOME}/.config/i2p
40whitelist ${HOME}/.i2p 40allow ${HOME}/.i2p
41whitelist ${HOME}/.local/share/i2p 41allow ${HOME}/.local/share/i2p
42whitelist ${HOME}/i2p 42allow ${HOME}/i2p
43# Only needed when wrapper resides in /usr/sbin/ (Ubuntu official I2P PPA package does so). 43# Only needed when wrapper resides in /usr/sbin/ (Ubuntu official I2P PPA package does so).
44whitelist /usr/sbin/wrapper* 44allow /usr/sbin/wrapper*
45 45
46include whitelist-common.inc 46include whitelist-common.inc
47 47
diff --git a/etc/profile-a-l/i3.profile b/etc/profile-a-l/i3.profile
index e96b1843c..95ddad221 100644
--- a/etc/profile-a-l/i3.profile
+++ b/etc/profile-a-l/i3.profile
@@ -7,7 +7,7 @@ include i3.local
7include globals.local 7include globals.local
8 8
9# all applications started in i3 will run in this profile 9# all applications started in i3 will run in this profile
10noblacklist ${HOME}/.config/i3 10nodeny ${HOME}/.config/i3
11include disable-common.inc 11include disable-common.inc
12 12
13caps.drop all 13caps.drop all
diff --git a/etc/profile-a-l/icecat.profile b/etc/profile-a-l/icecat.profile
index 660343a29..0de2f658b 100644
--- a/etc/profile-a-l/icecat.profile
+++ b/etc/profile-a-l/icecat.profile
@@ -5,13 +5,13 @@ include icecat.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.cache/mozilla 8nodeny ${HOME}/.cache/mozilla
9noblacklist ${HOME}/.mozilla 9nodeny ${HOME}/.mozilla
10 10
11mkdir ${HOME}/.cache/mozilla/icecat 11mkdir ${HOME}/.cache/mozilla/icecat
12mkdir ${HOME}/.mozilla 12mkdir ${HOME}/.mozilla
13whitelist ${HOME}/.cache/mozilla/icecat 13allow ${HOME}/.cache/mozilla/icecat
14whitelist ${HOME}/.mozilla 14allow ${HOME}/.mozilla
15 15
16# private-etc must first be enabled in firefox-common.profile 16# private-etc must first be enabled in firefox-common.profile
17#private-etc icecat 17#private-etc icecat
diff --git a/etc/profile-a-l/icedove.profile b/etc/profile-a-l/icedove.profile
index 19690cd5a..0c22d87d0 100644
--- a/etc/profile-a-l/icedove.profile
+++ b/etc/profile-a-l/icedove.profile
@@ -9,16 +9,16 @@ include icedove.local
9# Users have icedove set to open a browser by clicking a link in an email 9# Users have icedove set to open a browser by clicking a link in an email
10# We are not allowed to blacklist browser-specific directories 10# We are not allowed to blacklist browser-specific directories
11 11
12noblacklist ${HOME}/.cache/icedove 12nodeny ${HOME}/.cache/icedove
13noblacklist ${HOME}/.gnupg 13nodeny ${HOME}/.gnupg
14noblacklist ${HOME}/.icedove 14nodeny ${HOME}/.icedove
15 15
16mkdir ${HOME}/.cache/icedove 16mkdir ${HOME}/.cache/icedove
17mkdir ${HOME}/.gnupg 17mkdir ${HOME}/.gnupg
18mkdir ${HOME}/.icedove 18mkdir ${HOME}/.icedove
19whitelist ${HOME}/.cache/icedove 19allow ${HOME}/.cache/icedove
20whitelist ${HOME}/.gnupg 20allow ${HOME}/.gnupg
21whitelist ${HOME}/.icedove 21allow ${HOME}/.icedove
22include whitelist-common.inc 22include whitelist-common.inc
23 23
24ignore private-tmp 24ignore private-tmp
diff --git a/etc/profile-a-l/idea.sh.profile b/etc/profile-a-l/idea.sh.profile
index 680b8e777..180b62ec2 100644
--- a/etc/profile-a-l/idea.sh.profile
+++ b/etc/profile-a-l/idea.sh.profile
@@ -5,12 +5,12 @@ include idea.sh.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.IdeaIC* 8nodeny ${HOME}/.IdeaIC*
9noblacklist ${HOME}/.android 9nodeny ${HOME}/.android
10noblacklist ${HOME}/.jack-server 10nodeny ${HOME}/.jack-server
11noblacklist ${HOME}/.jack-settings 11nodeny ${HOME}/.jack-settings
12noblacklist ${HOME}/.local/share/JetBrains 12nodeny ${HOME}/.local/share/JetBrains
13noblacklist ${HOME}/.tooling 13nodeny ${HOME}/.tooling
14 14
15# Allows files commonly used by IDEs 15# Allows files commonly used by IDEs
16include allow-common-devel.inc 16include allow-common-devel.inc
diff --git a/etc/profile-a-l/imagej.profile b/etc/profile-a-l/imagej.profile
index 12ce7976b..5d28e7aca 100644
--- a/etc/profile-a-l/imagej.profile
+++ b/etc/profile-a-l/imagej.profile
@@ -6,7 +6,7 @@ include imagej.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.imagej 9nodeny ${HOME}/.imagej
10 10
11# Allow java (blacklisted by disable-devel.inc) 11# Allow java (blacklisted by disable-devel.inc)
12include allow-java.inc 12include allow-java.inc
diff --git a/etc/profile-a-l/img2txt.profile b/etc/profile-a-l/img2txt.profile
index c26958d06..70d56a7dc 100644
--- a/etc/profile-a-l/img2txt.profile
+++ b/etc/profile-a-l/img2txt.profile
@@ -5,10 +5,10 @@ include img2txt.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8blacklist ${RUNUSER}/wayland-* 8deny ${RUNUSER}/wayland-*
9 9
10noblacklist ${DOCUMENTS} 10nodeny ${DOCUMENTS}
11noblacklist ${PICTURES} 11nodeny ${PICTURES}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -18,7 +18,7 @@ include disable-passwdmgr.inc
18include disable-programs.inc 18include disable-programs.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21whitelist /usr/share/imlib2 21allow /usr/share/imlib2
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/impressive.profile b/etc/profile-a-l/impressive.profile
index c152be01c..4914cd9d0 100644
--- a/etc/profile-a-l/impressive.profile
+++ b/etc/profile-a-l/impressive.profile
@@ -6,9 +6,9 @@ include impressive.local
6# Persistent global definitions 6# Persistent global definitions
7#include globals.local 7#include globals.local
8 8
9noblacklist ${DOCUMENTS} 9nodeny ${DOCUMENTS}
10noblacklist /sbin 10nodeny /sbin
11noblacklist /usr/sbin 11nodeny /usr/sbin
12 12
13# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
14#include allow-python2.inc 14#include allow-python2.inc
@@ -23,8 +23,8 @@ include disable-programs.inc
23include disable-xdg.inc 23include disable-xdg.inc
24 24
25mkdir ${HOME}/.cache/mesa_shader_cache 25mkdir ${HOME}/.cache/mesa_shader_cache
26whitelist /usr/share/opengl-games-utils 26allow /usr/share/opengl-games-utils
27whitelist /usr/share/zenity 27allow /usr/share/zenity
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc 29include whitelist-var-common.inc
30 30
diff --git a/etc/profile-a-l/inkscape.profile b/etc/profile-a-l/inkscape.profile
index 35dd86b32..1a949b300 100644
--- a/etc/profile-a-l/inkscape.profile
+++ b/etc/profile-a-l/inkscape.profile
@@ -6,14 +6,14 @@ include inkscape.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/inkscape 9nodeny ${HOME}/.cache/inkscape
10noblacklist ${HOME}/.config/inkscape 10nodeny ${HOME}/.config/inkscape
11noblacklist ${HOME}/.inkscape 11nodeny ${HOME}/.inkscape
12noblacklist ${DOCUMENTS} 12nodeny ${DOCUMENTS}
13noblacklist ${PICTURES} 13nodeny ${PICTURES}
14# Allow exporting .xcf files 14# Allow exporting .xcf files
15noblacklist ${HOME}/.config/GIMP 15nodeny ${HOME}/.config/GIMP
16noblacklist ${HOME}/.gimp* 16nodeny ${HOME}/.gimp*
17 17
18 18
19# Allow python (blacklisted by disable-interpreters.inc) 19# Allow python (blacklisted by disable-interpreters.inc)
@@ -28,7 +28,7 @@ include disable-passwdmgr.inc
28include disable-programs.inc 28include disable-programs.inc
29include disable-xdg.inc 29include disable-xdg.inc
30 30
31whitelist /usr/share/inkscape 31allow /usr/share/inkscape
32include whitelist-usr-share-common.inc 32include whitelist-usr-share-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
34 34
diff --git a/etc/profile-a-l/inox.profile b/etc/profile-a-l/inox.profile
index a5cac12f2..1591ed7ea 100644
--- a/etc/profile-a-l/inox.profile
+++ b/etc/profile-a-l/inox.profile
@@ -10,13 +10,13 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13noblacklist ${HOME}/.cache/inox 13nodeny ${HOME}/.cache/inox
14noblacklist ${HOME}/.config/inox 14nodeny ${HOME}/.config/inox
15 15
16mkdir ${HOME}/.cache/inox 16mkdir ${HOME}/.cache/inox
17mkdir ${HOME}/.config/inox 17mkdir ${HOME}/.config/inox
18whitelist ${HOME}/.cache/inox 18allow ${HOME}/.cache/inox
19whitelist ${HOME}/.config/inox 19allow ${HOME}/.config/inox
20 20
21# Redirect 21# Redirect
22include chromium-common.profile 22include chromium-common.profile
diff --git a/etc/profile-a-l/iridium.profile b/etc/profile-a-l/iridium.profile
index 3037d00e9..f361fd663 100644
--- a/etc/profile-a-l/iridium.profile
+++ b/etc/profile-a-l/iridium.profile
@@ -10,13 +10,13 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13noblacklist ${HOME}/.cache/iridium 13nodeny ${HOME}/.cache/iridium
14noblacklist ${HOME}/.config/iridium 14nodeny ${HOME}/.config/iridium
15 15
16mkdir ${HOME}/.cache/iridium 16mkdir ${HOME}/.cache/iridium
17mkdir ${HOME}/.config/iridium 17mkdir ${HOME}/.config/iridium
18whitelist ${HOME}/.cache/iridium 18allow ${HOME}/.cache/iridium
19whitelist ${HOME}/.config/iridium 19allow ${HOME}/.config/iridium
20 20
21# Redirect 21# Redirect
22include chromium-common.profile 22include chromium-common.profile
diff --git a/etc/profile-a-l/itch.profile b/etc/profile-a-l/itch.profile
index e02dcbdb1..fa0bcf986 100644
--- a/etc/profile-a-l/itch.profile
+++ b/etc/profile-a-l/itch.profile
@@ -8,8 +8,8 @@ include globals.local
8# itch.io has native firejail/sandboxing support bundled in 8# itch.io has native firejail/sandboxing support bundled in
9# See https://itch.io/docs/itch/using/sandbox/linux.html 9# See https://itch.io/docs/itch/using/sandbox/linux.html
10 10
11noblacklist ${HOME}/.itch 11nodeny ${HOME}/.itch
12noblacklist ${HOME}/.config/itch 12nodeny ${HOME}/.config/itch
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
@@ -19,8 +19,8 @@ include disable-programs.inc
19 19
20mkdir ${HOME}/.itch 20mkdir ${HOME}/.itch
21mkdir ${HOME}/.config/itch 21mkdir ${HOME}/.config/itch
22whitelist ${HOME}/.itch 22allow ${HOME}/.itch
23whitelist ${HOME}/.config/itch 23allow ${HOME}/.config/itch
24include whitelist-common.inc 24include whitelist-common.inc
25 25
26caps.drop all 26caps.drop all
diff --git a/etc/profile-a-l/jami-gnome.profile b/etc/profile-a-l/jami-gnome.profile
index 3e9abf369..e4be574df 100644
--- a/etc/profile-a-l/jami-gnome.profile
+++ b/etc/profile-a-l/jami-gnome.profile
@@ -6,8 +6,8 @@ include jami-gnome.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/jami 9nodeny ${HOME}/.config/jami
10noblacklist ${HOME}/.local/share/jami 10nodeny ${HOME}/.local/share/jami
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-programs.inc
18 18
19mkdir ${HOME}/.config/jami 19mkdir ${HOME}/.config/jami
20mkdir ${HOME}/.local/share/jami 20mkdir ${HOME}/.local/share/jami
21whitelist ${HOME}/.config/jami 21allow ${HOME}/.config/jami
22whitelist ${HOME}/.local/share/jami 22allow ${HOME}/.local/share/jami
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-var-common.inc 24include whitelist-var-common.inc
25 25
diff --git a/etc/profile-a-l/jd-gui.profile b/etc/profile-a-l/jd-gui.profile
index 7d29f1068..bfea84c69 100644
--- a/etc/profile-a-l/jd-gui.profile
+++ b/etc/profile-a-l/jd-gui.profile
@@ -5,7 +5,7 @@ include jd-gui.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.config/jd-gui.cfg 8nodeny ${HOME}/.config/jd-gui.cfg
9 9
10# Allow java (blacklisted by disable-devel.inc) 10# Allow java (blacklisted by disable-devel.inc)
11include allow-java.inc 11include allow-java.inc
diff --git a/etc/profile-a-l/jerry.profile b/etc/profile-a-l/jerry.profile
index 85b1f2120..c41027618 100644
--- a/etc/profile-a-l/jerry.profile
+++ b/etc/profile-a-l/jerry.profile
@@ -6,7 +6,7 @@ include jerry.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/dkl 9nodeny ${HOME}/.config/dkl
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/jitsi-meet-desktop.profile b/etc/profile-a-l/jitsi-meet-desktop.profile
index edb7ed840..9ca30c36d 100644
--- a/etc/profile-a-l/jitsi-meet-desktop.profile
+++ b/etc/profile-a-l/jitsi-meet-desktop.profile
@@ -13,12 +13,12 @@ ignore shell none
13 13
14ignore noexec /tmp 14ignore noexec /tmp
15 15
16noblacklist ${HOME}/.config/Jitsi Meet 16nodeny ${HOME}/.config/Jitsi Meet
17 17
18nowhitelist ${DOWNLOADS} 18noallow ${DOWNLOADS}
19 19
20mkdir ${HOME}/.config/Jitsi Meet 20mkdir ${HOME}/.config/Jitsi Meet
21whitelist ${HOME}/.config/Jitsi Meet 21allow ${HOME}/.config/Jitsi Meet
22 22
23private-bin bash,electron,electron[0-9],electron[0-9][0-9],jitsi-meet-desktop,sh 23private-bin bash,electron,electron[0-9],electron[0-9][0-9],jitsi-meet-desktop,sh
24private-etc alsa,alternatives,asound.conf,bumblebee,ca-certificates,crypto-policies,drirc,fonts,glvnd,group,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,machine-id,mime.types,nsswitch.conf,nvidia,pango,passwd,pki,protocols,pulse,resolv.conf,rpc,services,ssl,X11,xdg 24private-etc alsa,alternatives,asound.conf,bumblebee,ca-certificates,crypto-policies,drirc,fonts,glvnd,group,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,machine-id,mime.types,nsswitch.conf,nvidia,pango,passwd,pki,protocols,pulse,resolv.conf,rpc,services,ssl,X11,xdg
diff --git a/etc/profile-a-l/jitsi.profile b/etc/profile-a-l/jitsi.profile
index 223c360b8..f53e6ca32 100644
--- a/etc/profile-a-l/jitsi.profile
+++ b/etc/profile-a-l/jitsi.profile
@@ -5,7 +5,7 @@ include jitsi.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8noblacklist ${HOME}/.jitsi 8nodeny ${HOME}/.jitsi
9 9
10# Allow java (blacklisted by disable-devel.inc) 10# Allow java (blacklisted by disable-devel.inc)
11include allow-java.inc 11include allow-java.inc
diff --git a/etc/profile-a-l/jumpnbump.profile b/etc/profile-a-l/jumpnbump.profile
index 9954b8aea..c0a78ecc0 100644
--- a/etc/profile-a-l/jumpnbump.profile
+++ b/etc/profile-a-l/jumpnbump.profile
@@ -6,7 +6,7 @@ include jumpnbump.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.jumpnbump 9nodeny ${HOME}/.jumpnbump
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,8 +17,8 @@ include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19mkdir ${HOME}/.jumpnbump 19mkdir ${HOME}/.jumpnbump
20whitelist ${HOME}/.jumpnbump 20allow ${HOME}/.jumpnbump
21whitelist /usr/share/jumpnbump 21allow /usr/share/jumpnbump
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
24include whitelist-var-common.inc 24include whitelist-var-common.inc
diff --git a/etc/profile-a-l/k3b.profile b/etc/profile-a-l/k3b.profile
index 5ae90dff6..73ce8670f 100644
--- a/etc/profile-a-l/k3b.profile
+++ b/etc/profile-a-l/k3b.profile
@@ -6,11 +6,11 @@ include k3b.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/k3brc 9nodeny ${HOME}/.config/k3brc
10noblacklist ${HOME}/.kde/share/config/k3brc 10nodeny ${HOME}/.kde/share/config/k3brc
11noblacklist ${HOME}/.kde4/share/config/k3brc 11nodeny ${HOME}/.kde4/share/config/k3brc
12noblacklist ${HOME}/.local/share/kxmlgui5/k3b 12nodeny ${HOME}/.local/share/kxmlgui5/k3b
13noblacklist ${MUSIC} 13nodeny ${MUSIC}
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/kaffeine.profile b/etc/profile-a-l/kaffeine.profile
index d55fd22cb..e6a00e350 100644
--- a/etc/profile-a-l/kaffeine.profile
+++ b/etc/profile-a-l/kaffeine.profile
@@ -6,14 +6,14 @@ include kaffeine.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/kaffeinerc 9nodeny ${HOME}/.config/kaffeinerc
10noblacklist ${HOME}/.kde/share/apps/kaffeine 10nodeny ${HOME}/.kde/share/apps/kaffeine
11noblacklist ${HOME}/.kde/share/config/kaffeinerc 11nodeny ${HOME}/.kde/share/config/kaffeinerc
12noblacklist ${HOME}/.kde4/share/apps/kaffeine 12nodeny ${HOME}/.kde4/share/apps/kaffeine
13noblacklist ${HOME}/.kde4/share/config/kaffeinerc 13nodeny ${HOME}/.kde4/share/config/kaffeinerc
14noblacklist ${HOME}/.local/share/kaffeine 14nodeny ${HOME}/.local/share/kaffeine
15noblacklist ${MUSIC} 15nodeny ${MUSIC}
16noblacklist ${VIDEOS} 16nodeny ${VIDEOS}
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
diff --git a/etc/profile-a-l/kalgebra.profile b/etc/profile-a-l/kalgebra.profile
index 503dac4b6..98b04353e 100644
--- a/etc/profile-a-l/kalgebra.profile
+++ b/etc/profile-a-l/kalgebra.profile
@@ -6,8 +6,8 @@ include kalgebra.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/kalgebrarc 9nodeny ${HOME}/.config/kalgebrarc
10noblacklist ${HOME}/.local/share/kalgebra 10nodeny ${HOME}/.local/share/kalgebra
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20whitelist /usr/share/kalgebramobile 20allow /usr/share/kalgebramobile
21include whitelist-usr-share-common.inc 21include whitelist-usr-share-common.inc
22include whitelist-var-common.inc 22include whitelist-var-common.inc
23 23
diff --git a/etc/profile-a-l/karbon.profile b/etc/profile-a-l/karbon.profile
index 231299a2f..db5394550 100644
--- a/etc/profile-a-l/karbon.profile
+++ b/etc/profile-a-l/karbon.profile
@@ -6,7 +6,7 @@ include karbon.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9noblacklist ${HOME}/.local/share/kxmlgui5/karbon 9nodeny ${HOME}/.local/share/kxmlgui5/karbon
10 10
11# Redirect 11# Redirect
12include krita.profile 12include krita.profile
diff --git a/etc/profile-a-l/kate.profile b/etc/profile-a-l/kate.profile
index 27b87e7c3..d2b180492 100644
--- a/etc/profile-a-l/kate.profile
+++ b/etc/profile-a-l/kate.profile
@@ -8,20 +8,20 @@ include globals.local
8 8
9ignore noexec ${HOME} 9ignore noexec ${HOME}
10 10
11noblacklist ${HOME}/.config/katemetainfos 11nodeny ${HOME}/.config/katemetainfos
12noblacklist ${HOME}/.config/katepartrc 12nodeny ${HOME}/.config/katepartrc
13noblacklist ${HOME}/.config/katerc 13nodeny ${HOME}/.config/katerc
14noblacklist ${HOME}/.config/kateschemarc 14nodeny ${HOME}/.config/kateschemarc
15noblacklist ${HOME}/.config/katesyntaxhighlightingrc 15nodeny ${HOME}/.config/katesyntaxhighlightingrc
16noblacklist ${HOME}/.config/katevirc 16nodeny ${HOME}/.config/katevirc
17noblacklist ${HOME}/.local/share/kate 17nodeny ${HOME}/.local/share/kate
18noblacklist ${HOME}/.local/share/kxmlgui5/kate 18nodeny ${HOME}/.local/share/kxmlgui5/kate
19noblacklist ${HOME}/.local/share/kxmlgui5/katefiletree 19nodeny ${HOME}/.local/share/kxmlgui5/katefiletree
20noblacklist ${HOME}/.local/share/kxmlgui5/katekonsole 20nodeny ${HOME}/.local/share/kxmlgui5/katekonsole
21noblacklist ${HOME}/.local/share/kxmlgui5/kateopenheaderplugin 21nodeny ${HOME}/.local/share/kxmlgui5/kateopenheaderplugin
22noblacklist ${HOME}/.local/share/kxmlgui5/katepart 22nodeny ${HOME}/.local/share/kxmlgui5/katepart
23noblacklist ${HOME}/.local/share/kxmlgui5/kateproject 23nodeny ${HOME}/.local/share/kxmlgui5/kateproject
24noblacklist ${HOME}/.local/share/kxmlgui5/katesearch 24nodeny ${HOME}/.local/share/kxmlgui5/katesearch
25 25
26include disable-common.inc 26include disable-common.inc
27# include disable-devel.inc 27# include disable-devel.inc
diff --git a/etc/profile-a-l/kazam.profile b/etc/profile-a-l/kazam.profile
index 9795cf168..a4e2e64f4 100644
--- a/etc/profile-a-l/kazam.profile
+++ b/etc/profile-a-l/kazam.profile
@@ -8,9 +8,9 @@ include globals.local
8 8
9ignore noexec ${HOME} 9ignore noexec ${HOME}
10 10
11noblacklist ${PICTURES} 11nodeny ${PICTURES}
12noblacklist ${VIDEOS} 12nodeny ${VIDEOS}
13noblacklist ${HOME}/.config/kazam 13nodeny ${HOME}/.config/kazam
14 14
15# Allow python (blacklisted by disable-interpreters.inc) 15# Allow python (blacklisted by disable-interpreters.inc)
16include allow-python2.inc 16include allow-python2.inc
@@ -25,7 +25,7 @@ include disable-passwdmgr.inc
25include disable-shell.inc 25include disable-shell.inc
26include disable-xdg.inc 26include disable-xdg.inc
27 27
28whitelist /usr/share/kazam 28allow /usr/share/kazam
29include whitelist-runuser-common.inc 29include whitelist-runuser-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/kcalc.profile b/etc/profile-a-l/kcalc.profile
index e36ee5ed2..fcb168d4d 100644
--- a/etc/profile-a-l/kcalc.profile
+++ b/etc/profile-a-l/kcalc.profile
@@ -6,7 +6,7 @@ include kcalc.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/kxmlgui5/kcalc 9nodeny ${HOME}/.local/share/kxmlgui5/kcalc
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -21,13 +21,13 @@ mkdir ${HOME}/.local/share/kxmlgui5/kcalc
21mkfile ${HOME}/.config/kcalcrc 21mkfile ${HOME}/.config/kcalcrc
22mkfile ${HOME}/.kde/share/config/kcalcrc 22mkfile ${HOME}/.kde/share/config/kcalcrc
23mkfile ${HOME}/.kde4/share/config/kcalcrc 23mkfile ${HOME}/.kde4/share/config/kcalcrc
24whitelist ${HOME}/.config/kcalcrc 24allow ${HOME}/.config/kcalcrc
25whitelist ${HOME}/.kde/share/config/kcalcrc 25allow ${HOME}/.kde/share/config/kcalcrc
26whitelist ${HOME}/.kde4/share/config/kcalcrc 26allow ${HOME}/.kde4/share/config/kcalcrc
27whitelist ${HOME}/.local/share/kxmlgui5/kcalc 27allow ${HOME}/.local/share/kxmlgui5/kcalc
28whitelist /usr/share/config.kcfg/kcalc.kcfg 28allow /usr/share/config.kcfg/kcalc.kcfg
29whitelist /usr/share/kcalc 29allow /usr/share/kcalc
30whitelist /usr/share/kconf_update/kcalcrc.upd 30allow /usr/share/kconf_update/kcalcrc.upd
31include whitelist-common.inc 31include whitelist-common.inc
32include whitelist-runuser-common.inc 32include whitelist-runuser-common.inc
33include whitelist-usr-share-common.inc 33include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/kdenlive.profile b/etc/profile-a-l/kdenlive.profile
index d2a08a269..4acafbf2a 100644
--- a/etc/profile-a-l/kdenlive.profile
+++ b/etc/profile-a-l/kdenlive.profile
@@ -8,10 +8,10 @@ include globals.local
8 8
9ignore noexec ${HOME} 9ignore noexec ${HOME}
10 10
11noblacklist ${HOME}/.cache/kdenlive 11nodeny ${HOME}/.cache/kdenlive
12noblacklist ${HOME}/.config/kdenliverc 12nodeny ${HOME}/.config/kdenliverc
13noblacklist ${HOME}/.local/share/kdenlive 13nodeny ${HOME}/.local/share/kdenlive
14noblacklist ${HOME}/.local/share/kxmlgui5/kdenlive 14nodeny ${HOME}/.local/share/kxmlgui5/kdenlive
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/kdiff3.profile b/etc/profile-a-l/kdiff3.profile
index 7c1cb2294..0c37f7968 100644
--- a/etc/profile-a-l/kdiff3.profile
+++ b/etc/profile-a-l/kdiff3.profile
@@ -6,14 +6,14 @@ include kdiff3.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/kdiff3fileitemactionrc 9nodeny ${HOME}/.config/kdiff3fileitemactionrc
10noblacklist ${HOME}/.config/kdiff3rc 10nodeny ${HOME}/.config/kdiff3rc
11 11
12# Add the next line to your kdiff3.local if you don't need to compare files in disable-common.inc. 12# Add the next line to your kdiff3.local if you don't need to compare files in disable-common.inc.
13# By default we deny access only to .ssh and .gnupg. 13# By default we deny access only to .ssh and .gnupg.
14#include disable-common.inc 14#include disable-common.inc
15blacklist ${HOME}/.ssh 15deny ${HOME}/.ssh
16blacklist ${HOME}/.gnupg 16deny ${HOME}/.gnupg
17 17
18include disable-devel.inc 18include disable-devel.inc
19include disable-exec.inc 19include disable-exec.inc
diff --git a/etc/profile-a-l/keepass.profile b/etc/profile-a-l/keepass.profile
index ae8971ab4..9c06962bc 100644
--- a/etc/profile-a-l/keepass.profile
+++ b/etc/profile-a-l/keepass.profile
@@ -6,14 +6,14 @@ include keepass.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/*.kdb 9nodeny ${HOME}/*.kdb
10noblacklist ${HOME}/*.kdbx 10nodeny ${HOME}/*.kdbx
11noblacklist ${HOME}/.config/KeePass 11nodeny ${HOME}/.config/KeePass
12noblacklist ${HOME}/.config/keepass 12nodeny ${HOME}/.config/keepass
13noblacklist ${HOME}/.keepass 13nodeny ${HOME}/.keepass
14noblacklist ${HOME}/.local/share/KeePass 14nodeny ${HOME}/.local/share/KeePass
15noblacklist ${HOME}/.local/share/keepass 15nodeny ${HOME}/.local/share/keepass
16noblacklist ${DOCUMENTS} 16nodeny ${DOCUMENTS}
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
diff --git a/etc/profile-a-l/keepassx.profile b/etc/profile-a-l/keepassx.profile
index ac364986d..2772fa8bf 100644
--- a/etc/profile-a-l/keepassx.profile
+++ b/etc/profile-a-l/keepassx.profile
@@ -6,11 +6,11 @@ include keepassx.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/*.kdb 9nodeny ${HOME}/*.kdb
10noblacklist ${HOME}/*.kdbx 10nodeny ${HOME}/*.kdbx
11noblacklist ${HOME}/.config/keepassx 11nodeny ${HOME}/.config/keepassx
12noblacklist ${HOME}/.keepassx 12nodeny ${HOME}/.keepassx
13noblacklist ${DOCUMENTS} 13nodeny ${DOCUMENTS}
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/keepassxc.profile b/etc/profile-a-l/keepassxc.profile
index f71dcf82b..9c530b20d 100644
--- a/etc/profile-a-l/keepassxc.profile
+++ b/etc/profile-a-l/keepassxc.profile
@@ -6,23 +6,23 @@ include keepassxc.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/*.kdb 9nodeny ${HOME}/*.kdb
10noblacklist ${HOME}/*.kdbx 10nodeny ${HOME}/*.kdbx
11noblacklist ${HOME}/.cache/keepassxc 11nodeny ${HOME}/.cache/keepassxc
12noblacklist ${HOME}/.config/keepassxc 12nodeny ${HOME}/.config/keepassxc
13noblacklist ${HOME}/.config/KeePassXCrc 13nodeny ${HOME}/.config/KeePassXCrc
14noblacklist ${HOME}/.keepassxc 14nodeny ${HOME}/.keepassxc
15noblacklist ${DOCUMENTS} 15nodeny ${DOCUMENTS}
16 16
17# Allow browser profiles, required for browser integration. 17# Allow browser profiles, required for browser integration.
18noblacklist ${HOME}/.config/BraveSoftware 18nodeny ${HOME}/.config/BraveSoftware
19noblacklist ${HOME}/.config/chromium 19nodeny ${HOME}/.config/chromium
20noblacklist ${HOME}/.config/google-chrome 20nodeny ${HOME}/.config/google-chrome
21noblacklist ${HOME}/.config/vivaldi 21nodeny ${HOME}/.config/vivaldi
22noblacklist ${HOME}/.local/share/torbrowser 22nodeny ${HOME}/.local/share/torbrowser
23noblacklist ${HOME}/.mozilla 23nodeny ${HOME}/.mozilla
24 24
25blacklist /usr/libexec 25deny /usr/libexec
26 26
27include disable-common.inc 27include disable-common.inc
28include disable-devel.inc 28include disable-devel.inc
@@ -57,7 +57,7 @@ include disable-xdg.inc
57#whitelist ${HOME}/.config/KeePassXCrc 57#whitelist ${HOME}/.config/KeePassXCrc
58#include whitelist-common.inc 58#include whitelist-common.inc
59 59
60whitelist /usr/share/keepassxc 60allow /usr/share/keepassxc
61include whitelist-usr-share-common.inc 61include whitelist-usr-share-common.inc
62include whitelist-var-common.inc 62include whitelist-var-common.inc
63 63
diff --git a/etc/profile-a-l/kget.profile b/etc/profile-a-l/kget.profile
index 2c684504b..30c041cbc 100644
--- a/etc/profile-a-l/kget.profile
+++ b/etc/profile-a-l/kget.profile
@@ -6,13 +6,13 @@ include kget.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/kgetrc 9nodeny ${HOME}/.config/kgetrc
10noblacklist ${HOME}/.kde/share/apps/kget 10nodeny ${HOME}/.kde/share/apps/kget
11noblacklist ${HOME}/.kde/share/config/kgetrc 11nodeny ${HOME}/.kde/share/config/kgetrc
12noblacklist ${HOME}/.kde4/share/apps/kget 12nodeny ${HOME}/.kde4/share/apps/kget
13noblacklist ${HOME}/.kde4/share/config/kgetrc 13nodeny ${HOME}/.kde4/share/config/kgetrc
14noblacklist ${HOME}/.local/share/kget 14nodeny ${HOME}/.local/share/kget
15noblacklist ${HOME}/.local/share/kxmlgui5/kget 15nodeny ${HOME}/.local/share/kxmlgui5/kget
16 16
17include disable-common.inc 17include disable-common.inc
18include disable-devel.inc 18include disable-devel.inc
diff --git a/etc/profile-a-l/kid3-qt.profile b/etc/profile-a-l/kid3-qt.profile
index 9bcede077..84d135fc3 100644
--- a/etc/profile-a-l/kid3-qt.profile
+++ b/etc/profile-a-l/kid3-qt.profile
@@ -2,7 +2,7 @@
2# This file is overwritten after every install/update 2# This file is overwritten after every install/update
3include kid3-qt.local 3include kid3-qt.local
4 4
5noblacklist ${HOME}/.config/Kid3 5nodeny ${HOME}/.config/Kid3
6 6
7# Redirect 7# Redirect
8include kid3.profile 8include kid3.profile
diff --git a/etc/profile-a-l/kid3.profile b/etc/profile-a-l/kid3.profile
index e18292e99..0ef2a7845 100644
--- a/etc/profile-a-l/kid3.profile
+++ b/etc/profile-a-l/kid3.profile
@@ -6,9 +6,9 @@ include kid3.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${MUSIC} 9nodeny ${MUSIC}
10noblacklist ${HOME}/.config/kid3rc 10nodeny ${HOME}/.config/kid3rc
11noblacklist ${HOME}/.local/share/kxmlgui5/kid3 11nodeny ${HOME}/.local/share/kxmlgui5/kid3
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/kino.profile b/etc/profile-a-l/kino.profile
index 74014ffe6..833c1d22a 100644
--- a/etc/profile-a-l/kino.profile
+++ b/etc/profile-a-l/kino.profile
@@ -6,8 +6,8 @@ include kino.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.kino-history 9nodeny ${HOME}/.kino-history
10noblacklist ${HOME}/.kinorc 10nodeny ${HOME}/.kinorc
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/kiwix-desktop.profile b/etc/profile-a-l/kiwix-desktop.profile
index 40ee0bbc7..b188ba0e3 100644
--- a/etc/profile-a-l/kiwix-desktop.profile
+++ b/etc/profile-a-l/kiwix-desktop.profile
@@ -6,8 +6,8 @@ include kiwix-desktop.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/kiwix 9nodeny ${HOME}/.local/share/kiwix
10noblacklist ${HOME}/.local/share/kiwix-desktop 10nodeny ${HOME}/.local/share/kiwix-desktop
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -19,8 +19,8 @@ include disable-xdg.inc
19 19
20mkdir ${HOME}/.local/share/kiwix 20mkdir ${HOME}/.local/share/kiwix
21mkdir ${HOME}/.local/share/kiwix-desktop 21mkdir ${HOME}/.local/share/kiwix-desktop
22whitelist ${HOME}/.local/share/kiwix 22allow ${HOME}/.local/share/kiwix
23whitelist ${HOME}/.local/share/kiwix-desktop 23allow ${HOME}/.local/share/kiwix-desktop
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
26 26
diff --git a/etc/profile-a-l/klatexformula.profile b/etc/profile-a-l/klatexformula.profile
index c6a9023f1..e087e4973 100644
--- a/etc/profile-a-l/klatexformula.profile
+++ b/etc/profile-a-l/klatexformula.profile
@@ -6,8 +6,8 @@ include klatexformula.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.kde/share/apps/klatexformula 9nodeny ${HOME}/.kde/share/apps/klatexformula
10noblacklist ${HOME}/.klatexformula 10nodeny ${HOME}/.klatexformula
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/klavaro.profile b/etc/profile-a-l/klavaro.profile
index f5cd3a48c..ec3912419 100644
--- a/etc/profile-a-l/klavaro.profile
+++ b/etc/profile-a-l/klavaro.profile
@@ -6,8 +6,8 @@ include klavaro.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/klavaro 9nodeny ${HOME}/.config/klavaro
10noblacklist ${HOME}/.local/share/klavaro 10nodeny ${HOME}/.local/share/klavaro
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -19,8 +19,8 @@ include disable-xdg.inc
19 19
20mkdir ${HOME}/.local/share/klavaro 20mkdir ${HOME}/.local/share/klavaro
21mkdir ${HOME}/.config/klavaro 21mkdir ${HOME}/.config/klavaro
22whitelist ${HOME}/.local/share/klavaro 22allow ${HOME}/.local/share/klavaro
23whitelist ${HOME}/.config/klavaro 23allow ${HOME}/.config/klavaro
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
26 26
diff --git a/etc/profile-a-l/kmail.profile b/etc/profile-a-l/kmail.profile
index 95ae98e53..3c582c08c 100644
--- a/etc/profile-a-l/kmail.profile
+++ b/etc/profile-a-l/kmail.profile
@@ -9,27 +9,27 @@ include globals.local
9# kmail has problems launching akonadi in debian and ubuntu. 9# kmail has problems launching akonadi in debian and ubuntu.
10# one solution is to have akonadi already running when kmail is started 10# one solution is to have akonadi already running when kmail is started
11 11
12noblacklist ${HOME}/.cache/akonadi* 12nodeny ${HOME}/.cache/akonadi*
13noblacklist ${HOME}/.cache/kmail2 13nodeny ${HOME}/.cache/kmail2
14noblacklist ${HOME}/.config/akonadi* 14nodeny ${HOME}/.config/akonadi*
15noblacklist ${HOME}/.config/baloorc 15nodeny ${HOME}/.config/baloorc
16noblacklist ${HOME}/.config/emaildefaults 16nodeny ${HOME}/.config/emaildefaults
17noblacklist ${HOME}/.config/emailidentities 17nodeny ${HOME}/.config/emailidentities
18noblacklist ${HOME}/.config/kmail2rc 18nodeny ${HOME}/.config/kmail2rc
19noblacklist ${HOME}/.config/kmailsearchindexingrc 19nodeny ${HOME}/.config/kmailsearchindexingrc
20noblacklist ${HOME}/.config/mailtransports 20nodeny ${HOME}/.config/mailtransports
21noblacklist ${HOME}/.config/specialmailcollectionsrc 21nodeny ${HOME}/.config/specialmailcollectionsrc
22noblacklist ${HOME}/.gnupg 22nodeny ${HOME}/.gnupg
23noblacklist ${HOME}/.local/share/akonadi* 23nodeny ${HOME}/.local/share/akonadi*
24noblacklist ${HOME}/.local/share/apps/korganizer 24nodeny ${HOME}/.local/share/apps/korganizer
25noblacklist ${HOME}/.local/share/contacts 25nodeny ${HOME}/.local/share/contacts
26noblacklist ${HOME}/.local/share/emailidentities 26nodeny ${HOME}/.local/share/emailidentities
27noblacklist ${HOME}/.local/share/kmail2 27nodeny ${HOME}/.local/share/kmail2
28noblacklist ${HOME}/.local/share/kxmlgui5/kmail 28nodeny ${HOME}/.local/share/kxmlgui5/kmail
29noblacklist ${HOME}/.local/share/kxmlgui5/kmail2 29nodeny ${HOME}/.local/share/kxmlgui5/kmail2
30noblacklist ${HOME}/.local/share/local-mail 30nodeny ${HOME}/.local/share/local-mail
31noblacklist ${HOME}/.local/share/notes 31nodeny ${HOME}/.local/share/notes
32noblacklist /tmp/akonadi-* 32nodeny /tmp/akonadi-*
33 33
34include disable-common.inc 34include disable-common.inc
35include disable-devel.inc 35include disable-devel.inc
diff --git a/etc/profile-a-l/kmplayer.profile b/etc/profile-a-l/kmplayer.profile
index e88b53499..d2ce14ab6 100644
--- a/etc/profile-a-l/kmplayer.profile
+++ b/etc/profile-a-l/kmplayer.profile
@@ -6,11 +6,11 @@ include kmplayer.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/kmplayerrc 9nodeny ${HOME}/.config/kmplayerrc
10noblacklist ${HOME}/.kde/share/config/kmplayerrc 10nodeny ${HOME}/.kde/share/config/kmplayerrc
11noblacklist ${HOME}/.local/share/kmplayer 11nodeny ${HOME}/.local/share/kmplayer
12noblacklist ${MUSIC} 12nodeny ${MUSIC}
13noblacklist ${VIDEOS} 13nodeny ${VIDEOS}
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/knotes.profile b/etc/profile-a-l/knotes.profile
index f155d0ad6..5a9ac34da 100644
--- a/etc/profile-a-l/knotes.profile
+++ b/etc/profile-a-l/knotes.profile
@@ -10,9 +10,9 @@ include knotes.local
10# knotes has problems launching akonadi in debian and ubuntu. 10# knotes has problems launching akonadi in debian and ubuntu.
11# one solution is to have akonadi already running when knotes is started 11# one solution is to have akonadi already running when knotes is started
12 12
13noblacklist ${HOME}/.config/knotesrc 13nodeny ${HOME}/.config/knotesrc
14noblacklist ${HOME}/.local/share/knotes 14nodeny ${HOME}/.local/share/knotes
15noblacklist ${HOME}/.local/share/kxmlgui5/knotes 15nodeny ${HOME}/.local/share/kxmlgui5/knotes
16 16
17# Redirect 17# Redirect
18include kmail.profile 18include kmail.profile
diff --git a/etc/profile-a-l/kodi.profile b/etc/profile-a-l/kodi.profile
index b7091f1fc..2725c87be 100644
--- a/etc/profile-a-l/kodi.profile
+++ b/etc/profile-a-l/kodi.profile
@@ -13,10 +13,10 @@ ignore noexec ${HOME}
13#ignore noroot 13#ignore noroot
14#ignore private-dev 14#ignore private-dev
15 15
16noblacklist ${HOME}/.kodi 16nodeny ${HOME}/.kodi
17noblacklist ${MUSIC} 17nodeny ${MUSIC}
18noblacklist ${PICTURES} 18nodeny ${PICTURES}
19noblacklist ${VIDEOS} 19nodeny ${VIDEOS}
20 20
21# Allow python (blacklisted by disable-interpreters.inc) 21# Allow python (blacklisted by disable-interpreters.inc)
22include allow-python2.inc 22include allow-python2.inc
diff --git a/etc/profile-a-l/konversation.profile b/etc/profile-a-l/konversation.profile
index 5b5ed6e24..d8ce33838 100644
--- a/etc/profile-a-l/konversation.profile
+++ b/etc/profile-a-l/konversation.profile
@@ -6,11 +6,11 @@ include konversation.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/konversationrc 9nodeny ${HOME}/.config/konversationrc
10noblacklist ${HOME}/.config/konversation.notifyrc 10nodeny ${HOME}/.config/konversation.notifyrc
11noblacklist ${HOME}/.kde/share/config/konversationrc 11nodeny ${HOME}/.kde/share/config/konversationrc
12noblacklist ${HOME}/.kde4/share/config/konversationrc 12nodeny ${HOME}/.kde4/share/config/konversationrc
13noblacklist ${HOME}/.local/share/kxmlgui5/konversation 13nodeny ${HOME}/.local/share/kxmlgui5/konversation
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/kopete.profile b/etc/profile-a-l/kopete.profile
index 88f47d1bf..749591f32 100644
--- a/etc/profile-a-l/kopete.profile
+++ b/etc/profile-a-l/kopete.profile
@@ -6,11 +6,11 @@ include kopete.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.kde/share/apps/kopete 9nodeny ${HOME}/.kde/share/apps/kopete
10noblacklist ${HOME}/.kde/share/config/kopeterc 10nodeny ${HOME}/.kde/share/config/kopeterc
11noblacklist ${HOME}/.kde4/share/apps/kopete 11nodeny ${HOME}/.kde4/share/apps/kopete
12noblacklist ${HOME}/.kde4/share/config/kopeterc 12nodeny ${HOME}/.kde4/share/config/kopeterc
13noblacklist ${HOME}/.local/share/kxmlgui5/kopete 13nodeny ${HOME}/.local/share/kxmlgui5/kopete
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -19,7 +19,7 @@ include disable-interpreters.inc
19include disable-passwdmgr.inc 19include disable-passwdmgr.inc
20include disable-programs.inc 20include disable-programs.inc
21 21
22whitelist /var/lib/winpopup 22allow /var/lib/winpopup
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
25caps.drop all 25caps.drop all
diff --git a/etc/profile-a-l/krita.profile b/etc/profile-a-l/krita.profile
index 8604e63d0..950341def 100644
--- a/etc/profile-a-l/krita.profile
+++ b/etc/profile-a-l/krita.profile
@@ -9,10 +9,10 @@ include globals.local
9# noexec ${HOME} may break krita, see issue #1953 9# noexec ${HOME} may break krita, see issue #1953
10ignore noexec ${HOME} 10ignore noexec ${HOME}
11 11
12noblacklist ${HOME}/.config/kritarc 12nodeny ${HOME}/.config/kritarc
13noblacklist ${HOME}/.local/share/krita 13nodeny ${HOME}/.local/share/krita
14noblacklist ${DOCUMENTS} 14nodeny ${DOCUMENTS}
15noblacklist ${PICTURES} 15nodeny ${PICTURES}
16 16
17# Allow python (blacklisted by disable-interpreters.inc) 17# Allow python (blacklisted by disable-interpreters.inc)
18include allow-python2.inc 18include allow-python2.inc
diff --git a/etc/profile-a-l/krunner.profile b/etc/profile-a-l/krunner.profile
index 9cb5eff87..7b325d273 100644
--- a/etc/profile-a-l/krunner.profile
+++ b/etc/profile-a-l/krunner.profile
@@ -13,9 +13,9 @@ include globals.local
13# noblacklist ${HOME}/.cache/krunner 13# noblacklist ${HOME}/.cache/krunner
14# noblacklist ${HOME}/.cache/krunnerbookmarkrunnerfirefoxdbfile.sqlite* 14# noblacklist ${HOME}/.cache/krunnerbookmarkrunnerfirefoxdbfile.sqlite*
15# noblacklist ${HOME}/.config/chromium 15# noblacklist ${HOME}/.config/chromium
16noblacklist ${HOME}/.config/krunnerrc 16nodeny ${HOME}/.config/krunnerrc
17noblacklist ${HOME}/.kde/share/config/krunnerrc 17nodeny ${HOME}/.kde/share/config/krunnerrc
18noblacklist ${HOME}/.kde4/share/config/krunnerrc 18nodeny ${HOME}/.kde4/share/config/krunnerrc
19# noblacklist ${HOME}/.local/share/baloo 19# noblacklist ${HOME}/.local/share/baloo
20# noblacklist ${HOME}/.mozilla 20# noblacklist ${HOME}/.mozilla
21 21
diff --git a/etc/profile-a-l/ktorrent.profile b/etc/profile-a-l/ktorrent.profile
index 5a85194e0..ac9fee585 100644
--- a/etc/profile-a-l/ktorrent.profile
+++ b/etc/profile-a-l/ktorrent.profile
@@ -6,13 +6,13 @@ include ktorrent.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/ktorrentrc 9nodeny ${HOME}/.config/ktorrentrc
10noblacklist ${HOME}/.kde/share/apps/ktorrent 10nodeny ${HOME}/.kde/share/apps/ktorrent
11noblacklist ${HOME}/.kde/share/config/ktorrentrc 11nodeny ${HOME}/.kde/share/config/ktorrentrc
12noblacklist ${HOME}/.kde4/share/apps/ktorrent 12nodeny ${HOME}/.kde4/share/apps/ktorrent
13noblacklist ${HOME}/.kde4/share/config/ktorrentrc 13nodeny ${HOME}/.kde4/share/config/ktorrentrc
14noblacklist ${HOME}/.local/share/ktorrent 14nodeny ${HOME}/.local/share/ktorrent
15noblacklist ${HOME}/.local/share/kxmlgui5/ktorrent 15nodeny ${HOME}/.local/share/kxmlgui5/ktorrent
16 16
17include disable-common.inc 17include disable-common.inc
18include disable-devel.inc 18include disable-devel.inc
@@ -29,14 +29,14 @@ mkdir ${HOME}/.local/share/kxmlgui5/ktorrent
29mkfile ${HOME}/.config/ktorrentrc 29mkfile ${HOME}/.config/ktorrentrc
30mkfile ${HOME}/.kde/share/config/ktorrentrc 30mkfile ${HOME}/.kde/share/config/ktorrentrc
31mkfile ${HOME}/.kde4/share/config/ktorrentrc 31mkfile ${HOME}/.kde4/share/config/ktorrentrc
32whitelist ${DOWNLOADS} 32allow ${DOWNLOADS}
33whitelist ${HOME}/.config/ktorrentrc 33allow ${HOME}/.config/ktorrentrc
34whitelist ${HOME}/.kde/share/apps/ktorrent 34allow ${HOME}/.kde/share/apps/ktorrent
35whitelist ${HOME}/.kde/share/config/ktorrentrc 35allow ${HOME}/.kde/share/config/ktorrentrc
36whitelist ${HOME}/.kde4/share/apps/ktorrent 36allow ${HOME}/.kde4/share/apps/ktorrent
37whitelist ${HOME}/.kde4/share/config/ktorrentrc 37allow ${HOME}/.kde4/share/config/ktorrentrc
38whitelist ${HOME}/.local/share/ktorrent 38allow ${HOME}/.local/share/ktorrent
39whitelist ${HOME}/.local/share/kxmlgui5/ktorrent 39allow ${HOME}/.local/share/kxmlgui5/ktorrent
40include whitelist-common.inc 40include whitelist-common.inc
41include whitelist-var-common.inc 41include whitelist-var-common.inc
42 42
diff --git a/etc/profile-a-l/ktouch.profile b/etc/profile-a-l/ktouch.profile
index 4cf72b74c..71f8e4977 100644
--- a/etc/profile-a-l/ktouch.profile
+++ b/etc/profile-a-l/ktouch.profile
@@ -6,8 +6,8 @@ include ktouch.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/ktouch2rc 9nodeny ${HOME}/.config/ktouch2rc
10noblacklist ${HOME}/.local/share/ktouch 10nodeny ${HOME}/.local/share/ktouch
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -20,8 +20,8 @@ include disable-xdg.inc
20 20
21mkfile ${HOME}/.config/ktouch2rc 21mkfile ${HOME}/.config/ktouch2rc
22mkdir ${HOME}/.local/share/ktouch 22mkdir ${HOME}/.local/share/ktouch
23whitelist ${HOME}/.config/ktouch2rc 23allow ${HOME}/.config/ktouch2rc
24whitelist ${HOME}/.local/share/ktouch 24allow ${HOME}/.local/share/ktouch
25include whitelist-common.inc 25include whitelist-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
27 27
diff --git a/etc/profile-a-l/kube.profile b/etc/profile-a-l/kube.profile
index 4e9a12e5f..74ffd1162 100644
--- a/etc/profile-a-l/kube.profile
+++ b/etc/profile-a-l/kube.profile
@@ -6,13 +6,13 @@ include kube.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.gnupg 9nodeny ${HOME}/.gnupg
10noblacklist ${HOME}/.mozilla 10nodeny ${HOME}/.mozilla
11noblacklist ${HOME}/.cache/kube 11nodeny ${HOME}/.cache/kube
12noblacklist ${HOME}/.config/kube 12nodeny ${HOME}/.config/kube
13noblacklist ${HOME}/.config/sink 13nodeny ${HOME}/.config/sink
14noblacklist ${HOME}/.local/share/kube 14nodeny ${HOME}/.local/share/kube
15noblacklist ${HOME}/.local/share/sink 15nodeny ${HOME}/.local/share/sink
16 16
17include disable-common.inc 17include disable-common.inc
18include disable-devel.inc 18include disable-devel.inc
@@ -29,17 +29,17 @@ mkdir ${HOME}/.config/kube
29mkdir ${HOME}/.config/sink 29mkdir ${HOME}/.config/sink
30mkdir ${HOME}/.local/share/kube 30mkdir ${HOME}/.local/share/kube
31mkdir ${HOME}/.local/share/sink 31mkdir ${HOME}/.local/share/sink
32whitelist ${HOME}/.gnupg 32allow ${HOME}/.gnupg
33whitelist ${HOME}/.mozilla/firefox/profiles.ini 33allow ${HOME}/.mozilla/firefox/profiles.ini
34whitelist ${HOME}/.cache/kube 34allow ${HOME}/.cache/kube
35whitelist ${HOME}/.config/kube 35allow ${HOME}/.config/kube
36whitelist ${HOME}/.config/sink 36allow ${HOME}/.config/sink
37whitelist ${HOME}/.local/share/kube 37allow ${HOME}/.local/share/kube
38whitelist ${HOME}/.local/share/sink 38allow ${HOME}/.local/share/sink
39whitelist ${RUNUSER}/gnupg 39allow ${RUNUSER}/gnupg
40whitelist /usr/share/kube 40allow /usr/share/kube
41whitelist /usr/share/gnupg 41allow /usr/share/gnupg
42whitelist /usr/share/gnupg2 42allow /usr/share/gnupg2
43include whitelist-common.inc 43include whitelist-common.inc
44include whitelist-runuser-common.inc 44include whitelist-runuser-common.inc
45include whitelist-usr-share-common.inc 45include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/kwin_x11.profile b/etc/profile-a-l/kwin_x11.profile
index 15e7ceb17..580f93736 100644
--- a/etc/profile-a-l/kwin_x11.profile
+++ b/etc/profile-a-l/kwin_x11.profile
@@ -8,10 +8,10 @@ include globals.local
8# fix automatical kwin_x11 sandboxing: 8# fix automatical kwin_x11 sandboxing:
9# echo KDEWM=kwin_x11 >> ~/.pam_environment 9# echo KDEWM=kwin_x11 >> ~/.pam_environment
10 10
11noblacklist ${HOME}/.cache/kwin 11nodeny ${HOME}/.cache/kwin
12noblacklist ${HOME}/.config/kwinrc 12nodeny ${HOME}/.config/kwinrc
13noblacklist ${HOME}/.config/kwinrulesrc 13nodeny ${HOME}/.config/kwinrulesrc
14noblacklist ${HOME}/.local/share/kwin 14nodeny ${HOME}/.local/share/kwin
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/kwrite.profile b/etc/profile-a-l/kwrite.profile
index 804ffafeb..08b0e0224 100644
--- a/etc/profile-a-l/kwrite.profile
+++ b/etc/profile-a-l/kwrite.profile
@@ -6,15 +6,15 @@ include kwrite.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/katepartrc 9nodeny ${HOME}/.config/katepartrc
10noblacklist ${HOME}/.config/katerc 10nodeny ${HOME}/.config/katerc
11noblacklist ${HOME}/.config/kateschemarc 11nodeny ${HOME}/.config/kateschemarc
12noblacklist ${HOME}/.config/katesyntaxhighlightingrc 12nodeny ${HOME}/.config/katesyntaxhighlightingrc
13noblacklist ${HOME}/.config/katevirc 13nodeny ${HOME}/.config/katevirc
14noblacklist ${HOME}/.config/kwriterc 14nodeny ${HOME}/.config/kwriterc
15noblacklist ${HOME}/.local/share/kwrite 15nodeny ${HOME}/.local/share/kwrite
16noblacklist ${HOME}/.local/share/kxmlgui5/kwrite 16nodeny ${HOME}/.local/share/kxmlgui5/kwrite
17noblacklist ${DOCUMENTS} 17nodeny ${DOCUMENTS}
18 18
19include disable-common.inc 19include disable-common.inc
20include disable-devel.inc 20include disable-devel.inc
diff --git a/etc/profile-a-l/latex-common.profile b/etc/profile-a-l/latex-common.profile
index ac1b8785d..91693bfc1 100644
--- a/etc/profile-a-l/latex-common.profile
+++ b/etc/profile-a-l/latex-common.profile
@@ -13,7 +13,7 @@ include disable-interpreters.inc
13include disable-passwdmgr.inc 13include disable-passwdmgr.inc
14include disable-programs.inc 14include disable-programs.inc
15 15
16whitelist /var/lib 16allow /var/lib
17include whitelist-runuser-common.inc 17include whitelist-runuser-common.inc
18include whitelist-var-common.inc 18include whitelist-var-common.inc
19 19
diff --git a/etc/profile-a-l/leafpad.profile b/etc/profile-a-l/leafpad.profile
index 4bbb0a86d..e154708eb 100644
--- a/etc/profile-a-l/leafpad.profile
+++ b/etc/profile-a-l/leafpad.profile
@@ -6,7 +6,7 @@ include leafpad.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/leafpad 9nodeny ${HOME}/.config/leafpad
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/less.profile b/etc/profile-a-l/less.profile
index 8eb5ad0c2..abee392de 100644
--- a/etc/profile-a-l/less.profile
+++ b/etc/profile-a-l/less.profile
@@ -7,9 +7,9 @@ include less.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER} 10deny ${RUNUSER}
11 11
12noblacklist ${HOME}/.lesshst 12nodeny ${HOME}/.lesshst
13 13
14include disable-devel.inc 14include disable-devel.inc
15include disable-exec.inc 15include disable-exec.inc
diff --git a/etc/profile-a-l/librecad.profile b/etc/profile-a-l/librecad.profile
index c57eae73d..8ec41eee3 100644
--- a/etc/profile-a-l/librecad.profile
+++ b/etc/profile-a-l/librecad.profile
@@ -4,8 +4,8 @@ include librecad.local
4# Persistent global definitions 4# Persistent global definitions
5include globals.local 5include globals.local
6 6
7noblacklist ${HOME}/.config/LibreCAD 7nodeny ${HOME}/.config/LibreCAD
8noblacklist ${HOME}/.local/share/LibreCAD 8nodeny ${HOME}/.local/share/LibreCAD
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
@@ -16,7 +16,7 @@ include disable-programs.inc
16include disable-shell.inc 16include disable-shell.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19whitelist /usr/share/librecad 19allow /usr/share/librecad
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
22 22
diff --git a/etc/profile-a-l/libreoffice.profile b/etc/profile-a-l/libreoffice.profile
index b1a24888c..ae01d39b8 100644
--- a/etc/profile-a-l/libreoffice.profile
+++ b/etc/profile-a-l/libreoffice.profile
@@ -6,15 +6,15 @@ include libreoffice.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist /usr/local/sbin 9nodeny /usr/local/sbin
10noblacklist ${HOME}/.config/libreoffice 10nodeny ${HOME}/.config/libreoffice
11 11
12# libreoffice uses java for some functionality. 12# libreoffice uses java for some functionality.
13# Add 'ignore include allow-java.inc' to your libreoffice.local if you don't need that functionality. 13# Add 'ignore include allow-java.inc' to your libreoffice.local if you don't need that functionality.
14# Allow java (blacklisted by disable-devel.inc) 14# Allow java (blacklisted by disable-devel.inc)
15include allow-java.inc 15include allow-java.inc
16 16
17blacklist /usr/libexec 17deny /usr/libexec
18 18
19include disable-common.inc 19include disable-common.inc
20include disable-devel.inc 20include disable-devel.inc
diff --git a/etc/profile-a-l/librewolf.profile b/etc/profile-a-l/librewolf.profile
index da047357a..5c614ab8e 100644
--- a/etc/profile-a-l/librewolf.profile
+++ b/etc/profile-a-l/librewolf.profile
@@ -6,13 +6,13 @@ include librewolf.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/librewolf 9nodeny ${HOME}/.cache/librewolf
10noblacklist ${HOME}/.librewolf 10nodeny ${HOME}/.librewolf
11 11
12mkdir ${HOME}/.cache/librewolf 12mkdir ${HOME}/.cache/librewolf
13mkdir ${HOME}/.librewolf 13mkdir ${HOME}/.librewolf
14whitelist ${HOME}/.cache/librewolf 14allow ${HOME}/.cache/librewolf
15whitelist ${HOME}/.librewolf 15allow ${HOME}/.librewolf
16 16
17# Add the next lines to your librewolf.local if you want to use the migration wizard. 17# Add the next lines to your librewolf.local if you want to use the migration wizard.
18#noblacklist ${HOME}/.mozilla 18#noblacklist ${HOME}/.mozilla
@@ -23,10 +23,10 @@ whitelist ${HOME}/.librewolf
23#whitelist ${RUNUSER}/kpxc_server 23#whitelist ${RUNUSER}/kpxc_server
24#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer 24#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer
25 25
26whitelist /usr/share/doc 26allow /usr/share/doc
27whitelist /usr/share/gtk-doc/html 27allow /usr/share/gtk-doc/html
28whitelist /usr/share/mozilla 28allow /usr/share/mozilla
29whitelist /usr/share/webext 29allow /usr/share/webext
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31 31
32# Add the next line to your librewolf.local to enable private-bin (Arch Linux). 32# Add the next line to your librewolf.local to enable private-bin (Arch Linux).
diff --git a/etc/profile-a-l/liferea.profile b/etc/profile-a-l/liferea.profile
index 7afca1d5f..595ecc257 100644
--- a/etc/profile-a-l/liferea.profile
+++ b/etc/profile-a-l/liferea.profile
@@ -6,9 +6,9 @@ include liferea.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/liferea 9nodeny ${HOME}/.cache/liferea
10noblacklist ${HOME}/.config/liferea 10nodeny ${HOME}/.config/liferea
11noblacklist ${HOME}/.local/share/liferea 11nodeny ${HOME}/.local/share/liferea
12 12
13# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
14include allow-python2.inc 14include allow-python2.inc
@@ -24,10 +24,10 @@ include disable-programs.inc
24mkdir ${HOME}/.cache/liferea 24mkdir ${HOME}/.cache/liferea
25mkdir ${HOME}/.config/liferea 25mkdir ${HOME}/.config/liferea
26mkdir ${HOME}/.local/share/liferea 26mkdir ${HOME}/.local/share/liferea
27whitelist ${HOME}/.cache/liferea 27allow ${HOME}/.cache/liferea
28whitelist ${HOME}/.config/liferea 28allow ${HOME}/.config/liferea
29whitelist ${HOME}/.local/share/liferea 29allow ${HOME}/.local/share/liferea
30whitelist /usr/share/liferea 30allow /usr/share/liferea
31include whitelist-common.inc 31include whitelist-common.inc
32include whitelist-usr-share-common.inc 32include whitelist-usr-share-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
diff --git a/etc/profile-a-l/lightsoff.profile b/etc/profile-a-l/lightsoff.profile
index c065c44a9..58d5bcd6d 100644
--- a/etc/profile-a-l/lightsoff.profile
+++ b/etc/profile-a-l/lightsoff.profile
@@ -6,7 +6,7 @@ include lightsoff.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9whitelist /usr/share/lightsoff 9allow /usr/share/lightsoff
10 10
11private-bin lightsoff 11private-bin lightsoff
12 12
diff --git a/etc/profile-a-l/lincity-ng.profile b/etc/profile-a-l/lincity-ng.profile
index 4254b7f33..e14c50d77 100644
--- a/etc/profile-a-l/lincity-ng.profile
+++ b/etc/profile-a-l/lincity-ng.profile
@@ -6,7 +6,7 @@ include lincity-ng.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.lincity-ng 9nodeny ${HOME}/.lincity-ng
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,7 +18,7 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.lincity-ng 20mkdir ${HOME}/.lincity-ng
21whitelist ${HOME}/.lincity-ng 21allow ${HOME}/.lincity-ng
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/links-common.profile b/etc/profile-a-l/links-common.profile
index cd885b1d4..51e3d5b94 100644
--- a/etc/profile-a-l/links-common.profile
+++ b/etc/profile-a-l/links-common.profile
@@ -4,8 +4,8 @@ include links-common.local
4 4
5# common profile for links browsers 5# common profile for links browsers
6 6
7blacklist /tmp/.X11-unix 7deny /tmp/.X11-unix
8blacklist ${RUNUSER}/wayland-* 8deny ${RUNUSER}/wayland-*
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20whitelist ${DOWNLOADS} 20allow ${DOWNLOADS}
21include whitelist-runuser-common.inc 21include whitelist-runuser-common.inc
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
diff --git a/etc/profile-a-l/links.profile b/etc/profile-a-l/links.profile
index 8ce39cc7f..ae57601ca 100644
--- a/etc/profile-a-l/links.profile
+++ b/etc/profile-a-l/links.profile
@@ -7,10 +7,10 @@ include links.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${HOME}/.links 10nodeny ${HOME}/.links
11 11
12mkdir ${HOME}/.links 12mkdir ${HOME}/.links
13whitelist ${HOME}/.links 13allow ${HOME}/.links
14 14
15private-bin links 15private-bin links
16 16
diff --git a/etc/profile-a-l/links2.profile b/etc/profile-a-l/links2.profile
index 5f91dfcd2..eb349c73a 100644
--- a/etc/profile-a-l/links2.profile
+++ b/etc/profile-a-l/links2.profile
@@ -7,10 +7,10 @@ include links2.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10noblacklist ${HOME}/.links2 10nodeny ${HOME}/.links2
11 11
12mkdir ${HOME}/.links2 12mkdir ${HOME}/.links2
13whitelist ${HOME}/.links2 13allow ${HOME}/.links2
14 14
15private-bin links2 15private-bin links2
16 16
diff --git a/etc/profile-a-l/linphone.profile b/etc/profile-a-l/linphone.profile
index 7ebdbef4c..dd1dac05b 100644
--- a/etc/profile-a-l/linphone.profile
+++ b/etc/profile-a-l/linphone.profile
@@ -6,10 +6,10 @@ include linphone.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/linphone 9nodeny ${HOME}/.config/linphone
10noblacklist ${HOME}/.linphone-history.db 10nodeny ${HOME}/.linphone-history.db
11noblacklist ${HOME}/.linphonerc 11nodeny ${HOME}/.linphonerc
12noblacklist ${HOME}/.local/share/linphone 12nodeny ${HOME}/.local/share/linphone
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
@@ -23,11 +23,11 @@ include disable-programs.inc
23# ${HOME}/.linphone-history.db and ${HOME}/.linphonerc but no longer mkfile. 23# ${HOME}/.linphone-history.db and ${HOME}/.linphonerc but no longer mkfile.
24mkdir ${HOME}/.config/linphone 24mkdir ${HOME}/.config/linphone
25mkdir ${HOME}/.local/share/linphone 25mkdir ${HOME}/.local/share/linphone
26whitelist ${HOME}/.config/linphone 26allow ${HOME}/.config/linphone
27whitelist ${HOME}/.linphone-history.db 27allow ${HOME}/.linphone-history.db
28whitelist ${HOME}/.linphonerc 28allow ${HOME}/.linphonerc
29whitelist ${HOME}/.local/share/linphone 29allow ${HOME}/.local/share/linphone
30whitelist ${DOWNLOADS} 30allow ${DOWNLOADS}
31include whitelist-common.inc 31include whitelist-common.inc
32 32
33caps.drop all 33caps.drop all
diff --git a/etc/profile-a-l/lmms.profile b/etc/profile-a-l/lmms.profile
index 48b0e14dc..b22110fdc 100644
--- a/etc/profile-a-l/lmms.profile
+++ b/etc/profile-a-l/lmms.profile
@@ -6,9 +6,9 @@ include lmms.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.lmmsrc.xml 9nodeny ${HOME}/.lmmsrc.xml
10noblacklist ${DOCUMENTS} 10nodeny ${DOCUMENTS}
11noblacklist ${MUSIC} 11nodeny ${MUSIC}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/lollypop.profile b/etc/profile-a-l/lollypop.profile
index f2676fec5..0a7ce86e8 100644
--- a/etc/profile-a-l/lollypop.profile
+++ b/etc/profile-a-l/lollypop.profile
@@ -6,8 +6,8 @@ include lollypop.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.local/share/lollypop 9nodeny ${HOME}/.local/share/lollypop
10noblacklist ${MUSIC} 10nodeny ${MUSIC}
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/lugaru.profile b/etc/profile-a-l/lugaru.profile
index 174c65a65..30802b3b7 100644
--- a/etc/profile-a-l/lugaru.profile
+++ b/etc/profile-a-l/lugaru.profile
@@ -8,8 +8,8 @@ include globals.local
8 8
9# note: crashes after entering 9# note: crashes after entering
10 10
11noblacklist ${HOME}/.config/lugaru 11nodeny ${HOME}/.config/lugaru
12noblacklist ${HOME}/.local/share/lugaru 12nodeny ${HOME}/.local/share/lugaru
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
@@ -22,8 +22,8 @@ include disable-xdg.inc
22 22
23mkdir ${HOME}/.config/lugaru 23mkdir ${HOME}/.config/lugaru
24mkdir ${HOME}/.local/share/lugaru 24mkdir ${HOME}/.local/share/lugaru
25whitelist ${HOME}/.config/lugaru 25allow ${HOME}/.config/lugaru
26whitelist ${HOME}/.local/share/lugaru 26allow ${HOME}/.local/share/lugaru
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-var-common.inc 28include whitelist-var-common.inc
29 29
diff --git a/etc/profile-a-l/luminance-hdr.profile b/etc/profile-a-l/luminance-hdr.profile
index 31067034e..73400dbd6 100644
--- a/etc/profile-a-l/luminance-hdr.profile
+++ b/etc/profile-a-l/luminance-hdr.profile
@@ -6,8 +6,8 @@ include luminance-hdr.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/Luminance 9nodeny ${HOME}/.config/Luminance
10noblacklist ${PICTURES} 10nodeny ${PICTURES}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/lutris.profile b/etc/profile-a-l/lutris.profile
index 80a3aba86..9d5169b80 100644
--- a/etc/profile-a-l/lutris.profile
+++ b/etc/profile-a-l/lutris.profile
@@ -6,18 +6,18 @@ include lutris.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${PATH}/llvm* 9nodeny ${PATH}/llvm*
10noblacklist ${HOME}/Games 10nodeny ${HOME}/Games
11noblacklist ${HOME}/.cache/lutris 11nodeny ${HOME}/.cache/lutris
12noblacklist ${HOME}/.cache/winetricks 12nodeny ${HOME}/.cache/winetricks
13noblacklist ${HOME}/.config/lutris 13nodeny ${HOME}/.config/lutris
14noblacklist ${HOME}/.local/share/lutris 14nodeny ${HOME}/.local/share/lutris
15# noblacklist ${HOME}/.wine 15# noblacklist ${HOME}/.wine
16noblacklist /tmp/.wine-* 16nodeny /tmp/.wine-*
17# Don't block access to /sbin and /usr/sbin to allow using ldconfig. Otherwise 17# Don't block access to /sbin and /usr/sbin to allow using ldconfig. Otherwise
18# Lutris won't even start. 18# Lutris won't even start.
19noblacklist /sbin 19nodeny /sbin
20noblacklist /usr/sbin 20nodeny /usr/sbin
21 21
22ignore noexec ${HOME} 22ignore noexec ${HOME}
23 23
@@ -39,15 +39,15 @@ mkdir ${HOME}/.cache/winetricks
39mkdir ${HOME}/.config/lutris 39mkdir ${HOME}/.config/lutris
40mkdir ${HOME}/.local/share/lutris 40mkdir ${HOME}/.local/share/lutris
41# mkdir ${HOME}/.wine 41# mkdir ${HOME}/.wine
42whitelist ${DOWNLOADS} 42allow ${DOWNLOADS}
43whitelist ${HOME}/Games 43allow ${HOME}/Games
44whitelist ${HOME}/.cache/lutris 44allow ${HOME}/.cache/lutris
45whitelist ${HOME}/.cache/winetricks 45allow ${HOME}/.cache/winetricks
46whitelist ${HOME}/.config/lutris 46allow ${HOME}/.config/lutris
47whitelist ${HOME}/.local/share/lutris 47allow ${HOME}/.local/share/lutris
48# whitelist ${HOME}/.wine 48# whitelist ${HOME}/.wine
49whitelist /usr/share/lutris 49allow /usr/share/lutris
50whitelist /usr/share/wine 50allow /usr/share/wine
51include whitelist-common.inc 51include whitelist-common.inc
52include whitelist-usr-share-common.inc 52include whitelist-usr-share-common.inc
53include whitelist-runuser-common.inc 53include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/lximage-qt.profile b/etc/profile-a-l/lximage-qt.profile
index b2a56012e..43147211b 100644
--- a/etc/profile-a-l/lximage-qt.profile
+++ b/etc/profile-a-l/lximage-qt.profile
@@ -6,7 +6,7 @@ include lximage-qt.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.config/lximage-qt 9nodeny ${HOME}/.config/lximage-qt
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/lxmusic.profile b/etc/profile-a-l/lxmusic.profile
index cc4b95551..c849f2ad2 100644
--- a/etc/profile-a-l/lxmusic.profile
+++ b/etc/profile-a-l/lxmusic.profile
@@ -6,9 +6,9 @@ include lxmusic.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9noblacklist ${HOME}/.cache/xmms2 9nodeny ${HOME}/.cache/xmms2
10noblacklist ${HOME}/.config/xmms2 10nodeny ${HOME}/.config/xmms2
11noblacklist ${MUSIC} 11nodeny ${MUSIC}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/lynx.profile b/etc/profile-a-l/lynx.profile
index a919e924b..15c8f1faa 100644
--- a/etc/profile-a-l/lynx.profile
+++ b/etc/profile-a-l/lynx.profile
@@ -7,8 +7,8 @@ include lynx.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist /tmp/.X11-unix 10deny /tmp/.X11-unix
11blacklist ${RUNUSER}/wayland-* 11deny ${RUNUSER}/wayland-*
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/lyx.profile b/etc/profile-a-l/lyx.profile
index fa69463d1..358dbf2f2 100644
--- a/etc/profile-a-l/lyx.profile
+++ b/etc/profile-a-l/lyx.profile
@@ -8,8 +8,8 @@ include globals.local
8 8
9ignore private-tmp 9ignore private-tmp
10 10
11noblacklist ${HOME}/.config/LyX 11nodeny ${HOME}/.config/LyX
12noblacklist ${HOME}/.lyx 12nodeny ${HOME}/.lyx
13 13
14# Allow lua (blacklisted by disable-interpreters.inc) 14# Allow lua (blacklisted by disable-interpreters.inc)
15include allow-lua.inc 15include allow-lua.inc
@@ -21,11 +21,11 @@ include allow-perl.inc
21include allow-python2.inc 21include allow-python2.inc
22include allow-python3.inc 22include allow-python3.inc
23 23
24whitelist /usr/share/lyx 24allow /usr/share/lyx
25whitelist /usr/share/texinfo 25allow /usr/share/texinfo
26whitelist /usr/share/texlive 26allow /usr/share/texlive
27whitelist /usr/share/texmf-dist 27allow /usr/share/texmf-dist
28whitelist /usr/share/tlpkg 28allow /usr/share/tlpkg
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
30 30
31apparmor 31apparmor
diff --git a/etc/profile-a-l/sway.profile b/etc/profile-a-l/sway.profile
index 4637419bf..3a4edcf69 100644
--- a/etc/profile-a-l/sway.profile
+++ b/etc/profile-a-l/sway.profile
@@ -7,9 +7,9 @@ include sway.local
7include globals.local 7include globals.local
8 8
9# all applications started in sway will run in this profile 9# all applications started in sway will run in this profile
10noblacklist ${HOME}/.config/sway 10nodeny ${HOME}/.config/sway
11# sway uses ~/.config/i3 as fallback if there is no ~/.config/sway 11# sway uses ~/.config/i3 as fallback if there is no ~/.config/sway
12noblacklist ${HOME}/.config/i3 12nodeny ${HOME}/.config/i3
13include disable-common.inc 13include disable-common.inc
14 14
15caps.drop all 15caps.drop all
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-06-26 08:03:16 +0000