aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l
diff options
context:
space:
mode:
authorLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2021-07-18 20:39:14 -0300
committerLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2021-07-18 20:39:14 -0300
commitf43382f1e9707b4fd5e63c7bfe881912aa4ee994 (patch)
tree499639bb962c8b071b153dcdad1b42af8286521d /etc/profile-a-l
parentAdd MS Edge Beta profile (diff)
downloadfirejail-f43382f1e9707b4fd5e63c7bfe881912aa4ee994.tar.gz
firejail-f43382f1e9707b4fd5e63c7bfe881912aa4ee994.tar.zst
firejail-f43382f1e9707b4fd5e63c7bfe881912aa4ee994.zip
Revert "move whitelist/blacklist to allow/deny"
This reverts commit fe0f975f447d59977d90c3226cc8c623b31b20b3. Note: This only reverts the changes from etc. The 4 aliases introduced on commit 45f2ba544 are mere, well, aliases. That is, they fail to address the different usability problems discussed on [#3447][3447] and in fact only make things more confusing (as has already been mentioned on [this][4379] and later comments). The main reason is that the aliases do not meaningfully map to the original commands. For example, the commands from each pair below seem like they would do the exact same thing: * `allow` and `nodeny` * `deny` and `noallow` Additionally, if these aliases are not the final commands, but only a test/work-in-progress, then keeping the wide-scale search/replace changes made on commit fe0f975f4 would only serve to cause confusion, as users of firejail-git, contributors and downstream projects might start changing the commands used on their profiles, only to later have to change them again, potentially to completely different commands. The sooner this is undone the better, as (besides the above reasons) the more profile changes there are between the original commit and the revert, the harder it is to e.g.: `git diff` versions of files across the following revision ranges: before the commit, after the commit but before the revert and after the revert. Note: This is still the case even if a commit is [ignored by `git blame`][4390]. So let us revert fe0f975f4 and only reapply similar large-scale changes once we have discussed and settled on better commands. How the revert was applied: Despite using the auto-generated message from `git revert`, to ensure correctness and to avoid conflicts the changes were reverted in different steps: Firstly, revert the files which can be safely reverted directly ("filestorevert"): # Find out which files have been changed on fe0f975f44, but have not # been changed afterwards and list them on "filestorevert" git show --pretty='' --name-only fe0f975f44 -- etc | LC_ALL=C sort >allfiles git diff --name-only fe0f975f44..master -- etc | LC_ALL=C sort >filestoignore comm -2 -3 allfiles filestoignore >filestorevert # Note: There are 3 extra files on filestoignore because they were # added after commit fe0f975f44 wc -l allfiles filestoignore filestorevert | head -n 3 # 797 allfiles # 8 filestoignore # 792 filestorevert # Automatically revert files in "filestorevert" # See https://stackoverflow.com/a/23401018/10095231 tr '\n' '\000' <filestorevert | xargs -0 git show fe0f975f44 -- | git apply --reverse printf 'Total files reverted:\n' git diff --name-only | wc -l # 792 Secondly, do some search/replace on the rest: tr '\n' '\000' <filestoignore | xargs -0 sed -i.bak \ -e 's/allow /whitelist /' -e 's/noallow /nowhitelist /' \ -e 's/deny /blacklist /' -e 's/nodeny /noblacklist /' \ -e 's/deny-nolog /blacklist-nolog /' find etc -name '*.bak' -print0 | xargs -0 rm Thirdly, verify the result. The following command shows the difference between all the changes in etc from before fe0f975f44 and this commit (inclusive): git diff fe0f975f44~1 -- etc From the output, it looks like all alias changes are fully reverted and that the other changes to etc (from after fe0f975f44) remain, so the revert seems to be done correctly. [3447]: https://github.com/netblue30/firejail/issues/3447 [4379]: https://github.com/netblue30/firejail/issues/4379#issuecomment-876460222 [4390]: https://github.com/netblue30/firejail/issues/4390
Diffstat (limited to 'etc/profile-a-l')
-rw-r--r--etc/profile-a-l/0ad.profile18
-rw-r--r--etc/profile-a-l/2048-qt.profile8
-rw-r--r--etc/profile-a-l/Cryptocat.profile2
-rw-r--r--etc/profile-a-l/Discord.profile4
-rw-r--r--etc/profile-a-l/DiscordCanary.profile4
-rw-r--r--etc/profile-a-l/Fritzing.profile4
-rw-r--r--etc/profile-a-l/JDownloader.profile6
-rw-r--r--etc/profile-a-l/abiword.profile4
-rw-r--r--etc/profile-a-l/abrowser.profile8
-rw-r--r--etc/profile-a-l/agetpkg.profile6
-rw-r--r--etc/profile-a-l/akonadi_control.profile32
-rw-r--r--etc/profile-a-l/akregator.profile14
-rw-r--r--etc/profile-a-l/alacarte.profile14
-rw-r--r--etc/profile-a-l/alienarena.profile6
-rw-r--r--etc/profile-a-l/alpine.profile46
-rw-r--r--etc/profile-a-l/amarok.profile2
-rw-r--r--etc/profile-a-l/amule.profile6
-rw-r--r--etc/profile-a-l/android-studio.profile14
-rw-r--r--etc/profile-a-l/anki.profile8
-rw-r--r--etc/profile-a-l/anydesk.profile4
-rw-r--r--etc/profile-a-l/aosp.profile14
-rw-r--r--etc/profile-a-l/apostrophe.profile18
-rw-r--r--etc/profile-a-l/arch-audit.profile4
-rw-r--r--etc/profile-a-l/archaudit-report.profile2
-rw-r--r--etc/profile-a-l/archiver-common.profile2
-rw-r--r--etc/profile-a-l/ardour5.profile12
-rw-r--r--etc/profile-a-l/arduino.profile6
-rw-r--r--etc/profile-a-l/aria2c.profile10
-rw-r--r--etc/profile-a-l/ark.profile6
-rw-r--r--etc/profile-a-l/arm.profile4
-rw-r--r--etc/profile-a-l/artha.profile14
-rw-r--r--etc/profile-a-l/assogiate.profile4
-rw-r--r--etc/profile-a-l/asunder.profile10
-rw-r--r--etc/profile-a-l/atom.profile4
-rw-r--r--etc/profile-a-l/atril.profile6
-rw-r--r--etc/profile-a-l/audacious.profile6
-rw-r--r--etc/profile-a-l/audacity.profile6
-rw-r--r--etc/profile-a-l/audio-recorder.profile10
-rw-r--r--etc/profile-a-l/authenticator-rs.profile8
-rw-r--r--etc/profile-a-l/authenticator.profile4
-rw-r--r--etc/profile-a-l/autokey-common.profile4
-rw-r--r--etc/profile-a-l/avidemux.profile12
-rw-r--r--etc/profile-a-l/aweather.profile4
-rw-r--r--etc/profile-a-l/awesome.profile2
-rw-r--r--etc/profile-a-l/ballbuster.profile6
-rw-r--r--etc/profile-a-l/baloo_file.profile12
-rw-r--r--etc/profile-a-l/balsa.profile36
-rw-r--r--etc/profile-a-l/barrier.profile6
-rw-r--r--etc/profile-a-l/basilisk.profile8
-rw-r--r--etc/profile-a-l/bcompare.profile4
-rw-r--r--etc/profile-a-l/beaker.profile4
-rw-r--r--etc/profile-a-l/bibletime.profile20
-rw-r--r--etc/profile-a-l/bijiben.profile14
-rw-r--r--etc/profile-a-l/bitcoin-qt.profile8
-rw-r--r--etc/profile-a-l/bitlbee.profile4
-rw-r--r--etc/profile-a-l/bitwarden.profile4
-rw-r--r--etc/profile-a-l/blackbox.profile2
-rw-r--r--etc/profile-a-l/blender.profile6
-rw-r--r--etc/profile-a-l/bless.profile2
-rw-r--r--etc/profile-a-l/blobby.profile6
-rw-r--r--etc/profile-a-l/blobwars.profile6
-rw-r--r--etc/profile-a-l/bnox.profile8
-rw-r--r--etc/profile-a-l/brackets.profile2
-rw-r--r--etc/profile-a-l/brasero.profile2
-rw-r--r--etc/profile-a-l/brave.profile22
-rw-r--r--etc/profile-a-l/bzflag.profile4
-rw-r--r--etc/profile-a-l/calibre.profile6
-rw-r--r--etc/profile-a-l/calligra.profile2
-rw-r--r--etc/profile-a-l/calligragemini.profile2
-rw-r--r--etc/profile-a-l/calligraplan.profile2
-rw-r--r--etc/profile-a-l/calligraplanwork.profile2
-rw-r--r--etc/profile-a-l/calligrasheets.profile2
-rw-r--r--etc/profile-a-l/calligrastage.profile2
-rw-r--r--etc/profile-a-l/calligrawords.profile2
-rw-r--r--etc/profile-a-l/cameramonitor.profile2
-rw-r--r--etc/profile-a-l/cantata.profile8
-rw-r--r--etc/profile-a-l/cargo.profile10
-rw-r--r--etc/profile-a-l/catfish.profile4
-rw-r--r--etc/profile-a-l/cawbird.profile2
-rw-r--r--etc/profile-a-l/celluloid.profile14
-rw-r--r--etc/profile-a-l/checkbashisms.profile4
-rw-r--r--etc/profile-a-l/cheese.profile10
-rw-r--r--etc/profile-a-l/cherrytree.profile4
-rw-r--r--etc/profile-a-l/chromium-browser-privacy.profile10
-rw-r--r--etc/profile-a-l/chromium-common.profile10
-rw-r--r--etc/profile-a-l/chromium.profile16
-rw-r--r--etc/profile-a-l/cin.profile2
-rw-r--r--etc/profile-a-l/clamav.profile2
-rw-r--r--etc/profile-a-l/claws-mail.profile6
-rw-r--r--etc/profile-a-l/clawsker.profile4
-rw-r--r--etc/profile-a-l/clementine.profile6
-rw-r--r--etc/profile-a-l/clion.profile20
-rw-r--r--etc/profile-a-l/clipgrab.profile6
-rw-r--r--etc/profile-a-l/clipit.profile8
-rw-r--r--etc/profile-a-l/cliqz.profile12
-rw-r--r--etc/profile-a-l/cmus.profile4
-rw-r--r--etc/profile-a-l/code.profile8
-rw-r--r--etc/profile-a-l/colorful.profile6
-rw-r--r--etc/profile-a-l/com.github.bleakgrey.tootle.profile6
-rw-r--r--etc/profile-a-l/com.github.dahenson.agenda.profile12
-rw-r--r--etc/profile-a-l/com.github.johnfactotum.Foliate.profile18
-rw-r--r--etc/profile-a-l/com.github.phase1geo.minder.profile14
-rw-r--r--etc/profile-a-l/conkeror.profile22
-rw-r--r--etc/profile-a-l/conky.profile2
-rw-r--r--etc/profile-a-l/corebird.profile2
-rw-r--r--etc/profile-a-l/cower.profile4
-rw-r--r--etc/profile-a-l/coyim.profile4
-rw-r--r--etc/profile-a-l/cpio.profile4
-rw-r--r--etc/profile-a-l/crawl.profile4
-rw-r--r--etc/profile-a-l/crow.profile4
-rw-r--r--etc/profile-a-l/curl.profile8
-rw-r--r--etc/profile-a-l/cyberfox.profile8
-rw-r--r--etc/profile-a-l/d-feet.profile6
-rw-r--r--etc/profile-a-l/darktable.profile6
-rw-r--r--etc/profile-a-l/dbus-send.profile4
-rw-r--r--etc/profile-a-l/dconf-editor.profile2
-rw-r--r--etc/profile-a-l/dconf.profile4
-rw-r--r--etc/profile-a-l/ddgtk.profile4
-rw-r--r--etc/profile-a-l/deadbeef.profile4
-rw-r--r--etc/profile-a-l/deluge.profile6
-rw-r--r--etc/profile-a-l/desktopeditors.profile6
-rw-r--r--etc/profile-a-l/devhelp.profile6
-rw-r--r--etc/profile-a-l/devilspie.profile6
-rw-r--r--etc/profile-a-l/devilspie2.profile8
-rw-r--r--etc/profile-a-l/dia.profile6
-rw-r--r--etc/profile-a-l/dig.profile10
-rw-r--r--etc/profile-a-l/digikam.profile12
-rw-r--r--etc/profile-a-l/dillo.profile8
-rw-r--r--etc/profile-a-l/dino.profile6
-rw-r--r--etc/profile-a-l/discord-canary.profile4
-rw-r--r--etc/profile-a-l/discord-common.profile4
-rw-r--r--etc/profile-a-l/discord.profile4
-rw-r--r--etc/profile-a-l/display.profile2
-rw-r--r--etc/profile-a-l/dnox.profile8
-rw-r--r--etc/profile-a-l/dnscrypt-proxy.profile10
-rw-r--r--etc/profile-a-l/dnsmasq.profile8
-rw-r--r--etc/profile-a-l/dolphin-emu.profile14
-rw-r--r--etc/profile-a-l/dooble.profile6
-rw-r--r--etc/profile-a-l/dosbox.profile4
-rw-r--r--etc/profile-a-l/dragon.profile8
-rw-r--r--etc/profile-a-l/drawio.profile6
-rw-r--r--etc/profile-a-l/drill.profile6
-rw-r--r--etc/profile-a-l/dropbox.profile14
-rw-r--r--etc/profile-a-l/easystroke.profile4
-rw-r--r--etc/profile-a-l/electron-mail.profile6
-rw-r--r--etc/profile-a-l/electron.profile2
-rw-r--r--etc/profile-a-l/electrum.profile4
-rw-r--r--etc/profile-a-l/element-desktop.profile6
-rw-r--r--etc/profile-a-l/elinks.profile4
-rw-r--r--etc/profile-a-l/emacs.profile4
-rw-r--r--etc/profile-a-l/email-common.profile30
-rw-r--r--etc/profile-a-l/enchant.profile6
-rw-r--r--etc/profile-a-l/enox.profile8
-rw-r--r--etc/profile-a-l/enpass.profile20
-rw-r--r--etc/profile-a-l/eo-common.profile8
-rw-r--r--etc/profile-a-l/eog.profile4
-rw-r--r--etc/profile-a-l/eom.profile4
-rw-r--r--etc/profile-a-l/ephemeral.profile10
-rw-r--r--etc/profile-a-l/epiphany.profile14
-rw-r--r--etc/profile-a-l/equalx.profile18
-rw-r--r--etc/profile-a-l/etr.profile10
-rw-r--r--etc/profile-a-l/evince.profile14
-rw-r--r--etc/profile-a-l/evolution.profile18
-rw-r--r--etc/profile-a-l/exiftool.profile4
-rw-r--r--etc/profile-a-l/falkon.profile12
-rw-r--r--etc/profile-a-l/fbreader.profile4
-rw-r--r--etc/profile-a-l/fdns.profile8
-rw-r--r--etc/profile-a-l/feedreader.profile10
-rw-r--r--etc/profile-a-l/ferdi.profile18
-rw-r--r--etc/profile-a-l/fetchmail.profile4
-rw-r--r--etc/profile-a-l/ffmpeg.profile10
-rw-r--r--etc/profile-a-l/file-roller.profile6
-rw-r--r--etc/profile-a-l/file.profile2
-rw-r--r--etc/profile-a-l/filezilla.profile4
-rw-r--r--etc/profile-a-l/firedragon.profile8
-rw-r--r--etc/profile-a-l/firefox-common-addons.profile130
-rw-r--r--etc/profile-a-l/firefox-common.profile10
-rw-r--r--etc/profile-a-l/firefox-esr.profile2
-rw-r--r--etc/profile-a-l/firefox.profile22
-rw-r--r--etc/profile-a-l/five-or-more.profile6
-rw-r--r--etc/profile-a-l/flameshot.profile8
-rw-r--r--etc/profile-a-l/flashpeak-slimjet.profile8
-rw-r--r--etc/profile-a-l/flowblade.profile4
-rw-r--r--etc/profile-a-l/fluxbox.profile2
-rw-r--r--etc/profile-a-l/font-manager.profile10
-rw-r--r--etc/profile-a-l/fontforge.profile4
-rw-r--r--etc/profile-a-l/fossamail.profile12
-rw-r--r--etc/profile-a-l/four-in-a-row.profile2
-rw-r--r--etc/profile-a-l/fractal.profile6
-rw-r--r--etc/profile-a-l/franz.profile18
-rw-r--r--etc/profile-a-l/freecad.profile4
-rw-r--r--etc/profile-a-l/freeciv.profile4
-rw-r--r--etc/profile-a-l/freecol.profile18
-rw-r--r--etc/profile-a-l/freemind.profile4
-rw-r--r--etc/profile-a-l/freetube.profile4
-rw-r--r--etc/profile-a-l/frogatto.profile8
-rw-r--r--etc/profile-a-l/frozen-bubble.profile4
-rw-r--r--etc/profile-a-l/funnyboat.profile8
-rw-r--r--etc/profile-a-l/gajim.profile24
-rw-r--r--etc/profile-a-l/galculator.profile4
-rw-r--r--etc/profile-a-l/gapplication.profile4
-rw-r--r--etc/profile-a-l/gcloud.profile6
-rw-r--r--etc/profile-a-l/gconf-editor.profile4
-rw-r--r--etc/profile-a-l/gconf.profile10
-rw-r--r--etc/profile-a-l/geany.profile2
-rw-r--r--etc/profile-a-l/geary.profile36
-rw-r--r--etc/profile-a-l/gedit.profile4
-rw-r--r--etc/profile-a-l/geeqie.profile6
-rw-r--r--etc/profile-a-l/gfeeds.profile20
-rw-r--r--etc/profile-a-l/gget.profile6
-rw-r--r--etc/profile-a-l/ghostwriter.profile16
-rw-r--r--etc/profile-a-l/gimp.profile22
-rw-r--r--etc/profile-a-l/gist.profile10
-rw-r--r--etc/profile-a-l/git-cola.profile32
-rw-r--r--etc/profile-a-l/git.profile34
-rw-r--r--etc/profile-a-l/gitg.profile10
-rw-r--r--etc/profile-a-l/github-desktop.profile8
-rw-r--r--etc/profile-a-l/gitter.profile10
-rw-r--r--etc/profile-a-l/gjs.profile8
-rw-r--r--etc/profile-a-l/gl-117.profile6
-rw-r--r--etc/profile-a-l/glaxium.profile6
-rw-r--r--etc/profile-a-l/globaltime.profile2
-rw-r--r--etc/profile-a-l/gmpc.profile10
-rw-r--r--etc/profile-a-l/gnome-2048.profile4
-rw-r--r--etc/profile-a-l/gnome-books.profile4
-rw-r--r--etc/profile-a-l/gnome-builder.profile8
-rw-r--r--etc/profile-a-l/gnome-calendar.profile2
-rw-r--r--etc/profile-a-l/gnome-characters.profile2
-rw-r--r--etc/profile-a-l/gnome-chess.profile8
-rw-r--r--etc/profile-a-l/gnome-clocks.profile4
-rw-r--r--etc/profile-a-l/gnome-contacts.profile2
-rw-r--r--etc/profile-a-l/gnome-documents.profile4
-rw-r--r--etc/profile-a-l/gnome-hexgl.profile2
-rw-r--r--etc/profile-a-l/gnome-keyring.profile14
-rw-r--r--etc/profile-a-l/gnome-klotski.profile4
-rw-r--r--etc/profile-a-l/gnome-latex.profile8
-rw-r--r--etc/profile-a-l/gnome-logs.profile2
-rw-r--r--etc/profile-a-l/gnome-mahjongg.profile2
-rw-r--r--etc/profile-a-l/gnome-maps.profile20
-rw-r--r--etc/profile-a-l/gnome-mines.profile6
-rw-r--r--etc/profile-a-l/gnome-mplayer.profile6
-rw-r--r--etc/profile-a-l/gnome-music.profile4
-rw-r--r--etc/profile-a-l/gnome-nettool.profile2
-rw-r--r--etc/profile-a-l/gnome-nibbles.profile6
-rw-r--r--etc/profile-a-l/gnome-passwordsafe.profile12
-rw-r--r--etc/profile-a-l/gnome-photos.profile2
-rw-r--r--etc/profile-a-l/gnome-pie.profile2
-rw-r--r--etc/profile-a-l/gnome-pomodoro.profile6
-rw-r--r--etc/profile-a-l/gnome-recipes.profile10
-rw-r--r--etc/profile-a-l/gnome-ring.profile2
-rw-r--r--etc/profile-a-l/gnome-robots.profile2
-rw-r--r--etc/profile-a-l/gnome-schedule.profile22
-rw-r--r--etc/profile-a-l/gnome-screenshot.profile4
-rw-r--r--etc/profile-a-l/gnome-sound-recorder.profile4
-rw-r--r--etc/profile-a-l/gnome-sudoku.profile4
-rw-r--r--etc/profile-a-l/gnome-system-log.profile2
-rw-r--r--etc/profile-a-l/gnome-taquin.profile2
-rw-r--r--etc/profile-a-l/gnome-todo.profile2
-rw-r--r--etc/profile-a-l/gnome-twitch.profile8
-rw-r--r--etc/profile-a-l/gnome-weather.profile2
-rw-r--r--etc/profile-a-l/gnote.profile10
-rw-r--r--etc/profile-a-l/gnubik.profile2
-rw-r--r--etc/profile-a-l/godot.profile6
-rw-r--r--etc/profile-a-l/goobox.profile2
-rw-r--r--etc/profile-a-l/google-chrome-beta.profile16
-rw-r--r--etc/profile-a-l/google-chrome-unstable.profile16
-rw-r--r--etc/profile-a-l/google-chrome.profile16
-rw-r--r--etc/profile-a-l/google-earth.profile8
-rw-r--r--etc/profile-a-l/google-play-music-desktop-player.profile4
-rw-r--r--etc/profile-a-l/googler-common.profile8
-rw-r--r--etc/profile-a-l/gpa.profile2
-rw-r--r--etc/profile-a-l/gpg-agent.profile16
-rw-r--r--etc/profile-a-l/gpg.profile16
-rw-r--r--etc/profile-a-l/gpicview.profile4
-rw-r--r--etc/profile-a-l/gpredict.profile4
-rw-r--r--etc/profile-a-l/gradio.profile8
-rw-r--r--etc/profile-a-l/gramps.profile4
-rw-r--r--etc/profile-a-l/gravity-beams-and-evaporating-stars.profile2
-rw-r--r--etc/profile-a-l/gthumb.profile6
-rw-r--r--etc/profile-a-l/gtk-update-icon-cache.profile2
-rw-r--r--etc/profile-a-l/gtk2-youtube-viewer.profile4
-rw-r--r--etc/profile-a-l/gtk3-youtube-viewer.profile4
-rw-r--r--etc/profile-a-l/guayadeque.profile4
-rw-r--r--etc/profile-a-l/gummi.profile4
-rw-r--r--etc/profile-a-l/guvcview.profile12
-rw-r--r--etc/profile-a-l/gwenview.profile22
-rw-r--r--etc/profile-a-l/gzip.profile2
-rw-r--r--etc/profile-a-l/handbrake.profile6
-rw-r--r--etc/profile-a-l/hashcat.profile8
-rw-r--r--etc/profile-a-l/hasher-common.profile2
-rw-r--r--etc/profile-a-l/hedgewars.profile4
-rw-r--r--etc/profile-a-l/hexchat.profile4
-rw-r--r--etc/profile-a-l/highlight.profile2
-rw-r--r--etc/profile-a-l/homebank.profile8
-rw-r--r--etc/profile-a-l/host.profile4
-rw-r--r--etc/profile-a-l/hugin.profile6
-rw-r--r--etc/profile-a-l/hyperrogue.profile6
-rw-r--r--etc/profile-a-l/i2prouter.profile20
-rw-r--r--etc/profile-a-l/i3.profile2
-rw-r--r--etc/profile-a-l/icecat.profile8
-rw-r--r--etc/profile-a-l/icedove.profile12
-rw-r--r--etc/profile-a-l/idea.sh.profile12
-rw-r--r--etc/profile-a-l/imagej.profile2
-rw-r--r--etc/profile-a-l/img2txt.profile8
-rw-r--r--etc/profile-a-l/impressive.profile10
-rw-r--r--etc/profile-a-l/inkscape.profile16
-rw-r--r--etc/profile-a-l/inox.profile8
-rw-r--r--etc/profile-a-l/iridium.profile8
-rw-r--r--etc/profile-a-l/itch.profile8
-rw-r--r--etc/profile-a-l/jami-gnome.profile8
-rw-r--r--etc/profile-a-l/jd-gui.profile2
-rw-r--r--etc/profile-a-l/jerry.profile2
-rw-r--r--etc/profile-a-l/jitsi-meet-desktop.profile6
-rw-r--r--etc/profile-a-l/jitsi.profile2
-rw-r--r--etc/profile-a-l/jumpnbump.profile6
-rw-r--r--etc/profile-a-l/k3b.profile10
-rw-r--r--etc/profile-a-l/kaffeine.profile16
-rw-r--r--etc/profile-a-l/kalgebra.profile6
-rw-r--r--etc/profile-a-l/karbon.profile2
-rw-r--r--etc/profile-a-l/kate.profile28
-rw-r--r--etc/profile-a-l/kazam.profile8
-rw-r--r--etc/profile-a-l/kcalc.profile16
-rw-r--r--etc/profile-a-l/kdenlive.profile8
-rw-r--r--etc/profile-a-l/kdiff3.profile8
-rw-r--r--etc/profile-a-l/keepass.profile16
-rw-r--r--etc/profile-a-l/keepassx.profile10
-rw-r--r--etc/profile-a-l/keepassxc.profile30
-rw-r--r--etc/profile-a-l/kget.profile14
-rw-r--r--etc/profile-a-l/kid3-qt.profile2
-rw-r--r--etc/profile-a-l/kid3.profile6
-rw-r--r--etc/profile-a-l/kino.profile4
-rw-r--r--etc/profile-a-l/kiwix-desktop.profile8
-rw-r--r--etc/profile-a-l/klatexformula.profile4
-rw-r--r--etc/profile-a-l/klavaro.profile8
-rw-r--r--etc/profile-a-l/kmail.profile42
-rw-r--r--etc/profile-a-l/kmplayer.profile10
-rw-r--r--etc/profile-a-l/knotes.profile6
-rw-r--r--etc/profile-a-l/kodi.profile8
-rw-r--r--etc/profile-a-l/konversation.profile10
-rw-r--r--etc/profile-a-l/kopete.profile12
-rw-r--r--etc/profile-a-l/krita.profile8
-rw-r--r--etc/profile-a-l/krunner.profile6
-rw-r--r--etc/profile-a-l/ktorrent.profile30
-rw-r--r--etc/profile-a-l/ktouch.profile8
-rw-r--r--etc/profile-a-l/kube.profile36
-rw-r--r--etc/profile-a-l/kwin_x11.profile8
-rw-r--r--etc/profile-a-l/kwrite.profile18
-rw-r--r--etc/profile-a-l/latex-common.profile2
-rw-r--r--etc/profile-a-l/leafpad.profile2
-rw-r--r--etc/profile-a-l/less.profile4
-rw-r--r--etc/profile-a-l/librecad.profile6
-rw-r--r--etc/profile-a-l/libreoffice.profile6
-rw-r--r--etc/profile-a-l/librewolf.profile16
-rw-r--r--etc/profile-a-l/liferea.profile14
-rw-r--r--etc/profile-a-l/lightsoff.profile2
-rw-r--r--etc/profile-a-l/lincity-ng.profile4
-rw-r--r--etc/profile-a-l/links-common.profile6
-rw-r--r--etc/profile-a-l/links.profile4
-rw-r--r--etc/profile-a-l/links2.profile4
-rw-r--r--etc/profile-a-l/linphone.profile18
-rw-r--r--etc/profile-a-l/lmms.profile6
-rw-r--r--etc/profile-a-l/lollypop.profile4
-rw-r--r--etc/profile-a-l/lugaru.profile8
-rw-r--r--etc/profile-a-l/luminance-hdr.profile4
-rw-r--r--etc/profile-a-l/lutris.profile34
-rw-r--r--etc/profile-a-l/lximage-qt.profile2
-rw-r--r--etc/profile-a-l/lxmusic.profile6
-rw-r--r--etc/profile-a-l/lynx.profile4
-rw-r--r--etc/profile-a-l/lyx.profile14
-rw-r--r--etc/profile-a-l/sway.profile4
370 files changed, 1568 insertions, 1568 deletions
diff --git a/etc/profile-a-l/0ad.profile b/etc/profile-a-l/0ad.profile
index 6f493fff1..4009853d3 100644
--- a/etc/profile-a-l/0ad.profile
+++ b/etc/profile-a-l/0ad.profile
@@ -6,11 +6,11 @@ include 0ad.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/0ad 9noblacklist ${HOME}/.cache/0ad
10nodeny ${HOME}/.config/0ad 10noblacklist ${HOME}/.config/0ad
11nodeny ${HOME}/.local/share/0ad 11noblacklist ${HOME}/.local/share/0ad
12 12
13deny /usr/libexec 13blacklist /usr/libexec
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -23,11 +23,11 @@ include disable-xdg.inc
23mkdir ${HOME}/.cache/0ad 23mkdir ${HOME}/.cache/0ad
24mkdir ${HOME}/.config/0ad 24mkdir ${HOME}/.config/0ad
25mkdir ${HOME}/.local/share/0ad 25mkdir ${HOME}/.local/share/0ad
26allow ${HOME}/.cache/0ad 26whitelist ${HOME}/.cache/0ad
27allow ${HOME}/.config/0ad 27whitelist ${HOME}/.config/0ad
28allow ${HOME}/.local/share/0ad 28whitelist ${HOME}/.local/share/0ad
29allow /usr/share/0ad 29whitelist /usr/share/0ad
30allow /usr/share/games 30whitelist /usr/share/games
31include whitelist-common.inc 31include whitelist-common.inc
32include whitelist-usr-share-common.inc 32include whitelist-usr-share-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
diff --git a/etc/profile-a-l/2048-qt.profile b/etc/profile-a-l/2048-qt.profile
index 3a7b331a7..1d787cba7 100644
--- a/etc/profile-a-l/2048-qt.profile
+++ b/etc/profile-a-l/2048-qt.profile
@@ -6,8 +6,8 @@ include 2048-qt.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/2048-qt 9noblacklist ${HOME}/.config/2048-qt
10nodeny ${HOME}/.config/xiaoyong 10noblacklist ${HOME}/.config/xiaoyong
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-programs.inc
18 18
19mkdir ${HOME}/.config/2048-qt 19mkdir ${HOME}/.config/2048-qt
20mkdir ${HOME}/.config/xiaoyong 20mkdir ${HOME}/.config/xiaoyong
21allow ${HOME}/.config/2048-qt 21whitelist ${HOME}/.config/2048-qt
22allow ${HOME}/.config/xiaoyong 22whitelist ${HOME}/.config/xiaoyong
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-var-common.inc 24include whitelist-var-common.inc
25 25
diff --git a/etc/profile-a-l/Cryptocat.profile b/etc/profile-a-l/Cryptocat.profile
index def0ec111..1d86b0fbf 100644
--- a/etc/profile-a-l/Cryptocat.profile
+++ b/etc/profile-a-l/Cryptocat.profile
@@ -5,7 +5,7 @@ include Cryptocat.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/Cryptocat 8noblacklist ${HOME}/.config/Cryptocat
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
diff --git a/etc/profile-a-l/Discord.profile b/etc/profile-a-l/Discord.profile
index 1d3ae49ca..3f274b21c 100644
--- a/etc/profile-a-l/Discord.profile
+++ b/etc/profile-a-l/Discord.profile
@@ -5,10 +5,10 @@ include Discord.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/discord 8noblacklist ${HOME}/.config/discord
9 9
10mkdir ${HOME}/.config/discord 10mkdir ${HOME}/.config/discord
11allow ${HOME}/.config/discord 11whitelist ${HOME}/.config/discord
12 12
13private-bin Discord 13private-bin Discord
14private-opt Discord 14private-opt Discord
diff --git a/etc/profile-a-l/DiscordCanary.profile b/etc/profile-a-l/DiscordCanary.profile
index 3c85f187b..d24e73ed8 100644
--- a/etc/profile-a-l/DiscordCanary.profile
+++ b/etc/profile-a-l/DiscordCanary.profile
@@ -5,10 +5,10 @@ include DiscordCanary.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/discordcanary 8noblacklist ${HOME}/.config/discordcanary
9 9
10mkdir ${HOME}/.config/discordcanary 10mkdir ${HOME}/.config/discordcanary
11allow ${HOME}/.config/discordcanary 11whitelist ${HOME}/.config/discordcanary
12 12
13private-bin DiscordCanary 13private-bin DiscordCanary
14private-opt DiscordCanary 14private-opt DiscordCanary
diff --git a/etc/profile-a-l/Fritzing.profile b/etc/profile-a-l/Fritzing.profile
index 8f746581f..7dc6b5ff0 100644
--- a/etc/profile-a-l/Fritzing.profile
+++ b/etc/profile-a-l/Fritzing.profile
@@ -6,8 +6,8 @@ include Fritzing.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/Fritzing 9noblacklist ${HOME}/.config/Fritzing
10nodeny ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/JDownloader.profile b/etc/profile-a-l/JDownloader.profile
index 9a00c3230..d10b70796 100644
--- a/etc/profile-a-l/JDownloader.profile
+++ b/etc/profile-a-l/JDownloader.profile
@@ -5,7 +5,7 @@ include JDownloader.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.jd 8noblacklist ${HOME}/.jd
9 9
10# Allow java (blacklisted by disable-devel.inc) 10# Allow java (blacklisted by disable-devel.inc)
11include allow-java.inc 11include allow-java.inc
@@ -19,8 +19,8 @@ include disable-programs.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21mkdir ${HOME}/.jd 21mkdir ${HOME}/.jd
22allow ${HOME}/.jd 22whitelist ${HOME}/.jd
23allow ${DOWNLOADS} 23whitelist ${DOWNLOADS}
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
26 26
diff --git a/etc/profile-a-l/abiword.profile b/etc/profile-a-l/abiword.profile
index 2a92c7db4..75da9a956 100644
--- a/etc/profile-a-l/abiword.profile
+++ b/etc/profile-a-l/abiword.profile
@@ -6,7 +6,7 @@ include abiword.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/abiword 9noblacklist ${HOME}/.config/abiword
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,7 +16,7 @@ include disable-passwdmgr.inc
16include disable-programs.inc 16include disable-programs.inc
17include disable-shell.inc 17include disable-shell.inc
18 18
19allow /usr/share/abiword-3.0 19whitelist /usr/share/abiword-3.0
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-runuser-common.inc 21include whitelist-runuser-common.inc
22include whitelist-var-common.inc 22include whitelist-var-common.inc
diff --git a/etc/profile-a-l/abrowser.profile b/etc/profile-a-l/abrowser.profile
index 70ddcec20..2e6e8f1af 100644
--- a/etc/profile-a-l/abrowser.profile
+++ b/etc/profile-a-l/abrowser.profile
@@ -5,13 +5,13 @@ include abrowser.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.cache/mozilla 8noblacklist ${HOME}/.cache/mozilla
9nodeny ${HOME}/.mozilla 9noblacklist ${HOME}/.mozilla
10 10
11mkdir ${HOME}/.cache/mozilla/abrowser 11mkdir ${HOME}/.cache/mozilla/abrowser
12mkdir ${HOME}/.mozilla 12mkdir ${HOME}/.mozilla
13allow ${HOME}/.cache/mozilla/abrowser 13whitelist ${HOME}/.cache/mozilla/abrowser
14allow ${HOME}/.mozilla 14whitelist ${HOME}/.mozilla
15 15
16# private-etc must first be enabled in firefox-common.profile 16# private-etc must first be enabled in firefox-common.profile
17#private-etc abrowser 17#private-etc abrowser
diff --git a/etc/profile-a-l/agetpkg.profile b/etc/profile-a-l/agetpkg.profile
index d32586c5b..34f59769e 100644
--- a/etc/profile-a-l/agetpkg.profile
+++ b/etc/profile-a-l/agetpkg.profile
@@ -7,8 +7,8 @@ include agetpkg.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10deny /tmp/.X11-unix 10blacklist /tmp/.X11-unix
11deny ${RUNUSER}/wayland-* 11blacklist ${RUNUSER}/wayland-*
12 12
13# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
14#include allow-python2.inc 14#include allow-python2.inc
@@ -23,7 +23,7 @@ include disable-programs.inc
23include disable-shell.inc 23include disable-shell.inc
24include disable-xdg.inc 24include disable-xdg.inc
25 25
26allow ${DOWNLOADS} 26whitelist ${DOWNLOADS}
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc 29include whitelist-var-common.inc
diff --git a/etc/profile-a-l/akonadi_control.profile b/etc/profile-a-l/akonadi_control.profile
index 7b1d1445f..37fdb38b5 100644
--- a/etc/profile-a-l/akonadi_control.profile
+++ b/etc/profile-a-l/akonadi_control.profile
@@ -4,22 +4,22 @@ include akonadi_control.local
4# Persistent global definitions 4# Persistent global definitions
5include globals.local 5include globals.local
6 6
7nodeny ${HOME}/.cache/akonadi* 7noblacklist ${HOME}/.cache/akonadi*
8nodeny ${HOME}/.config/akonadi* 8noblacklist ${HOME}/.config/akonadi*
9nodeny ${HOME}/.config/baloorc 9noblacklist ${HOME}/.config/baloorc
10nodeny ${HOME}/.config/emaildefaults 10noblacklist ${HOME}/.config/emaildefaults
11nodeny ${HOME}/.config/emailidentities 11noblacklist ${HOME}/.config/emailidentities
12nodeny ${HOME}/.config/kmail2rc 12noblacklist ${HOME}/.config/kmail2rc
13nodeny ${HOME}/.config/mailtransports 13noblacklist ${HOME}/.config/mailtransports
14nodeny ${HOME}/.config/specialmailcollectionsrc 14noblacklist ${HOME}/.config/specialmailcollectionsrc
15nodeny ${HOME}/.local/share/akonadi* 15noblacklist ${HOME}/.local/share/akonadi*
16nodeny ${HOME}/.local/share/apps/korganizer 16noblacklist ${HOME}/.local/share/apps/korganizer
17nodeny ${HOME}/.local/share/contacts 17noblacklist ${HOME}/.local/share/contacts
18nodeny ${HOME}/.local/share/local-mail 18noblacklist ${HOME}/.local/share/local-mail
19nodeny ${HOME}/.local/share/notes 19noblacklist ${HOME}/.local/share/notes
20nodeny /sbin 20noblacklist /sbin
21nodeny /tmp/akonadi-* 21noblacklist /tmp/akonadi-*
22nodeny /usr/sbin 22noblacklist /usr/sbin
23 23
24include disable-common.inc 24include disable-common.inc
25include disable-devel.inc 25include disable-devel.inc
diff --git a/etc/profile-a-l/akregator.profile b/etc/profile-a-l/akregator.profile
index b2323547c..38fcd2dc1 100644
--- a/etc/profile-a-l/akregator.profile
+++ b/etc/profile-a-l/akregator.profile
@@ -6,9 +6,9 @@ include akregator.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/akregatorrc 9noblacklist ${HOME}/.config/akregatorrc
10nodeny ${HOME}/.local/share/akregator 10noblacklist ${HOME}/.local/share/akregator
11nodeny ${HOME}/.local/share/kxmlgui5/akregator 11noblacklist ${HOME}/.local/share/kxmlgui5/akregator
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -21,10 +21,10 @@ include disable-shell.inc
21mkfile ${HOME}/.config/akregatorrc 21mkfile ${HOME}/.config/akregatorrc
22mkdir ${HOME}/.local/share/akregator 22mkdir ${HOME}/.local/share/akregator
23mkdir ${HOME}/.local/share/kxmlgui5/akregator 23mkdir ${HOME}/.local/share/kxmlgui5/akregator
24allow ${HOME}/.config/akregatorrc 24whitelist ${HOME}/.config/akregatorrc
25allow ${HOME}/.local/share/akregator 25whitelist ${HOME}/.local/share/akregator
26allow ${HOME}/.local/share/kssl 26whitelist ${HOME}/.local/share/kssl
27allow ${HOME}/.local/share/kxmlgui5/akregator 27whitelist ${HOME}/.local/share/kxmlgui5/akregator
28include whitelist-common.inc 28include whitelist-common.inc
29include whitelist-var-common.inc 29include whitelist-var-common.inc
30 30
diff --git a/etc/profile-a-l/alacarte.profile b/etc/profile-a-l/alacarte.profile
index ca6c8d887..4c6d68020 100644
--- a/etc/profile-a-l/alacarte.profile
+++ b/etc/profile-a-l/alacarte.profile
@@ -19,13 +19,13 @@ include disable-passwdmgr.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21# Whitelist your system icon directory,varies by distro 21# Whitelist your system icon directory,varies by distro
22allow /usr/share/alacarte 22whitelist /usr/share/alacarte
23allow /usr/share/app-info 23whitelist /usr/share/app-info
24allow /usr/share/desktop-directories 24whitelist /usr/share/desktop-directories
25allow /usr/share/icons 25whitelist /usr/share/icons
26allow /var/lib/app-info/icons 26whitelist /var/lib/app-info/icons
27allow /var/lib/flatpak/exports/share/applications 27whitelist /var/lib/flatpak/exports/share/applications
28allow /var/lib/flatpak/exports/share/icons 28whitelist /var/lib/flatpak/exports/share/icons
29include whitelist-runuser-common.inc 29include whitelist-runuser-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/alienarena.profile b/etc/profile-a-l/alienarena.profile
index 220c3345d..81ee6bd46 100644
--- a/etc/profile-a-l/alienarena.profile
+++ b/etc/profile-a-l/alienarena.profile
@@ -6,7 +6,7 @@ include alienarena.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/cor-games 9noblacklist ${HOME}/.local/share/cor-games
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.local/share/cor-games 20mkdir ${HOME}/.local/share/cor-games
21allow ${HOME}/.local/share/cor-games 21whitelist ${HOME}/.local/share/cor-games
22allow /usr/share/alienarena 22whitelist /usr/share/alienarena
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/alpine.profile b/etc/profile-a-l/alpine.profile
index 6fa3edfa1..0b5cf0df0 100644
--- a/etc/profile-a-l/alpine.profile
+++ b/etc/profile-a-l/alpine.profile
@@ -10,28 +10,28 @@ include globals.local
10# Workaround for bug https://github.com/netblue30/firejail/issues/2747 10# Workaround for bug https://github.com/netblue30/firejail/issues/2747
11# firejail --private-bin=sh --include='${CFG}/allow-bin-sh.inc' --profile=alpine sh -c '(alpine)' 11# firejail --private-bin=sh --include='${CFG}/allow-bin-sh.inc' --profile=alpine sh -c '(alpine)'
12 12
13nodeny /var/mail 13noblacklist /var/mail
14nodeny /var/spool/mail 14noblacklist /var/spool/mail
15nodeny ${DOCUMENTS} 15noblacklist ${DOCUMENTS}
16nodeny ${HOME}/.addressbook 16noblacklist ${HOME}/.addressbook
17nodeny ${HOME}/.alpine-smime 17noblacklist ${HOME}/.alpine-smime
18nodeny ${HOME}/.mailcap 18noblacklist ${HOME}/.mailcap
19nodeny ${HOME}/.mh_profile 19noblacklist ${HOME}/.mh_profile
20nodeny ${HOME}/.mime.types 20noblacklist ${HOME}/.mime.types
21nodeny ${HOME}/.newsrc 21noblacklist ${HOME}/.newsrc
22nodeny ${HOME}/.pine-crash 22noblacklist ${HOME}/.pine-crash
23nodeny ${HOME}/.pine-debug1 23noblacklist ${HOME}/.pine-debug1
24nodeny ${HOME}/.pine-debug2 24noblacklist ${HOME}/.pine-debug2
25nodeny ${HOME}/.pine-debug3 25noblacklist ${HOME}/.pine-debug3
26nodeny ${HOME}/.pine-debug4 26noblacklist ${HOME}/.pine-debug4
27nodeny ${HOME}/.pine-interrupted-mail 27noblacklist ${HOME}/.pine-interrupted-mail
28nodeny ${HOME}/.pinerc 28noblacklist ${HOME}/.pinerc
29nodeny ${HOME}/.pinercex 29noblacklist ${HOME}/.pinercex
30nodeny ${HOME}/.signature 30noblacklist ${HOME}/.signature
31nodeny ${HOME}/mail 31noblacklist ${HOME}/mail
32 32
33deny /tmp/.X11-unix 33blacklist /tmp/.X11-unix
34deny ${RUNUSER}/wayland-* 34blacklist ${RUNUSER}/wayland-*
35 35
36include disable-common.inc 36include disable-common.inc
37include disable-devel.inc 37include disable-devel.inc
@@ -60,8 +60,8 @@ include disable-xdg.inc
60#whitelist ${HOME}/.pine-debug4 60#whitelist ${HOME}/.pine-debug4
61#whitelist ${HOME}/.signature 61#whitelist ${HOME}/.signature
62#whitelist ${HOME}/mail 62#whitelist ${HOME}/mail
63allow /var/mail 63whitelist /var/mail
64allow /var/spool/mail 64whitelist /var/spool/mail
65#include whitelist-common.inc 65#include whitelist-common.inc
66include whitelist-runuser-common.inc 66include whitelist-runuser-common.inc
67include whitelist-usr-share-common.inc 67include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/amarok.profile b/etc/profile-a-l/amarok.profile
index 03aba36e4..a7caddc4c 100644
--- a/etc/profile-a-l/amarok.profile
+++ b/etc/profile-a-l/amarok.profile
@@ -6,7 +6,7 @@ include amarok.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${MUSIC} 9noblacklist ${MUSIC}
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/amule.profile b/etc/profile-a-l/amule.profile
index 00039a7e9..e3c4164ee 100644
--- a/etc/profile-a-l/amule.profile
+++ b/etc/profile-a-l/amule.profile
@@ -6,7 +6,7 @@ include amule.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.aMule 9noblacklist ${HOME}/.aMule
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,8 +16,8 @@ include disable-passwdmgr.inc
16include disable-programs.inc 16include disable-programs.inc
17 17
18mkdir ${HOME}/.aMule 18mkdir ${HOME}/.aMule
19allow ${DOWNLOADS} 19whitelist ${DOWNLOADS}
20allow ${HOME}/.aMule 20whitelist ${HOME}/.aMule
21include whitelist-common.inc 21include whitelist-common.inc
22 22
23caps.drop all 23caps.drop all
diff --git a/etc/profile-a-l/android-studio.profile b/etc/profile-a-l/android-studio.profile
index 5bf6ed773..5a21744cf 100644
--- a/etc/profile-a-l/android-studio.profile
+++ b/etc/profile-a-l/android-studio.profile
@@ -5,13 +5,13 @@ include android-studio.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/Google 8noblacklist ${HOME}/.config/Google
9nodeny ${HOME}/.AndroidStudio* 9noblacklist ${HOME}/.AndroidStudio*
10nodeny ${HOME}/.android 10noblacklist ${HOME}/.android
11nodeny ${HOME}/.jack-server 11noblacklist ${HOME}/.jack-server
12nodeny ${HOME}/.jack-settings 12noblacklist ${HOME}/.jack-settings
13nodeny ${HOME}/.local/share/JetBrains 13noblacklist ${HOME}/.local/share/JetBrains
14nodeny ${HOME}/.tooling 14noblacklist ${HOME}/.tooling
15 15
16# Allows files commonly used by IDEs 16# Allows files commonly used by IDEs
17include allow-common-devel.inc 17include allow-common-devel.inc
diff --git a/etc/profile-a-l/anki.profile b/etc/profile-a-l/anki.profile
index c1aa18ff3..13bb01ce2 100644
--- a/etc/profile-a-l/anki.profile
+++ b/etc/profile-a-l/anki.profile
@@ -6,8 +6,8 @@ include anki.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${DOCUMENTS} 9noblacklist ${DOCUMENTS}
10nodeny ${HOME}/.local/share/Anki2 10noblacklist ${HOME}/.local/share/Anki2
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
@@ -23,8 +23,8 @@ include disable-shell.inc
23include disable-xdg.inc 23include disable-xdg.inc
24 24
25mkdir ${HOME}/.local/share/Anki2 25mkdir ${HOME}/.local/share/Anki2
26allow ${DOCUMENTS} 26whitelist ${DOCUMENTS}
27allow ${HOME}/.local/share/Anki2 27whitelist ${HOME}/.local/share/Anki2
28include whitelist-common.inc 28include whitelist-common.inc
29include whitelist-var-common.inc 29include whitelist-var-common.inc
30 30
diff --git a/etc/profile-a-l/anydesk.profile b/etc/profile-a-l/anydesk.profile
index cb30ed8da..fdaf10259 100644
--- a/etc/profile-a-l/anydesk.profile
+++ b/etc/profile-a-l/anydesk.profile
@@ -5,7 +5,7 @@ include anydesk.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.anydesk 8noblacklist ${HOME}/.anydesk
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16 16
17mkdir ${HOME}/.anydesk 17mkdir ${HOME}/.anydesk
18allow ${HOME}/.anydesk 18whitelist ${HOME}/.anydesk
19include whitelist-common.inc 19include whitelist-common.inc
20 20
21caps.drop all 21caps.drop all
diff --git a/etc/profile-a-l/aosp.profile b/etc/profile-a-l/aosp.profile
index d647a4657..e7b09283e 100644
--- a/etc/profile-a-l/aosp.profile
+++ b/etc/profile-a-l/aosp.profile
@@ -5,13 +5,13 @@ include aosp.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.android 8noblacklist ${HOME}/.android
9nodeny ${HOME}/.bash_history 9noblacklist ${HOME}/.bash_history
10nodeny ${HOME}/.jack-server 10noblacklist ${HOME}/.jack-server
11nodeny ${HOME}/.jack-settings 11noblacklist ${HOME}/.jack-settings
12nodeny ${HOME}/.repo_.gitconfig.json 12noblacklist ${HOME}/.repo_.gitconfig.json
13nodeny ${HOME}/.repoconfig 13noblacklist ${HOME}/.repoconfig
14nodeny ${HOME}/.tooling 14noblacklist ${HOME}/.tooling
15 15
16# Allows files commonly used by IDEs 16# Allows files commonly used by IDEs
17include allow-common-devel.inc 17include allow-common-devel.inc
diff --git a/etc/profile-a-l/apostrophe.profile b/etc/profile-a-l/apostrophe.profile
index 020ae2812..01566314f 100644
--- a/etc/profile-a-l/apostrophe.profile
+++ b/etc/profile-a-l/apostrophe.profile
@@ -6,9 +6,9 @@ include apostrophe.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.texlive20* 9noblacklist ${HOME}/.texlive20*
10nodeny ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11nodeny ${PICTURES} 11noblacklist ${PICTURES}
12 12
13# Allow lua (blacklisted by disable-interpreters.inc) 13# Allow lua (blacklisted by disable-interpreters.inc)
14include allow-lua.inc 14include allow-lua.inc
@@ -31,12 +31,12 @@ include disable-programs.inc
31include disable-shell.inc 31include disable-shell.inc
32include disable-xdg.inc 32include disable-xdg.inc
33 33
34allow /usr/libexec/webkit2gtk-4.0 34whitelist /usr/libexec/webkit2gtk-4.0
35allow /usr/share/apostrophe 35whitelist /usr/share/apostrophe
36allow /usr/share/texlive 36whitelist /usr/share/texlive
37allow /usr/share/texmf 37whitelist /usr/share/texmf
38allow /usr/share/pandoc-* 38whitelist /usr/share/pandoc-*
39allow /usr/share/perl5 39whitelist /usr/share/perl5
40include whitelist-runuser-common.inc 40include whitelist-runuser-common.inc
41include whitelist-usr-share-common.inc 41include whitelist-usr-share-common.inc
42include whitelist-var-common.inc 42include whitelist-var-common.inc
diff --git a/etc/profile-a-l/arch-audit.profile b/etc/profile-a-l/arch-audit.profile
index 8c71dd574..accabb6f5 100644
--- a/etc/profile-a-l/arch-audit.profile
+++ b/etc/profile-a-l/arch-audit.profile
@@ -7,7 +7,7 @@ include arch-audit.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny /var/lib/pacman 10noblacklist /var/lib/pacman
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -18,7 +18,7 @@ include disable-programs.inc
18include disable-shell.inc 18include disable-shell.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21allow /usr/share/arch-audit 21whitelist /usr/share/arch-audit
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23 23
24apparmor 24apparmor
diff --git a/etc/profile-a-l/archaudit-report.profile b/etc/profile-a-l/archaudit-report.profile
index 0915ede33..19c37f90e 100644
--- a/etc/profile-a-l/archaudit-report.profile
+++ b/etc/profile-a-l/archaudit-report.profile
@@ -6,7 +6,7 @@ include archaudit-report.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny /var/lib/pacman 9noblacklist /var/lib/pacman
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/archiver-common.profile b/etc/profile-a-l/archiver-common.profile
index 5b859ceb1..1fab4606b 100644
--- a/etc/profile-a-l/archiver-common.profile
+++ b/etc/profile-a-l/archiver-common.profile
@@ -4,7 +4,7 @@ include archiver-common.local
4 4
5# common profile for archiver/compression tools 5# common profile for archiver/compression tools
6 6
7deny ${RUNUSER} 7blacklist ${RUNUSER}
8 8
9# Comment/uncomment the relevant include file(s) in your archiver-common.local 9# Comment/uncomment the relevant include file(s) in your archiver-common.local
10# to (un)restrict file access for **all** archivers. Another option is to do this **per archiver** 10# to (un)restrict file access for **all** archivers. Another option is to do this **per archiver**
diff --git a/etc/profile-a-l/ardour5.profile b/etc/profile-a-l/ardour5.profile
index 960948afc..84b1d6c18 100644
--- a/etc/profile-a-l/ardour5.profile
+++ b/etc/profile-a-l/ardour5.profile
@@ -5,12 +5,12 @@ include ardour5.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/ardour4 8noblacklist ${HOME}/.config/ardour4
9nodeny ${HOME}/.config/ardour5 9noblacklist ${HOME}/.config/ardour5
10nodeny ${HOME}/.lv2 10noblacklist ${HOME}/.lv2
11nodeny ${HOME}/.vst 11noblacklist ${HOME}/.vst
12nodeny ${DOCUMENTS} 12noblacklist ${DOCUMENTS}
13nodeny ${MUSIC} 13noblacklist ${MUSIC}
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/arduino.profile b/etc/profile-a-l/arduino.profile
index 88f14fbfe..fd1ca9a09 100644
--- a/etc/profile-a-l/arduino.profile
+++ b/etc/profile-a-l/arduino.profile
@@ -6,9 +6,9 @@ include arduino.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.arduino15 9noblacklist ${HOME}/.arduino15
10nodeny ${HOME}/Arduino 10noblacklist ${HOME}/Arduino
11nodeny ${DOCUMENTS} 11noblacklist ${DOCUMENTS}
12 12
13# Allow java (blacklisted by disable-devel.inc) 13# Allow java (blacklisted by disable-devel.inc)
14include allow-java.inc 14include allow-java.inc
diff --git a/etc/profile-a-l/aria2c.profile b/etc/profile-a-l/aria2c.profile
index be56011f0..22b8ecd65 100644
--- a/etc/profile-a-l/aria2c.profile
+++ b/etc/profile-a-l/aria2c.profile
@@ -6,12 +6,12 @@ include aria2c.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.aria2 9noblacklist ${HOME}/.aria2
10nodeny ${HOME}/.config/aria2 10noblacklist ${HOME}/.config/aria2
11nodeny ${HOME}/.netrc 11noblacklist ${HOME}/.netrc
12 12
13deny /tmp/.X11-unix 13blacklist /tmp/.X11-unix
14deny ${RUNUSER}/wayland-* 14blacklist ${RUNUSER}/wayland-*
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/ark.profile b/etc/profile-a-l/ark.profile
index 031c57080..a63dd8f5f 100644
--- a/etc/profile-a-l/ark.profile
+++ b/etc/profile-a-l/ark.profile
@@ -6,8 +6,8 @@ include ark.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/arkrc 9noblacklist ${HOME}/.config/arkrc
10nodeny ${HOME}/.local/share/kxmlgui5/ark 10noblacklist ${HOME}/.local/share/kxmlgui5/ark
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -16,7 +16,7 @@ include disable-interpreters.inc
16include disable-passwdmgr.inc 16include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18 18
19allow /usr/share/ark 19whitelist /usr/share/ark
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
22 22
diff --git a/etc/profile-a-l/arm.profile b/etc/profile-a-l/arm.profile
index 9ed8076be..2c8b630ce 100644
--- a/etc/profile-a-l/arm.profile
+++ b/etc/profile-a-l/arm.profile
@@ -6,7 +6,7 @@ include arm.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.arm 9noblacklist ${HOME}/.arm
10 10
11# Allow python (blacklisted by disable-interpreters.inc) 11# Allow python (blacklisted by disable-interpreters.inc)
12include allow-python2.inc 12include allow-python2.inc
@@ -20,7 +20,7 @@ include disable-passwdmgr.inc
20include disable-programs.inc 20include disable-programs.inc
21 21
22mkdir ${HOME}/.arm 22mkdir ${HOME}/.arm
23allow ${HOME}/.arm 23whitelist ${HOME}/.arm
24include whitelist-common.inc 24include whitelist-common.inc
25 25
26caps.drop all 26caps.drop all
diff --git a/etc/profile-a-l/artha.profile b/etc/profile-a-l/artha.profile
index 7cfac4915..fab72b7d3 100644
--- a/etc/profile-a-l/artha.profile
+++ b/etc/profile-a-l/artha.profile
@@ -6,12 +6,12 @@ include artha.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/artha.conf 9noblacklist ${HOME}/.config/artha.conf
10nodeny ${HOME}/.config/artha.log 10noblacklist ${HOME}/.config/artha.log
11nodeny ${HOME}/.config/enchant 11noblacklist ${HOME}/.config/enchant
12 12
13deny /tmp/.X11-unix 13blacklist /tmp/.X11-unix
14deny ${RUNUSER}/wayland-* 14blacklist ${RUNUSER}/wayland-*
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
@@ -28,8 +28,8 @@ include disable-xdg.inc
28#whitelist ${HOME}/.config/artha.conf 28#whitelist ${HOME}/.config/artha.conf
29#whitelist ${HOME}/.config/artha.log 29#whitelist ${HOME}/.config/artha.log
30#whitelist ${HOME}/.config/enchant 30#whitelist ${HOME}/.config/enchant
31allow /usr/share/artha 31whitelist /usr/share/artha
32allow /usr/share/wordnet 32whitelist /usr/share/wordnet
33#include whitelist-common.inc 33#include whitelist-common.inc
34include whitelist-usr-share-common.inc 34include whitelist-usr-share-common.inc
35include whitelist-var-common.inc 35include whitelist-var-common.inc
diff --git a/etc/profile-a-l/assogiate.profile b/etc/profile-a-l/assogiate.profile
index f2251c210..977fe30a4 100644
--- a/etc/profile-a-l/assogiate.profile
+++ b/etc/profile-a-l/assogiate.profile
@@ -6,7 +6,7 @@ include assogiate.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${PICTURES} 9noblacklist ${PICTURES}
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-programs.inc
17include disable-shell.inc 17include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20allow ${PICTURES} 20whitelist ${PICTURES}
21include whitelist-common.inc 21include whitelist-common.inc
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
diff --git a/etc/profile-a-l/asunder.profile b/etc/profile-a-l/asunder.profile
index e65072266..c97fd691a 100644
--- a/etc/profile-a-l/asunder.profile
+++ b/etc/profile-a-l/asunder.profile
@@ -6,11 +6,11 @@ include asunder.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/asunder 9noblacklist ${HOME}/.config/asunder
10nodeny ${HOME}/.asunder_album_genre 10noblacklist ${HOME}/.asunder_album_genre
11nodeny ${HOME}/.asunder_album_title 11noblacklist ${HOME}/.asunder_album_title
12nodeny ${HOME}/.asunder_album_artist 12noblacklist ${HOME}/.asunder_album_artist
13nodeny ${MUSIC} 13noblacklist ${MUSIC}
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/atom.profile b/etc/profile-a-l/atom.profile
index ea3038537..5f237ac59 100644
--- a/etc/profile-a-l/atom.profile
+++ b/etc/profile-a-l/atom.profile
@@ -18,8 +18,8 @@ ignore include whitelist-var-common.inc
18ignore apparmor 18ignore apparmor
19ignore disable-mnt 19ignore disable-mnt
20 20
21nodeny ${HOME}/.atom 21noblacklist ${HOME}/.atom
22nodeny ${HOME}/.config/Atom 22noblacklist ${HOME}/.config/Atom
23 23
24# Allows files commonly used by IDEs 24# Allows files commonly used by IDEs
25include allow-common-devel.inc 25include allow-common-devel.inc
diff --git a/etc/profile-a-l/atril.profile b/etc/profile-a-l/atril.profile
index 8ae8617cf..1c3ed66ff 100644
--- a/etc/profile-a-l/atril.profile
+++ b/etc/profile-a-l/atril.profile
@@ -6,9 +6,9 @@ include atril.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/atril 9noblacklist ${HOME}/.cache/atril
10nodeny ${HOME}/.config/atril 10noblacklist ${HOME}/.config/atril
11nodeny ${DOCUMENTS} 11noblacklist ${DOCUMENTS}
12 12
13#noblacklist ${HOME}/.local/share 13#noblacklist ${HOME}/.local/share
14# it seems to use only ${HOME}/.local/share/webkitgtk 14# it seems to use only ${HOME}/.local/share/webkitgtk
diff --git a/etc/profile-a-l/audacious.profile b/etc/profile-a-l/audacious.profile
index 53baf0a2a..f9f209786 100644
--- a/etc/profile-a-l/audacious.profile
+++ b/etc/profile-a-l/audacious.profile
@@ -6,9 +6,9 @@ include audacious.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/Audaciousrc 9noblacklist ${HOME}/.config/Audaciousrc
10nodeny ${HOME}/.config/audacious 10noblacklist ${HOME}/.config/audacious
11nodeny ${MUSIC} 11noblacklist ${MUSIC}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/audacity.profile b/etc/profile-a-l/audacity.profile
index c244846e1..a2de8436a 100644
--- a/etc/profile-a-l/audacity.profile
+++ b/etc/profile-a-l/audacity.profile
@@ -6,9 +6,9 @@ include audacity.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.audacity-data 9noblacklist ${HOME}/.audacity-data
10nodeny ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11nodeny ${MUSIC} 11noblacklist ${MUSIC}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/audio-recorder.profile b/etc/profile-a-l/audio-recorder.profile
index 534792cc6..2c7fdc812 100644
--- a/etc/profile-a-l/audio-recorder.profile
+++ b/etc/profile-a-l/audio-recorder.profile
@@ -7,7 +7,7 @@ include audio-recorder.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${MUSIC} 10noblacklist ${MUSIC}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -17,10 +17,10 @@ include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20allow ${MUSIC} 20whitelist ${MUSIC}
21allow ${DOWNLOADS} 21whitelist ${DOWNLOADS}
22allow /usr/share/audio-recorder 22whitelist /usr/share/audio-recorder
23allow /usr/share/gstreamer-1.0 23whitelist /usr/share/gstreamer-1.0
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
diff --git a/etc/profile-a-l/authenticator-rs.profile b/etc/profile-a-l/authenticator-rs.profile
index 0d6eb6a21..2ebe35dd5 100644
--- a/etc/profile-a-l/authenticator-rs.profile
+++ b/etc/profile-a-l/authenticator-rs.profile
@@ -6,7 +6,7 @@ include authenticator-rs.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/authenticator-rs 9noblacklist ${HOME}/.local/share/authenticator-rs
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,9 +18,9 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.local/share/authenticator-rs 20mkdir ${HOME}/.local/share/authenticator-rs
21allow ${HOME}/.local/share/authenticator-rs 21whitelist ${HOME}/.local/share/authenticator-rs
22allow ${DOWNLOADS} 22whitelist ${DOWNLOADS}
23allow /usr/share/uk.co.grumlimited.authenticator-rs 23whitelist /usr/share/uk.co.grumlimited.authenticator-rs
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-runuser-common.inc 25include whitelist-runuser-common.inc
26include whitelist-usr-share-common.inc 26include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/authenticator.profile b/etc/profile-a-l/authenticator.profile
index 55d967e3e..42d9cd56a 100644
--- a/etc/profile-a-l/authenticator.profile
+++ b/etc/profile-a-l/authenticator.profile
@@ -6,8 +6,8 @@ include authenticator.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/Authenticator 9noblacklist ${HOME}/.cache/Authenticator
10nodeny ${HOME}/.config/Authenticator 10noblacklist ${HOME}/.config/Authenticator
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13#include allow-python2.inc 13#include allow-python2.inc
diff --git a/etc/profile-a-l/autokey-common.profile b/etc/profile-a-l/autokey-common.profile
index a5b3b22f6..891928e5a 100644
--- a/etc/profile-a-l/autokey-common.profile
+++ b/etc/profile-a-l/autokey-common.profile
@@ -7,8 +7,8 @@ include autokey-common.local
7# added by caller profile 7# added by caller profile
8#include globals.local 8#include globals.local
9 9
10nodeny ${HOME}/.config/autokey 10noblacklist ${HOME}/.config/autokey
11nodeny ${HOME}/.local/share/autokey 11noblacklist ${HOME}/.local/share/autokey
12 12
13# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
14include allow-python2.inc 14include allow-python2.inc
diff --git a/etc/profile-a-l/avidemux.profile b/etc/profile-a-l/avidemux.profile
index 0feb05d75..1ecc03da1 100644
--- a/etc/profile-a-l/avidemux.profile
+++ b/etc/profile-a-l/avidemux.profile
@@ -5,9 +5,9 @@ include avidemux.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.avidemux6 8noblacklist ${HOME}/.avidemux6
9nodeny ${HOME}/.config/avidemux3_qt5rc 9noblacklist ${HOME}/.config/avidemux3_qt5rc
10nodeny ${VIDEOS} 10noblacklist ${VIDEOS}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -20,9 +20,9 @@ include disable-xdg.inc
20 20
21mkdir ${HOME}/.avidemux6 21mkdir ${HOME}/.avidemux6
22mkdir ${HOME}/.config/avidemux3_qt5rc 22mkdir ${HOME}/.config/avidemux3_qt5rc
23allow ${HOME}/.avidemux6 23whitelist ${HOME}/.avidemux6
24allow ${HOME}/.config/avidemux3_qt5rc 24whitelist ${HOME}/.config/avidemux3_qt5rc
25allow ${VIDEOS} 25whitelist ${VIDEOS}
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-runuser-common.inc 27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/aweather.profile b/etc/profile-a-l/aweather.profile
index abe9fdb24..a57ad4014 100644
--- a/etc/profile-a-l/aweather.profile
+++ b/etc/profile-a-l/aweather.profile
@@ -6,7 +6,7 @@ include aweather.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/aweather 9noblacklist ${HOME}/.config/aweather
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,7 +16,7 @@ include disable-programs.inc
16include disable-shell.inc 16include disable-shell.inc
17 17
18mkdir ${HOME}/.config/aweather 18mkdir ${HOME}/.config/aweather
19allow ${HOME}/.config/aweather 19whitelist ${HOME}/.config/aweather
20include whitelist-common.inc 20include whitelist-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
22 22
diff --git a/etc/profile-a-l/awesome.profile b/etc/profile-a-l/awesome.profile
index 58f4f5e96..5d1bf5071 100644
--- a/etc/profile-a-l/awesome.profile
+++ b/etc/profile-a-l/awesome.profile
@@ -7,7 +7,7 @@ include awesome.local
7include globals.local 7include globals.local
8 8
9# all applications started in awesome will run in this profile 9# all applications started in awesome will run in this profile
10nodeny ${HOME}/.config/awesome 10noblacklist ${HOME}/.config/awesome
11include disable-common.inc 11include disable-common.inc
12 12
13caps.drop all 13caps.drop all
diff --git a/etc/profile-a-l/ballbuster.profile b/etc/profile-a-l/ballbuster.profile
index 46bb0b44e..3952921a3 100644
--- a/etc/profile-a-l/ballbuster.profile
+++ b/etc/profile-a-l/ballbuster.profile
@@ -6,7 +6,7 @@ include ballbuster.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.ballbuster.hs 9noblacklist ${HOME}/.ballbuster.hs
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkfile ${HOME}/.ballbuster.hs 20mkfile ${HOME}/.ballbuster.hs
21allow ${HOME}/.ballbuster.hs 21whitelist ${HOME}/.ballbuster.hs
22allow /usr/share/ballbuster 22whitelist /usr/share/ballbuster
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/baloo_file.profile b/etc/profile-a-l/baloo_file.profile
index 2b10883f7..fe86d9b80 100644
--- a/etc/profile-a-l/baloo_file.profile
+++ b/etc/profile-a-l/baloo_file.profile
@@ -12,12 +12,12 @@ include globals.local
12# read-write ${HOME}/.local/share/baloo 12# read-write ${HOME}/.local/share/baloo
13# ignore read-write 13# ignore read-write
14 14
15nodeny ${HOME}/.config/baloofilerc 15noblacklist ${HOME}/.config/baloofilerc
16nodeny ${HOME}/.kde/share/config/baloofilerc 16noblacklist ${HOME}/.kde/share/config/baloofilerc
17nodeny ${HOME}/.kde/share/config/baloorc 17noblacklist ${HOME}/.kde/share/config/baloorc
18nodeny ${HOME}/.kde4/share/config/baloofilerc 18noblacklist ${HOME}/.kde4/share/config/baloofilerc
19nodeny ${HOME}/.kde4/share/config/baloorc 19noblacklist ${HOME}/.kde4/share/config/baloorc
20nodeny ${HOME}/.local/share/baloo 20noblacklist ${HOME}/.local/share/baloo
21 21
22include disable-common.inc 22include disable-common.inc
23include disable-devel.inc 23include disable-devel.inc
diff --git a/etc/profile-a-l/balsa.profile b/etc/profile-a-l/balsa.profile
index 1e74443aa..8c69652c5 100644
--- a/etc/profile-a-l/balsa.profile
+++ b/etc/profile-a-l/balsa.profile
@@ -6,13 +6,13 @@ include balsa.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.balsa 9noblacklist ${HOME}/.balsa
10nodeny ${HOME}/.gnupg 10noblacklist ${HOME}/.gnupg
11nodeny ${HOME}/.mozilla 11noblacklist ${HOME}/.mozilla
12nodeny ${HOME}/.signature 12noblacklist ${HOME}/.signature
13nodeny ${HOME}/mail 13noblacklist ${HOME}/mail
14nodeny /var/mail 14noblacklist /var/mail
15nodeny /var/spool/mail 15noblacklist /var/spool/mail
16 16
17include disable-common.inc 17include disable-common.inc
18include disable-devel.inc 18include disable-devel.inc
@@ -27,17 +27,17 @@ mkdir ${HOME}/.balsa
27mkdir ${HOME}/.gnupg 27mkdir ${HOME}/.gnupg
28mkfile ${HOME}/.signature 28mkfile ${HOME}/.signature
29mkdir ${HOME}/mail 29mkdir ${HOME}/mail
30allow ${HOME}/.balsa 30whitelist ${HOME}/.balsa
31allow ${HOME}/.gnupg 31whitelist ${HOME}/.gnupg
32allow ${HOME}/.mozilla/firefox/profiles.ini 32whitelist ${HOME}/.mozilla/firefox/profiles.ini
33allow ${HOME}/.signature 33whitelist ${HOME}/.signature
34allow ${HOME}/mail 34whitelist ${HOME}/mail
35allow ${RUNUSER}/gnupg 35whitelist ${RUNUSER}/gnupg
36allow /usr/share/balsa 36whitelist /usr/share/balsa
37allow /usr/share/gnupg 37whitelist /usr/share/gnupg
38allow /usr/share/gnupg2 38whitelist /usr/share/gnupg2
39allow /var/mail 39whitelist /var/mail
40allow /var/spool/mail 40whitelist /var/spool/mail
41include whitelist-common.inc 41include whitelist-common.inc
42include whitelist-runuser-common.inc 42include whitelist-runuser-common.inc
43include whitelist-usr-share-common.inc 43include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/barrier.profile b/etc/profile-a-l/barrier.profile
index fcea9b3ba..7b50e9199 100644
--- a/etc/profile-a-l/barrier.profile
+++ b/etc/profile-a-l/barrier.profile
@@ -6,9 +6,9 @@ include barrier.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/Debauchee/Barrier.conf 9noblacklist ${HOME}/.config/Debauchee/Barrier.conf
10nodeny ${HOME}/.local/share/barrier 10noblacklist ${HOME}/.local/share/barrier
11nodeny ${PATH}/openssl 11noblacklist ${PATH}/openssl
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/basilisk.profile b/etc/profile-a-l/basilisk.profile
index 547c67fc8..8dc3847a0 100644
--- a/etc/profile-a-l/basilisk.profile
+++ b/etc/profile-a-l/basilisk.profile
@@ -5,13 +5,13 @@ include basilisk.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.cache/moonchild productions/basilisk 8noblacklist ${HOME}/.cache/moonchild productions/basilisk
9nodeny ${HOME}/.moonchild productions/basilisk 9noblacklist ${HOME}/.moonchild productions/basilisk
10 10
11mkdir ${HOME}/.cache/moonchild productions/basilisk 11mkdir ${HOME}/.cache/moonchild productions/basilisk
12mkdir ${HOME}/.moonchild productions 12mkdir ${HOME}/.moonchild productions
13allow ${HOME}/.cache/moonchild productions/basilisk 13whitelist ${HOME}/.cache/moonchild productions/basilisk
14allow ${HOME}/.moonchild productions 14whitelist ${HOME}/.moonchild productions
15 15
16# Basilisk can use the full firejail seccomp filter (unlike firefox >= 60) 16# Basilisk can use the full firejail seccomp filter (unlike firefox >= 60)
17seccomp 17seccomp
diff --git a/etc/profile-a-l/bcompare.profile b/etc/profile-a-l/bcompare.profile
index a1d2b1e73..3ecaea7fe 100644
--- a/etc/profile-a-l/bcompare.profile
+++ b/etc/profile-a-l/bcompare.profile
@@ -7,10 +7,10 @@ include bcompare.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${HOME}/.config/bcompare 10noblacklist ${HOME}/.config/bcompare
11# In case the user decides to include disable-programs.inc, still allow 11# In case the user decides to include disable-programs.inc, still allow
12# KDE's Gwenview to view images via right click -> Open With -> Associated Application 12# KDE's Gwenview to view images via right click -> Open With -> Associated Application
13nodeny ${HOME}/.config/gwenviewrc 13noblacklist ${HOME}/.config/gwenviewrc
14 14
15# Add the next line to your bcompare.local if you don't need to compare files in disable-common.inc. 15# Add the next line to your bcompare.local if you don't need to compare files in disable-common.inc.
16#include disable-common.inc 16#include disable-common.inc
diff --git a/etc/profile-a-l/beaker.profile b/etc/profile-a-l/beaker.profile
index 588f460a8..f3a9568bd 100644
--- a/etc/profile-a-l/beaker.profile
+++ b/etc/profile-a-l/beaker.profile
@@ -19,10 +19,10 @@ ignore private-cache
19ignore private-dev 19ignore private-dev
20ignore private-tmp 20ignore private-tmp
21 21
22nodeny ${HOME}/.config/Beaker Browser 22noblacklist ${HOME}/.config/Beaker Browser
23 23
24mkdir ${HOME}/.config/Beaker Browser 24mkdir ${HOME}/.config/Beaker Browser
25allow ${HOME}/.config/Beaker Browser 25whitelist ${HOME}/.config/Beaker Browser
26 26
27# Redirect 27# Redirect
28include electron.profile 28include electron.profile
diff --git a/etc/profile-a-l/bibletime.profile b/etc/profile-a-l/bibletime.profile
index 717d7258d..c7a82afbd 100644
--- a/etc/profile-a-l/bibletime.profile
+++ b/etc/profile-a-l/bibletime.profile
@@ -6,11 +6,11 @@ include bibletime.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.bibletime 9noblacklist ${HOME}/.bibletime
10nodeny ${HOME}/.sword 10noblacklist ${HOME}/.sword
11nodeny ${HOME}/.local/share/bibletime 11noblacklist ${HOME}/.local/share/bibletime
12 12
13deny ${HOME}/.bashrc 13blacklist ${HOME}/.bashrc
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -22,12 +22,12 @@ include disable-programs.inc
22mkdir ${HOME}/.bibletime 22mkdir ${HOME}/.bibletime
23mkdir ${HOME}/.sword 23mkdir ${HOME}/.sword
24mkdir ${HOME}/.local/share/bibletime 24mkdir ${HOME}/.local/share/bibletime
25allow ${HOME}/.bibletime 25whitelist ${HOME}/.bibletime
26allow ${HOME}/.sword 26whitelist ${HOME}/.sword
27allow ${HOME}/.local/share/bibletime 27whitelist ${HOME}/.local/share/bibletime
28allow /usr/share/bibletime 28whitelist /usr/share/bibletime
29allow /usr/share/doc/bibletime 29whitelist /usr/share/doc/bibletime
30allow /usr/share/sword 30whitelist /usr/share/sword
31include whitelist-common.inc 31include whitelist-common.inc
32include whitelist-usr-share-common.inc 32include whitelist-usr-share-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
diff --git a/etc/profile-a-l/bijiben.profile b/etc/profile-a-l/bijiben.profile
index b02fcc3e0..854fe5cb9 100644
--- a/etc/profile-a-l/bijiben.profile
+++ b/etc/profile-a-l/bijiben.profile
@@ -6,7 +6,7 @@ include bijiben.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/bijiben 9noblacklist ${HOME}/.local/share/bijiben
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,12 +18,12 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.local/share/bijiben 20mkdir ${HOME}/.local/share/bijiben
21allow ${HOME}/.local/share/bijiben 21whitelist ${HOME}/.local/share/bijiben
22allow ${HOME}/.cache/tracker 22whitelist ${HOME}/.cache/tracker
23allow /usr/libexec/webkit2gtk-4.0 23whitelist /usr/libexec/webkit2gtk-4.0
24allow /usr/share/bijiben 24whitelist /usr/share/bijiben
25allow /usr/share/tracker 25whitelist /usr/share/tracker
26allow /usr/share/tracker3 26whitelist /usr/share/tracker3
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/bitcoin-qt.profile b/etc/profile-a-l/bitcoin-qt.profile
index c4ec0f820..932db9b73 100644
--- a/etc/profile-a-l/bitcoin-qt.profile
+++ b/etc/profile-a-l/bitcoin-qt.profile
@@ -6,8 +6,8 @@ include bitcoin-qt.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.bitcoin 9noblacklist ${HOME}/.bitcoin
10nodeny ${HOME}/.config/Bitcoin 10noblacklist ${HOME}/.config/Bitcoin
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -19,8 +19,8 @@ include disable-shell.inc
19 19
20mkdir ${HOME}/.bitcoin 20mkdir ${HOME}/.bitcoin
21mkdir ${HOME}/.config/Bitcoin 21mkdir ${HOME}/.config/Bitcoin
22allow ${HOME}/.bitcoin 22whitelist ${HOME}/.bitcoin
23allow ${HOME}/.config/Bitcoin 23whitelist ${HOME}/.config/Bitcoin
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
26 26
diff --git a/etc/profile-a-l/bitlbee.profile b/etc/profile-a-l/bitlbee.profile
index 0f000b26b..dd7651979 100644
--- a/etc/profile-a-l/bitlbee.profile
+++ b/etc/profile-a-l/bitlbee.profile
@@ -8,8 +8,8 @@ include globals.local
8 8
9ignore noexec ${HOME} 9ignore noexec ${HOME}
10 10
11nodeny /sbin 11noblacklist /sbin
12nodeny /usr/sbin 12noblacklist /usr/sbin
13# noblacklist /var/log 13# noblacklist /var/log
14 14
15include disable-common.inc 15include disable-common.inc
diff --git a/etc/profile-a-l/bitwarden.profile b/etc/profile-a-l/bitwarden.profile
index 4b292d72a..ba2eb2ea7 100644
--- a/etc/profile-a-l/bitwarden.profile
+++ b/etc/profile-a-l/bitwarden.profile
@@ -11,12 +11,12 @@ ignore include whitelist-usr-share-common.inc
11 11
12ignore noexec /tmp 12ignore noexec /tmp
13 13
14nodeny ${HOME}/.config/Bitwarden 14noblacklist ${HOME}/.config/Bitwarden
15 15
16include disable-shell.inc 16include disable-shell.inc
17 17
18mkdir ${HOME}/.config/Bitwarden 18mkdir ${HOME}/.config/Bitwarden
19allow ${HOME}/.config/Bitwarden 19whitelist ${HOME}/.config/Bitwarden
20 20
21machine-id 21machine-id
22no3d 22no3d
diff --git a/etc/profile-a-l/blackbox.profile b/etc/profile-a-l/blackbox.profile
index 616ad6801..233f9a96f 100644
--- a/etc/profile-a-l/blackbox.profile
+++ b/etc/profile-a-l/blackbox.profile
@@ -7,7 +7,7 @@ include blackbox.local
7include globals.local 7include globals.local
8 8
9# all applications started in blackbox will run in this profile 9# all applications started in blackbox will run in this profile
10nodeny ${HOME}/.blackbox 10noblacklist ${HOME}/.blackbox
11include disable-common.inc 11include disable-common.inc
12 12
13caps.drop all 13caps.drop all
diff --git a/etc/profile-a-l/blender.profile b/etc/profile-a-l/blender.profile
index 8d0b5616f..701ae431e 100644
--- a/etc/profile-a-l/blender.profile
+++ b/etc/profile-a-l/blender.profile
@@ -6,7 +6,7 @@ include blender.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/blender 9noblacklist ${HOME}/.config/blender
10 10
11# Allow python (blacklisted by disable-interpreters.inc) 11# Allow python (blacklisted by disable-interpreters.inc)
12include allow-python2.inc 12include allow-python2.inc
@@ -20,8 +20,8 @@ include disable-passwdmgr.inc
20include disable-programs.inc 20include disable-programs.inc
21 21
22# Allow usage of AMD GPU by OpenCL 22# Allow usage of AMD GPU by OpenCL
23nodeny /sys/module 23noblacklist /sys/module
24allow /sys/module/amdgpu 24whitelist /sys/module/amdgpu
25read-only /sys/module/amdgpu 25read-only /sys/module/amdgpu
26 26
27caps.drop all 27caps.drop all
diff --git a/etc/profile-a-l/bless.profile b/etc/profile-a-l/bless.profile
index ca5f96eee..80dc750f7 100644
--- a/etc/profile-a-l/bless.profile
+++ b/etc/profile-a-l/bless.profile
@@ -6,7 +6,7 @@ include bless.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/bless 9noblacklist ${HOME}/.config/bless
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/blobby.profile b/etc/profile-a-l/blobby.profile
index ee2a73b54..229c20293 100644
--- a/etc/profile-a-l/blobby.profile
+++ b/etc/profile-a-l/blobby.profile
@@ -4,7 +4,7 @@ include blobby.local
4# Persistent global definitions 4# Persistent global definitions
5include globals.local 5include globals.local
6 6
7nodeny ${HOME}/.blobby 7noblacklist ${HOME}/.blobby
8 8
9include disable-common.inc 9include disable-common.inc
10include disable-devel.inc 10include disable-devel.inc
@@ -16,9 +16,9 @@ include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18mkdir ${HOME}/.blobby 18mkdir ${HOME}/.blobby
19allow ${HOME}/.blobby 19whitelist ${HOME}/.blobby
20include whitelist-common.inc 20include whitelist-common.inc
21allow /usr/share/blobby 21whitelist /usr/share/blobby
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/blobwars.profile b/etc/profile-a-l/blobwars.profile
index e0be5261e..904710cb5 100644
--- a/etc/profile-a-l/blobwars.profile
+++ b/etc/profile-a-l/blobwars.profile
@@ -6,7 +6,7 @@ include blobwars.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.parallelrealities/blobwars 9noblacklist ${HOME}/.parallelrealities/blobwars
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.parallelrealities/blobwars 20mkdir ${HOME}/.parallelrealities/blobwars
21allow ${HOME}/.parallelrealities/blobwars 21whitelist ${HOME}/.parallelrealities/blobwars
22allow /usr/share/blobwars 22whitelist /usr/share/blobwars
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
diff --git a/etc/profile-a-l/bnox.profile b/etc/profile-a-l/bnox.profile
index dcfd5d8d2..6e8f0d7d1 100644
--- a/etc/profile-a-l/bnox.profile
+++ b/etc/profile-a-l/bnox.profile
@@ -10,13 +10,13 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13nodeny ${HOME}/.cache/bnox 13noblacklist ${HOME}/.cache/bnox
14nodeny ${HOME}/.config/bnox 14noblacklist ${HOME}/.config/bnox
15 15
16mkdir ${HOME}/.cache/bnox 16mkdir ${HOME}/.cache/bnox
17mkdir ${HOME}/.config/bnox 17mkdir ${HOME}/.config/bnox
18allow ${HOME}/.cache/bnox 18whitelist ${HOME}/.cache/bnox
19allow ${HOME}/.config/bnox 19whitelist ${HOME}/.config/bnox
20 20
21# Redirect 21# Redirect
22include chromium-common.profile 22include chromium-common.profile
diff --git a/etc/profile-a-l/brackets.profile b/etc/profile-a-l/brackets.profile
index a14bb8fef..0cbac049a 100644
--- a/etc/profile-a-l/brackets.profile
+++ b/etc/profile-a-l/brackets.profile
@@ -5,7 +5,7 @@ include brackets.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/Brackets 8noblacklist ${HOME}/.config/Brackets
9#noblacklist /opt/brackets 9#noblacklist /opt/brackets
10#noblacklist /opt/google 10#noblacklist /opt/google
11 11
diff --git a/etc/profile-a-l/brasero.profile b/etc/profile-a-l/brasero.profile
index a78882409..417a6b3e0 100644
--- a/etc/profile-a-l/brasero.profile
+++ b/etc/profile-a-l/brasero.profile
@@ -6,7 +6,7 @@ include brasero.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/brasero 9noblacklist ${HOME}/.config/brasero
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/brave.profile b/etc/profile-a-l/brave.profile
index bc2d7a6a1..09548c761 100644
--- a/etc/profile-a-l/brave.profile
+++ b/etc/profile-a-l/brave.profile
@@ -14,24 +14,24 @@ ignore noexec /tmp
14# Alternatively you can add 'ignore apparmor' to your brave.local. 14# Alternatively you can add 'ignore apparmor' to your brave.local.
15ignore noexec ${HOME} 15ignore noexec ${HOME}
16 16
17nodeny ${HOME}/.cache/BraveSoftware 17noblacklist ${HOME}/.cache/BraveSoftware
18nodeny ${HOME}/.config/BraveSoftware 18noblacklist ${HOME}/.config/BraveSoftware
19nodeny ${HOME}/.config/brave 19noblacklist ${HOME}/.config/brave
20nodeny ${HOME}/.config/brave-flags.conf 20noblacklist ${HOME}/.config/brave-flags.conf
21# brave uses gpg for built-in password manager 21# brave uses gpg for built-in password manager
22nodeny ${HOME}/.gnupg 22noblacklist ${HOME}/.gnupg
23 23
24mkdir ${HOME}/.cache/BraveSoftware 24mkdir ${HOME}/.cache/BraveSoftware
25mkdir ${HOME}/.config/BraveSoftware 25mkdir ${HOME}/.config/BraveSoftware
26mkdir ${HOME}/.config/brave 26mkdir ${HOME}/.config/brave
27allow ${HOME}/.cache/BraveSoftware 27whitelist ${HOME}/.cache/BraveSoftware
28allow ${HOME}/.config/BraveSoftware 28whitelist ${HOME}/.config/BraveSoftware
29allow ${HOME}/.config/brave 29whitelist ${HOME}/.config/brave
30allow ${HOME}/.config/brave-flags.conf 30whitelist ${HOME}/.config/brave-flags.conf
31allow ${HOME}/.gnupg 31whitelist ${HOME}/.gnupg
32 32
33# Brave sandbox needs read access to /proc/config.gz 33# Brave sandbox needs read access to /proc/config.gz
34nodeny /proc/config.gz 34noblacklist /proc/config.gz
35 35
36# Redirect 36# Redirect
37include chromium-common.profile 37include chromium-common.profile
diff --git a/etc/profile-a-l/bzflag.profile b/etc/profile-a-l/bzflag.profile
index 62ca041c2..bda96bbb3 100644
--- a/etc/profile-a-l/bzflag.profile
+++ b/etc/profile-a-l/bzflag.profile
@@ -6,7 +6,7 @@ include bzflag.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.bzf 9noblacklist ${HOME}/.bzf
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,7 +18,7 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.bzf 20mkdir ${HOME}/.bzf
21allow ${HOME}/.bzf 21whitelist ${HOME}/.bzf
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/calibre.profile b/etc/profile-a-l/calibre.profile
index 99706620c..83571397b 100644
--- a/etc/profile-a-l/calibre.profile
+++ b/etc/profile-a-l/calibre.profile
@@ -6,9 +6,9 @@ include calibre.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/calibre 9noblacklist ${HOME}/.cache/calibre
10nodeny ${HOME}/.config/calibre 10noblacklist ${HOME}/.config/calibre
11nodeny ${DOCUMENTS} 11noblacklist ${DOCUMENTS}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/calligra.profile b/etc/profile-a-l/calligra.profile
index 36ecc06a0..fcff47662 100644
--- a/etc/profile-a-l/calligra.profile
+++ b/etc/profile-a-l/calligra.profile
@@ -6,7 +6,7 @@ include calligra.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/kxmlgui5/calligra 9noblacklist ${HOME}/.local/share/kxmlgui5/calligra
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/calligragemini.profile b/etc/profile-a-l/calligragemini.profile
index 76123c96a..006c307ab 100644
--- a/etc/profile-a-l/calligragemini.profile
+++ b/etc/profile-a-l/calligragemini.profile
@@ -6,7 +6,7 @@ include calligragemini.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9nodeny ${HOME}/.local/share/calligragemini 9noblacklist ${HOME}/.local/share/calligragemini
10 10
11# Redirect 11# Redirect
12include calligra.profile 12include calligra.profile
diff --git a/etc/profile-a-l/calligraplan.profile b/etc/profile-a-l/calligraplan.profile
index 5fb1e16da..81dbd4dcd 100644
--- a/etc/profile-a-l/calligraplan.profile
+++ b/etc/profile-a-l/calligraplan.profile
@@ -6,7 +6,7 @@ include calligraplan.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9nodeny ${HOME}/.local/share/kxmlgui5/calligraplan 9noblacklist ${HOME}/.local/share/kxmlgui5/calligraplan
10 10
11# Redirect 11# Redirect
12include calligra.profile 12include calligra.profile
diff --git a/etc/profile-a-l/calligraplanwork.profile b/etc/profile-a-l/calligraplanwork.profile
index c176bfea1..bba91b66b 100644
--- a/etc/profile-a-l/calligraplanwork.profile
+++ b/etc/profile-a-l/calligraplanwork.profile
@@ -6,7 +6,7 @@ include calligraplanwork.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9nodeny ${HOME}/.local/share/kxmlgui5/calligraplanwork 9noblacklist ${HOME}/.local/share/kxmlgui5/calligraplanwork
10 10
11# Redirect 11# Redirect
12include calligra.profile 12include calligra.profile
diff --git a/etc/profile-a-l/calligrasheets.profile b/etc/profile-a-l/calligrasheets.profile
index b7ac68945..7bc296047 100644
--- a/etc/profile-a-l/calligrasheets.profile
+++ b/etc/profile-a-l/calligrasheets.profile
@@ -6,7 +6,7 @@ include calligrasheets.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9nodeny ${HOME}/.local/share/kxmlgui5/calligrasheets 9noblacklist ${HOME}/.local/share/kxmlgui5/calligrasheets
10 10
11# Redirect 11# Redirect
12include calligra.profile 12include calligra.profile
diff --git a/etc/profile-a-l/calligrastage.profile b/etc/profile-a-l/calligrastage.profile
index 1258fec56..7694abbe4 100644
--- a/etc/profile-a-l/calligrastage.profile
+++ b/etc/profile-a-l/calligrastage.profile
@@ -6,7 +6,7 @@ include calligrastage.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9nodeny ${HOME}/.local/share/kxmlgui5/calligrastage 9noblacklist ${HOME}/.local/share/kxmlgui5/calligrastage
10 10
11# Redirect 11# Redirect
12include calligra.profile 12include calligra.profile
diff --git a/etc/profile-a-l/calligrawords.profile b/etc/profile-a-l/calligrawords.profile
index c2b6c8041..d69d56a95 100644
--- a/etc/profile-a-l/calligrawords.profile
+++ b/etc/profile-a-l/calligrawords.profile
@@ -6,7 +6,7 @@ include calligrawords.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9nodeny ${HOME}/.local/share/kxmlgui5/calligrawords 9noblacklist ${HOME}/.local/share/kxmlgui5/calligrawords
10 10
11# Redirect 11# Redirect
12include calligra.profile 12include calligra.profile
diff --git a/etc/profile-a-l/cameramonitor.profile b/etc/profile-a-l/cameramonitor.profile
index 390ae383c..74c7cc34b 100644
--- a/etc/profile-a-l/cameramonitor.profile
+++ b/etc/profile-a-l/cameramonitor.profile
@@ -20,7 +20,7 @@ include disable-programs.inc
20include disable-shell.inc 20include disable-shell.inc
21include disable-xdg.inc 21include disable-xdg.inc
22 22
23allow /usr/share/cameramonitor 23whitelist /usr/share/cameramonitor
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
diff --git a/etc/profile-a-l/cantata.profile b/etc/profile-a-l/cantata.profile
index 77bdc09e0..96f88a7c4 100644
--- a/etc/profile-a-l/cantata.profile
+++ b/etc/profile-a-l/cantata.profile
@@ -6,10 +6,10 @@ include cantata.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/cantata 9noblacklist ${HOME}/.cache/cantata
10nodeny ${HOME}/.config/cantata 10noblacklist ${HOME}/.config/cantata
11nodeny ${HOME}/.local/share/cantata 11noblacklist ${HOME}/.local/share/cantata
12nodeny ${MUSIC} 12noblacklist ${MUSIC}
13 13
14# Allow perl (blacklisted by disable-interpreters.inc) 14# Allow perl (blacklisted by disable-interpreters.inc)
15include allow-perl.inc 15include allow-perl.inc
diff --git a/etc/profile-a-l/cargo.profile b/etc/profile-a-l/cargo.profile
index 9c53af84f..7cf04c550 100644
--- a/etc/profile-a-l/cargo.profile
+++ b/etc/profile-a-l/cargo.profile
@@ -10,11 +10,11 @@ include globals.local
10ignore noexec ${HOME} 10ignore noexec ${HOME}
11ignore noexec /tmp 11ignore noexec /tmp
12 12
13deny /tmp/.X11-unix 13blacklist /tmp/.X11-unix
14deny ${RUNUSER} 14blacklist ${RUNUSER}
15 15
16nodeny ${HOME}/.cargo/credentials 16noblacklist ${HOME}/.cargo/credentials
17nodeny ${HOME}/.cargo/credentials.toml 17noblacklist ${HOME}/.cargo/credentials.toml
18 18
19# Allows files commonly used by IDEs 19# Allows files commonly used by IDEs
20include allow-common-devel.inc 20include allow-common-devel.inc
@@ -34,7 +34,7 @@ include disable-xdg.inc
34#whitelist ${HOME}/.cargo 34#whitelist ${HOME}/.cargo
35#whitelist ${HOME}/.rustup 35#whitelist ${HOME}/.rustup
36#include whitelist-common.inc 36#include whitelist-common.inc
37allow /usr/share/pkgconfig 37whitelist /usr/share/pkgconfig
38include whitelist-runuser-common.inc 38include whitelist-runuser-common.inc
39include whitelist-usr-share-common.inc 39include whitelist-usr-share-common.inc
40include whitelist-var-common.inc 40include whitelist-var-common.inc
diff --git a/etc/profile-a-l/catfish.profile b/etc/profile-a-l/catfish.profile
index 4ea53ea6b..009d3a049 100644
--- a/etc/profile-a-l/catfish.profile
+++ b/etc/profile-a-l/catfish.profile
@@ -9,7 +9,7 @@ include globals.local
9# We can't blacklist much since catfish 9# We can't blacklist much since catfish
10# is for finding files/content 10# is for finding files/content
11 11
12nodeny ${HOME}/.config/catfish 12noblacklist ${HOME}/.config/catfish
13 13
14# Allow python (blacklisted by disable-interpreters.inc) 14# Allow python (blacklisted by disable-interpreters.inc)
15include allow-python2.inc 15include allow-python2.inc
@@ -21,7 +21,7 @@ include disable-interpreters.inc
21include disable-passwdmgr.inc 21include disable-passwdmgr.inc
22# include disable-programs.inc 22# include disable-programs.inc
23 23
24allow /var/lib/mlocate 24whitelist /var/lib/mlocate
25include whitelist-var-common.inc 25include whitelist-var-common.inc
26 26
27apparmor 27apparmor
diff --git a/etc/profile-a-l/cawbird.profile b/etc/profile-a-l/cawbird.profile
index d7aee1902..6e137010c 100644
--- a/etc/profile-a-l/cawbird.profile
+++ b/etc/profile-a-l/cawbird.profile
@@ -6,7 +6,7 @@ include cawbird.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/cawbird 9noblacklist ${HOME}/.config/cawbird
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/celluloid.profile b/etc/profile-a-l/celluloid.profile
index d6f4306ba..1c539cc93 100644
--- a/etc/profile-a-l/celluloid.profile
+++ b/etc/profile-a-l/celluloid.profile
@@ -6,9 +6,9 @@ include celluloid.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/celluloid 9noblacklist ${HOME}/.config/celluloid
10nodeny ${HOME}/.config/gnome-mpv 10noblacklist ${HOME}/.config/gnome-mpv
11nodeny ${HOME}/.config/youtube-dl 11noblacklist ${HOME}/.config/youtube-dl
12 12
13# Allow lua (blacklisted by disable-interpreters.inc) 13# Allow lua (blacklisted by disable-interpreters.inc)
14include allow-lua.inc 14include allow-lua.inc
@@ -17,7 +17,7 @@ include allow-lua.inc
17include allow-python2.inc 17include allow-python2.inc
18include allow-python3.inc 18include allow-python3.inc
19 19
20deny /usr/libexec 20blacklist /usr/libexec
21 21
22include disable-common.inc 22include disable-common.inc
23include disable-devel.inc 23include disable-devel.inc
@@ -30,9 +30,9 @@ read-only ${DESKTOP}
30mkdir ${HOME}/.config/celluloid 30mkdir ${HOME}/.config/celluloid
31mkdir ${HOME}/.config/gnome-mpv 31mkdir ${HOME}/.config/gnome-mpv
32mkdir ${HOME}/.config/youtube-dl 32mkdir ${HOME}/.config/youtube-dl
33allow ${HOME}/.config/celluloid 33whitelist ${HOME}/.config/celluloid
34allow ${HOME}/.config/gnome-mpv 34whitelist ${HOME}/.config/gnome-mpv
35allow ${HOME}/.config/youtube-dl 35whitelist ${HOME}/.config/youtube-dl
36include whitelist-common.inc 36include whitelist-common.inc
37include whitelist-player-common.inc 37include whitelist-player-common.inc
38include whitelist-runuser-common.inc 38include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/checkbashisms.profile b/etc/profile-a-l/checkbashisms.profile
index 0f61084e0..24939fc70 100644
--- a/etc/profile-a-l/checkbashisms.profile
+++ b/etc/profile-a-l/checkbashisms.profile
@@ -7,9 +7,9 @@ include checkbashisms.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10deny ${RUNUSER}/wayland-* 10blacklist ${RUNUSER}/wayland-*
11 11
12nodeny ${DOCUMENTS} 12noblacklist ${DOCUMENTS}
13 13
14# Allow perl (blacklisted by disable-interpreters.inc) 14# Allow perl (blacklisted by disable-interpreters.inc)
15include allow-perl.inc 15include allow-perl.inc
diff --git a/etc/profile-a-l/cheese.profile b/etc/profile-a-l/cheese.profile
index bde3e1311..aca1f5876 100644
--- a/etc/profile-a-l/cheese.profile
+++ b/etc/profile-a-l/cheese.profile
@@ -6,8 +6,8 @@ include cheese.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${VIDEOS} 9noblacklist ${VIDEOS}
10nodeny ${PICTURES} 10noblacklist ${PICTURES}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -17,9 +17,9 @@ include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20allow ${VIDEOS} 20whitelist ${VIDEOS}
21allow ${PICTURES} 21whitelist ${PICTURES}
22allow /usr/share/gnome-video-effects 22whitelist /usr/share/gnome-video-effects
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/cherrytree.profile b/etc/profile-a-l/cherrytree.profile
index d5dedd81d..7621b3c8c 100644
--- a/etc/profile-a-l/cherrytree.profile
+++ b/etc/profile-a-l/cherrytree.profile
@@ -6,8 +6,8 @@ include cherrytree.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/cherrytree 9noblacklist ${HOME}/.config/cherrytree
10nodeny ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/chromium-browser-privacy.profile b/etc/profile-a-l/chromium-browser-privacy.profile
index 64c45772a..8803a4d9d 100644
--- a/etc/profile-a-l/chromium-browser-privacy.profile
+++ b/etc/profile-a-l/chromium-browser-privacy.profile
@@ -3,15 +3,15 @@
3# Persistent local customizations 3# Persistent local customizations
4include chromium-browser-privacy.local 4include chromium-browser-privacy.local
5 5
6nodeny ${HOME}/.cache/ungoogled-chromium 6noblacklist ${HOME}/.cache/ungoogled-chromium
7nodeny ${HOME}/.config/ungoogled-chromium 7noblacklist ${HOME}/.config/ungoogled-chromium
8 8
9deny /usr/libexec 9blacklist /usr/libexec
10 10
11mkdir ${HOME}/.cache/ungoogled-chromium 11mkdir ${HOME}/.cache/ungoogled-chromium
12mkdir ${HOME}/.config/ungoogled-chromium 12mkdir ${HOME}/.config/ungoogled-chromium
13allow ${HOME}/.cache/ungoogled-chromium 13whitelist ${HOME}/.cache/ungoogled-chromium
14allow ${HOME}/.config/ungoogled-chromium 14whitelist ${HOME}/.config/ungoogled-chromium
15 15
16# private-bin basename,bash,cat,chromium-browser-privacy,dirname,mkdir,readlink,sed,touch,which,xdg-settings 16# private-bin basename,bash,cat,chromium-browser-privacy,dirname,mkdir,readlink,sed,touch,which,xdg-settings
17 17
diff --git a/etc/profile-a-l/chromium-common.profile b/etc/profile-a-l/chromium-common.profile
index dbeb715d4..b0e0254d4 100644
--- a/etc/profile-a-l/chromium-common.profile
+++ b/etc/profile-a-l/chromium-common.profile
@@ -9,8 +9,8 @@ include chromium-common.local
9# noexec ${HOME} breaks DRM binaries. 9# noexec ${HOME} breaks DRM binaries.
10?BROWSER_ALLOW_DRM: ignore noexec ${HOME} 10?BROWSER_ALLOW_DRM: ignore noexec ${HOME}
11 11
12nodeny ${HOME}/.pki 12noblacklist ${HOME}/.pki
13nodeny ${HOME}/.local/share/pki 13noblacklist ${HOME}/.local/share/pki
14 14
15# Add the next line to your chromium-common.local if you want Google Chrome/Chromium browser 15# Add the next line to your chromium-common.local if you want Google Chrome/Chromium browser
16# to have access to Gnome extensions (extensions.gnome.org) via browser connector 16# to have access to Gnome extensions (extensions.gnome.org) via browser connector
@@ -26,9 +26,9 @@ include disable-xdg.inc
26 26
27mkdir ${HOME}/.pki 27mkdir ${HOME}/.pki
28mkdir ${HOME}/.local/share/pki 28mkdir ${HOME}/.local/share/pki
29allow ${DOWNLOADS} 29whitelist ${DOWNLOADS}
30allow ${HOME}/.pki 30whitelist ${HOME}/.pki
31allow ${HOME}/.local/share/pki 31whitelist ${HOME}/.local/share/pki
32include whitelist-common.inc 32include whitelist-common.inc
33include whitelist-runuser-common.inc 33include whitelist-runuser-common.inc
34include whitelist-usr-share-common.inc 34include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/chromium.profile b/etc/profile-a-l/chromium.profile
index ea92e90a8..9ac33aa1c 100644
--- a/etc/profile-a-l/chromium.profile
+++ b/etc/profile-a-l/chromium.profile
@@ -6,17 +6,17 @@ include chromium.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/chromium 9noblacklist ${HOME}/.cache/chromium
10nodeny ${HOME}/.config/chromium 10noblacklist ${HOME}/.config/chromium
11nodeny ${HOME}/.config/chromium-flags.conf 11noblacklist ${HOME}/.config/chromium-flags.conf
12 12
13mkdir ${HOME}/.cache/chromium 13mkdir ${HOME}/.cache/chromium
14mkdir ${HOME}/.config/chromium 14mkdir ${HOME}/.config/chromium
15allow ${HOME}/.cache/chromium 15whitelist ${HOME}/.cache/chromium
16allow ${HOME}/.config/chromium 16whitelist ${HOME}/.config/chromium
17allow ${HOME}/.config/chromium-flags.conf 17whitelist ${HOME}/.config/chromium-flags.conf
18allow /usr/share/chromium 18whitelist /usr/share/chromium
19allow /usr/share/mozilla/extensions 19whitelist /usr/share/mozilla/extensions
20 20
21# private-bin chromium,chromium-browser,chromedriver 21# private-bin chromium,chromium-browser,chromedriver
22 22
diff --git a/etc/profile-a-l/cin.profile b/etc/profile-a-l/cin.profile
index c967e1c96..e1f9523c4 100644
--- a/etc/profile-a-l/cin.profile
+++ b/etc/profile-a-l/cin.profile
@@ -5,7 +5,7 @@ include cin.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.bcast5 8noblacklist ${HOME}/.bcast5
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
diff --git a/etc/profile-a-l/clamav.profile b/etc/profile-a-l/clamav.profile
index 0efbcd4f2..e403c2c41 100644
--- a/etc/profile-a-l/clamav.profile
+++ b/etc/profile-a-l/clamav.profile
@@ -7,7 +7,7 @@ include clamav.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10deny ${RUNUSER}/wayland-* 10blacklist ${RUNUSER}/wayland-*
11 11
12include disable-exec.inc 12include disable-exec.inc
13 13
diff --git a/etc/profile-a-l/claws-mail.profile b/etc/profile-a-l/claws-mail.profile
index 3e4e1f2a1..691657fa0 100644
--- a/etc/profile-a-l/claws-mail.profile
+++ b/etc/profile-a-l/claws-mail.profile
@@ -6,17 +6,17 @@ include claws-mail.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.claws-mail 9noblacklist ${HOME}/.claws-mail
10 10
11mkdir ${HOME}/.claws-mail 11mkdir ${HOME}/.claws-mail
12allow ${HOME}/.claws-mail 12whitelist ${HOME}/.claws-mail
13 13
14# Add the below lines to your claws-mail.local if you use python-based plugins. 14# Add the below lines to your claws-mail.local if you use python-based plugins.
15# Allow python (blacklisted by disable-interpreters.inc) 15# Allow python (blacklisted by disable-interpreters.inc)
16#include allow-python2.inc 16#include allow-python2.inc
17#include allow-python3.inc 17#include allow-python3.inc
18 18
19allow /usr/share/doc/claws-mail 19whitelist /usr/share/doc/claws-mail
20 20
21# private-bin claws-mail,curl,gpg,gpg2,gpg-agent,gpgsm,gpgme-config,pinentry,pinentry-gtk-2 21# private-bin claws-mail,curl,gpg,gpg2,gpg-agent,gpgsm,gpgme-config,pinentry,pinentry-gtk-2
22 22
diff --git a/etc/profile-a-l/clawsker.profile b/etc/profile-a-l/clawsker.profile
index ee64391d9..9b62a1f73 100644
--- a/etc/profile-a-l/clawsker.profile
+++ b/etc/profile-a-l/clawsker.profile
@@ -6,7 +6,7 @@ include clawsker.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.claws-mail 9noblacklist ${HOME}/.claws-mail
10 10
11# Allow perl (blacklisted by disable-interpreters.inc) 11# Allow perl (blacklisted by disable-interpreters.inc)
12include allow-perl.inc 12include allow-perl.inc
@@ -19,7 +19,7 @@ include disable-passwdmgr.inc
19include disable-programs.inc 19include disable-programs.inc
20 20
21mkdir ${HOME}/.claws-mail 21mkdir ${HOME}/.claws-mail
22allow ${HOME}/.claws-mail 22whitelist ${HOME}/.claws-mail
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
diff --git a/etc/profile-a-l/clementine.profile b/etc/profile-a-l/clementine.profile
index f9c0006f9..fa33795c1 100644
--- a/etc/profile-a-l/clementine.profile
+++ b/etc/profile-a-l/clementine.profile
@@ -6,9 +6,9 @@ include clementine.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/Clementine 9noblacklist ${HOME}/.cache/Clementine
10nodeny ${HOME}/.config/Clementine 10noblacklist ${HOME}/.config/Clementine
11nodeny ${MUSIC} 11noblacklist ${MUSIC}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/clion.profile b/etc/profile-a-l/clion.profile
index 5c5399069..77952358f 100644
--- a/etc/profile-a-l/clion.profile
+++ b/etc/profile-a-l/clion.profile
@@ -5,16 +5,16 @@ include clion.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/JetBrains/CLion* 8noblacklist ${HOME}/.config/JetBrains/CLion*
9nodeny ${HOME}/.cache/JetBrains/CLion* 9noblacklist ${HOME}/.cache/JetBrains/CLion*
10nodeny ${HOME}/.clion* 10noblacklist ${HOME}/.clion*
11nodeny ${HOME}/.CLion* 11noblacklist ${HOME}/.CLion*
12nodeny ${HOME}/.config/git 12noblacklist ${HOME}/.config/git
13nodeny ${HOME}/.gitconfig 13noblacklist ${HOME}/.gitconfig
14nodeny ${HOME}/.git-credentials 14noblacklist ${HOME}/.git-credentials
15nodeny ${HOME}/.java 15noblacklist ${HOME}/.java
16nodeny ${HOME}/.local/share/JetBrains 16noblacklist ${HOME}/.local/share/JetBrains
17nodeny ${HOME}/.tooling 17noblacklist ${HOME}/.tooling
18 18
19# Allow ssh (blacklisted by disable-common.inc) 19# Allow ssh (blacklisted by disable-common.inc)
20include allow-ssh.inc 20include allow-ssh.inc
diff --git a/etc/profile-a-l/clipgrab.profile b/etc/profile-a-l/clipgrab.profile
index 89f8d96f0..c8258da07 100644
--- a/etc/profile-a-l/clipgrab.profile
+++ b/etc/profile-a-l/clipgrab.profile
@@ -6,9 +6,9 @@ include clipgrab.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/Philipp Schmieder 9noblacklist ${HOME}/.config/Philipp Schmieder
10nodeny ${HOME}/.pki 10noblacklist ${HOME}/.pki
11nodeny ${VIDEOS} 11noblacklist ${VIDEOS}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/clipit.profile b/etc/profile-a-l/clipit.profile
index 4a2a5171b..d421903a3 100644
--- a/etc/profile-a-l/clipit.profile
+++ b/etc/profile-a-l/clipit.profile
@@ -6,8 +6,8 @@ include clipit.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/clipit 9noblacklist ${HOME}/.config/clipit
10nodeny ${HOME}/.local/share/clipit 10noblacklist ${HOME}/.local/share/clipit
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -19,8 +19,8 @@ include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/clipit 20mkdir ${HOME}/.config/clipit
21mkdir ${HOME}/.local/share/clipit 21mkdir ${HOME}/.local/share/clipit
22allow ${HOME}/.config/clipit 22whitelist ${HOME}/.config/clipit
23allow ${HOME}/.local/share/clipit 23whitelist ${HOME}/.local/share/clipit
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
diff --git a/etc/profile-a-l/cliqz.profile b/etc/profile-a-l/cliqz.profile
index 22c6ef882..d0b8cc0ef 100644
--- a/etc/profile-a-l/cliqz.profile
+++ b/etc/profile-a-l/cliqz.profile
@@ -5,16 +5,16 @@ include cliqz.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.cache/cliqz 8noblacklist ${HOME}/.cache/cliqz
9nodeny ${HOME}/.cliqz 9noblacklist ${HOME}/.cliqz
10nodeny ${HOME}/.config/cliqz 10noblacklist ${HOME}/.config/cliqz
11 11
12mkdir ${HOME}/.cache/cliqz 12mkdir ${HOME}/.cache/cliqz
13mkdir ${HOME}/.cliqz 13mkdir ${HOME}/.cliqz
14mkdir ${HOME}/.config/cliqz 14mkdir ${HOME}/.config/cliqz
15allow ${HOME}/.cache/cliqz 15whitelist ${HOME}/.cache/cliqz
16allow ${HOME}/.cliqz 16whitelist ${HOME}/.cliqz
17allow ${HOME}/.config/cliqz 17whitelist ${HOME}/.config/cliqz
18 18
19# private-etc must first be enabled in firefox-common.profile 19# private-etc must first be enabled in firefox-common.profile
20#private-etc cliqz 20#private-etc cliqz
diff --git a/etc/profile-a-l/cmus.profile b/etc/profile-a-l/cmus.profile
index 51e53209f..bcd557787 100644
--- a/etc/profile-a-l/cmus.profile
+++ b/etc/profile-a-l/cmus.profile
@@ -6,8 +6,8 @@ include cmus.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/cmus 9noblacklist ${HOME}/.config/cmus
10nodeny ${MUSIC} 10noblacklist ${MUSIC}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/code.profile b/etc/profile-a-l/code.profile
index 1933c66fa..e19b78908 100644
--- a/etc/profile-a-l/code.profile
+++ b/etc/profile-a-l/code.profile
@@ -5,10 +5,10 @@ include code.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/Code 8noblacklist ${HOME}/.config/Code
9nodeny ${HOME}/.config/Code - OSS 9noblacklist ${HOME}/.config/Code - OSS
10nodeny ${HOME}/.vscode 10noblacklist ${HOME}/.vscode
11nodeny ${HOME}/.vscode-oss 11noblacklist ${HOME}/.vscode-oss
12 12
13# Allows files commonly used by IDEs 13# Allows files commonly used by IDEs
14include allow-common-devel.inc 14include allow-common-devel.inc
diff --git a/etc/profile-a-l/colorful.profile b/etc/profile-a-l/colorful.profile
index efa7f516c..bd6d8f5b0 100644
--- a/etc/profile-a-l/colorful.profile
+++ b/etc/profile-a-l/colorful.profile
@@ -6,7 +6,7 @@ include colorful.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.suve/colorful 9noblacklist ${HOME}/.suve/colorful
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.suve/colorful 20mkdir ${HOME}/.suve/colorful
21allow ${HOME}/.suve/colorful 21whitelist ${HOME}/.suve/colorful
22allow /usr/share/suve 22whitelist /usr/share/suve
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/com.github.bleakgrey.tootle.profile b/etc/profile-a-l/com.github.bleakgrey.tootle.profile
index 34b662959..c8bdfec23 100644
--- a/etc/profile-a-l/com.github.bleakgrey.tootle.profile
+++ b/etc/profile-a-l/com.github.bleakgrey.tootle.profile
@@ -6,7 +6,7 @@ include com.github.bleakgrey.tootle.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/com.github.bleakgrey.tootle 9noblacklist ${HOME}/.config/com.github.bleakgrey.tootle
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/com.github.bleakgrey.tootle 20mkdir ${HOME}/.config/com.github.bleakgrey.tootle
21allow ${DOWNLOADS} 21whitelist ${DOWNLOADS}
22allow ${HOME}/.config/com.github.bleakgrey.tootle 22whitelist ${HOME}/.config/com.github.bleakgrey.tootle
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/com.github.dahenson.agenda.profile b/etc/profile-a-l/com.github.dahenson.agenda.profile
index 4e26e4925..b467a0f7a 100644
--- a/etc/profile-a-l/com.github.dahenson.agenda.profile
+++ b/etc/profile-a-l/com.github.dahenson.agenda.profile
@@ -6,9 +6,9 @@ include com.github.dahenson.agenda.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/agenda 9noblacklist ${HOME}/.cache/agenda
10nodeny ${HOME}/.config/agenda 10noblacklist ${HOME}/.config/agenda
11nodeny ${HOME}/.local/share/agenda 11noblacklist ${HOME}/.local/share/agenda
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -22,9 +22,9 @@ include disable-xdg.inc
22mkdir ${HOME}/.cache/agenda 22mkdir ${HOME}/.cache/agenda
23mkdir ${HOME}/.config/agenda 23mkdir ${HOME}/.config/agenda
24mkdir ${HOME}/.local/share/agenda 24mkdir ${HOME}/.local/share/agenda
25allow ${HOME}/.cache/agenda 25whitelist ${HOME}/.cache/agenda
26allow ${HOME}/.config/agenda 26whitelist ${HOME}/.config/agenda
27allow ${HOME}/.local/share/agenda 27whitelist ${HOME}/.local/share/agenda
28include whitelist-common.inc 28include whitelist-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
30include whitelist-runuser-common.inc 30include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/com.github.johnfactotum.Foliate.profile b/etc/profile-a-l/com.github.johnfactotum.Foliate.profile
index bbfc1fe41..c13f9618b 100644
--- a/etc/profile-a-l/com.github.johnfactotum.Foliate.profile
+++ b/etc/profile-a-l/com.github.johnfactotum.Foliate.profile
@@ -6,9 +6,9 @@ include foliate.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${DOCUMENTS} 9noblacklist ${DOCUMENTS}
10nodeny ${HOME}/.cache/com.github.johnfactotum.Foliate 10noblacklist ${HOME}/.cache/com.github.johnfactotum.Foliate
11nodeny ${HOME}/.local/share/com.github.johnfactotum.Foliate 11noblacklist ${HOME}/.local/share/com.github.johnfactotum.Foliate
12 12
13# Allow gjs (blacklisted by disable-interpreters.inc) 13# Allow gjs (blacklisted by disable-interpreters.inc)
14include allow-gjs.inc 14include allow-gjs.inc
@@ -24,12 +24,12 @@ include disable-xdg.inc
24 24
25mkdir ${HOME}/.cache/com.github.johnfactotum.Foliate 25mkdir ${HOME}/.cache/com.github.johnfactotum.Foliate
26mkdir ${HOME}/.local/share/com.github.johnfactotum.Foliate 26mkdir ${HOME}/.local/share/com.github.johnfactotum.Foliate
27allow ${HOME}/.cache/com.github.johnfactotum.Foliate 27whitelist ${HOME}/.cache/com.github.johnfactotum.Foliate
28allow ${HOME}/.local/share/com.github.johnfactotum.Foliate 28whitelist ${HOME}/.local/share/com.github.johnfactotum.Foliate
29allow ${DOCUMENTS} 29whitelist ${DOCUMENTS}
30allow ${DOWNLOADS} 30whitelist ${DOWNLOADS}
31allow /usr/share/com.github.johnfactotum.Foliate 31whitelist /usr/share/com.github.johnfactotum.Foliate
32allow /usr/share/hyphen 32whitelist /usr/share/hyphen
33include whitelist-common.inc 33include whitelist-common.inc
34include whitelist-usr-share-common.inc 34include whitelist-usr-share-common.inc
35include whitelist-var-common.inc 35include whitelist-var-common.inc
diff --git a/etc/profile-a-l/com.github.phase1geo.minder.profile b/etc/profile-a-l/com.github.phase1geo.minder.profile
index 3e9acc6c8..d0402d188 100644
--- a/etc/profile-a-l/com.github.phase1geo.minder.profile
+++ b/etc/profile-a-l/com.github.phase1geo.minder.profile
@@ -6,9 +6,9 @@ include com.github.phase1geo.minder.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/minder 9noblacklist ${HOME}/.local/share/minder
10nodeny ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11nodeny ${PICTURES} 11noblacklist ${PICTURES}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -20,10 +20,10 @@ include disable-shell.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22mkdir ${HOME}/.local/share/minder 22mkdir ${HOME}/.local/share/minder
23allow ${HOME}/.local/share/minder 23whitelist ${HOME}/.local/share/minder
24allow ${DOCUMENTS} 24whitelist ${DOCUMENTS}
25allow ${DOWNLOADS} 25whitelist ${DOWNLOADS}
26allow ${PICTURES} 26whitelist ${PICTURES}
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/conkeror.profile b/etc/profile-a-l/conkeror.profile
index 6cc9ec551..38edf0d21 100644
--- a/etc/profile-a-l/conkeror.profile
+++ b/etc/profile-a-l/conkeror.profile
@@ -5,23 +5,23 @@ include conkeror.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.conkeror.mozdev.org 8noblacklist ${HOME}/.conkeror.mozdev.org
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-programs.inc 11include disable-programs.inc
12 12
13mkdir ${HOME}/.conkeror.mozdev.org 13mkdir ${HOME}/.conkeror.mozdev.org
14mkfile ${HOME}/.conkerorrc 14mkfile ${HOME}/.conkerorrc
15allow ${HOME}/.conkeror.mozdev.org 15whitelist ${HOME}/.conkeror.mozdev.org
16allow ${HOME}/.conkerorrc 16whitelist ${HOME}/.conkerorrc
17allow ${HOME}/.lastpass 17whitelist ${HOME}/.lastpass
18allow ${HOME}/.pentadactyl 18whitelist ${HOME}/.pentadactyl
19allow ${HOME}/.pentadactylrc 19whitelist ${HOME}/.pentadactylrc
20allow ${HOME}/.vimperator 20whitelist ${HOME}/.vimperator
21allow ${HOME}/.vimperatorrc 21whitelist ${HOME}/.vimperatorrc
22allow ${HOME}/.zotero 22whitelist ${HOME}/.zotero
23allow ${HOME}/dwhelper 23whitelist ${HOME}/dwhelper
24allow ${DOWNLOADS} 24whitelist ${DOWNLOADS}
25include whitelist-common.inc 25include whitelist-common.inc
26 26
27caps.drop all 27caps.drop all
diff --git a/etc/profile-a-l/conky.profile b/etc/profile-a-l/conky.profile
index 1b3fe6651..eaa18739d 100644
--- a/etc/profile-a-l/conky.profile
+++ b/etc/profile-a-l/conky.profile
@@ -6,7 +6,7 @@ include conky.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${PICTURES} 9noblacklist ${PICTURES}
10 10
11# Allow lua (blacklisted by disable-interpreters.inc) 11# Allow lua (blacklisted by disable-interpreters.inc)
12include allow-lua.inc 12include allow-lua.inc
diff --git a/etc/profile-a-l/corebird.profile b/etc/profile-a-l/corebird.profile
index 266c404ee..2fb446e2a 100644
--- a/etc/profile-a-l/corebird.profile
+++ b/etc/profile-a-l/corebird.profile
@@ -6,7 +6,7 @@ include corebird.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/corebird 9noblacklist ${HOME}/.config/corebird
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/cower.profile b/etc/profile-a-l/cower.profile
index 0a1353e40..1635995dc 100644
--- a/etc/profile-a-l/cower.profile
+++ b/etc/profile-a-l/cower.profile
@@ -7,8 +7,8 @@ include cower.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${HOME}/.config/cower 10noblacklist ${HOME}/.config/cower
11nodeny /var/lib/pacman 11noblacklist /var/lib/pacman
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/coyim.profile b/etc/profile-a-l/coyim.profile
index 5e48c8022..7ece35c2b 100644
--- a/etc/profile-a-l/coyim.profile
+++ b/etc/profile-a-l/coyim.profile
@@ -6,7 +6,7 @@ include coyim.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/coyim 9noblacklist ${HOME}/.config/coyim
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,7 +18,7 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/coyim 20mkdir ${HOME}/.config/coyim
21allow ${HOME}/.config/coyim 21whitelist ${HOME}/.config/coyim
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/cpio.profile b/etc/profile-a-l/cpio.profile
index dec8c086b..bdc4f21a6 100644
--- a/etc/profile-a-l/cpio.profile
+++ b/etc/profile-a-l/cpio.profile
@@ -7,8 +7,8 @@ include cpio.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny /sbin 10noblacklist /sbin
11nodeny /usr/sbin 11noblacklist /usr/sbin
12 12
13# Redirect 13# Redirect
14include archiver-common.profile 14include archiver-common.profile
diff --git a/etc/profile-a-l/crawl.profile b/etc/profile-a-l/crawl.profile
index 81292c01c..b10216895 100644
--- a/etc/profile-a-l/crawl.profile
+++ b/etc/profile-a-l/crawl.profile
@@ -6,7 +6,7 @@ include crawl-tiles.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.crawl 9noblacklist ${HOME}/.crawl
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19mkdir ${HOME}/.crawl 19mkdir ${HOME}/.crawl
20allow ${HOME}/.crawl 20whitelist ${HOME}/.crawl
21include whitelist-common.inc 21include whitelist-common.inc
22include whitelist-var-common.inc 22include whitelist-var-common.inc
23 23
diff --git a/etc/profile-a-l/crow.profile b/etc/profile-a-l/crow.profile
index 36bd93778..02b15ecc2 100644
--- a/etc/profile-a-l/crow.profile
+++ b/etc/profile-a-l/crow.profile
@@ -8,8 +8,8 @@ include globals.local
8 8
9mkdir ${HOME}/.config/crow 9mkdir ${HOME}/.config/crow
10mkdir ${HOME}/.cache/gstreamer-1.0 10mkdir ${HOME}/.cache/gstreamer-1.0
11allow ${HOME}/.config/crow 11whitelist ${HOME}/.config/crow
12allow ${HOME}/.cache/gstreamer-1.0 12whitelist ${HOME}/.cache/gstreamer-1.0
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
diff --git a/etc/profile-a-l/curl.profile b/etc/profile-a-l/curl.profile
index 4950b7a4c..c9867c5d7 100644
--- a/etc/profile-a-l/curl.profile
+++ b/etc/profile-a-l/curl.profile
@@ -12,11 +12,11 @@ include globals.local
12# Technically this file can be anywhere but let's assume users have it in ${HOME}/.curl-hsts. 12# Technically this file can be anywhere but let's assume users have it in ${HOME}/.curl-hsts.
13# If your setup diverts, add 'blacklist /path/to/curl/hsts/file' to your disable-programs.local 13# If your setup diverts, add 'blacklist /path/to/curl/hsts/file' to your disable-programs.local
14# and 'noblacklist /path/to/curl/hsts/file' to curl.local to keep the sandbox logic intact. 14# and 'noblacklist /path/to/curl/hsts/file' to curl.local to keep the sandbox logic intact.
15nodeny ${HOME}/.curl-hsts 15noblacklist ${HOME}/.curl-hsts
16nodeny ${HOME}/.curlrc 16noblacklist ${HOME}/.curlrc
17 17
18deny /tmp/.X11-unix 18blacklist /tmp/.X11-unix
19deny ${RUNUSER} 19blacklist ${RUNUSER}
20 20
21include disable-common.inc 21include disable-common.inc
22include disable-exec.inc 22include disable-exec.inc
diff --git a/etc/profile-a-l/cyberfox.profile b/etc/profile-a-l/cyberfox.profile
index 49f972e4a..d1fff0004 100644
--- a/etc/profile-a-l/cyberfox.profile
+++ b/etc/profile-a-l/cyberfox.profile
@@ -5,13 +5,13 @@ include cyberfox.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.8pecxstudios 8noblacklist ${HOME}/.8pecxstudios
9nodeny ${HOME}/.cache/8pecxstudios 9noblacklist ${HOME}/.cache/8pecxstudios
10 10
11mkdir ${HOME}/.8pecxstudios 11mkdir ${HOME}/.8pecxstudios
12mkdir ${HOME}/.cache/8pecxstudios 12mkdir ${HOME}/.cache/8pecxstudios
13allow ${HOME}/.8pecxstudios 13whitelist ${HOME}/.8pecxstudios
14allow ${HOME}/.cache/8pecxstudios 14whitelist ${HOME}/.cache/8pecxstudios
15 15
16# private-bin cyberfox,dbus-launch,dbus-send,env,sh,which 16# private-bin cyberfox,dbus-launch,dbus-send,env,sh,which
17# private-etc must first be enabled in firefox-common.profile 17# private-etc must first be enabled in firefox-common.profile
diff --git a/etc/profile-a-l/d-feet.profile b/etc/profile-a-l/d-feet.profile
index c7ce1730a..ba1e7adad 100644
--- a/etc/profile-a-l/d-feet.profile
+++ b/etc/profile-a-l/d-feet.profile
@@ -6,7 +6,7 @@ include d-feet.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/d-feet 9noblacklist ${HOME}/.config/d-feet
10 10
11# Allow python (disabled by disable-interpreters.inc) 11# Allow python (disabled by disable-interpreters.inc)
12include allow-python2.inc 12include allow-python2.inc
@@ -22,8 +22,8 @@ include disable-shell.inc
22include disable-xdg.inc 22include disable-xdg.inc
23 23
24mkdir ${HOME}/.config/d-feet 24mkdir ${HOME}/.config/d-feet
25allow ${HOME}/.config/d-feet 25whitelist ${HOME}/.config/d-feet
26allow /usr/share/d-feet 26whitelist /usr/share/d-feet
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/darktable.profile b/etc/profile-a-l/darktable.profile
index 4d51c255e..61fa52928 100644
--- a/etc/profile-a-l/darktable.profile
+++ b/etc/profile-a-l/darktable.profile
@@ -6,9 +6,9 @@ include darktable.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/darktable 9noblacklist ${HOME}/.cache/darktable
10nodeny ${HOME}/.config/darktable 10noblacklist ${HOME}/.config/darktable
11nodeny ${PICTURES} 11noblacklist ${PICTURES}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/dbus-send.profile b/etc/profile-a-l/dbus-send.profile
index 745042d6f..67a61bb60 100644
--- a/etc/profile-a-l/dbus-send.profile
+++ b/etc/profile-a-l/dbus-send.profile
@@ -7,8 +7,8 @@ include dbus-send.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10deny /tmp/.X11-unix 10blacklist /tmp/.X11-unix
11deny ${RUNUSER}/wayland-* 11blacklist ${RUNUSER}/wayland-*
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/dconf-editor.profile b/etc/profile-a-l/dconf-editor.profile
index c1231c6cf..0c221850a 100644
--- a/etc/profile-a-l/dconf-editor.profile
+++ b/etc/profile-a-l/dconf-editor.profile
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18allow ${HOME}/.local/share/glib-2.0 18whitelist ${HOME}/.local/share/glib-2.0
19include whitelist-common.inc 19include whitelist-common.inc
20include whitelist-runuser-common.inc 20include whitelist-runuser-common.inc
21include whitelist-usr-share-common.inc 21include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/dconf.profile b/etc/profile-a-l/dconf.profile
index b9d385adf..be7514cbf 100644
--- a/etc/profile-a-l/dconf.profile
+++ b/etc/profile-a-l/dconf.profile
@@ -6,7 +6,7 @@ include dconf.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9deny ${RUNUSER}/wayland-* 9blacklist ${RUNUSER}/wayland-*
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,7 +16,7 @@ include disable-passwdmgr.inc
16include disable-programs.inc 16include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19allow ${HOME}/.local/share/glib-2.0 19whitelist ${HOME}/.local/share/glib-2.0
20# dconf paths are whitelisted by the following 20# dconf paths are whitelisted by the following
21include whitelist-common.inc 21include whitelist-common.inc
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/ddgtk.profile b/etc/profile-a-l/ddgtk.profile
index 09fa7a07a..5b95b74be 100644
--- a/etc/profile-a-l/ddgtk.profile
+++ b/etc/profile-a-l/ddgtk.profile
@@ -18,8 +18,8 @@ include disable-passwdmgr.inc
18include disable-programs.inc 18include disable-programs.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21allow ${DOWNLOADS} 21whitelist ${DOWNLOADS}
22allow /usr/share/ddgtk 22whitelist /usr/share/ddgtk
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
diff --git a/etc/profile-a-l/deadbeef.profile b/etc/profile-a-l/deadbeef.profile
index 25fa944a1..a221ebbd7 100644
--- a/etc/profile-a-l/deadbeef.profile
+++ b/etc/profile-a-l/deadbeef.profile
@@ -6,8 +6,8 @@ include deadbeef.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/deadbeef 9noblacklist ${HOME}/.config/deadbeef
10nodeny ${MUSIC} 10noblacklist ${MUSIC}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/deluge.profile b/etc/profile-a-l/deluge.profile
index d41a4a023..ad7aa6ed5 100644
--- a/etc/profile-a-l/deluge.profile
+++ b/etc/profile-a-l/deluge.profile
@@ -6,7 +6,7 @@ include deluge.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/deluge 9noblacklist ${HOME}/.config/deluge
10 10
11# Allow python (blacklisted by disable-interpreters.inc) 11# Allow python (blacklisted by disable-interpreters.inc)
12include allow-python2.inc 12include allow-python2.inc
@@ -20,8 +20,8 @@ include disable-passwdmgr.inc
20include disable-programs.inc 20include disable-programs.inc
21 21
22mkdir ${HOME}/.config/deluge 22mkdir ${HOME}/.config/deluge
23allow ${DOWNLOADS} 23whitelist ${DOWNLOADS}
24allow ${HOME}/.config/deluge 24whitelist ${HOME}/.config/deluge
25include whitelist-common.inc 25include whitelist-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
27 27
diff --git a/etc/profile-a-l/desktopeditors.profile b/etc/profile-a-l/desktopeditors.profile
index aed4355d5..212cdab60 100644
--- a/etc/profile-a-l/desktopeditors.profile
+++ b/etc/profile-a-l/desktopeditors.profile
@@ -6,9 +6,9 @@ include desktopeditors.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/onlyoffice 9noblacklist ${HOME}/.config/onlyoffice
10nodeny ${HOME}/.local/share/onlyoffice 10noblacklist ${HOME}/.local/share/onlyoffice
11nodeny ${HOME}/.pki 11noblacklist ${HOME}/.pki
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/devhelp.profile b/etc/profile-a-l/devhelp.profile
index dc0f290fb..5007f8e74 100644
--- a/etc/profile-a-l/devhelp.profile
+++ b/etc/profile-a-l/devhelp.profile
@@ -16,9 +16,9 @@ include disable-programs.inc
16include disable-shell.inc 16include disable-shell.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19allow /usr/share/devhelp 19whitelist /usr/share/devhelp
20allow /usr/share/doc 20whitelist /usr/share/doc
21allow /usr/share/gtk-doc/html 21whitelist /usr/share/gtk-doc/html
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
24 24
diff --git a/etc/profile-a-l/devilspie.profile b/etc/profile-a-l/devilspie.profile
index 631f15f93..6267b5709 100644
--- a/etc/profile-a-l/devilspie.profile
+++ b/etc/profile-a-l/devilspie.profile
@@ -6,9 +6,9 @@ include devilspie.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9deny ${RUNUSER}/wayland-* 9blacklist ${RUNUSER}/wayland-*
10 10
11nodeny ${HOME}/.devilspie 11noblacklist ${HOME}/.devilspie
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -19,7 +19,7 @@ include disable-programs.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21mkdir ${HOME}/.devilspie 21mkdir ${HOME}/.devilspie
22allow ${HOME}/.devilspie 22whitelist ${HOME}/.devilspie
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
diff --git a/etc/profile-a-l/devilspie2.profile b/etc/profile-a-l/devilspie2.profile
index 140c9da0f..9eab3f536 100644
--- a/etc/profile-a-l/devilspie2.profile
+++ b/etc/profile-a-l/devilspie2.profile
@@ -6,17 +6,17 @@ include devilspie2.local
6# Persistent global definitions 6# Persistent global definitions
7#include globals.local 7#include globals.local
8 8
9deny ${HOME}/.devilspie 9blacklist ${HOME}/.devilspie
10 10
11deny ${RUNUSER}/wayland-* 11blacklist ${RUNUSER}/wayland-*
12 12
13nodeny ${HOME}/.config/devilspie2 13noblacklist ${HOME}/.config/devilspie2
14 14
15# Allow lua (blacklisted by disable-interpreters.inc) 15# Allow lua (blacklisted by disable-interpreters.inc)
16include allow-lua.inc 16include allow-lua.inc
17 17
18mkdir ${HOME}/.config/devilspie2 18mkdir ${HOME}/.config/devilspie2
19allow ${HOME}/.config/devilspie2 19whitelist ${HOME}/.config/devilspie2
20 20
21private-bin devilspie2 21private-bin devilspie2
22 22
diff --git a/etc/profile-a-l/dia.profile b/etc/profile-a-l/dia.profile
index 2a808238b..531734b7d 100644
--- a/etc/profile-a-l/dia.profile
+++ b/etc/profile-a-l/dia.profile
@@ -6,8 +6,8 @@ include dia.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.dia 9noblacklist ${HOME}/.dia
10nodeny ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
@@ -25,7 +25,7 @@ include disable-xdg.inc
25#whitelist ${HOME}/.dia 25#whitelist ${HOME}/.dia
26#whitelist ${DOCUMENTS} 26#whitelist ${DOCUMENTS}
27#include whitelist-common.inc 27#include whitelist-common.inc
28allow /usr/share/dia 28whitelist /usr/share/dia
29include whitelist-runuser-common.inc 29include whitelist-runuser-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/dig.profile b/etc/profile-a-l/dig.profile
index 2d683b811..247159a8a 100644
--- a/etc/profile-a-l/dig.profile
+++ b/etc/profile-a-l/dig.profile
@@ -7,11 +7,11 @@ include dig.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${HOME}/.digrc 10noblacklist ${HOME}/.digrc
11nodeny ${PATH}/dig 11noblacklist ${PATH}/dig
12 12
13deny /tmp/.X11-unix 13blacklist /tmp/.X11-unix
14deny ${RUNUSER} 14blacklist ${RUNUSER}
15 15
16include disable-common.inc 16include disable-common.inc
17# include disable-devel.inc 17# include disable-devel.inc
@@ -22,7 +22,7 @@ include disable-programs.inc
22include disable-xdg.inc 22include disable-xdg.inc
23 23
24#mkfile ${HOME}/.digrc - see #903 24#mkfile ${HOME}/.digrc - see #903
25allow ${HOME}/.digrc 25whitelist ${HOME}/.digrc
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-usr-share-common.inc 27include whitelist-usr-share-common.inc
28include whitelist-var-common.inc 28include whitelist-var-common.inc
diff --git a/etc/profile-a-l/digikam.profile b/etc/profile-a-l/digikam.profile
index 124b50952..2ca7bd400 100644
--- a/etc/profile-a-l/digikam.profile
+++ b/etc/profile-a-l/digikam.profile
@@ -6,12 +6,12 @@ include digikam.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/digikam 9noblacklist ${HOME}/.config/digikam
10nodeny ${HOME}/.config/digikamrc 10noblacklist ${HOME}/.config/digikamrc
11nodeny ${HOME}/.kde/share/apps/digikam 11noblacklist ${HOME}/.kde/share/apps/digikam
12nodeny ${HOME}/.kde4/share/apps/digikam 12noblacklist ${HOME}/.kde4/share/apps/digikam
13nodeny ${HOME}/.local/share/kxmlgui5/digikam 13noblacklist ${HOME}/.local/share/kxmlgui5/digikam
14nodeny ${PICTURES} 14noblacklist ${PICTURES}
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/dillo.profile b/etc/profile-a-l/dillo.profile
index 883466f4d..9871a6095 100644
--- a/etc/profile-a-l/dillo.profile
+++ b/etc/profile-a-l/dillo.profile
@@ -6,7 +6,7 @@ include dillo.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.dillo 9noblacklist ${HOME}/.dillo
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,9 +16,9 @@ include disable-programs.inc
16 16
17mkdir ${HOME}/.dillo 17mkdir ${HOME}/.dillo
18mkdir ${HOME}/.fltk 18mkdir ${HOME}/.fltk
19allow ${DOWNLOADS} 19whitelist ${DOWNLOADS}
20allow ${HOME}/.dillo 20whitelist ${HOME}/.dillo
21allow ${HOME}/.fltk 21whitelist ${HOME}/.fltk
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/dino.profile b/etc/profile-a-l/dino.profile
index 3078bef71..c3174b35f 100644
--- a/etc/profile-a-l/dino.profile
+++ b/etc/profile-a-l/dino.profile
@@ -6,7 +6,7 @@ include dino.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/dino 9noblacklist ${HOME}/.local/share/dino
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,8 +17,8 @@ include disable-programs.inc
17include disable-shell.inc 17include disable-shell.inc
18 18
19mkdir ${HOME}/.local/share/dino 19mkdir ${HOME}/.local/share/dino
20allow ${HOME}/.local/share/dino 20whitelist ${HOME}/.local/share/dino
21allow ${DOWNLOADS} 21whitelist ${DOWNLOADS}
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-runuser-common.inc 23include whitelist-runuser-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/discord-canary.profile b/etc/profile-a-l/discord-canary.profile
index 1c53cd211..43db95b8a 100644
--- a/etc/profile-a-l/discord-canary.profile
+++ b/etc/profile-a-l/discord-canary.profile
@@ -5,10 +5,10 @@ include discord-canary.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/discordcanary 8noblacklist ${HOME}/.config/discordcanary
9 9
10mkdir ${HOME}/.config/discordcanary 10mkdir ${HOME}/.config/discordcanary
11allow ${HOME}/.config/discordcanary 11whitelist ${HOME}/.config/discordcanary
12 12
13private-bin discord-canary,electron,electron[0-9],electron[0-9][0-9] 13private-bin discord-canary,electron,electron[0-9],electron[0-9][0-9]
14private-opt discord-canary 14private-opt discord-canary
diff --git a/etc/profile-a-l/discord-common.profile b/etc/profile-a-l/discord-common.profile
index 6bee1901c..19e7bd9ab 100644
--- a/etc/profile-a-l/discord-common.profile
+++ b/etc/profile-a-l/discord-common.profile
@@ -20,8 +20,8 @@ ignore dbus-system none
20ignore noexec ${HOME} 20ignore noexec ${HOME}
21ignore novideo 21ignore novideo
22 22
23allow ${HOME}/.config/BetterDiscord 23whitelist ${HOME}/.config/BetterDiscord
24allow ${HOME}/.local/share/betterdiscordctl 24whitelist ${HOME}/.local/share/betterdiscordctl
25 25
26private-bin bash,cut,echo,egrep,fish,grep,head,sed,sh,tclsh,tr,xdg-mime,xdg-open,zsh 26private-bin bash,cut,echo,egrep,fish,grep,head,sed,sh,tclsh,tr,xdg-mime,xdg-open,zsh
27private-etc alternatives,ca-certificates,crypto-policies,fonts,group,ld.so.cache,localtime,login.defs,machine-id,password,pki,pulse,resolv.conf,ssl 27private-etc alternatives,ca-certificates,crypto-policies,fonts,group,ld.so.cache,localtime,login.defs,machine-id,password,pki,pulse,resolv.conf,ssl
diff --git a/etc/profile-a-l/discord.profile b/etc/profile-a-l/discord.profile
index 658d3fc83..8ef02a30f 100644
--- a/etc/profile-a-l/discord.profile
+++ b/etc/profile-a-l/discord.profile
@@ -5,10 +5,10 @@ include discord.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/discord 8noblacklist ${HOME}/.config/discord
9 9
10mkdir ${HOME}/.config/discord 10mkdir ${HOME}/.config/discord
11allow ${HOME}/.config/discord 11whitelist ${HOME}/.config/discord
12 12
13private-bin discord 13private-bin discord
14private-opt discord 14private-opt discord
diff --git a/etc/profile-a-l/display.profile b/etc/profile-a-l/display.profile
index 4474b97d2..11f3fd36e 100644
--- a/etc/profile-a-l/display.profile
+++ b/etc/profile-a-l/display.profile
@@ -5,7 +5,7 @@ include display.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${PICTURES} 8noblacklist ${PICTURES}
9 9
10# Allow python (blacklisted by disable-interpreters.inc) 10# Allow python (blacklisted by disable-interpreters.inc)
11include allow-python2.inc 11include allow-python2.inc
diff --git a/etc/profile-a-l/dnox.profile b/etc/profile-a-l/dnox.profile
index 8c3d6211b..51ba6f8b7 100644
--- a/etc/profile-a-l/dnox.profile
+++ b/etc/profile-a-l/dnox.profile
@@ -10,13 +10,13 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13nodeny ${HOME}/.cache/dnox 13noblacklist ${HOME}/.cache/dnox
14nodeny ${HOME}/.config/dnox 14noblacklist ${HOME}/.config/dnox
15 15
16mkdir ${HOME}/.cache/dnox 16mkdir ${HOME}/.cache/dnox
17mkdir ${HOME}/.config/dnox 17mkdir ${HOME}/.config/dnox
18allow ${HOME}/.cache/dnox 18whitelist ${HOME}/.cache/dnox
19allow ${HOME}/.config/dnox 19whitelist ${HOME}/.config/dnox
20 20
21# Redirect 21# Redirect
22include chromium-common.profile 22include chromium-common.profile
diff --git a/etc/profile-a-l/dnscrypt-proxy.profile b/etc/profile-a-l/dnscrypt-proxy.profile
index dbcef36f8..f8fb1a331 100644
--- a/etc/profile-a-l/dnscrypt-proxy.profile
+++ b/etc/profile-a-l/dnscrypt-proxy.profile
@@ -7,11 +7,11 @@ include dnscrypt-proxy.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10deny /tmp/.X11-unix 10blacklist /tmp/.X11-unix
11deny ${RUNUSER}/wayland-* 11blacklist ${RUNUSER}/wayland-*
12 12
13nodeny /sbin 13noblacklist /sbin
14nodeny /usr/sbin 14noblacklist /usr/sbin
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
@@ -21,7 +21,7 @@ include disable-passwdmgr.inc
21include disable-programs.inc 21include disable-programs.inc
22include disable-xdg.inc 22include disable-xdg.inc
23 23
24allow /usr/share/dnscrypt-proxy 24whitelist /usr/share/dnscrypt-proxy
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
27 27
diff --git a/etc/profile-a-l/dnsmasq.profile b/etc/profile-a-l/dnsmasq.profile
index b1acbf392..01398c2b2 100644
--- a/etc/profile-a-l/dnsmasq.profile
+++ b/etc/profile-a-l/dnsmasq.profile
@@ -7,11 +7,11 @@ include dnsmasq.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny /sbin 10noblacklist /sbin
11nodeny /usr/sbin 11noblacklist /usr/sbin
12 12
13deny /tmp/.X11-unix 13blacklist /tmp/.X11-unix
14deny ${RUNUSER}/wayland-* 14blacklist ${RUNUSER}/wayland-*
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/dolphin-emu.profile b/etc/profile-a-l/dolphin-emu.profile
index 15b312ecb..49feec32e 100644
--- a/etc/profile-a-l/dolphin-emu.profile
+++ b/etc/profile-a-l/dolphin-emu.profile
@@ -8,9 +8,9 @@ include globals.local
8 8
9# Note: you must whitelist your games folder in your dolphin-emu.local. 9# Note: you must whitelist your games folder in your dolphin-emu.local.
10 10
11nodeny ${HOME}/.cache/dolphin-emu 11noblacklist ${HOME}/.cache/dolphin-emu
12nodeny ${HOME}/.config/dolphin-emu 12noblacklist ${HOME}/.config/dolphin-emu
13nodeny ${HOME}/.local/share/dolphin-emu 13noblacklist ${HOME}/.local/share/dolphin-emu
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -24,10 +24,10 @@ include disable-xdg.inc
24mkdir ${HOME}/.cache/dolphin-emu 24mkdir ${HOME}/.cache/dolphin-emu
25mkdir ${HOME}/.config/dolphin-emu 25mkdir ${HOME}/.config/dolphin-emu
26mkdir ${HOME}/.local/share/dolphin-emu 26mkdir ${HOME}/.local/share/dolphin-emu
27allow ${HOME}/.cache/dolphin-emu 27whitelist ${HOME}/.cache/dolphin-emu
28allow ${HOME}/.config/dolphin-emu 28whitelist ${HOME}/.config/dolphin-emu
29allow ${HOME}/.local/share/dolphin-emu 29whitelist ${HOME}/.local/share/dolphin-emu
30allow /usr/share/dolphin-emu 30whitelist /usr/share/dolphin-emu
31include whitelist-common.inc 31include whitelist-common.inc
32include whitelist-runuser-common.inc 32include whitelist-runuser-common.inc
33include whitelist-usr-share-common.inc 33include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/dooble.profile b/etc/profile-a-l/dooble.profile
index 3b0adcc36..37a4113cb 100644
--- a/etc/profile-a-l/dooble.profile
+++ b/etc/profile-a-l/dooble.profile
@@ -7,7 +7,7 @@ include dooble-qt4.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${HOME}/.dooble 10noblacklist ${HOME}/.dooble
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -17,8 +17,8 @@ include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18 18
19mkdir ${HOME}/.dooble 19mkdir ${HOME}/.dooble
20allow ${DOWNLOADS} 20whitelist ${DOWNLOADS}
21allow ${HOME}/.dooble 21whitelist ${HOME}/.dooble
22include whitelist-common.inc 22include whitelist-common.inc
23 23
24caps.drop all 24caps.drop all
diff --git a/etc/profile-a-l/dosbox.profile b/etc/profile-a-l/dosbox.profile
index 29e506764..988f66f28 100644
--- a/etc/profile-a-l/dosbox.profile
+++ b/etc/profile-a-l/dosbox.profile
@@ -6,8 +6,8 @@ include dosbox.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.dosbox 9noblacklist ${HOME}/.dosbox
10nodeny ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/dragon.profile b/etc/profile-a-l/dragon.profile
index 90ca11774..8fa01d504 100644
--- a/etc/profile-a-l/dragon.profile
+++ b/etc/profile-a-l/dragon.profile
@@ -6,9 +6,9 @@ include dragon.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/dragonplayerrc 9noblacklist ${HOME}/.config/dragonplayerrc
10nodeny ${MUSIC} 10noblacklist ${MUSIC}
11nodeny ${VIDEOS} 11noblacklist ${VIDEOS}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -19,7 +19,7 @@ include disable-programs.inc
19include disable-shell.inc 19include disable-shell.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22allow /usr/share/dragonplayer 22whitelist /usr/share/dragonplayer
23include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
24include whitelist-var-common.inc 24include whitelist-var-common.inc
25 25
diff --git a/etc/profile-a-l/drawio.profile b/etc/profile-a-l/drawio.profile
index 84a77ce34..82d96e405 100644
--- a/etc/profile-a-l/drawio.profile
+++ b/etc/profile-a-l/drawio.profile
@@ -6,7 +6,7 @@ include drawio.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/draw.io 9noblacklist ${HOME}/.config/draw.io
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/draw.io 20mkdir ${HOME}/.config/draw.io
21allow ${HOME}/.config/draw.io 21whitelist ${HOME}/.config/draw.io
22allow ${DOWNLOADS} 22whitelist ${DOWNLOADS}
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
diff --git a/etc/profile-a-l/drill.profile b/etc/profile-a-l/drill.profile
index e177fd60e..068bd88d8 100644
--- a/etc/profile-a-l/drill.profile
+++ b/etc/profile-a-l/drill.profile
@@ -7,10 +7,10 @@ include drill.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${PATH}/drill 10noblacklist ${PATH}/drill
11 11
12deny /tmp/.X11-unix 12blacklist /tmp/.X11-unix
13deny ${RUNUSER} 13blacklist ${RUNUSER}
14 14
15include disable-common.inc 15include disable-common.inc
16# include disable-devel.inc 16# include disable-devel.inc
diff --git a/etc/profile-a-l/dropbox.profile b/etc/profile-a-l/dropbox.profile
index 274cdd478..b3b2aaf40 100644
--- a/etc/profile-a-l/dropbox.profile
+++ b/etc/profile-a-l/dropbox.profile
@@ -5,9 +5,9 @@ include dropbox.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/autostart 8noblacklist ${HOME}/.config/autostart
9nodeny ${HOME}/.dropbox 9noblacklist ${HOME}/.dropbox
10nodeny ${HOME}/.dropbox-dist 10noblacklist ${HOME}/.dropbox-dist
11 11
12# Allow python3 (blacklisted by disable-interpreters.inc) 12# Allow python3 (blacklisted by disable-interpreters.inc)
13include allow-python3.inc 13include allow-python3.inc
@@ -22,10 +22,10 @@ mkdir ${HOME}/.dropbox
22mkdir ${HOME}/.dropbox-dist 22mkdir ${HOME}/.dropbox-dist
23mkdir ${HOME}/Dropbox 23mkdir ${HOME}/Dropbox
24mkfile ${HOME}/.config/autostart/dropbox.desktop 24mkfile ${HOME}/.config/autostart/dropbox.desktop
25allow ${HOME}/.config/autostart/dropbox.desktop 25whitelist ${HOME}/.config/autostart/dropbox.desktop
26allow ${HOME}/.dropbox 26whitelist ${HOME}/.dropbox
27allow ${HOME}/.dropbox-dist 27whitelist ${HOME}/.dropbox-dist
28allow ${HOME}/Dropbox 28whitelist ${HOME}/Dropbox
29include whitelist-common.inc 29include whitelist-common.inc
30 30
31caps.drop all 31caps.drop all
diff --git a/etc/profile-a-l/easystroke.profile b/etc/profile-a-l/easystroke.profile
index da54fec34..38e4b16f7 100644
--- a/etc/profile-a-l/easystroke.profile
+++ b/etc/profile-a-l/easystroke.profile
@@ -6,7 +6,7 @@ include easystroke.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.easystroke 9noblacklist ${HOME}/.easystroke
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19mkdir ${HOME}/.easystroke 19mkdir ${HOME}/.easystroke
20allow ${HOME}/.easystroke 20whitelist ${HOME}/.easystroke
21include whitelist-common.inc 21include whitelist-common.inc
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
diff --git a/etc/profile-a-l/electron-mail.profile b/etc/profile-a-l/electron-mail.profile
index 10e57371e..278dd6cbd 100644
--- a/etc/profile-a-l/electron-mail.profile
+++ b/etc/profile-a-l/electron-mail.profile
@@ -6,7 +6,7 @@ include electron-mail.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/electron-mail 9noblacklist ${HOME}/.config/electron-mail
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/electron-mail 20mkdir ${HOME}/.config/electron-mail
21allow ${HOME}/.config/electron-mail 21whitelist ${HOME}/.config/electron-mail
22allow ${DOWNLOADS} 22whitelist ${DOWNLOADS}
23 23
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-runuser-common.inc 25include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/electron.profile b/etc/profile-a-l/electron.profile
index e8d8d35c4..493af79d4 100644
--- a/etc/profile-a-l/electron.profile
+++ b/etc/profile-a-l/electron.profile
@@ -12,7 +12,7 @@ include disable-passwdmgr.inc
12include disable-programs.inc 12include disable-programs.inc
13include disable-xdg.inc 13include disable-xdg.inc
14 14
15allow ${DOWNLOADS} 15whitelist ${DOWNLOADS}
16include whitelist-common.inc 16include whitelist-common.inc
17include whitelist-runuser-common.inc 17include whitelist-runuser-common.inc
18include whitelist-usr-share-common.inc 18include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/electrum.profile b/etc/profile-a-l/electrum.profile
index f6691017c..ad636d71a 100644
--- a/etc/profile-a-l/electrum.profile
+++ b/etc/profile-a-l/electrum.profile
@@ -6,7 +6,7 @@ include electrum.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.electrum 9noblacklist ${HOME}/.electrum
10 10
11# Allow python (blacklisted by disable-interpreters.inc) 11# Allow python (blacklisted by disable-interpreters.inc)
12include allow-python2.inc 12include allow-python2.inc
@@ -22,7 +22,7 @@ include disable-shell.inc
22include disable-xdg.inc 22include disable-xdg.inc
23 23
24mkdir ${HOME}/.electrum 24mkdir ${HOME}/.electrum
25allow ${HOME}/.electrum 25whitelist ${HOME}/.electrum
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-var-common.inc 27include whitelist-var-common.inc
28 28
diff --git a/etc/profile-a-l/element-desktop.profile b/etc/profile-a-l/element-desktop.profile
index ec28866b8..48a826f2e 100644
--- a/etc/profile-a-l/element-desktop.profile
+++ b/etc/profile-a-l/element-desktop.profile
@@ -9,11 +9,11 @@ include element-desktop.local
9 9
10ignore dbus-user none 10ignore dbus-user none
11 11
12nodeny ${HOME}/.config/Element 12noblacklist ${HOME}/.config/Element
13 13
14mkdir ${HOME}/.config/Element 14mkdir ${HOME}/.config/Element
15allow ${HOME}/.config/Element 15whitelist ${HOME}/.config/Element
16allow /opt/Element 16whitelist /opt/Element
17 17
18private-opt Element 18private-opt Element
19 19
diff --git a/etc/profile-a-l/elinks.profile b/etc/profile-a-l/elinks.profile
index 30dca05cb..5a29eb24b 100644
--- a/etc/profile-a-l/elinks.profile
+++ b/etc/profile-a-l/elinks.profile
@@ -7,10 +7,10 @@ include elinks.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${HOME}/.elinks 10noblacklist ${HOME}/.elinks
11 11
12mkdir ${HOME}/.elinks 12mkdir ${HOME}/.elinks
13allow ${HOME}/.elinks 13whitelist ${HOME}/.elinks
14 14
15private-bin elinks 15private-bin elinks
16 16
diff --git a/etc/profile-a-l/emacs.profile b/etc/profile-a-l/emacs.profile
index f0e0e2830..55bf743ef 100644
--- a/etc/profile-a-l/emacs.profile
+++ b/etc/profile-a-l/emacs.profile
@@ -6,8 +6,8 @@ include emacs.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.emacs 9noblacklist ${HOME}/.emacs
10nodeny ${HOME}/.emacs.d 10noblacklist ${HOME}/.emacs.d
11# Add the next line to your emacs.local if you need gpg support. 11# Add the next line to your emacs.local if you need gpg support.
12#noblacklist ${HOME}/.gnupg 12#noblacklist ${HOME}/.gnupg
13 13
diff --git a/etc/profile-a-l/email-common.profile b/etc/profile-a-l/email-common.profile
index 5fc72d340..6c9a8a6ea 100644
--- a/etc/profile-a-l/email-common.profile
+++ b/etc/profile-a-l/email-common.profile
@@ -7,14 +7,14 @@ include email-common.local
7# added by caller profile 7# added by caller profile
8#include globals.local 8#include globals.local
9 9
10nodeny ${HOME}/.gnupg 10noblacklist ${HOME}/.gnupg
11nodeny ${HOME}/.mozilla 11noblacklist ${HOME}/.mozilla
12nodeny ${HOME}/.signature 12noblacklist ${HOME}/.signature
13# when storing mail outside the default ${HOME}/Mail path, 'noblacklist' the custom path in your email-common.local 13# when storing mail outside the default ${HOME}/Mail path, 'noblacklist' the custom path in your email-common.local
14# and 'blacklist' it in your disable-common.local too so it is kept hidden from other applications 14# and 'blacklist' it in your disable-common.local too so it is kept hidden from other applications
15nodeny ${HOME}/Mail 15noblacklist ${HOME}/Mail
16 16
17nodeny ${DOCUMENTS} 17noblacklist ${DOCUMENTS}
18 18
19include disable-common.inc 19include disable-common.inc
20include disable-devel.inc 20include disable-devel.inc
@@ -27,17 +27,17 @@ include disable-xdg.inc
27mkdir ${HOME}/.gnupg 27mkdir ${HOME}/.gnupg
28mkfile ${HOME}/.config/mimeapps.list 28mkfile ${HOME}/.config/mimeapps.list
29mkfile ${HOME}/.signature 29mkfile ${HOME}/.signature
30allow ${HOME}/.config/mimeapps.list 30whitelist ${HOME}/.config/mimeapps.list
31allow ${HOME}/.mozilla/firefox/profiles.ini 31whitelist ${HOME}/.mozilla/firefox/profiles.ini
32allow ${HOME}/.gnupg 32whitelist ${HOME}/.gnupg
33allow ${HOME}/.signature 33whitelist ${HOME}/.signature
34allow ${DOCUMENTS} 34whitelist ${DOCUMENTS}
35allow ${DOWNLOADS} 35whitelist ${DOWNLOADS}
36# when storing mail outside the default ${HOME}/Mail path, 'whitelist' the custom path in your email-common.local 36# when storing mail outside the default ${HOME}/Mail path, 'whitelist' the custom path in your email-common.local
37allow ${HOME}/Mail 37whitelist ${HOME}/Mail
38allow ${RUNUSER}/gnupg 38whitelist ${RUNUSER}/gnupg
39allow /usr/share/gnupg 39whitelist /usr/share/gnupg
40allow /usr/share/gnupg2 40whitelist /usr/share/gnupg2
41include whitelist-common.inc 41include whitelist-common.inc
42include whitelist-runuser-common.inc 42include whitelist-runuser-common.inc
43include whitelist-usr-share-common.inc 43include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/enchant.profile b/etc/profile-a-l/enchant.profile
index 36015b702..ac17b1726 100644
--- a/etc/profile-a-l/enchant.profile
+++ b/etc/profile-a-l/enchant.profile
@@ -6,9 +6,9 @@ include enchant.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9deny ${RUNUSER}/wayland-* 9blacklist ${RUNUSER}/wayland-*
10 10
11nodeny ${HOME}/.config/enchant 11noblacklist ${HOME}/.config/enchant
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -19,7 +19,7 @@ include disable-programs.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21mkdir ${HOME}/.config/enchant 21mkdir ${HOME}/.config/enchant
22allow ${HOME}/.config/enchant 22whitelist ${HOME}/.config/enchant
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/enox.profile b/etc/profile-a-l/enox.profile
index 9a1d89bba..d982433e2 100644
--- a/etc/profile-a-l/enox.profile
+++ b/etc/profile-a-l/enox.profile
@@ -10,15 +10,15 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13nodeny ${HOME}/.cache/Enox 13noblacklist ${HOME}/.cache/Enox
14nodeny ${HOME}/.config/Enox 14noblacklist ${HOME}/.config/Enox
15 15
16#mkdir ${HOME}/.cache/dnox 16#mkdir ${HOME}/.cache/dnox
17#mkdir ${HOME}/.config/dnox 17#mkdir ${HOME}/.config/dnox
18mkdir ${HOME}/.cache/Enox 18mkdir ${HOME}/.cache/Enox
19mkdir ${HOME}/.config/Enox 19mkdir ${HOME}/.config/Enox
20allow ${HOME}/.cache/Enox 20whitelist ${HOME}/.cache/Enox
21allow ${HOME}/.config/Enox 21whitelist ${HOME}/.config/Enox
22 22
23# Redirect 23# Redirect
24include chromium-common.profile 24include chromium-common.profile
diff --git a/etc/profile-a-l/enpass.profile b/etc/profile-a-l/enpass.profile
index 5d8f8a0b9..c4123b4c2 100644
--- a/etc/profile-a-l/enpass.profile
+++ b/etc/profile-a-l/enpass.profile
@@ -6,11 +6,11 @@ include enpass.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/Enpass 9noblacklist ${HOME}/.cache/Enpass
10nodeny ${HOME}/.config/sinew.in 10noblacklist ${HOME}/.config/sinew.in
11nodeny ${HOME}/.config/Sinew Software Systems 11noblacklist ${HOME}/.config/Sinew Software Systems
12nodeny ${HOME}/.local/share/Enpass 12noblacklist ${HOME}/.local/share/Enpass
13nodeny ${DOCUMENTS} 13noblacklist ${DOCUMENTS}
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -24,11 +24,11 @@ mkdir ${HOME}/.cache/Enpass
24mkfile ${HOME}/.config/sinew.in 24mkfile ${HOME}/.config/sinew.in
25mkdir ${HOME}/.config/Sinew Software Systems 25mkdir ${HOME}/.config/Sinew Software Systems
26mkdir ${HOME}/.local/share/Enpass 26mkdir ${HOME}/.local/share/Enpass
27allow ${HOME}/.cache/Enpass 27whitelist ${HOME}/.cache/Enpass
28allow ${HOME}/.config/sinew.in 28whitelist ${HOME}/.config/sinew.in
29allow ${HOME}/.config/Sinew Software Systems 29whitelist ${HOME}/.config/Sinew Software Systems
30allow ${HOME}/.local/share/Enpass 30whitelist ${HOME}/.local/share/Enpass
31allow ${DOCUMENTS} 31whitelist ${DOCUMENTS}
32include whitelist-common.inc 32include whitelist-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
34 34
diff --git a/etc/profile-a-l/eo-common.profile b/etc/profile-a-l/eo-common.profile
index ff7040e5c..fe7913e77 100644
--- a/etc/profile-a-l/eo-common.profile
+++ b/etc/profile-a-l/eo-common.profile
@@ -7,11 +7,11 @@ include eo-common.local
7# added by caller profile 7# added by caller profile
8#include globals.local 8#include globals.local
9 9
10nodeny ${HOME}/.local/share/Trash 10noblacklist ${HOME}/.local/share/Trash
11nodeny ${HOME}/.Steam 11noblacklist ${HOME}/.Steam
12nodeny ${HOME}/.steam 12noblacklist ${HOME}/.steam
13 13
14deny /usr/libexec 14blacklist /usr/libexec
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/eog.profile b/etc/profile-a-l/eog.profile
index e8592c7df..5892374bd 100644
--- a/etc/profile-a-l/eog.profile
+++ b/etc/profile-a-l/eog.profile
@@ -6,9 +6,9 @@ include eog.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/eog 9noblacklist ${HOME}/.config/eog
10 10
11allow /usr/share/eog 11whitelist /usr/share/eog
12 12
13# private-bin, private-etc and private-lib break 'Open With' / 'Open in file manager'. 13# private-bin, private-etc and private-lib break 'Open With' / 'Open in file manager'.
14# Add the next lines to your eog.local if you need that functionality. 14# Add the next lines to your eog.local if you need that functionality.
diff --git a/etc/profile-a-l/eom.profile b/etc/profile-a-l/eom.profile
index 323f5ade2..7143a8e03 100644
--- a/etc/profile-a-l/eom.profile
+++ b/etc/profile-a-l/eom.profile
@@ -6,9 +6,9 @@ include eom.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/mate/eom 9noblacklist ${HOME}/.config/mate/eom
10 10
11allow /usr/share/eom 11whitelist /usr/share/eom
12 12
13# private-bin, private-etc and private-lib break 'Open With' / 'Open in file manager'. 13# private-bin, private-etc and private-lib break 'Open With' / 'Open in file manager'.
14# Add the next lines to your eom.local if you need that functionality. 14# Add the next lines to your eom.local if you need that functionality.
diff --git a/etc/profile-a-l/ephemeral.profile b/etc/profile-a-l/ephemeral.profile
index 3657742b9..131d68951 100644
--- a/etc/profile-a-l/ephemeral.profile
+++ b/etc/profile-a-l/ephemeral.profile
@@ -9,8 +9,8 @@ include globals.local
9# enforce private-cache 9# enforce private-cache
10#noblacklist ${HOME}/.cache/ephemeral 10#noblacklist ${HOME}/.cache/ephemeral
11 11
12nodeny ${HOME}/.pki 12noblacklist ${HOME}/.pki
13nodeny ${HOME}/.local/share/pki 13noblacklist ${HOME}/.local/share/pki
14 14
15# noexec ${HOME} breaks DRM binaries. 15# noexec ${HOME} breaks DRM binaries.
16?BROWSER_ALLOW_DRM: ignore noexec ${HOME} 16?BROWSER_ALLOW_DRM: ignore noexec ${HOME}
@@ -27,9 +27,9 @@ mkdir ${HOME}/.pki
27mkdir ${HOME}/.local/share/pki 27mkdir ${HOME}/.local/share/pki
28# enforce private-cache 28# enforce private-cache
29#whitelist ${HOME}/.cache/ephemeral 29#whitelist ${HOME}/.cache/ephemeral
30allow ${HOME}/.pki 30whitelist ${HOME}/.pki
31allow ${HOME}/.local/share/pki 31whitelist ${HOME}/.local/share/pki
32allow ${DOWNLOADS} 32whitelist ${DOWNLOADS}
33include whitelist-common.inc 33include whitelist-common.inc
34include whitelist-usr-share-common.inc 34include whitelist-usr-share-common.inc
35include whitelist-var-common.inc 35include whitelist-var-common.inc
diff --git a/etc/profile-a-l/epiphany.profile b/etc/profile-a-l/epiphany.profile
index daedb2193..225811226 100644
--- a/etc/profile-a-l/epiphany.profile
+++ b/etc/profile-a-l/epiphany.profile
@@ -9,9 +9,9 @@ include globals.local
9# Note: Epiphany use bwrap since 3.34 and can not be firejailed any more. 9# Note: Epiphany use bwrap since 3.34 and can not be firejailed any more.
10# See https://github.com/netblue30/firejail/issues/2995 10# See https://github.com/netblue30/firejail/issues/2995
11 11
12nodeny ${HOME}/.cache/epiphany 12noblacklist ${HOME}/.cache/epiphany
13nodeny ${HOME}/.config/epiphany 13noblacklist ${HOME}/.config/epiphany
14nodeny ${HOME}/.local/share/epiphany 14noblacklist ${HOME}/.local/share/epiphany
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
@@ -21,10 +21,10 @@ include disable-programs.inc
21mkdir ${HOME}/.cache/epiphany 21mkdir ${HOME}/.cache/epiphany
22mkdir ${HOME}/.config/epiphany 22mkdir ${HOME}/.config/epiphany
23mkdir ${HOME}/.local/share/epiphany 23mkdir ${HOME}/.local/share/epiphany
24allow ${DOWNLOADS} 24whitelist ${DOWNLOADS}
25allow ${HOME}/.cache/epiphany 25whitelist ${HOME}/.cache/epiphany
26allow ${HOME}/.config/epiphany 26whitelist ${HOME}/.config/epiphany
27allow ${HOME}/.local/share/epiphany 27whitelist ${HOME}/.local/share/epiphany
28include whitelist-common.inc 28include whitelist-common.inc
29 29
30caps.drop all 30caps.drop all
diff --git a/etc/profile-a-l/equalx.profile b/etc/profile-a-l/equalx.profile
index ac957870c..964d3b7ca 100644
--- a/etc/profile-a-l/equalx.profile
+++ b/etc/profile-a-l/equalx.profile
@@ -6,8 +6,8 @@ include equalx.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/equalx 9noblacklist ${HOME}/.config/equalx
10nodeny ${HOME}/.equalx 10noblacklist ${HOME}/.equalx
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -20,13 +20,13 @@ include disable-xdg.inc
20 20
21mkdir ${HOME}/.config/equalx 21mkdir ${HOME}/.config/equalx
22mkdir ${HOME}/.equalx 22mkdir ${HOME}/.equalx
23allow ${HOME}/.config/equalx 23whitelist ${HOME}/.config/equalx
24allow ${HOME}/.equalx 24whitelist ${HOME}/.equalx
25allow /usr/share/poppler 25whitelist /usr/share/poppler
26allow /usr/share/ghostscript 26whitelist /usr/share/ghostscript
27allow /usr/share/texlive 27whitelist /usr/share/texlive
28allow /usr/share/equalx 28whitelist /usr/share/equalx
29allow /var/lib/texmf 29whitelist /var/lib/texmf
30include whitelist-common.inc 30include whitelist-common.inc
31include whitelist-runuser-common.inc 31include whitelist-runuser-common.inc
32include whitelist-usr-share-common.inc 32include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/etr.profile b/etc/profile-a-l/etr.profile
index a2f46b757..fdff1e4b5 100644
--- a/etc/profile-a-l/etr.profile
+++ b/etc/profile-a-l/etr.profile
@@ -6,9 +6,9 @@ include etr.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.etr 9noblacklist ${HOME}/.etr
10 10
11deny /usr/libexec 11blacklist /usr/libexec
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -20,10 +20,10 @@ include disable-shell.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22mkdir ${HOME}/.etr 22mkdir ${HOME}/.etr
23allow ${HOME}/.etr 23whitelist ${HOME}/.etr
24allow /usr/share/etr 24whitelist /usr/share/etr
25# Debian version 25# Debian version
26allow /usr/share/games/etr 26whitelist /usr/share/games/etr
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/evince.profile b/etc/profile-a-l/evince.profile
index ce2617ad6..a9e39b15c 100644
--- a/etc/profile-a-l/evince.profile
+++ b/etc/profile-a-l/evince.profile
@@ -10,10 +10,10 @@ include globals.local
10# Add the next line to your evince.local if you need bookmarks support. This also needs additional dbus-user filtering (see below). 10# Add the next line to your evince.local if you need bookmarks support. This also needs additional dbus-user filtering (see below).
11#noblacklist ${HOME}/.local/share/gvfs-metadata 11#noblacklist ${HOME}/.local/share/gvfs-metadata
12 12
13nodeny ${HOME}/.config/evince 13noblacklist ${HOME}/.config/evince
14nodeny ${DOCUMENTS} 14noblacklist ${DOCUMENTS}
15 15
16deny /usr/libexec 16blacklist /usr/libexec
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
@@ -24,10 +24,10 @@ include disable-programs.inc
24include disable-shell.inc 24include disable-shell.inc
25include disable-xdg.inc 25include disable-xdg.inc
26 26
27allow /usr/share/doc 27whitelist /usr/share/doc
28allow /usr/share/evince 28whitelist /usr/share/evince
29allow /usr/share/poppler 29whitelist /usr/share/poppler
30allow /usr/share/tracker 30whitelist /usr/share/tracker
31include whitelist-runuser-common.inc 31include whitelist-runuser-common.inc
32include whitelist-usr-share-common.inc 32include whitelist-usr-share-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
diff --git a/etc/profile-a-l/evolution.profile b/etc/profile-a-l/evolution.profile
index 142498a28..7222493ac 100644
--- a/etc/profile-a-l/evolution.profile
+++ b/etc/profile-a-l/evolution.profile
@@ -6,15 +6,15 @@ include evolution.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny /var/mail 9noblacklist /var/mail
10nodeny /var/spool/mail 10noblacklist /var/spool/mail
11nodeny ${HOME}/.bogofilter 11noblacklist ${HOME}/.bogofilter
12nodeny ${HOME}/.cache/evolution 12noblacklist ${HOME}/.cache/evolution
13nodeny ${HOME}/.config/evolution 13noblacklist ${HOME}/.config/evolution
14nodeny ${HOME}/.gnupg 14noblacklist ${HOME}/.gnupg
15nodeny ${HOME}/.local/share/evolution 15noblacklist ${HOME}/.local/share/evolution
16nodeny ${HOME}/.pki 16noblacklist ${HOME}/.pki
17nodeny ${HOME}/.local/share/pki 17noblacklist ${HOME}/.local/share/pki
18 18
19include disable-common.inc 19include disable-common.inc
20include disable-devel.inc 20include disable-devel.inc
diff --git a/etc/profile-a-l/exiftool.profile b/etc/profile-a-l/exiftool.profile
index 216814989..7b09a2c64 100644
--- a/etc/profile-a-l/exiftool.profile
+++ b/etc/profile-a-l/exiftool.profile
@@ -6,7 +6,7 @@ include exiftool.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9deny ${RUNUSER}/wayland-* 9blacklist ${RUNUSER}/wayland-*
10 10
11# Allow perl (blacklisted by disable-interpreters.inc) 11# Allow perl (blacklisted by disable-interpreters.inc)
12include allow-perl.inc 12include allow-perl.inc
@@ -18,7 +18,7 @@ include disable-interpreters.inc
18include disable-passwdmgr.inc 18include disable-passwdmgr.inc
19include disable-programs.inc 19include disable-programs.inc
20 20
21allow /usr/share/perl-image-exiftool 21whitelist /usr/share/perl-image-exiftool
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/falkon.profile b/etc/profile-a-l/falkon.profile
index 9bb42945b..b2061db79 100644
--- a/etc/profile-a-l/falkon.profile
+++ b/etc/profile-a-l/falkon.profile
@@ -6,8 +6,8 @@ include falkon.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/falkon 9noblacklist ${HOME}/.cache/falkon
10nodeny ${HOME}/.config/falkon 10noblacklist ${HOME}/.config/falkon
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -19,10 +19,10 @@ include disable-xdg.inc
19 19
20mkdir ${HOME}/.cache/falkon 20mkdir ${HOME}/.cache/falkon
21mkdir ${HOME}/.config/falkon 21mkdir ${HOME}/.config/falkon
22allow ${DOWNLOADS} 22whitelist ${DOWNLOADS}
23allow ${HOME}/.cache/falkon 23whitelist ${HOME}/.cache/falkon
24allow ${HOME}/.config/falkon 24whitelist ${HOME}/.config/falkon
25allow /usr/share/falkon 25whitelist /usr/share/falkon
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-runuser-common.inc 27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/fbreader.profile b/etc/profile-a-l/fbreader.profile
index d141c6ed5..8e81000fd 100644
--- a/etc/profile-a-l/fbreader.profile
+++ b/etc/profile-a-l/fbreader.profile
@@ -6,8 +6,8 @@ include fbreader.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.FBReader 9noblacklist ${HOME}/.FBReader
10nodeny ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/fdns.profile b/etc/profile-a-l/fdns.profile
index 17a365053..31cb1776c 100644
--- a/etc/profile-a-l/fdns.profile
+++ b/etc/profile-a-l/fdns.profile
@@ -5,11 +5,11 @@ include fdns.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny /sbin 8noblacklist /sbin
9nodeny /usr/sbin 9noblacklist /usr/sbin
10 10
11deny /tmp/.X11-unix 11blacklist /tmp/.X11-unix
12deny ${RUNUSER}/wayland-* 12blacklist ${RUNUSER}/wayland-*
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
diff --git a/etc/profile-a-l/feedreader.profile b/etc/profile-a-l/feedreader.profile
index 359be083e..664ec2da6 100644
--- a/etc/profile-a-l/feedreader.profile
+++ b/etc/profile-a-l/feedreader.profile
@@ -6,8 +6,8 @@ include feedreader.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/feedreader 9noblacklist ${HOME}/.cache/feedreader
10nodeny ${HOME}/.local/share/feedreader 10noblacklist ${HOME}/.local/share/feedreader
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -20,9 +20,9 @@ include disable-xdg.inc
20 20
21mkdir ${HOME}/.cache/feedreader 21mkdir ${HOME}/.cache/feedreader
22mkdir ${HOME}/.local/share/feedreader 22mkdir ${HOME}/.local/share/feedreader
23allow ${HOME}/.cache/feedreader 23whitelist ${HOME}/.cache/feedreader
24allow ${HOME}/.local/share/feedreader 24whitelist ${HOME}/.local/share/feedreader
25allow /usr/share/feedreader 25whitelist /usr/share/feedreader
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-runuser-common.inc 27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/ferdi.profile b/etc/profile-a-l/ferdi.profile
index f60055f37..a2372ec8a 100644
--- a/etc/profile-a-l/ferdi.profile
+++ b/etc/profile-a-l/ferdi.profile
@@ -7,10 +7,10 @@ include globals.local
7 7
8ignore noexec /tmp 8ignore noexec /tmp
9 9
10nodeny ${HOME}/.cache/Ferdi 10noblacklist ${HOME}/.cache/Ferdi
11nodeny ${HOME}/.config/Ferdi 11noblacklist ${HOME}/.config/Ferdi
12nodeny ${HOME}/.pki 12noblacklist ${HOME}/.pki
13nodeny ${HOME}/.local/share/pki 13noblacklist ${HOME}/.local/share/pki
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -22,11 +22,11 @@ mkdir ${HOME}/.cache/Ferdi
22mkdir ${HOME}/.config/Ferdi 22mkdir ${HOME}/.config/Ferdi
23mkdir ${HOME}/.pki 23mkdir ${HOME}/.pki
24mkdir ${HOME}/.local/share/pki 24mkdir ${HOME}/.local/share/pki
25allow ${DOWNLOADS} 25whitelist ${DOWNLOADS}
26allow ${HOME}/.cache/Ferdi 26whitelist ${HOME}/.cache/Ferdi
27allow ${HOME}/.config/Ferdi 27whitelist ${HOME}/.config/Ferdi
28allow ${HOME}/.pki 28whitelist ${HOME}/.pki
29allow ${HOME}/.local/share/pki 29whitelist ${HOME}/.local/share/pki
30include whitelist-common.inc 30include whitelist-common.inc
31 31
32caps.drop all 32caps.drop all
diff --git a/etc/profile-a-l/fetchmail.profile b/etc/profile-a-l/fetchmail.profile
index 1e06ec29a..7358ed5c7 100644
--- a/etc/profile-a-l/fetchmail.profile
+++ b/etc/profile-a-l/fetchmail.profile
@@ -6,8 +6,8 @@ include fetchmail.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.fetchmailrc 9noblacklist ${HOME}/.fetchmailrc
10nodeny ${HOME}/.netrc 10noblacklist ${HOME}/.netrc
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/ffmpeg.profile b/etc/profile-a-l/ffmpeg.profile
index 1a64183ab..13ef1beb9 100644
--- a/etc/profile-a-l/ffmpeg.profile
+++ b/etc/profile-a-l/ffmpeg.profile
@@ -7,8 +7,8 @@ include ffmpeg.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${MUSIC} 10noblacklist ${MUSIC}
11nodeny ${VIDEOS} 11noblacklist ${VIDEOS}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -19,9 +19,9 @@ include disable-programs.inc
19include disable-shell.inc 19include disable-shell.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22allow /usr/share/devedeng 22whitelist /usr/share/devedeng
23allow /usr/share/ffmpeg 23whitelist /usr/share/ffmpeg
24allow /usr/share/qtchooser 24whitelist /usr/share/qtchooser
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
27 27
diff --git a/etc/profile-a-l/file-roller.profile b/etc/profile-a-l/file-roller.profile
index f7a938f24..4eeceeee8 100644
--- a/etc/profile-a-l/file-roller.profile
+++ b/etc/profile-a-l/file-roller.profile
@@ -13,9 +13,9 @@ include disable-interpreters.inc
13include disable-passwdmgr.inc 13include disable-passwdmgr.inc
14include disable-programs.inc 14include disable-programs.inc
15 15
16allow /usr/libexec/file-roller 16whitelist /usr/libexec/file-roller
17allow /usr/libexec/p7zip 17whitelist /usr/libexec/p7zip
18allow /usr/share/file-roller 18whitelist /usr/share/file-roller
19include whitelist-runuser-common.inc 19include whitelist-runuser-common.inc
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
diff --git a/etc/profile-a-l/file.profile b/etc/profile-a-l/file.profile
index 426d1e72d..5c7583605 100644
--- a/etc/profile-a-l/file.profile
+++ b/etc/profile-a-l/file.profile
@@ -7,7 +7,7 @@ include file.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10deny ${RUNUSER} 10blacklist ${RUNUSER}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-exec.inc 13include disable-exec.inc
diff --git a/etc/profile-a-l/filezilla.profile b/etc/profile-a-l/filezilla.profile
index d9e0e9da0..dc5def54f 100644
--- a/etc/profile-a-l/filezilla.profile
+++ b/etc/profile-a-l/filezilla.profile
@@ -6,8 +6,8 @@ include filezilla.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/filezilla 9noblacklist ${HOME}/.config/filezilla
10nodeny ${HOME}/.filezilla 10noblacklist ${HOME}/.filezilla
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/firedragon.profile b/etc/profile-a-l/firedragon.profile
index e22424794..77487161e 100644
--- a/etc/profile-a-l/firedragon.profile
+++ b/etc/profile-a-l/firedragon.profile
@@ -6,13 +6,13 @@ include firedragon.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/firedragon 9noblacklist ${HOME}/.cache/firedragon
10nodeny ${HOME}/.firedragon 10noblacklist ${HOME}/.firedragon
11 11
12mkdir ${HOME}/.cache/firedragon 12mkdir ${HOME}/.cache/firedragon
13mkdir ${HOME}/.firedragon 13mkdir ${HOME}/.firedragon
14allow ${HOME}/.cache/firedragon 14whitelist ${HOME}/.cache/firedragon
15allow ${HOME}/.firedragon 15whitelist ${HOME}/.firedragon
16 16
17# Add the next lines to your firedragon.local if you want to use the migration wizard. 17# Add the next lines to your firedragon.local if you want to use the migration wizard.
18#noblacklist ${HOME}/.mozilla 18#noblacklist ${HOME}/.mozilla
diff --git a/etc/profile-a-l/firefox-common-addons.profile b/etc/profile-a-l/firefox-common-addons.profile
index 7e2e8760d..d282f9a60 100644
--- a/etc/profile-a-l/firefox-common-addons.profile
+++ b/etc/profile-a-l/firefox-common-addons.profile
@@ -5,74 +5,74 @@ include firefox-common-addons.local
5ignore include whitelist-runuser-common.inc 5ignore include whitelist-runuser-common.inc
6ignore private-cache 6ignore private-cache
7 7
8nodeny ${HOME}/.cache/youtube-dl 8noblacklist ${HOME}/.cache/youtube-dl
9nodeny ${HOME}/.config/kgetrc 9noblacklist ${HOME}/.config/kgetrc
10nodeny ${HOME}/.config/mpv 10noblacklist ${HOME}/.config/mpv
11nodeny ${HOME}/.config/okularpartrc 11noblacklist ${HOME}/.config/okularpartrc
12nodeny ${HOME}/.config/okularrc 12noblacklist ${HOME}/.config/okularrc
13nodeny ${HOME}/.config/qpdfview 13noblacklist ${HOME}/.config/qpdfview
14nodeny ${HOME}/.config/youtube-dl 14noblacklist ${HOME}/.config/youtube-dl
15nodeny ${HOME}/.kde/share/apps/kget 15noblacklist ${HOME}/.kde/share/apps/kget
16nodeny ${HOME}/.kde/share/apps/okular 16noblacklist ${HOME}/.kde/share/apps/okular
17nodeny ${HOME}/.kde/share/config/kgetrc 17noblacklist ${HOME}/.kde/share/config/kgetrc
18nodeny ${HOME}/.kde/share/config/okularpartrc 18noblacklist ${HOME}/.kde/share/config/okularpartrc
19nodeny ${HOME}/.kde/share/config/okularrc 19noblacklist ${HOME}/.kde/share/config/okularrc
20nodeny ${HOME}/.kde4/share/apps/kget 20noblacklist ${HOME}/.kde4/share/apps/kget
21nodeny ${HOME}/.kde4/share/apps/okular 21noblacklist ${HOME}/.kde4/share/apps/okular
22nodeny ${HOME}/.kde4/share/config/kgetrc 22noblacklist ${HOME}/.kde4/share/config/kgetrc
23nodeny ${HOME}/.kde4/share/config/okularpartrc 23noblacklist ${HOME}/.kde4/share/config/okularpartrc
24nodeny ${HOME}/.kde4/share/config/okularrc 24noblacklist ${HOME}/.kde4/share/config/okularrc
25nodeny ${HOME}/.local/share/kget 25noblacklist ${HOME}/.local/share/kget
26nodeny ${HOME}/.local/share/kxmlgui5/okular 26noblacklist ${HOME}/.local/share/kxmlgui5/okular
27nodeny ${HOME}/.local/share/okular 27noblacklist ${HOME}/.local/share/okular
28nodeny ${HOME}/.local/share/qpdfview 28noblacklist ${HOME}/.local/share/qpdfview
29nodeny ${HOME}/.netrc 29noblacklist ${HOME}/.netrc
30 30
31allow ${HOME}/.cache/gnome-mplayer/plugin 31whitelist ${HOME}/.cache/gnome-mplayer/plugin
32allow ${HOME}/.cache/youtube-dl/youtube-sigfuncs 32whitelist ${HOME}/.cache/youtube-dl/youtube-sigfuncs
33allow ${HOME}/.config/gnome-mplayer 33whitelist ${HOME}/.config/gnome-mplayer
34allow ${HOME}/.config/kgetrc 34whitelist ${HOME}/.config/kgetrc
35allow ${HOME}/.config/mpv 35whitelist ${HOME}/.config/mpv
36allow ${HOME}/.config/okularpartrc 36whitelist ${HOME}/.config/okularpartrc
37allow ${HOME}/.config/okularrc 37whitelist ${HOME}/.config/okularrc
38allow ${HOME}/.config/pipelight-silverlight5.1 38whitelist ${HOME}/.config/pipelight-silverlight5.1
39allow ${HOME}/.config/pipelight-widevine 39whitelist ${HOME}/.config/pipelight-widevine
40allow ${HOME}/.config/qpdfview 40whitelist ${HOME}/.config/qpdfview
41allow ${HOME}/.config/youtube-dl 41whitelist ${HOME}/.config/youtube-dl
42allow ${HOME}/.kde/share/apps/kget 42whitelist ${HOME}/.kde/share/apps/kget
43allow ${HOME}/.kde/share/apps/okular 43whitelist ${HOME}/.kde/share/apps/okular
44allow ${HOME}/.kde/share/config/kgetrc 44whitelist ${HOME}/.kde/share/config/kgetrc
45allow ${HOME}/.kde/share/config/okularpartrc 45whitelist ${HOME}/.kde/share/config/okularpartrc
46allow ${HOME}/.kde/share/config/okularrc 46whitelist ${HOME}/.kde/share/config/okularrc
47allow ${HOME}/.kde4/share/apps/kget 47whitelist ${HOME}/.kde4/share/apps/kget
48allow ${HOME}/.kde4/share/apps/okular 48whitelist ${HOME}/.kde4/share/apps/okular
49allow ${HOME}/.kde4/share/config/kgetrc 49whitelist ${HOME}/.kde4/share/config/kgetrc
50allow ${HOME}/.kde4/share/config/okularpartrc 50whitelist ${HOME}/.kde4/share/config/okularpartrc
51allow ${HOME}/.kde4/share/config/okularrc 51whitelist ${HOME}/.kde4/share/config/okularrc
52allow ${HOME}/.keysnail.js 52whitelist ${HOME}/.keysnail.js
53allow ${HOME}/.lastpass 53whitelist ${HOME}/.lastpass
54allow ${HOME}/.local/share/kget 54whitelist ${HOME}/.local/share/kget
55allow ${HOME}/.local/share/kxmlgui5/okular 55whitelist ${HOME}/.local/share/kxmlgui5/okular
56allow ${HOME}/.local/share/okular 56whitelist ${HOME}/.local/share/okular
57allow ${HOME}/.local/share/qpdfview 57whitelist ${HOME}/.local/share/qpdfview
58allow ${HOME}/.local/share/tridactyl 58whitelist ${HOME}/.local/share/tridactyl
59allow ${HOME}/.netrc 59whitelist ${HOME}/.netrc
60allow ${HOME}/.pentadactyl 60whitelist ${HOME}/.pentadactyl
61allow ${HOME}/.pentadactylrc 61whitelist ${HOME}/.pentadactylrc
62allow ${HOME}/.tridactylrc 62whitelist ${HOME}/.tridactylrc
63allow ${HOME}/.vimperator 63whitelist ${HOME}/.vimperator
64allow ${HOME}/.vimperatorrc 64whitelist ${HOME}/.vimperatorrc
65allow ${HOME}/.wine-pipelight 65whitelist ${HOME}/.wine-pipelight
66allow ${HOME}/.wine-pipelight64 66whitelist ${HOME}/.wine-pipelight64
67allow ${HOME}/.zotero 67whitelist ${HOME}/.zotero
68allow ${HOME}/dwhelper 68whitelist ${HOME}/dwhelper
69allow /usr/share/lua 69whitelist /usr/share/lua
70allow /usr/share/lua* 70whitelist /usr/share/lua*
71allow /usr/share/vulkan 71whitelist /usr/share/vulkan
72 72
73# GNOME Shell integration (chrome-gnome-shell) needs dbus and python 73# GNOME Shell integration (chrome-gnome-shell) needs dbus and python
74nodeny ${HOME}/.local/share/gnome-shell 74noblacklist ${HOME}/.local/share/gnome-shell
75allow ${HOME}/.local/share/gnome-shell 75whitelist ${HOME}/.local/share/gnome-shell
76dbus-user.talk ca.desrt.dconf 76dbus-user.talk ca.desrt.dconf
77dbus-user.talk org.gnome.ChromeGnomeShell 77dbus-user.talk org.gnome.ChromeGnomeShell
78dbus-user.talk org.gnome.Shell 78dbus-user.talk org.gnome.Shell
diff --git a/etc/profile-a-l/firefox-common.profile b/etc/profile-a-l/firefox-common.profile
index cb0fae5dc..8b74ed979 100644
--- a/etc/profile-a-l/firefox-common.profile
+++ b/etc/profile-a-l/firefox-common.profile
@@ -12,8 +12,8 @@ include firefox-common.local
12# Add the next line to your firefox-common.local to allow access to common programs/addons/plugins. 12# Add the next line to your firefox-common.local to allow access to common programs/addons/plugins.
13#include firefox-common-addons.profile 13#include firefox-common-addons.profile
14 14
15nodeny ${HOME}/.pki 15noblacklist ${HOME}/.pki
16nodeny ${HOME}/.local/share/pki 16noblacklist ${HOME}/.local/share/pki
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
@@ -23,9 +23,9 @@ include disable-programs.inc
23 23
24mkdir ${HOME}/.pki 24mkdir ${HOME}/.pki
25mkdir ${HOME}/.local/share/pki 25mkdir ${HOME}/.local/share/pki
26allow ${DOWNLOADS} 26whitelist ${DOWNLOADS}
27allow ${HOME}/.pki 27whitelist ${HOME}/.pki
28allow ${HOME}/.local/share/pki 28whitelist ${HOME}/.local/share/pki
29include whitelist-common.inc 29include whitelist-common.inc
30include whitelist-runuser-common.inc 30include whitelist-runuser-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/firefox-esr.profile b/etc/profile-a-l/firefox-esr.profile
index 4fd315fdf..5e69fdb51 100644
--- a/etc/profile-a-l/firefox-esr.profile
+++ b/etc/profile-a-l/firefox-esr.profile
@@ -6,7 +6,7 @@ include firefox-esr.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9allow /usr/share/firefox-esr 9whitelist /usr/share/firefox-esr
10 10
11# Redirect 11# Redirect
12include firefox.profile 12include firefox.profile
diff --git a/etc/profile-a-l/firefox.profile b/etc/profile-a-l/firefox.profile
index 8acfe7c2a..3ad67734d 100644
--- a/etc/profile-a-l/firefox.profile
+++ b/etc/profile-a-l/firefox.profile
@@ -14,27 +14,27 @@ include globals.local
14# https://github.com/netblue30/firejail/wiki/Frequently-Asked-Questions#how-do-i-run-two-instances-of-firefox 14# https://github.com/netblue30/firejail/wiki/Frequently-Asked-Questions#how-do-i-run-two-instances-of-firefox
15# https://github.com/netblue30/firejail/issues/4206#issuecomment-824806968 15# https://github.com/netblue30/firejail/issues/4206#issuecomment-824806968
16 16
17nodeny ${HOME}/.cache/mozilla 17noblacklist ${HOME}/.cache/mozilla
18nodeny ${HOME}/.mozilla 18noblacklist ${HOME}/.mozilla
19 19
20deny /usr/libexec 20blacklist /usr/libexec
21 21
22mkdir ${HOME}/.cache/mozilla/firefox 22mkdir ${HOME}/.cache/mozilla/firefox
23mkdir ${HOME}/.mozilla 23mkdir ${HOME}/.mozilla
24allow ${HOME}/.cache/mozilla/firefox 24whitelist ${HOME}/.cache/mozilla/firefox
25allow ${HOME}/.mozilla 25whitelist ${HOME}/.mozilla
26 26
27# Add one of the following whitelist options to your firefox.local to enable KeePassXC Plugin support. 27# Add one of the following whitelist options to your firefox.local to enable KeePassXC Plugin support.
28# NOTE: start KeePassXC before Firefox and keep it open to allow communication between them. 28# NOTE: start KeePassXC before Firefox and keep it open to allow communication between them.
29#whitelist ${RUNUSER}/kpxc_server 29#whitelist ${RUNUSER}/kpxc_server
30#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer 30#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer
31 31
32allow /usr/share/doc 32whitelist /usr/share/doc
33allow /usr/share/firefox 33whitelist /usr/share/firefox
34allow /usr/share/gnome-shell/search-providers/firefox-search-provider.ini 34whitelist /usr/share/gnome-shell/search-providers/firefox-search-provider.ini
35allow /usr/share/gtk-doc/html 35whitelist /usr/share/gtk-doc/html
36allow /usr/share/mozilla 36whitelist /usr/share/mozilla
37allow /usr/share/webext 37whitelist /usr/share/webext
38include whitelist-usr-share-common.inc 38include whitelist-usr-share-common.inc
39 39
40# firefox requires a shell to launch on Arch - add the next line to your firefox.local to enable private-bin. 40# firefox requires a shell to launch on Arch - add the next line to your firefox.local to enable private-bin.
diff --git a/etc/profile-a-l/five-or-more.profile b/etc/profile-a-l/five-or-more.profile
index bd1becaf0..2c86d3ac7 100644
--- a/etc/profile-a-l/five-or-more.profile
+++ b/etc/profile-a-l/five-or-more.profile
@@ -6,12 +6,12 @@ include five-or-more.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/five-or-more 9noblacklist ${HOME}/.local/share/five-or-more
10 10
11mkdir ${HOME}/.local/share/five-or-more 11mkdir ${HOME}/.local/share/five-or-more
12allow ${HOME}/.local/share/five-or-more 12whitelist ${HOME}/.local/share/five-or-more
13 13
14allow /usr/share/five-or-more 14whitelist /usr/share/five-or-more
15 15
16private-bin five-or-more 16private-bin five-or-more
17 17
diff --git a/etc/profile-a-l/flameshot.profile b/etc/profile-a-l/flameshot.profile
index f16a65536..55af96c84 100644
--- a/etc/profile-a-l/flameshot.profile
+++ b/etc/profile-a-l/flameshot.profile
@@ -7,9 +7,9 @@ include flameshot.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${PICTURES} 10noblacklist ${PICTURES}
11nodeny ${HOME}/.config/Dharkael 11noblacklist ${HOME}/.config/Dharkael
12nodeny ${HOME}/.config/flameshot 12noblacklist ${HOME}/.config/flameshot
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
@@ -25,7 +25,7 @@ include disable-xdg.inc
25#whitelist ${PICTURES} 25#whitelist ${PICTURES}
26#whitelist ${HOME}/.config/Dharkael 26#whitelist ${HOME}/.config/Dharkael
27#whitelist ${HOME}/.config/flameshot 27#whitelist ${HOME}/.config/flameshot
28allow /usr/share/flameshot 28whitelist /usr/share/flameshot
29#include whitelist-common.inc 29#include whitelist-common.inc
30include whitelist-runuser-common.inc 30include whitelist-runuser-common.inc
31include whitelist-usr-share-common.inc 31include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/flashpeak-slimjet.profile b/etc/profile-a-l/flashpeak-slimjet.profile
index af114e129..310fb378f 100644
--- a/etc/profile-a-l/flashpeak-slimjet.profile
+++ b/etc/profile-a-l/flashpeak-slimjet.profile
@@ -10,13 +10,13 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13nodeny ${HOME}/.cache/slimjet 13noblacklist ${HOME}/.cache/slimjet
14nodeny ${HOME}/.config/slimjet 14noblacklist ${HOME}/.config/slimjet
15 15
16mkdir ${HOME}/.cache/slimjet 16mkdir ${HOME}/.cache/slimjet
17mkdir ${HOME}/.config/slimjet 17mkdir ${HOME}/.config/slimjet
18allow ${HOME}/.cache/slimjet 18whitelist ${HOME}/.cache/slimjet
19allow ${HOME}/.config/slimjet 19whitelist ${HOME}/.config/slimjet
20 20
21# Redirect 21# Redirect
22include chromium-common.profile 22include chromium-common.profile
diff --git a/etc/profile-a-l/flowblade.profile b/etc/profile-a-l/flowblade.profile
index 505763fb9..a4421e3ce 100644
--- a/etc/profile-a-l/flowblade.profile
+++ b/etc/profile-a-l/flowblade.profile
@@ -6,8 +6,8 @@ include flowblade.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/flowblade 9noblacklist ${HOME}/.config/flowblade
10nodeny ${HOME}/.flowblade 10noblacklist ${HOME}/.flowblade
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/fluxbox.profile b/etc/profile-a-l/fluxbox.profile
index a22c0e103..1210f365c 100644
--- a/etc/profile-a-l/fluxbox.profile
+++ b/etc/profile-a-l/fluxbox.profile
@@ -7,7 +7,7 @@ include fluxbox.local
7include globals.local 7include globals.local
8 8
9# all applications started in fluxbox will run in this profile 9# all applications started in fluxbox will run in this profile
10nodeny ${HOME}/.fluxbox 10noblacklist ${HOME}/.fluxbox
11include disable-common.inc 11include disable-common.inc
12 12
13caps.drop all 13caps.drop all
diff --git a/etc/profile-a-l/font-manager.profile b/etc/profile-a-l/font-manager.profile
index ff9167c1a..cd0129436 100644
--- a/etc/profile-a-l/font-manager.profile
+++ b/etc/profile-a-l/font-manager.profile
@@ -6,8 +6,8 @@ include font-manager.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/font-manager 9noblacklist ${HOME}/.cache/font-manager
10nodeny ${HOME}/.config/font-manager 10noblacklist ${HOME}/.config/font-manager
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
@@ -24,9 +24,9 @@ include disable-xdg.inc
24 24
25mkdir ${HOME}/.cache/font-manager 25mkdir ${HOME}/.cache/font-manager
26mkdir ${HOME}/.config/font-manager 26mkdir ${HOME}/.config/font-manager
27allow ${HOME}/.cache/font-manager 27whitelist ${HOME}/.cache/font-manager
28allow ${HOME}/.config/font-manager 28whitelist ${HOME}/.config/font-manager
29allow /usr/share/font-manager 29whitelist /usr/share/font-manager
30include whitelist-common.inc 30include whitelist-common.inc
31include whitelist-usr-share-common.inc 31include whitelist-usr-share-common.inc
32include whitelist-var-common.inc 32include whitelist-var-common.inc
diff --git a/etc/profile-a-l/fontforge.profile b/etc/profile-a-l/fontforge.profile
index 64c7655e2..bd1495877 100644
--- a/etc/profile-a-l/fontforge.profile
+++ b/etc/profile-a-l/fontforge.profile
@@ -6,8 +6,8 @@ include fontforge.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.FontForge 9noblacklist ${HOME}/.FontForge
10nodeny ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/fossamail.profile b/etc/profile-a-l/fossamail.profile
index 5e5a12794..2d700d336 100644
--- a/etc/profile-a-l/fossamail.profile
+++ b/etc/profile-a-l/fossamail.profile
@@ -6,16 +6,16 @@ include fossamail.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9nodeny ${HOME}/.cache/fossamail 9noblacklist ${HOME}/.cache/fossamail
10nodeny ${HOME}/.fossamail 10noblacklist ${HOME}/.fossamail
11nodeny ${HOME}/.gnupg 11noblacklist ${HOME}/.gnupg
12 12
13mkdir ${HOME}/.cache/fossamail 13mkdir ${HOME}/.cache/fossamail
14mkdir ${HOME}/.fossamail 14mkdir ${HOME}/.fossamail
15mkdir ${HOME}/.gnupg 15mkdir ${HOME}/.gnupg
16allow ${HOME}/.cache/fossamail 16whitelist ${HOME}/.cache/fossamail
17allow ${HOME}/.fossamail 17whitelist ${HOME}/.fossamail
18allow ${HOME}/.gnupg 18whitelist ${HOME}/.gnupg
19include whitelist-common.inc 19include whitelist-common.inc
20 20
21# allow browsers 21# allow browsers
diff --git a/etc/profile-a-l/four-in-a-row.profile b/etc/profile-a-l/four-in-a-row.profile
index 97fd4a626..eb0c43ca5 100644
--- a/etc/profile-a-l/four-in-a-row.profile
+++ b/etc/profile-a-l/four-in-a-row.profile
@@ -9,7 +9,7 @@ include globals.local
9ignore machine-id 9ignore machine-id
10ignore nosound 10ignore nosound
11 11
12allow /usr/share/four-in-a-row 12whitelist /usr/share/four-in-a-row
13 13
14private-bin four-in-a-row 14private-bin four-in-a-row
15 15
diff --git a/etc/profile-a-l/fractal.profile b/etc/profile-a-l/fractal.profile
index 8edc9b02d..1b1d031b4 100644
--- a/etc/profile-a-l/fractal.profile
+++ b/etc/profile-a-l/fractal.profile
@@ -6,7 +6,7 @@ include fractal.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/fractal 9noblacklist ${HOME}/.cache/fractal
10 10
11# Allow python (blacklisted by disable-interpreters.inc) 11# Allow python (blacklisted by disable-interpreters.inc)
12include allow-python2.inc 12include allow-python2.inc
@@ -22,8 +22,8 @@ include disable-shell.inc
22include disable-xdg.inc 22include disable-xdg.inc
23 23
24mkdir ${HOME}/.cache/fractal 24mkdir ${HOME}/.cache/fractal
25allow ${HOME}/.cache/fractal 25whitelist ${HOME}/.cache/fractal
26allow ${DOWNLOADS} 26whitelist ${DOWNLOADS}
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/franz.profile b/etc/profile-a-l/franz.profile
index 1a8ec8f99..9b780a572 100644
--- a/etc/profile-a-l/franz.profile
+++ b/etc/profile-a-l/franz.profile
@@ -7,10 +7,10 @@ include globals.local
7 7
8ignore noexec /tmp 8ignore noexec /tmp
9 9
10nodeny ${HOME}/.cache/Franz 10noblacklist ${HOME}/.cache/Franz
11nodeny ${HOME}/.config/Franz 11noblacklist ${HOME}/.config/Franz
12nodeny ${HOME}/.pki 12noblacklist ${HOME}/.pki
13nodeny ${HOME}/.local/share/pki 13noblacklist ${HOME}/.local/share/pki
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -22,11 +22,11 @@ mkdir ${HOME}/.cache/Franz
22mkdir ${HOME}/.config/Franz 22mkdir ${HOME}/.config/Franz
23mkdir ${HOME}/.pki 23mkdir ${HOME}/.pki
24mkdir ${HOME}/.local/share/pki 24mkdir ${HOME}/.local/share/pki
25allow ${DOWNLOADS} 25whitelist ${DOWNLOADS}
26allow ${HOME}/.cache/Franz 26whitelist ${HOME}/.cache/Franz
27allow ${HOME}/.config/Franz 27whitelist ${HOME}/.config/Franz
28allow ${HOME}/.pki 28whitelist ${HOME}/.pki
29allow ${HOME}/.local/share/pki 29whitelist ${HOME}/.local/share/pki
30include whitelist-common.inc 30include whitelist-common.inc
31 31
32caps.drop all 32caps.drop all
diff --git a/etc/profile-a-l/freecad.profile b/etc/profile-a-l/freecad.profile
index a45ad4c7a..8043d0530 100644
--- a/etc/profile-a-l/freecad.profile
+++ b/etc/profile-a-l/freecad.profile
@@ -6,8 +6,8 @@ include freecad.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/FreeCAD 9noblacklist ${HOME}/.config/FreeCAD
10nodeny ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/freeciv.profile b/etc/profile-a-l/freeciv.profile
index 20abd4056..23c19682c 100644
--- a/etc/profile-a-l/freeciv.profile
+++ b/etc/profile-a-l/freeciv.profile
@@ -6,7 +6,7 @@ include freeciv.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.freeciv 9noblacklist ${HOME}/.freeciv
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19mkdir ${HOME}/.freeciv 19mkdir ${HOME}/.freeciv
20allow ${HOME}/.freeciv 20whitelist ${HOME}/.freeciv
21include whitelist-common.inc 21include whitelist-common.inc
22include whitelist-var-common.inc 22include whitelist-var-common.inc
23 23
diff --git a/etc/profile-a-l/freecol.profile b/etc/profile-a-l/freecol.profile
index 79ccf4101..93fa7da03 100644
--- a/etc/profile-a-l/freecol.profile
+++ b/etc/profile-a-l/freecol.profile
@@ -6,10 +6,10 @@ include freecol.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.freecol 9noblacklist ${HOME}/.freecol
10nodeny ${HOME}/.cache/freecol 10noblacklist ${HOME}/.cache/freecol
11nodeny ${HOME}/.config/freecol 11noblacklist ${HOME}/.config/freecol
12nodeny ${HOME}/.local/share/freecol 12noblacklist ${HOME}/.local/share/freecol
13 13
14# Allow java (blacklisted by disable-devel.inc) 14# Allow java (blacklisted by disable-devel.inc)
15include allow-java.inc 15include allow-java.inc
@@ -26,11 +26,11 @@ mkdir ${HOME}/.java
26mkdir ${HOME}/.cache/freecol 26mkdir ${HOME}/.cache/freecol
27mkdir ${HOME}/.config/freecol 27mkdir ${HOME}/.config/freecol
28mkdir ${HOME}/.local/share/freecol 28mkdir ${HOME}/.local/share/freecol
29allow ${HOME}/.freecol 29whitelist ${HOME}/.freecol
30allow ${HOME}/.java 30whitelist ${HOME}/.java
31allow ${HOME}/.cache/freecol 31whitelist ${HOME}/.cache/freecol
32allow ${HOME}/.config/freecol 32whitelist ${HOME}/.config/freecol
33allow ${HOME}/.local/share/freecol 33whitelist ${HOME}/.local/share/freecol
34include whitelist-common.inc 34include whitelist-common.inc
35include whitelist-var-common.inc 35include whitelist-var-common.inc
36 36
diff --git a/etc/profile-a-l/freemind.profile b/etc/profile-a-l/freemind.profile
index ba52dd208..699177039 100644
--- a/etc/profile-a-l/freemind.profile
+++ b/etc/profile-a-l/freemind.profile
@@ -6,8 +6,8 @@ include freemind.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${DOCUMENTS} 9noblacklist ${DOCUMENTS}
10nodeny ${HOME}/.freemind 10noblacklist ${HOME}/.freemind
11 11
12# Allow java (blacklisted by disable-devel.inc) 12# Allow java (blacklisted by disable-devel.inc)
13include allow-java.inc 13include allow-java.inc
diff --git a/etc/profile-a-l/freetube.profile b/etc/profile-a-l/freetube.profile
index 4c321322c..e6aff533d 100644
--- a/etc/profile-a-l/freetube.profile
+++ b/etc/profile-a-l/freetube.profile
@@ -6,12 +6,12 @@ include freetube.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/FreeTube 9noblacklist ${HOME}/.config/FreeTube
10 10
11include disable-shell.inc 11include disable-shell.inc
12 12
13mkdir ${HOME}/.config/FreeTube 13mkdir ${HOME}/.config/FreeTube
14allow ${HOME}/.config/FreeTube 14whitelist ${HOME}/.config/FreeTube
15 15
16private-bin freetube 16private-bin freetube
17private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,mime.types,nsswitch.conf,pki,pulse,resolv.conf,ssl,X11,xdg 17private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,mime.types,nsswitch.conf,pki,pulse,resolv.conf,ssl,X11,xdg
diff --git a/etc/profile-a-l/frogatto.profile b/etc/profile-a-l/frogatto.profile
index 3a6dfcfd6..b4ad81046 100644
--- a/etc/profile-a-l/frogatto.profile
+++ b/etc/profile-a-l/frogatto.profile
@@ -6,7 +6,7 @@ include frogatto.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.frogatto 9noblacklist ${HOME}/.frogatto
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,9 +17,9 @@ include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19mkdir ${HOME}/.frogatto 19mkdir ${HOME}/.frogatto
20allow ${HOME}/.frogatto 20whitelist ${HOME}/.frogatto
21allow /usr/libexec/frogatto 21whitelist /usr/libexec/frogatto
22allow /usr/share/frogatto 22whitelist /usr/share/frogatto
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/frozen-bubble.profile b/etc/profile-a-l/frozen-bubble.profile
index 12eca8eb0..76352e41e 100644
--- a/etc/profile-a-l/frozen-bubble.profile
+++ b/etc/profile-a-l/frozen-bubble.profile
@@ -6,7 +6,7 @@ include frozen-bubble.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.frozen-bubble 9noblacklist ${HOME}/.frozen-bubble
10 10
11# Allow perl (blacklisted by disable-interpreters.inc) 11# Allow perl (blacklisted by disable-interpreters.inc)
12include allow-perl.inc 12include allow-perl.inc
@@ -20,7 +20,7 @@ include disable-programs.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22mkdir ${HOME}/.frozen-bubble 22mkdir ${HOME}/.frozen-bubble
23allow ${HOME}/.frozen-bubble 23whitelist ${HOME}/.frozen-bubble
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-runuser-common.inc 25include whitelist-runuser-common.inc
26include whitelist-usr-share-common.inc 26include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/funnyboat.profile b/etc/profile-a-l/funnyboat.profile
index 07030df4b..8852925b1 100644
--- a/etc/profile-a-l/funnyboat.profile
+++ b/etc/profile-a-l/funnyboat.profile
@@ -5,7 +5,7 @@ include funnyboat.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.funnyboat 8noblacklist ${HOME}/.funnyboat
9 9
10ignore noexec /dev/shm 10ignore noexec /dev/shm
11include allow-python2.inc 11include allow-python2.inc
@@ -21,12 +21,12 @@ include disable-programs.inc
21include disable-xdg.inc 21include disable-xdg.inc
22 22
23mkdir ${HOME}/.funnyboat 23mkdir ${HOME}/.funnyboat
24allow ${HOME}/.funnyboat 24whitelist ${HOME}/.funnyboat
25include whitelist-common.inc 25include whitelist-common.inc
26include whitelist-runuser-common.inc 26include whitelist-runuser-common.inc
27allow /usr/share/funnyboat 27whitelist /usr/share/funnyboat
28# Debian: 28# Debian:
29allow /usr/share/games/funnyboat 29whitelist /usr/share/games/funnyboat
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
32 32
diff --git a/etc/profile-a-l/gajim.profile b/etc/profile-a-l/gajim.profile
index 4cd2cb1e6..ed3f0357d 100644
--- a/etc/profile-a-l/gajim.profile
+++ b/etc/profile-a-l/gajim.profile
@@ -6,10 +6,10 @@ include gajim.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.gnupg 9noblacklist ${HOME}/.gnupg
10nodeny ${HOME}/.cache/gajim 10noblacklist ${HOME}/.cache/gajim
11nodeny ${HOME}/.config/gajim 11noblacklist ${HOME}/.config/gajim
12nodeny ${HOME}/.local/share/gajim 12noblacklist ${HOME}/.local/share/gajim
13 13
14# Allow python (blacklisted by disable-interpreters.inc) 14# Allow python (blacklisted by disable-interpreters.inc)
15#include allow-python2.inc 15#include allow-python2.inc
@@ -28,14 +28,14 @@ mkdir ${HOME}/.gnupg
28mkdir ${HOME}/.cache/gajim 28mkdir ${HOME}/.cache/gajim
29mkdir ${HOME}/.config/gajim 29mkdir ${HOME}/.config/gajim
30mkdir ${HOME}/.local/share/gajim 30mkdir ${HOME}/.local/share/gajim
31allow ${HOME}/.gnupg 31whitelist ${HOME}/.gnupg
32allow ${HOME}/.cache/gajim 32whitelist ${HOME}/.cache/gajim
33allow ${HOME}/.config/gajim 33whitelist ${HOME}/.config/gajim
34allow ${HOME}/.local/share/gajim 34whitelist ${HOME}/.local/share/gajim
35allow ${DOWNLOADS} 35whitelist ${DOWNLOADS}
36allow ${RUNUSER}/gnupg 36whitelist ${RUNUSER}/gnupg
37allow /usr/share/gnupg 37whitelist /usr/share/gnupg
38allow /usr/share/gnupg2 38whitelist /usr/share/gnupg2
39include whitelist-common.inc 39include whitelist-common.inc
40include whitelist-runuser-common.inc 40include whitelist-runuser-common.inc
41include whitelist-usr-share-common.inc 41include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/galculator.profile b/etc/profile-a-l/galculator.profile
index 0b1b595a6..550b3808b 100644
--- a/etc/profile-a-l/galculator.profile
+++ b/etc/profile-a-l/galculator.profile
@@ -6,7 +6,7 @@ include galculator.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/galculator 9noblacklist ${HOME}/.config/galculator
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,7 +18,7 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/galculator 20mkdir ${HOME}/.config/galculator
21allow ${HOME}/.config/galculator 21whitelist ${HOME}/.config/galculator
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/gapplication.profile b/etc/profile-a-l/gapplication.profile
index 00b830234..3a8c055f2 100644
--- a/etc/profile-a-l/gapplication.profile
+++ b/etc/profile-a-l/gapplication.profile
@@ -6,8 +6,8 @@ include gapplication.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9deny ${RUNUSER}/wayland-* 9blacklist ${RUNUSER}/wayland-*
10deny /usr/libexec 10blacklist /usr/libexec
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/gcloud.profile b/etc/profile-a-l/gcloud.profile
index 896a100fc..388f4c0df 100644
--- a/etc/profile-a-l/gcloud.profile
+++ b/etc/profile-a-l/gcloud.profile
@@ -8,9 +8,9 @@ include globals.local
8# noexec ${HOME} will break user-local installs of gcloud tooling 8# noexec ${HOME} will break user-local installs of gcloud tooling
9ignore noexec ${HOME} 9ignore noexec ${HOME}
10 10
11nodeny ${HOME}/.boto 11noblacklist ${HOME}/.boto
12nodeny ${HOME}/.config/gcloud 12noblacklist ${HOME}/.config/gcloud
13nodeny /var/run/docker.sock 13noblacklist /var/run/docker.sock
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/gconf-editor.profile b/etc/profile-a-l/gconf-editor.profile
index 8f72f0b34..cb39174e5 100644
--- a/etc/profile-a-l/gconf-editor.profile
+++ b/etc/profile-a-l/gconf-editor.profile
@@ -7,9 +7,9 @@ include gconf-editor.local
7# added by included profile 7# added by included profile
8#include globals.local 8#include globals.local
9 9
10deny /tmp/.X11-unix 10blacklist /tmp/.X11-unix
11 11
12allow /usr/share/gconf-editor 12whitelist /usr/share/gconf-editor
13 13
14ignore x11 none 14ignore x11 none
15 15
diff --git a/etc/profile-a-l/gconf.profile b/etc/profile-a-l/gconf.profile
index 8c7013574..fec1a555a 100644
--- a/etc/profile-a-l/gconf.profile
+++ b/etc/profile-a-l/gconf.profile
@@ -6,9 +6,9 @@ include gconf.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9deny ${RUNUSER}/wayland-* 9blacklist ${RUNUSER}/wayland-*
10 10
11nodeny ${HOME}/.config/gconf 11noblacklist ${HOME}/.config/gconf
12 12
13# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
14include allow-python2.inc 14include allow-python2.inc
@@ -23,9 +23,9 @@ include disable-programs.inc
23include disable-xdg.inc 23include disable-xdg.inc
24 24
25mkdir ${HOME}/.config/gconf 25mkdir ${HOME}/.config/gconf
26allow ${HOME}/.config/gconf 26whitelist ${HOME}/.config/gconf
27allow /usr/share/GConf 27whitelist /usr/share/GConf
28allow /usr/share/gconf 28whitelist /usr/share/gconf
29include whitelist-common.inc 29include whitelist-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/geany.profile b/etc/profile-a-l/geany.profile
index 706a85c75..6fdb9b37a 100644
--- a/etc/profile-a-l/geany.profile
+++ b/etc/profile-a-l/geany.profile
@@ -6,7 +6,7 @@ include geany.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/geany 9noblacklist ${HOME}/.config/geany
10 10
11# Allows files commonly used by IDEs 11# Allows files commonly used by IDEs
12include allow-common-devel.inc 12include allow-common-devel.inc
diff --git a/etc/profile-a-l/geary.profile b/etc/profile-a-l/geary.profile
index 512fc1e59..74e135a7c 100644
--- a/etc/profile-a-l/geary.profile
+++ b/etc/profile-a-l/geary.profile
@@ -6,14 +6,14 @@ include geary.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/evolution 9noblacklist ${HOME}/.cache/evolution
10nodeny ${HOME}/.cache/folks 10noblacklist ${HOME}/.cache/folks
11nodeny ${HOME}/.cache/geary 11noblacklist ${HOME}/.cache/geary
12nodeny ${HOME}/.config/evolution 12noblacklist ${HOME}/.config/evolution
13nodeny ${HOME}/.config/geary 13noblacklist ${HOME}/.config/geary
14nodeny ${HOME}/.local/share/evolution 14noblacklist ${HOME}/.local/share/evolution
15nodeny ${HOME}/.local/share/geary 15noblacklist ${HOME}/.local/share/geary
16nodeny ${HOME}/.mozilla 16noblacklist ${HOME}/.mozilla
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
@@ -31,16 +31,16 @@ mkdir ${HOME}/.config/evolution
31mkdir ${HOME}/.config/geary 31mkdir ${HOME}/.config/geary
32mkdir ${HOME}/.local/share/evolution 32mkdir ${HOME}/.local/share/evolution
33mkdir ${HOME}/.local/share/geary 33mkdir ${HOME}/.local/share/geary
34allow ${DOWNLOADS} 34whitelist ${DOWNLOADS}
35allow ${HOME}/.cache/evolution 35whitelist ${HOME}/.cache/evolution
36allow ${HOME}/.cache/folks 36whitelist ${HOME}/.cache/folks
37allow ${HOME}/.cache/geary 37whitelist ${HOME}/.cache/geary
38allow ${HOME}/.config/evolution 38whitelist ${HOME}/.config/evolution
39allow ${HOME}/.config/geary 39whitelist ${HOME}/.config/geary
40allow ${HOME}/.local/share/evolution 40whitelist ${HOME}/.local/share/evolution
41allow ${HOME}/.local/share/geary 41whitelist ${HOME}/.local/share/geary
42allow ${HOME}/.mozilla/firefox/profiles.ini 42whitelist ${HOME}/.mozilla/firefox/profiles.ini
43allow /usr/share/geary 43whitelist /usr/share/geary
44include whitelist-common.inc 44include whitelist-common.inc
45include whitelist-runuser-common.inc 45include whitelist-runuser-common.inc
46include whitelist-usr-share-common.inc 46include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gedit.profile b/etc/profile-a-l/gedit.profile
index f11540374..108b7041d 100644
--- a/etc/profile-a-l/gedit.profile
+++ b/etc/profile-a-l/gedit.profile
@@ -6,8 +6,8 @@ include gedit.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/enchant 9noblacklist ${HOME}/.config/enchant
10nodeny ${HOME}/.config/gedit 10noblacklist ${HOME}/.config/gedit
11 11
12# Allows files commonly used by IDEs 12# Allows files commonly used by IDEs
13include allow-common-devel.inc 13include allow-common-devel.inc
diff --git a/etc/profile-a-l/geeqie.profile b/etc/profile-a-l/geeqie.profile
index 8ec3bbaf9..dd33b3fb5 100644
--- a/etc/profile-a-l/geeqie.profile
+++ b/etc/profile-a-l/geeqie.profile
@@ -6,9 +6,9 @@ include geeqie.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/geeqie 9noblacklist ${HOME}/.cache/geeqie
10nodeny ${HOME}/.config/geeqie 10noblacklist ${HOME}/.config/geeqie
11nodeny ${HOME}/.local/share/geeqie 11noblacklist ${HOME}/.local/share/geeqie
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/gfeeds.profile b/etc/profile-a-l/gfeeds.profile
index 1661da639..f894a42ca 100644
--- a/etc/profile-a-l/gfeeds.profile
+++ b/etc/profile-a-l/gfeeds.profile
@@ -6,10 +6,10 @@ include gfeeds.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/gfeeds 9noblacklist ${HOME}/.cache/gfeeds
10nodeny ${HOME}/.cache/org.gabmus.gfeeds 10noblacklist ${HOME}/.cache/org.gabmus.gfeeds
11nodeny ${HOME}/.config/org.gabmus.gfeeds.json 11noblacklist ${HOME}/.config/org.gabmus.gfeeds.json
12nodeny ${HOME}/.config/org.gabmus.gfeeds.saved_articles 12noblacklist ${HOME}/.config/org.gabmus.gfeeds.saved_articles
13 13
14# Allow python (blacklisted by disable-interpreters.inc) 14# Allow python (blacklisted by disable-interpreters.inc)
15include allow-python3.inc 15include allow-python3.inc
@@ -27,12 +27,12 @@ mkdir ${HOME}/.cache/gfeeds
27mkdir ${HOME}/.cache/org.gabmus.gfeeds 27mkdir ${HOME}/.cache/org.gabmus.gfeeds
28mkfile ${HOME}/.config/org.gabmus.gfeeds.json 28mkfile ${HOME}/.config/org.gabmus.gfeeds.json
29mkdir ${HOME}/.config/org.gabmus.gfeeds.saved_articles 29mkdir ${HOME}/.config/org.gabmus.gfeeds.saved_articles
30allow ${HOME}/.cache/gfeeds 30whitelist ${HOME}/.cache/gfeeds
31allow ${HOME}/.cache/org.gabmus.gfeeds 31whitelist ${HOME}/.cache/org.gabmus.gfeeds
32allow ${HOME}/.config/org.gabmus.gfeeds.json 32whitelist ${HOME}/.config/org.gabmus.gfeeds.json
33allow ${HOME}/.config/org.gabmus.gfeeds.saved_articles 33whitelist ${HOME}/.config/org.gabmus.gfeeds.saved_articles
34allow /usr/libexec/webkit2gtk-4.0 34whitelist /usr/libexec/webkit2gtk-4.0
35allow /usr/share/gfeeds 35whitelist /usr/share/gfeeds
36include whitelist-common.inc 36include whitelist-common.inc
37include whitelist-runuser-common.inc 37include whitelist-runuser-common.inc
38include whitelist-usr-share-common.inc 38include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gget.profile b/etc/profile-a-l/gget.profile
index 06929dbe3..d9c5a0d9a 100644
--- a/etc/profile-a-l/gget.profile
+++ b/etc/profile-a-l/gget.profile
@@ -7,8 +7,8 @@ include gget.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10deny /tmp/.X11-unix 10blacklist /tmp/.X11-unix
11deny ${RUNUSER} 11blacklist ${RUNUSER}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -19,7 +19,7 @@ include disable-programs.inc
19include disable-shell.inc 19include disable-shell.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22allow ${DOWNLOADS} 22whitelist ${DOWNLOADS}
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/ghostwriter.profile b/etc/profile-a-l/ghostwriter.profile
index 0577fe24f..276ab76df 100644
--- a/etc/profile-a-l/ghostwriter.profile
+++ b/etc/profile-a-l/ghostwriter.profile
@@ -6,10 +6,10 @@ include ghostwriter.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/ghostwriter 9noblacklist ${HOME}/.config/ghostwriter
10nodeny ${HOME}/.local/share/ghostwriter 10noblacklist ${HOME}/.local/share/ghostwriter
11nodeny ${DOCUMENTS} 11noblacklist ${DOCUMENTS}
12nodeny ${PICTURES} 12noblacklist ${PICTURES}
13 13
14include allow-lua.inc 14include allow-lua.inc
15 15
@@ -22,10 +22,10 @@ include disable-programs.inc
22include disable-shell.inc 22include disable-shell.inc
23include disable-xdg.inc 23include disable-xdg.inc
24 24
25allow /usr/share/ghostwriter 25whitelist /usr/share/ghostwriter
26allow /usr/share/mozilla-dicts 26whitelist /usr/share/mozilla-dicts
27allow /usr/share/texlive 27whitelist /usr/share/texlive
28allow /usr/share/pandoc* 28whitelist /usr/share/pandoc*
29include whitelist-runuser-common.inc 29include whitelist-runuser-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gimp.profile b/etc/profile-a-l/gimp.profile
index de9db8d0f..dfc1304d1 100644
--- a/etc/profile-a-l/gimp.profile
+++ b/etc/profile-a-l/gimp.profile
@@ -18,13 +18,13 @@ include globals.local
18# If you are not using external plugins, you can add 'noexec ${HOME}' to your gimp.local. 18# If you are not using external plugins, you can add 'noexec ${HOME}' to your gimp.local.
19ignore noexec ${HOME} 19ignore noexec ${HOME}
20 20
21nodeny ${HOME}/.cache/babl 21noblacklist ${HOME}/.cache/babl
22nodeny ${HOME}/.cache/gegl-0.4 22noblacklist ${HOME}/.cache/gegl-0.4
23nodeny ${HOME}/.cache/gimp 23noblacklist ${HOME}/.cache/gimp
24nodeny ${HOME}/.config/GIMP 24noblacklist ${HOME}/.config/GIMP
25nodeny ${HOME}/.gimp* 25noblacklist ${HOME}/.gimp*
26nodeny ${DOCUMENTS} 26noblacklist ${DOCUMENTS}
27nodeny ${PICTURES} 27noblacklist ${PICTURES}
28 28
29include disable-common.inc 29include disable-common.inc
30include disable-exec.inc 30include disable-exec.inc
@@ -33,10 +33,10 @@ include disable-passwdmgr.inc
33include disable-programs.inc 33include disable-programs.inc
34include disable-xdg.inc 34include disable-xdg.inc
35 35
36allow /usr/share/gegl-0.4 36whitelist /usr/share/gegl-0.4
37allow /usr/share/gimp 37whitelist /usr/share/gimp
38allow /usr/share/mypaint-data 38whitelist /usr/share/mypaint-data
39allow /usr/share/lensfun 39whitelist /usr/share/lensfun
40include whitelist-usr-share-common.inc 40include whitelist-usr-share-common.inc
41include whitelist-var-common.inc 41include whitelist-var-common.inc
42 42
diff --git a/etc/profile-a-l/gist.profile b/etc/profile-a-l/gist.profile
index e601d3ab0..661c3a375 100644
--- a/etc/profile-a-l/gist.profile
+++ b/etc/profile-a-l/gist.profile
@@ -7,10 +7,10 @@ include gist.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10deny /tmp/.X11-unix 10blacklist /tmp/.X11-unix
11deny ${RUNUSER}/wayland-* 11blacklist ${RUNUSER}/wayland-*
12 12
13nodeny ${HOME}/.gist 13noblacklist ${HOME}/.gist
14 14
15# Allow ruby (blacklisted by disable-interpreters.inc) 15# Allow ruby (blacklisted by disable-interpreters.inc)
16include allow-ruby.inc 16include allow-ruby.inc
@@ -24,8 +24,8 @@ include disable-programs.inc
24include disable-xdg.inc 24include disable-xdg.inc
25 25
26mkdir ${HOME}/.gist 26mkdir ${HOME}/.gist
27allow ${HOME}/.gist 27whitelist ${HOME}/.gist
28allow ${DOWNLOADS} 28whitelist ${DOWNLOADS}
29include whitelist-common.inc 29include whitelist-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/git-cola.profile b/etc/profile-a-l/git-cola.profile
index 74b7506cf..5e4249376 100644
--- a/etc/profile-a-l/git-cola.profile
+++ b/etc/profile-a-l/git-cola.profile
@@ -8,12 +8,12 @@ include globals.local
8 8
9ignore noexec ${HOME} 9ignore noexec ${HOME}
10 10
11nodeny ${HOME}/.gitconfig 11noblacklist ${HOME}/.gitconfig
12nodeny ${HOME}/.git-credentials 12noblacklist ${HOME}/.git-credentials
13nodeny ${HOME}/.gnupg 13noblacklist ${HOME}/.gnupg
14nodeny ${HOME}/.subversion 14noblacklist ${HOME}/.subversion
15nodeny ${HOME}/.config/git 15noblacklist ${HOME}/.config/git
16nodeny ${HOME}/.config/git-cola 16noblacklist ${HOME}/.config/git-cola
17# Add your editor/diff viewer config paths and the next line to your git-cola.local to load settings. 17# Add your editor/diff viewer config paths and the next line to your git-cola.local to load settings.
18#noblacklist ${HOME}/ 18#noblacklist ${HOME}/
19 19
@@ -32,17 +32,17 @@ include disable-passwdmgr.inc
32include disable-programs.inc 32include disable-programs.inc
33include disable-xdg.inc 33include disable-xdg.inc
34 34
35allow ${RUNUSER}/gnupg 35whitelist ${RUNUSER}/gnupg
36allow ${RUNUSER}/keyring 36whitelist ${RUNUSER}/keyring
37# Add additional whitelist paths below /usr/share to your git-cola.local to support your editor/diff viewer. 37# Add additional whitelist paths below /usr/share to your git-cola.local to support your editor/diff viewer.
38allow /usr/share/git 38whitelist /usr/share/git
39allow /usr/share/git-cola 39whitelist /usr/share/git-cola
40allow /usr/share/git-core 40whitelist /usr/share/git-core
41allow /usr/share/git-gui 41whitelist /usr/share/git-gui
42allow /usr/share/gitk 42whitelist /usr/share/gitk
43allow /usr/share/gitweb 43whitelist /usr/share/gitweb
44allow /usr/share/gnupg 44whitelist /usr/share/gnupg
45allow /usr/share/gnupg2 45whitelist /usr/share/gnupg2
46include whitelist-runuser-common.inc 46include whitelist-runuser-common.inc
47include whitelist-usr-share-common.inc 47include whitelist-usr-share-common.inc
48include whitelist-var-common.inc 48include whitelist-var-common.inc
diff --git a/etc/profile-a-l/git.profile b/etc/profile-a-l/git.profile
index 680e91085..bfa0081c6 100644
--- a/etc/profile-a-l/git.profile
+++ b/etc/profile-a-l/git.profile
@@ -7,33 +7,33 @@ include git.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${HOME}/.config/git 10noblacklist ${HOME}/.config/git
11nodeny ${HOME}/.config/nano 11noblacklist ${HOME}/.config/nano
12nodeny ${HOME}/.emacs 12noblacklist ${HOME}/.emacs
13nodeny ${HOME}/.emacs.d 13noblacklist ${HOME}/.emacs.d
14nodeny ${HOME}/.gitconfig 14noblacklist ${HOME}/.gitconfig
15nodeny ${HOME}/.git-credentials 15noblacklist ${HOME}/.git-credentials
16nodeny ${HOME}/.gnupg 16noblacklist ${HOME}/.gnupg
17nodeny ${HOME}/.nanorc 17noblacklist ${HOME}/.nanorc
18nodeny ${HOME}/.vim 18noblacklist ${HOME}/.vim
19nodeny ${HOME}/.viminfo 19noblacklist ${HOME}/.viminfo
20 20
21# Allow ssh (blacklisted by disable-common.inc) 21# Allow ssh (blacklisted by disable-common.inc)
22include allow-ssh.inc 22include allow-ssh.inc
23 23
24deny /tmp/.X11-unix 24blacklist /tmp/.X11-unix
25deny ${RUNUSER}/wayland-* 25blacklist ${RUNUSER}/wayland-*
26 26
27include disable-common.inc 27include disable-common.inc
28include disable-exec.inc 28include disable-exec.inc
29include disable-passwdmgr.inc 29include disable-passwdmgr.inc
30include disable-programs.inc 30include disable-programs.inc
31 31
32allow /usr/share/git 32whitelist /usr/share/git
33allow /usr/share/git-core 33whitelist /usr/share/git-core
34allow /usr/share/gitgui 34whitelist /usr/share/gitgui
35allow /usr/share/gitweb 35whitelist /usr/share/gitweb
36allow /usr/share/nano 36whitelist /usr/share/nano
37include whitelist-usr-share-common.inc 37include whitelist-usr-share-common.inc
38include whitelist-var-common.inc 38include whitelist-var-common.inc
39 39
diff --git a/etc/profile-a-l/gitg.profile b/etc/profile-a-l/gitg.profile
index d313b5022..05d7dffa9 100644
--- a/etc/profile-a-l/gitg.profile
+++ b/etc/profile-a-l/gitg.profile
@@ -6,10 +6,10 @@ include gitg.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/git 9noblacklist ${HOME}/.config/git
10nodeny ${HOME}/.gitconfig 10noblacklist ${HOME}/.gitconfig
11nodeny ${HOME}/.git-credentials 11noblacklist ${HOME}/.git-credentials
12nodeny ${HOME}/.local/share/gitg 12noblacklist ${HOME}/.local/share/gitg
13 13
14# Allow ssh (blacklisted by disable-common.inc) 14# Allow ssh (blacklisted by disable-common.inc)
15include allow-ssh.inc 15include allow-ssh.inc
@@ -29,7 +29,7 @@ include disable-programs.inc
29#whitelist ${HOME}/.ssh 29#whitelist ${HOME}/.ssh
30#include whitelist-common.inc 30#include whitelist-common.inc
31 31
32allow /usr/share/gitg 32whitelist /usr/share/gitg
33include whitelist-runuser-common.inc 33include whitelist-runuser-common.inc
34include whitelist-usr-share-common.inc 34include whitelist-usr-share-common.inc
35include whitelist-var-common.inc 35include whitelist-var-common.inc
diff --git a/etc/profile-a-l/github-desktop.profile b/etc/profile-a-l/github-desktop.profile
index 81b534a74..325c54ced 100644
--- a/etc/profile-a-l/github-desktop.profile
+++ b/etc/profile-a-l/github-desktop.profile
@@ -22,10 +22,10 @@ ignore apparmor
22ignore dbus-user none 22ignore dbus-user none
23ignore dbus-system none 23ignore dbus-system none
24 24
25nodeny ${HOME}/.config/GitHub Desktop 25noblacklist ${HOME}/.config/GitHub Desktop
26nodeny ${HOME}/.config/git 26noblacklist ${HOME}/.config/git
27nodeny ${HOME}/.gitconfig 27noblacklist ${HOME}/.gitconfig
28nodeny ${HOME}/.git-credentials 28noblacklist ${HOME}/.git-credentials
29 29
30# no3d 30# no3d
31nosound 31nosound
diff --git a/etc/profile-a-l/gitter.profile b/etc/profile-a-l/gitter.profile
index 2d1694ef7..460e2b990 100644
--- a/etc/profile-a-l/gitter.profile
+++ b/etc/profile-a-l/gitter.profile
@@ -5,8 +5,8 @@ include gitter.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/autostart 8noblacklist ${HOME}/.config/autostart
9nodeny ${HOME}/.config/Gitter 9noblacklist ${HOME}/.config/Gitter
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,9 +16,9 @@ include disable-passwdmgr.inc
16include disable-programs.inc 16include disable-programs.inc
17 17
18mkdir ${HOME}/.config/Gitter 18mkdir ${HOME}/.config/Gitter
19allow ${DOWNLOADS} 19whitelist ${DOWNLOADS}
20allow ${HOME}/.config/autostart 20whitelist ${HOME}/.config/autostart
21allow ${HOME}/.config/Gitter 21whitelist ${HOME}/.config/Gitter
22include whitelist-var-common.inc 22include whitelist-var-common.inc
23 23
24caps.drop all 24caps.drop all
diff --git a/etc/profile-a-l/gjs.profile b/etc/profile-a-l/gjs.profile
index e00bb1dbf..ed68b3c2d 100644
--- a/etc/profile-a-l/gjs.profile
+++ b/etc/profile-a-l/gjs.profile
@@ -8,10 +8,10 @@ include globals.local
8 8
9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
10 10
11nodeny ${HOME}/.cache/libgweather 11noblacklist ${HOME}/.cache/libgweather
12nodeny ${HOME}/.cache/org.gnome.Books 12noblacklist ${HOME}/.cache/org.gnome.Books
13nodeny ${HOME}/.config/libreoffice 13noblacklist ${HOME}/.config/libreoffice
14nodeny ${HOME}/.local/share/gnome-photos 14noblacklist ${HOME}/.local/share/gnome-photos
15 15
16# Allow gjs (blacklisted by disable-interpreters.inc) 16# Allow gjs (blacklisted by disable-interpreters.inc)
17include allow-gjs.inc 17include allow-gjs.inc
diff --git a/etc/profile-a-l/gl-117.profile b/etc/profile-a-l/gl-117.profile
index a3236c2be..c8cefc67e 100644
--- a/etc/profile-a-l/gl-117.profile
+++ b/etc/profile-a-l/gl-117.profile
@@ -6,7 +6,7 @@ include gl-117.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.gl-117 9noblacklist ${HOME}/.gl-117
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.gl-117 20mkdir ${HOME}/.gl-117
21allow ${HOME}/.gl-117 21whitelist ${HOME}/.gl-117
22allow /usr/share/gl-117 22whitelist /usr/share/gl-117
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/glaxium.profile b/etc/profile-a-l/glaxium.profile
index ec894a5f3..ee7af0546 100644
--- a/etc/profile-a-l/glaxium.profile
+++ b/etc/profile-a-l/glaxium.profile
@@ -6,7 +6,7 @@ include glaxium.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.glaxiumrc 9noblacklist ${HOME}/.glaxiumrc
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkfile ${HOME}/.glaxiumrc 20mkfile ${HOME}/.glaxiumrc
21allow ${HOME}/.glaxiumrc 21whitelist ${HOME}/.glaxiumrc
22allow /usr/share/glaxium 22whitelist /usr/share/glaxium
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/globaltime.profile b/etc/profile-a-l/globaltime.profile
index e091b811f..14b3ef811 100644
--- a/etc/profile-a-l/globaltime.profile
+++ b/etc/profile-a-l/globaltime.profile
@@ -5,7 +5,7 @@ include globaltime.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/globaltime 8noblacklist ${HOME}/.config/globaltime
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
diff --git a/etc/profile-a-l/gmpc.profile b/etc/profile-a-l/gmpc.profile
index 79397d28f..b3aad8b2c 100644
--- a/etc/profile-a-l/gmpc.profile
+++ b/etc/profile-a-l/gmpc.profile
@@ -6,8 +6,8 @@ include gmpc.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/gmpc 9noblacklist ${HOME}/.config/gmpc
10nodeny ${MUSIC} 10noblacklist ${MUSIC}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -18,9 +18,9 @@ include disable-programs.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/gmpc 20mkdir ${HOME}/.config/gmpc
21allow ${HOME}/.config/gmpc 21whitelist ${HOME}/.config/gmpc
22allow ${MUSIC} 22whitelist ${MUSIC}
23allow /usr/share/gmpc 23whitelist /usr/share/gmpc
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-2048.profile b/etc/profile-a-l/gnome-2048.profile
index c723f6e46..777c81dbe 100644
--- a/etc/profile-a-l/gnome-2048.profile
+++ b/etc/profile-a-l/gnome-2048.profile
@@ -6,10 +6,10 @@ include gnome-2048.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/gnome-2048 9noblacklist ${HOME}/.local/share/gnome-2048
10 10
11mkdir ${HOME}/.local/share/gnome-2048 11mkdir ${HOME}/.local/share/gnome-2048
12allow ${HOME}/.local/share/gnome-2048 12whitelist ${HOME}/.local/share/gnome-2048
13 13
14private-bin gnome-2048 14private-bin gnome-2048
15 15
diff --git a/etc/profile-a-l/gnome-books.profile b/etc/profile-a-l/gnome-books.profile
index 2ed5fa76b..34a7f557c 100644
--- a/etc/profile-a-l/gnome-books.profile
+++ b/etc/profile-a-l/gnome-books.profile
@@ -7,8 +7,8 @@ include globals.local
7 7
8# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 8# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
9 9
10nodeny ${HOME}/.cache/org.gnome.Books 10noblacklist ${HOME}/.cache/org.gnome.Books
11nodeny ${DOCUMENTS} 11noblacklist ${DOCUMENTS}
12 12
13# Allow gjs (blacklisted by disable-interpreters.inc) 13# Allow gjs (blacklisted by disable-interpreters.inc)
14include allow-gjs.inc 14include allow-gjs.inc
diff --git a/etc/profile-a-l/gnome-builder.profile b/etc/profile-a-l/gnome-builder.profile
index 7dd1c6e22..37ca5aeff 100644
--- a/etc/profile-a-l/gnome-builder.profile
+++ b/etc/profile-a-l/gnome-builder.profile
@@ -6,11 +6,11 @@ include gnome-builder.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.bash_history 9noblacklist ${HOME}/.bash_history
10 10
11nodeny ${HOME}/.cache/gnome-builder 11noblacklist ${HOME}/.cache/gnome-builder
12nodeny ${HOME}/.config/gnome-builder 12noblacklist ${HOME}/.config/gnome-builder
13nodeny ${HOME}/.local/share/gnome-builder 13noblacklist ${HOME}/.local/share/gnome-builder
14 14
15# Allows files commonly used by IDEs 15# Allows files commonly used by IDEs
16include allow-common-devel.inc 16include allow-common-devel.inc
diff --git a/etc/profile-a-l/gnome-calendar.profile b/etc/profile-a-l/gnome-calendar.profile
index d91fbaa4b..03acd66aa 100644
--- a/etc/profile-a-l/gnome-calendar.profile
+++ b/etc/profile-a-l/gnome-calendar.profile
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18allow /usr/share/libgweather 18whitelist /usr/share/libgweather
19include whitelist-common.inc 19include whitelist-common.inc
20include whitelist-runuser-common.inc 20include whitelist-runuser-common.inc
21include whitelist-usr-share-common.inc 21include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-characters.profile b/etc/profile-a-l/gnome-characters.profile
index 806d7e571..741fe9bf7 100644
--- a/etc/profile-a-l/gnome-characters.profile
+++ b/etc/profile-a-l/gnome-characters.profile
@@ -18,7 +18,7 @@ include disable-programs.inc
18include disable-shell.inc 18include disable-shell.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21allow /usr/share/org.gnome.Characters 21whitelist /usr/share/org.gnome.Characters
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-runuser-common.inc 23include whitelist-runuser-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-chess.profile b/etc/profile-a-l/gnome-chess.profile
index 095210565..bd39f625c 100644
--- a/etc/profile-a-l/gnome-chess.profile
+++ b/etc/profile-a-l/gnome-chess.profile
@@ -6,8 +6,8 @@ include gnome-chess.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/gnome-chess 9noblacklist ${HOME}/.config/gnome-chess
10nodeny ${HOME}/.local/share/gnome-chess 10noblacklist ${HOME}/.local/share/gnome-chess
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -22,8 +22,8 @@ include disable-xdg.inc
22#whitelist ${HOME}/.local/share/gnome-chess 22#whitelist ${HOME}/.local/share/gnome-chess
23#include whitelist-common.inc 23#include whitelist-common.inc
24 24
25allow /usr/share/gnuchess 25whitelist /usr/share/gnuchess
26allow /usr/share/gnome-chess 26whitelist /usr/share/gnome-chess
27include whitelist-runuser-common.inc 27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc 29include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-clocks.profile b/etc/profile-a-l/gnome-clocks.profile
index 7e2d458fd..1e7c70b84 100644
--- a/etc/profile-a-l/gnome-clocks.profile
+++ b/etc/profile-a-l/gnome-clocks.profile
@@ -15,8 +15,8 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18allow /usr/share/gnome-clocks 18whitelist /usr/share/gnome-clocks
19allow /usr/share/libgweather 19whitelist /usr/share/libgweather
20include whitelist-common.inc 20include whitelist-common.inc
21include whitelist-runuser-common.inc 21include whitelist-runuser-common.inc
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-contacts.profile b/etc/profile-a-l/gnome-contacts.profile
index 7902fa169..dcc6163b6 100644
--- a/etc/profile-a-l/gnome-contacts.profile
+++ b/etc/profile-a-l/gnome-contacts.profile
@@ -6,7 +6,7 @@ include gnome-contacts.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${DOCUMENTS} 9noblacklist ${DOCUMENTS}
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/gnome-documents.profile b/etc/profile-a-l/gnome-documents.profile
index 0f601149f..29ad67af8 100644
--- a/etc/profile-a-l/gnome-documents.profile
+++ b/etc/profile-a-l/gnome-documents.profile
@@ -8,8 +8,8 @@ include globals.local
8 8
9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
10 10
11nodeny ${HOME}/.config/libreoffice 11noblacklist ${HOME}/.config/libreoffice
12nodeny ${DOCUMENTS} 12noblacklist ${DOCUMENTS}
13 13
14# Allow gjs (blacklisted by disable-interpreters.inc) 14# Allow gjs (blacklisted by disable-interpreters.inc)
15include allow-gjs.inc 15include allow-gjs.inc
diff --git a/etc/profile-a-l/gnome-hexgl.profile b/etc/profile-a-l/gnome-hexgl.profile
index 50c3e2c6f..2db956faf 100644
--- a/etc/profile-a-l/gnome-hexgl.profile
+++ b/etc/profile-a-l/gnome-hexgl.profile
@@ -16,7 +16,7 @@ include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18mkdir ${HOME}/.cache/mesa_shader_cache 18mkdir ${HOME}/.cache/mesa_shader_cache
19allow /usr/share/gnome-hexgl 19whitelist /usr/share/gnome-hexgl
20include whitelist-runuser-common.inc 20include whitelist-runuser-common.inc
21include whitelist-usr-share-common.inc 21include whitelist-usr-share-common.inc
22include whitelist-var-common.inc 22include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-keyring.profile b/etc/profile-a-l/gnome-keyring.profile
index 62a5a34ea..25b4c47de 100644
--- a/etc/profile-a-l/gnome-keyring.profile
+++ b/etc/profile-a-l/gnome-keyring.profile
@@ -7,7 +7,7 @@ include gnome-keyring.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${HOME}/.gnupg 10noblacklist ${HOME}/.gnupg
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -18,12 +18,12 @@ include disable-programs.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.gnupg 20mkdir ${HOME}/.gnupg
21allow ${HOME}/.gnupg 21whitelist ${HOME}/.gnupg
22allow ${DOWNLOADS} 22whitelist ${DOWNLOADS}
23allow ${RUNUSER}/gnupg 23whitelist ${RUNUSER}/gnupg
24allow ${RUNUSER}/keyring 24whitelist ${RUNUSER}/keyring
25allow /usr/share/gnupg 25whitelist /usr/share/gnupg
26allow /usr/share/gnupg2 26whitelist /usr/share/gnupg2
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-klotski.profile b/etc/profile-a-l/gnome-klotski.profile
index ed074f944..c67a5c0da 100644
--- a/etc/profile-a-l/gnome-klotski.profile
+++ b/etc/profile-a-l/gnome-klotski.profile
@@ -6,10 +6,10 @@ include gnome-klotski.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/gnome-klotski 9noblacklist ${HOME}/.local/share/gnome-klotski
10 10
11mkdir ${HOME}/.local/share/gnome-klotski 11mkdir ${HOME}/.local/share/gnome-klotski
12allow ${HOME}/.local/share/gnome-klotski 12whitelist ${HOME}/.local/share/gnome-klotski
13 13
14private-bin gnome-klotski 14private-bin gnome-klotski
15 15
diff --git a/etc/profile-a-l/gnome-latex.profile b/etc/profile-a-l/gnome-latex.profile
index 4a03a7ff5..1a7eafeca 100644
--- a/etc/profile-a-l/gnome-latex.profile
+++ b/etc/profile-a-l/gnome-latex.profile
@@ -6,8 +6,8 @@ include gnome-latex.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/gnome-latex 9noblacklist ${HOME}/.config/gnome-latex
10nodeny ${HOME}/.local/share/gnome-latex 10noblacklist ${HOME}/.local/share/gnome-latex
11 11
12# Allow perl (blacklisted by disable-interpreters.inc) 12# Allow perl (blacklisted by disable-interpreters.inc)
13include allow-perl.inc 13include allow-perl.inc
@@ -19,8 +19,8 @@ include disable-interpreters.inc
19include disable-passwdmgr.inc 19include disable-passwdmgr.inc
20include disable-programs.inc 20include disable-programs.inc
21 21
22allow /usr/share/gnome-latex 22whitelist /usr/share/gnome-latex
23allow /usr/share/texlive 23whitelist /usr/share/texlive
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
26# May cause issues. 26# May cause issues.
diff --git a/etc/profile-a-l/gnome-logs.profile b/etc/profile-a-l/gnome-logs.profile
index fcc02dc76..9d2ea7b7b 100644
--- a/etc/profile-a-l/gnome-logs.profile
+++ b/etc/profile-a-l/gnome-logs.profile
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18allow /var/log/journal 18whitelist /var/log/journal
19include whitelist-runuser-common.inc 19include whitelist-runuser-common.inc
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-mahjongg.profile b/etc/profile-a-l/gnome-mahjongg.profile
index e21f03efe..42409dce8 100644
--- a/etc/profile-a-l/gnome-mahjongg.profile
+++ b/etc/profile-a-l/gnome-mahjongg.profile
@@ -6,7 +6,7 @@ include gnome-mahjongg.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9allow /usr/share/gnome-mahjongg 9whitelist /usr/share/gnome-mahjongg
10 10
11private-bin gnome-mahjongg 11private-bin gnome-mahjongg
12 12
diff --git a/etc/profile-a-l/gnome-maps.profile b/etc/profile-a-l/gnome-maps.profile
index cf4eceee3..23aab343f 100644
--- a/etc/profile-a-l/gnome-maps.profile
+++ b/etc/profile-a-l/gnome-maps.profile
@@ -11,14 +11,14 @@ include globals.local
11 11
12# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 12# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
13 13
14nodeny ${HOME}/.cache/champlain 14noblacklist ${HOME}/.cache/champlain
15nodeny ${HOME}/.cache/org.gnome.Maps 15noblacklist ${HOME}/.cache/org.gnome.Maps
16nodeny ${HOME}/.local/share/maps-places.json 16noblacklist ${HOME}/.local/share/maps-places.json
17 17
18# Allow gjs (blacklisted by disable-interpreters.inc) 18# Allow gjs (blacklisted by disable-interpreters.inc)
19include allow-gjs.inc 19include allow-gjs.inc
20 20
21deny /usr/libexec 21blacklist /usr/libexec
22 22
23include disable-common.inc 23include disable-common.inc
24include disable-devel.inc 24include disable-devel.inc
@@ -31,12 +31,12 @@ include disable-xdg.inc
31 31
32mkdir ${HOME}/.cache/champlain 32mkdir ${HOME}/.cache/champlain
33mkfile ${HOME}/.local/share/maps-places.json 33mkfile ${HOME}/.local/share/maps-places.json
34allow ${HOME}/.cache/champlain 34whitelist ${HOME}/.cache/champlain
35allow ${HOME}/.local/share/maps-places.json 35whitelist ${HOME}/.local/share/maps-places.json
36allow ${DOWNLOADS} 36whitelist ${DOWNLOADS}
37allow ${PICTURES} 37whitelist ${PICTURES}
38allow /usr/share/gnome-maps 38whitelist /usr/share/gnome-maps
39allow /usr/share/libgweather 39whitelist /usr/share/libgweather
40include whitelist-common.inc 40include whitelist-common.inc
41include whitelist-runuser-common.inc 41include whitelist-runuser-common.inc
42include whitelist-usr-share-common.inc 42include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-mines.profile b/etc/profile-a-l/gnome-mines.profile
index 1b2949bc5..4fe8986c2 100644
--- a/etc/profile-a-l/gnome-mines.profile
+++ b/etc/profile-a-l/gnome-mines.profile
@@ -6,11 +6,11 @@ include gnome-mines.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/gnome-mines 9noblacklist ${HOME}/.local/share/gnome-mines
10 10
11mkdir ${HOME}/.local/share/gnome-mines 11mkdir ${HOME}/.local/share/gnome-mines
12allow ${HOME}/.local/share/gnome-mines 12whitelist ${HOME}/.local/share/gnome-mines
13allow /usr/share/gnome-mines 13whitelist /usr/share/gnome-mines
14 14
15private-bin gnome-mines 15private-bin gnome-mines
16 16
diff --git a/etc/profile-a-l/gnome-mplayer.profile b/etc/profile-a-l/gnome-mplayer.profile
index c1cbc796a..43fe71f5e 100644
--- a/etc/profile-a-l/gnome-mplayer.profile
+++ b/etc/profile-a-l/gnome-mplayer.profile
@@ -6,9 +6,9 @@ include gnome-mplayer.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/gnome-mplayer 9noblacklist ${HOME}/.config/gnome-mplayer
10nodeny ${MUSIC} 10noblacklist ${MUSIC}
11nodeny ${VIDEOS} 11noblacklist ${VIDEOS}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/gnome-music.profile b/etc/profile-a-l/gnome-music.profile
index 8fd0826c4..2fcbe9910 100644
--- a/etc/profile-a-l/gnome-music.profile
+++ b/etc/profile-a-l/gnome-music.profile
@@ -6,8 +6,8 @@ include gnome-music.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/gnome-music 9noblacklist ${HOME}/.local/share/gnome-music
10nodeny ${MUSIC} 10noblacklist ${MUSIC}
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/gnome-nettool.profile b/etc/profile-a-l/gnome-nettool.profile
index a929582f8..814751db3 100644
--- a/etc/profile-a-l/gnome-nettool.profile
+++ b/etc/profile-a-l/gnome-nettool.profile
@@ -14,7 +14,7 @@ include disable-passwdmgr.inc
14include disable-programs.inc 14include disable-programs.inc
15include disable-xdg.inc 15include disable-xdg.inc
16 16
17allow /usr/share/gnome-nettool 17whitelist /usr/share/gnome-nettool
18#include whitelist-common.inc -- see #903 18#include whitelist-common.inc -- see #903
19include whitelist-runuser-common.inc 19include whitelist-runuser-common.inc
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-nibbles.profile b/etc/profile-a-l/gnome-nibbles.profile
index d4c037a41..b22810d34 100644
--- a/etc/profile-a-l/gnome-nibbles.profile
+++ b/etc/profile-a-l/gnome-nibbles.profile
@@ -9,11 +9,11 @@ include globals.local
9ignore machine-id 9ignore machine-id
10ignore nosound 10ignore nosound
11 11
12nodeny ${HOME}/.local/share/gnome-nibbles 12noblacklist ${HOME}/.local/share/gnome-nibbles
13 13
14mkdir ${HOME}/.local/share/gnome-nibbles 14mkdir ${HOME}/.local/share/gnome-nibbles
15allow ${HOME}/.local/share/gnome-nibbles 15whitelist ${HOME}/.local/share/gnome-nibbles
16allow /usr/share/gnome-nibbles 16whitelist /usr/share/gnome-nibbles
17 17
18private-bin gnome-nibbles 18private-bin gnome-nibbles
19 19
diff --git a/etc/profile-a-l/gnome-passwordsafe.profile b/etc/profile-a-l/gnome-passwordsafe.profile
index d2cf828cc..fee5f88b9 100644
--- a/etc/profile-a-l/gnome-passwordsafe.profile
+++ b/etc/profile-a-l/gnome-passwordsafe.profile
@@ -6,14 +6,14 @@ include gnome-passwordsafe.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${DOCUMENTS} 9noblacklist ${DOCUMENTS}
10nodeny ${HOME}/*.kdb 10noblacklist ${HOME}/*.kdb
11nodeny ${HOME}/*.kdbx 11noblacklist ${HOME}/*.kdbx
12 12
13# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
14include allow-python3.inc 14include allow-python3.inc
15 15
16deny /usr/libexec 16blacklist /usr/libexec
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
@@ -24,8 +24,8 @@ include disable-programs.inc
24include disable-shell.inc 24include disable-shell.inc
25include disable-xdg.inc 25include disable-xdg.inc
26 26
27allow /usr/share/cracklib 27whitelist /usr/share/cracklib
28allow /usr/share/passwordsafe 28whitelist /usr/share/passwordsafe
29include whitelist-runuser-common.inc 29include whitelist-runuser-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-photos.profile b/etc/profile-a-l/gnome-photos.profile
index 3702da2c7..58bf3f349 100644
--- a/etc/profile-a-l/gnome-photos.profile
+++ b/etc/profile-a-l/gnome-photos.profile
@@ -8,7 +8,7 @@ include globals.local
8 8
9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
10 10
11nodeny ${HOME}/.local/share/gnome-photos 11noblacklist ${HOME}/.local/share/gnome-photos
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/gnome-pie.profile b/etc/profile-a-l/gnome-pie.profile
index e9ae2bcb0..41903b136 100644
--- a/etc/profile-a-l/gnome-pie.profile
+++ b/etc/profile-a-l/gnome-pie.profile
@@ -6,7 +6,7 @@ include gnome-pie.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/gnome-pie 9noblacklist ${HOME}/.config/gnome-pie
10 10
11#include disable-common.inc 11#include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/gnome-pomodoro.profile b/etc/profile-a-l/gnome-pomodoro.profile
index bec23910c..c2ba7556d 100644
--- a/etc/profile-a-l/gnome-pomodoro.profile
+++ b/etc/profile-a-l/gnome-pomodoro.profile
@@ -6,7 +6,7 @@ include gnome-pomodoro.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/gnome-pomodoro 9noblacklist ${HOME}/.local/share/gnome-pomodoro
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,8 +17,8 @@ include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19mkdir ${HOME}/.local/share/gnome-pomodoro 19mkdir ${HOME}/.local/share/gnome-pomodoro
20allow ${HOME}/.local/share/gnome-pomodoro 20whitelist ${HOME}/.local/share/gnome-pomodoro
21allow /usr/share/gnome-pomodoro 21whitelist /usr/share/gnome-pomodoro
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/gnome-recipes.profile b/etc/profile-a-l/gnome-recipes.profile
index 5ef33fdd8..48c98ebe0 100644
--- a/etc/profile-a-l/gnome-recipes.profile
+++ b/etc/profile-a-l/gnome-recipes.profile
@@ -7,8 +7,8 @@ include gnome-recipes.local
7include globals.local 7include globals.local
8 8
9 9
10nodeny ${HOME}/.cache/gnome-recipes 10noblacklist ${HOME}/.cache/gnome-recipes
11nodeny ${HOME}/.local/share/gnome-recipes 11noblacklist ${HOME}/.local/share/gnome-recipes
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -20,9 +20,9 @@ include disable-shell.inc
20 20
21mkdir ${HOME}/.cache/gnome-recipes 21mkdir ${HOME}/.cache/gnome-recipes
22mkdir ${HOME}/.local/share/gnome-recipes 22mkdir ${HOME}/.local/share/gnome-recipes
23allow ${HOME}/.cache/gnome-recipes 23whitelist ${HOME}/.cache/gnome-recipes
24allow ${HOME}/.local/share/gnome-recipes 24whitelist ${HOME}/.local/share/gnome-recipes
25allow /usr/share/gnome-recipes 25whitelist /usr/share/gnome-recipes
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-usr-share-common.inc 27include whitelist-usr-share-common.inc
28include whitelist-var-common.inc 28include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-ring.profile b/etc/profile-a-l/gnome-ring.profile
index b34d264f4..78ceb9c4f 100644
--- a/etc/profile-a-l/gnome-ring.profile
+++ b/etc/profile-a-l/gnome-ring.profile
@@ -5,7 +5,7 @@ include gnome-ring.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.local/share/gnome-ring 8noblacklist ${HOME}/.local/share/gnome-ring
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
diff --git a/etc/profile-a-l/gnome-robots.profile b/etc/profile-a-l/gnome-robots.profile
index 836d4e2b2..8835f2b93 100644
--- a/etc/profile-a-l/gnome-robots.profile
+++ b/etc/profile-a-l/gnome-robots.profile
@@ -9,7 +9,7 @@ include globals.local
9ignore machine-id 9ignore machine-id
10ignore nosound 10ignore nosound
11 11
12allow /usr/share/gnome-robots 12whitelist /usr/share/gnome-robots
13 13
14private-bin gnome-robots 14private-bin gnome-robots
15 15
diff --git a/etc/profile-a-l/gnome-schedule.profile b/etc/profile-a-l/gnome-schedule.profile
index 146f8bc4e..69c90b33d 100644
--- a/etc/profile-a-l/gnome-schedule.profile
+++ b/etc/profile-a-l/gnome-schedule.profile
@@ -6,17 +6,17 @@ include gnome-schedule.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.gnome/gnome-schedule 9noblacklist ${HOME}/.gnome/gnome-schedule
10 10
11# Needs at and crontab to read/write user cron 11# Needs at and crontab to read/write user cron
12nodeny ${PATH}/at 12noblacklist ${PATH}/at
13nodeny ${PATH}/crontab 13noblacklist ${PATH}/crontab
14 14
15# Needs access to these files/dirs 15# Needs access to these files/dirs
16nodeny /etc/cron.allow 16noblacklist /etc/cron.allow
17nodeny /etc/cron.deny 17noblacklist /etc/cron.deny
18nodeny /etc/shadow 18noblacklist /etc/shadow
19nodeny /var/spool/cron 19noblacklist /var/spool/cron
20 20
21# cron job testing needs a terminal, resulting in sandbox escape (see disable-common.inc) 21# cron job testing needs a terminal, resulting in sandbox escape (see disable-common.inc)
22# add 'noblacklist ${PATH}/your-terminal' to gnome-schedule.local if you need that functionality 22# add 'noblacklist ${PATH}/your-terminal' to gnome-schedule.local if you need that functionality
@@ -34,10 +34,10 @@ include disable-programs.inc
34include disable-xdg.inc 34include disable-xdg.inc
35 35
36mkfile ${HOME}/.gnome/gnome-schedule 36mkfile ${HOME}/.gnome/gnome-schedule
37allow ${HOME}/.gnome/gnome-schedule 37whitelist ${HOME}/.gnome/gnome-schedule
38allow /usr/share/gnome-schedule 38whitelist /usr/share/gnome-schedule
39allow /var/spool/atd 39whitelist /var/spool/atd
40allow /var/spool/cron 40whitelist /var/spool/cron
41include whitelist-common.inc 41include whitelist-common.inc
42include whitelist-runuser-common.inc 42include whitelist-runuser-common.inc
43include whitelist-usr-share-common.inc 43include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnome-screenshot.profile b/etc/profile-a-l/gnome-screenshot.profile
index 175549e99..b683b6f6c 100644
--- a/etc/profile-a-l/gnome-screenshot.profile
+++ b/etc/profile-a-l/gnome-screenshot.profile
@@ -6,8 +6,8 @@ include gnome-screenshot.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${PICTURES} 9noblacklist ${PICTURES}
10nodeny ${HOME}/.cache/gnome-screenshot 10noblacklist ${HOME}/.cache/gnome-screenshot
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/gnome-sound-recorder.profile b/etc/profile-a-l/gnome-sound-recorder.profile
index c2fb14fa4..34f5fdeff 100644
--- a/etc/profile-a-l/gnome-sound-recorder.profile
+++ b/etc/profile-a-l/gnome-sound-recorder.profile
@@ -6,8 +6,8 @@ include gnome-sound-recorder.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${MUSIC} 9noblacklist ${MUSIC}
10nodeny ${HOME}/.local/share/Trash 10noblacklist ${HOME}/.local/share/Trash
11 11
12# Allow gjs (blacklisted by disable-interpreters.inc) 12# Allow gjs (blacklisted by disable-interpreters.inc)
13include allow-gjs.inc 13include allow-gjs.inc
diff --git a/etc/profile-a-l/gnome-sudoku.profile b/etc/profile-a-l/gnome-sudoku.profile
index 3b7835e52..12fd48a86 100644
--- a/etc/profile-a-l/gnome-sudoku.profile
+++ b/etc/profile-a-l/gnome-sudoku.profile
@@ -6,10 +6,10 @@ include gnome-sudoku.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/gnome-sudoku 9noblacklist ${HOME}/.local/share/gnome-sudoku
10 10
11mkdir ${HOME}/.local/share/gnome-sudoku 11mkdir ${HOME}/.local/share/gnome-sudoku
12allow ${HOME}/.local/share/gnome-sudoku 12whitelist ${HOME}/.local/share/gnome-sudoku
13 13
14private-bin gnome-sudoku 14private-bin gnome-sudoku
15 15
diff --git a/etc/profile-a-l/gnome-system-log.profile b/etc/profile-a-l/gnome-system-log.profile
index 6978f7cab..8a818695d 100644
--- a/etc/profile-a-l/gnome-system-log.profile
+++ b/etc/profile-a-l/gnome-system-log.profile
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18allow /var/log 18whitelist /var/log
19include whitelist-common.inc 19include whitelist-common.inc
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gnome-taquin.profile b/etc/profile-a-l/gnome-taquin.profile
index ac87cf70f..2341334f7 100644
--- a/etc/profile-a-l/gnome-taquin.profile
+++ b/etc/profile-a-l/gnome-taquin.profile
@@ -9,7 +9,7 @@ include globals.local
9ignore machine-id 9ignore machine-id
10ignore nosound 10ignore nosound
11 11
12allow /usr/share/gnome-taquin 12whitelist /usr/share/gnome-taquin
13 13
14private-bin gnome-taquin 14private-bin gnome-taquin
15 15
diff --git a/etc/profile-a-l/gnome-todo.profile b/etc/profile-a-l/gnome-todo.profile
index 092fd58a3..3b147cd48 100644
--- a/etc/profile-a-l/gnome-todo.profile
+++ b/etc/profile-a-l/gnome-todo.profile
@@ -18,7 +18,7 @@ include disable-programs.inc
18include disable-shell.inc 18include disable-shell.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21allow /usr/share/gnome-todo 21whitelist /usr/share/gnome-todo
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/gnome-twitch.profile b/etc/profile-a-l/gnome-twitch.profile
index d76872ea6..b8ec195d3 100644
--- a/etc/profile-a-l/gnome-twitch.profile
+++ b/etc/profile-a-l/gnome-twitch.profile
@@ -6,8 +6,8 @@ include gnome-twitch.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/gnome-twitch 9noblacklist ${HOME}/.cache/gnome-twitch
10nodeny ${HOME}/.local/share/gnome-twitch 10noblacklist ${HOME}/.local/share/gnome-twitch
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-programs.inc
18 18
19mkdir ${HOME}/.cache/gnome-twitch 19mkdir ${HOME}/.cache/gnome-twitch
20mkdir ${HOME}/.local/share/gnome-twitch 20mkdir ${HOME}/.local/share/gnome-twitch
21allow ${HOME}/.cache/gnome-twitch 21whitelist ${HOME}/.cache/gnome-twitch
22allow ${HOME}/.local/share/gnome-twitch 22whitelist ${HOME}/.local/share/gnome-twitch
23include whitelist-common.inc 23include whitelist-common.inc
24 24
25caps.drop all 25caps.drop all
diff --git a/etc/profile-a-l/gnome-weather.profile b/etc/profile-a-l/gnome-weather.profile
index 6f557ff8d..2e08fa41d 100644
--- a/etc/profile-a-l/gnome-weather.profile
+++ b/etc/profile-a-l/gnome-weather.profile
@@ -8,7 +8,7 @@ include globals.local
8 8
9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them 9# when gjs apps are started via gnome-shell, firejail is not applied because systemd will start them
10 10
11nodeny ${HOME}/.cache/libgweather 11noblacklist ${HOME}/.cache/libgweather
12 12
13# Allow gjs (blacklisted by disable-interpreters.inc) 13# Allow gjs (blacklisted by disable-interpreters.inc)
14include allow-gjs.inc 14include allow-gjs.inc
diff --git a/etc/profile-a-l/gnote.profile b/etc/profile-a-l/gnote.profile
index 261efefac..c3014a288 100644
--- a/etc/profile-a-l/gnote.profile
+++ b/etc/profile-a-l/gnote.profile
@@ -6,8 +6,8 @@ include gnote.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/gnote 9noblacklist ${HOME}/.config/gnote
10nodeny ${HOME}/.local/share/gnote 10noblacklist ${HOME}/.local/share/gnote
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -20,9 +20,9 @@ include disable-xdg.inc
20 20
21mkdir ${HOME}/.config/gnote 21mkdir ${HOME}/.config/gnote
22mkdir ${HOME}/.local/share/gnote 22mkdir ${HOME}/.local/share/gnote
23allow ${HOME}/.config/gnote 23whitelist ${HOME}/.config/gnote
24allow ${HOME}/.local/share/gnote 24whitelist ${HOME}/.local/share/gnote
25allow /usr/share/gnote 25whitelist /usr/share/gnote
26include whitelist-common.inc 26include whitelist-common.inc
27include whitelist-runuser-common.inc 27include whitelist-runuser-common.inc
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gnubik.profile b/etc/profile-a-l/gnubik.profile
index e6fbca26f..22851ce9f 100644
--- a/etc/profile-a-l/gnubik.profile
+++ b/etc/profile-a-l/gnubik.profile
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18allow /usr/share/gnubik 18whitelist /usr/share/gnubik
19include whitelist-common.inc 19include whitelist-common.inc
20include whitelist-runuser-common.inc 20include whitelist-runuser-common.inc
21include whitelist-usr-share-common.inc 21include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/godot.profile b/etc/profile-a-l/godot.profile
index f35a53ca4..09ca17caa 100644
--- a/etc/profile-a-l/godot.profile
+++ b/etc/profile-a-l/godot.profile
@@ -6,9 +6,9 @@ include godot.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/godot 9noblacklist ${HOME}/.cache/godot
10nodeny ${HOME}/.config/godot 10noblacklist ${HOME}/.config/godot
11nodeny ${HOME}/.local/share/godot 11noblacklist ${HOME}/.local/share/godot
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/goobox.profile b/etc/profile-a-l/goobox.profile
index 95dd41c2a..8399d77c4 100644
--- a/etc/profile-a-l/goobox.profile
+++ b/etc/profile-a-l/goobox.profile
@@ -6,7 +6,7 @@ include goobox.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${MUSIC} 9noblacklist ${MUSIC}
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/google-chrome-beta.profile b/etc/profile-a-l/google-chrome-beta.profile
index 07f0e587d..ebe5e870b 100644
--- a/etc/profile-a-l/google-chrome-beta.profile
+++ b/etc/profile-a-l/google-chrome-beta.profile
@@ -10,19 +10,19 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13nodeny ${HOME}/.cache/google-chrome-beta 13noblacklist ${HOME}/.cache/google-chrome-beta
14nodeny ${HOME}/.config/google-chrome-beta 14noblacklist ${HOME}/.config/google-chrome-beta
15 15
16nodeny ${HOME}/.config/chrome-beta-flags.conf 16noblacklist ${HOME}/.config/chrome-beta-flags.conf
17nodeny ${HOME}/.config/chrome-beta-flags.config 17noblacklist ${HOME}/.config/chrome-beta-flags.config
18 18
19mkdir ${HOME}/.cache/google-chrome-beta 19mkdir ${HOME}/.cache/google-chrome-beta
20mkdir ${HOME}/.config/google-chrome-beta 20mkdir ${HOME}/.config/google-chrome-beta
21allow ${HOME}/.cache/google-chrome-beta 21whitelist ${HOME}/.cache/google-chrome-beta
22allow ${HOME}/.config/google-chrome-beta 22whitelist ${HOME}/.config/google-chrome-beta
23 23
24allow ${HOME}/.config/chrome-beta-flags.conf 24whitelist ${HOME}/.config/chrome-beta-flags.conf
25allow ${HOME}/.config/chrome-beta-flags.config 25whitelist ${HOME}/.config/chrome-beta-flags.config
26 26
27# Redirect 27# Redirect
28include chromium-common.profile 28include chromium-common.profile
diff --git a/etc/profile-a-l/google-chrome-unstable.profile b/etc/profile-a-l/google-chrome-unstable.profile
index 229904411..4d303f71b 100644
--- a/etc/profile-a-l/google-chrome-unstable.profile
+++ b/etc/profile-a-l/google-chrome-unstable.profile
@@ -10,19 +10,19 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13nodeny ${HOME}/.cache/google-chrome-unstable 13noblacklist ${HOME}/.cache/google-chrome-unstable
14nodeny ${HOME}/.config/google-chrome-unstable 14noblacklist ${HOME}/.config/google-chrome-unstable
15 15
16nodeny ${HOME}/.config/chrome-unstable-flags.conf 16noblacklist ${HOME}/.config/chrome-unstable-flags.conf
17nodeny ${HOME}/.config/chrome-unstable-flags.config 17noblacklist ${HOME}/.config/chrome-unstable-flags.config
18 18
19mkdir ${HOME}/.cache/google-chrome-unstable 19mkdir ${HOME}/.cache/google-chrome-unstable
20mkdir ${HOME}/.config/google-chrome-unstable 20mkdir ${HOME}/.config/google-chrome-unstable
21allow ${HOME}/.cache/google-chrome-unstable 21whitelist ${HOME}/.cache/google-chrome-unstable
22allow ${HOME}/.config/google-chrome-unstable 22whitelist ${HOME}/.config/google-chrome-unstable
23 23
24allow ${HOME}/.config/chrome-unstable-flags.conf 24whitelist ${HOME}/.config/chrome-unstable-flags.conf
25allow ${HOME}/.config/chrome-unstable-flags.config 25whitelist ${HOME}/.config/chrome-unstable-flags.config
26 26
27# Redirect 27# Redirect
28include chromium-common.profile 28include chromium-common.profile
diff --git a/etc/profile-a-l/google-chrome.profile b/etc/profile-a-l/google-chrome.profile
index f61642f17..ed2595f72 100644
--- a/etc/profile-a-l/google-chrome.profile
+++ b/etc/profile-a-l/google-chrome.profile
@@ -10,19 +10,19 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13nodeny ${HOME}/.cache/google-chrome 13noblacklist ${HOME}/.cache/google-chrome
14nodeny ${HOME}/.config/google-chrome 14noblacklist ${HOME}/.config/google-chrome
15 15
16nodeny ${HOME}/.config/chrome-flags.conf 16noblacklist ${HOME}/.config/chrome-flags.conf
17nodeny ${HOME}/.config/chrome-flags.config 17noblacklist ${HOME}/.config/chrome-flags.config
18 18
19mkdir ${HOME}/.cache/google-chrome 19mkdir ${HOME}/.cache/google-chrome
20mkdir ${HOME}/.config/google-chrome 20mkdir ${HOME}/.config/google-chrome
21allow ${HOME}/.cache/google-chrome 21whitelist ${HOME}/.cache/google-chrome
22allow ${HOME}/.config/google-chrome 22whitelist ${HOME}/.config/google-chrome
23 23
24allow ${HOME}/.config/chrome-flags.conf 24whitelist ${HOME}/.config/chrome-flags.conf
25allow ${HOME}/.config/chrome-flags.config 25whitelist ${HOME}/.config/chrome-flags.config
26 26
27# Redirect 27# Redirect
28include chromium-common.profile 28include chromium-common.profile
diff --git a/etc/profile-a-l/google-earth.profile b/etc/profile-a-l/google-earth.profile
index 6039f7cbd..65ac04771 100644
--- a/etc/profile-a-l/google-earth.profile
+++ b/etc/profile-a-l/google-earth.profile
@@ -5,8 +5,8 @@ include google-earth.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/Google 8noblacklist ${HOME}/.config/Google
9nodeny ${HOME}/.googleearth 9noblacklist ${HOME}/.googleearth
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,8 +17,8 @@ include disable-programs.inc
17 17
18mkdir ${HOME}/.config/Google 18mkdir ${HOME}/.config/Google
19mkdir ${HOME}/.googleearth 19mkdir ${HOME}/.googleearth
20allow ${HOME}/.config/Google 20whitelist ${HOME}/.config/Google
21allow ${HOME}/.googleearth 21whitelist ${HOME}/.googleearth
22include whitelist-common.inc 22include whitelist-common.inc
23 23
24caps.drop all 24caps.drop all
diff --git a/etc/profile-a-l/google-play-music-desktop-player.profile b/etc/profile-a-l/google-play-music-desktop-player.profile
index fdb65b93c..a7aabe105 100644
--- a/etc/profile-a-l/google-play-music-desktop-player.profile
+++ b/etc/profile-a-l/google-play-music-desktop-player.profile
@@ -8,7 +8,7 @@ include globals.local
8# noexec /tmp breaks mpris support 8# noexec /tmp breaks mpris support
9ignore noexec /tmp 9ignore noexec /tmp
10 10
11nodeny ${HOME}/.config/Google Play Music Desktop Player 11noblacklist ${HOME}/.config/Google Play Music Desktop Player
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -20,7 +20,7 @@ include disable-programs.inc
20mkdir ${HOME}/.config/Google Play Music Desktop Player 20mkdir ${HOME}/.config/Google Play Music Desktop Player
21# whitelist ${HOME}/.config/pulse 21# whitelist ${HOME}/.config/pulse
22# whitelist ${HOME}/.pulse 22# whitelist ${HOME}/.pulse
23allow ${HOME}/.config/Google Play Music Desktop Player 23whitelist ${HOME}/.config/Google Play Music Desktop Player
24include whitelist-common.inc 24include whitelist-common.inc
25 25
26caps.drop all 26caps.drop all
diff --git a/etc/profile-a-l/googler-common.profile b/etc/profile-a-l/googler-common.profile
index 952c9c1d4..2d0bce52b 100644
--- a/etc/profile-a-l/googler-common.profile
+++ b/etc/profile-a-l/googler-common.profile
@@ -7,10 +7,10 @@ include googler-common.local
7# added by caller profile 7# added by caller profile
8#include globals.local 8#include globals.local
9 9
10deny /tmp/.X11-unix 10blacklist /tmp/.X11-unix
11deny ${RUNUSER} 11blacklist ${RUNUSER}
12 12
13nodeny ${HOME}/.w3m 13noblacklist ${HOME}/.w3m
14 14
15# Allow /bin/sh (blacklisted by disable-shell.inc) 15# Allow /bin/sh (blacklisted by disable-shell.inc)
16include allow-bin-sh.inc 16include allow-bin-sh.inc
@@ -26,7 +26,7 @@ include disable-programs.inc
26include disable-shell.inc 26include disable-shell.inc
27include disable-xdg.inc 27include disable-xdg.inc
28 28
29allow ${HOME}/.w3m 29whitelist ${HOME}/.w3m
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
32 32
diff --git a/etc/profile-a-l/gpa.profile b/etc/profile-a-l/gpa.profile
index 9b8da361b..37b4f0b1c 100644
--- a/etc/profile-a-l/gpa.profile
+++ b/etc/profile-a-l/gpa.profile
@@ -6,7 +6,7 @@ include gpa.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.gnupg 9noblacklist ${HOME}/.gnupg
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/gpg-agent.profile b/etc/profile-a-l/gpg-agent.profile
index 5fa66bb55..7f0b614b1 100644
--- a/etc/profile-a-l/gpg-agent.profile
+++ b/etc/profile-a-l/gpg-agent.profile
@@ -7,10 +7,10 @@ include gpg-agent.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${HOME}/.gnupg 10noblacklist ${HOME}/.gnupg
11 11
12deny /tmp/.X11-unix 12blacklist /tmp/.X11-unix
13deny ${RUNUSER}/wayland-* 13blacklist ${RUNUSER}/wayland-*
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -20,11 +20,11 @@ include disable-programs.inc
20include disable-xdg.inc 20include disable-xdg.inc
21 21
22mkdir ${HOME}/.gnupg 22mkdir ${HOME}/.gnupg
23allow ${HOME}/.gnupg 23whitelist ${HOME}/.gnupg
24allow ${RUNUSER}/gnupg 24whitelist ${RUNUSER}/gnupg
25allow ${RUNUSER}/keyring 25whitelist ${RUNUSER}/keyring
26allow /usr/share/gnupg 26whitelist /usr/share/gnupg
27allow /usr/share/gnupg2 27whitelist /usr/share/gnupg2
28include whitelist-common.inc 28include whitelist-common.inc
29include whitelist-runuser-common.inc 29include whitelist-runuser-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gpg.profile b/etc/profile-a-l/gpg.profile
index 2ad896abe..4a4d6527c 100644
--- a/etc/profile-a-l/gpg.profile
+++ b/etc/profile-a-l/gpg.profile
@@ -7,10 +7,10 @@ include gpg.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${HOME}/.gnupg 10noblacklist ${HOME}/.gnupg
11 11
12deny /tmp/.X11-unix 12blacklist /tmp/.X11-unix
13deny ${RUNUSER}/wayland-* 13blacklist ${RUNUSER}/wayland-*
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -18,11 +18,11 @@ include disable-interpreters.inc
18include disable-passwdmgr.inc 18include disable-passwdmgr.inc
19include disable-programs.inc 19include disable-programs.inc
20 20
21allow ${RUNUSER}/gnupg 21whitelist ${RUNUSER}/gnupg
22allow ${RUNUSER}/keyring 22whitelist ${RUNUSER}/keyring
23allow /usr/share/gnupg 23whitelist /usr/share/gnupg
24allow /usr/share/gnupg2 24whitelist /usr/share/gnupg2
25allow /usr/share/pacman/keyrings 25whitelist /usr/share/pacman/keyrings
26include whitelist-runuser-common.inc 26include whitelist-runuser-common.inc
27include whitelist-usr-share-common.inc 27include whitelist-usr-share-common.inc
28include whitelist-var-common.inc 28include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gpicview.profile b/etc/profile-a-l/gpicview.profile
index 0552dc3d7..fa53c26c8 100644
--- a/etc/profile-a-l/gpicview.profile
+++ b/etc/profile-a-l/gpicview.profile
@@ -6,7 +6,7 @@ include gpicview.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/gpicview 9noblacklist ${HOME}/.config/gpicview
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -16,7 +16,7 @@ include disable-passwdmgr.inc
16include disable-programs.inc 16include disable-programs.inc
17include disable-shell.inc 17include disable-shell.inc
18 18
19allow /usr/share/gpicview 19whitelist /usr/share/gpicview
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
22 22
diff --git a/etc/profile-a-l/gpredict.profile b/etc/profile-a-l/gpredict.profile
index c9e62a73f..253d644f1 100644
--- a/etc/profile-a-l/gpredict.profile
+++ b/etc/profile-a-l/gpredict.profile
@@ -6,7 +6,7 @@ include gpredict.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/Gpredict 9noblacklist ${HOME}/.config/Gpredict
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-programs.inc
17include disable-shell.inc 17include disable-shell.inc
18 18
19mkdir ${HOME}/.config/Gpredict 19mkdir ${HOME}/.config/Gpredict
20allow ${HOME}/.config/Gpredict 20whitelist ${HOME}/.config/Gpredict
21include whitelist-common.inc 21include whitelist-common.inc
22 22
23caps.drop all 23caps.drop all
diff --git a/etc/profile-a-l/gradio.profile b/etc/profile-a-l/gradio.profile
index 2aebe2338..2b4c536d2 100644
--- a/etc/profile-a-l/gradio.profile
+++ b/etc/profile-a-l/gradio.profile
@@ -5,8 +5,8 @@ include gradio.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.cache/gradio 8noblacklist ${HOME}/.cache/gradio
9nodeny ${HOME}/.local/share/gradio 9noblacklist ${HOME}/.local/share/gradio
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-xdg.inc
18 18
19mkdir ${HOME}/.cache/gradio 19mkdir ${HOME}/.cache/gradio
20mkdir ${HOME}/.local/share/gradio 20mkdir ${HOME}/.local/share/gradio
21allow ${HOME}/.cache/gradio 21whitelist ${HOME}/.cache/gradio
22allow ${HOME}/.local/share/gradio 22whitelist ${HOME}/.local/share/gradio
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-runuser-common.inc 24include whitelist-runuser-common.inc
25include whitelist-usr-share-common.inc 25include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gramps.profile b/etc/profile-a-l/gramps.profile
index 53f0baccb..c7e0c2977 100644
--- a/etc/profile-a-l/gramps.profile
+++ b/etc/profile-a-l/gramps.profile
@@ -6,7 +6,7 @@ include gramps.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.gramps 9noblacklist ${HOME}/.gramps
10 10
11# Allow python (blacklisted by disable-interpreters.inc) 11# Allow python (blacklisted by disable-interpreters.inc)
12#include allow-python2.inc 12#include allow-python2.inc
@@ -21,7 +21,7 @@ include disable-programs.inc
21include disable-xdg.inc 21include disable-xdg.inc
22 22
23mkdir ${HOME}/.gramps 23mkdir ${HOME}/.gramps
24allow ${HOME}/.gramps 24whitelist ${HOME}/.gramps
25include whitelist-common.inc 25include whitelist-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
27 27
diff --git a/etc/profile-a-l/gravity-beams-and-evaporating-stars.profile b/etc/profile-a-l/gravity-beams-and-evaporating-stars.profile
index ecc871c2e..890ba2560 100644
--- a/etc/profile-a-l/gravity-beams-and-evaporating-stars.profile
+++ b/etc/profile-a-l/gravity-beams-and-evaporating-stars.profile
@@ -15,7 +15,7 @@ include disable-programs.inc
15include disable-shell.inc 15include disable-shell.inc
16include disable-xdg.inc 16include disable-xdg.inc
17 17
18allow /usr/share/gravity-beams-and-evaporating-stars 18whitelist /usr/share/gravity-beams-and-evaporating-stars
19include whitelist-common.inc 19include whitelist-common.inc
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
diff --git a/etc/profile-a-l/gthumb.profile b/etc/profile-a-l/gthumb.profile
index 9a4f7b4fb..5927e8c4d 100644
--- a/etc/profile-a-l/gthumb.profile
+++ b/etc/profile-a-l/gthumb.profile
@@ -6,9 +6,9 @@ include gthumb.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/gthumb 9noblacklist ${HOME}/.config/gthumb
10nodeny ${HOME}/.Steam 10noblacklist ${HOME}/.Steam
11nodeny ${HOME}/.steam 11noblacklist ${HOME}/.steam
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/gtk-update-icon-cache.profile b/etc/profile-a-l/gtk-update-icon-cache.profile
index d6bb9902a..c8addae75 100644
--- a/etc/profile-a-l/gtk-update-icon-cache.profile
+++ b/etc/profile-a-l/gtk-update-icon-cache.profile
@@ -7,7 +7,7 @@ include gtk-update-icon-cache.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10deny ${RUNUSER}/wayland-* 10blacklist ${RUNUSER}/wayland-*
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/gtk2-youtube-viewer.profile b/etc/profile-a-l/gtk2-youtube-viewer.profile
index 8241de43a..787c7bd90 100644
--- a/etc/profile-a-l/gtk2-youtube-viewer.profile
+++ b/etc/profile-a-l/gtk2-youtube-viewer.profile
@@ -8,8 +8,8 @@ include gtk2-youtube-viewer.local
8 8
9ignore quiet 9ignore quiet
10 10
11nodeny /tmp/.X11-unix 11noblacklist /tmp/.X11-unix
12nodeny ${RUNUSER} 12noblacklist ${RUNUSER}
13 13
14include whitelist-runuser-common.inc 14include whitelist-runuser-common.inc
15 15
diff --git a/etc/profile-a-l/gtk3-youtube-viewer.profile b/etc/profile-a-l/gtk3-youtube-viewer.profile
index 6ea4ebbdc..988882622 100644
--- a/etc/profile-a-l/gtk3-youtube-viewer.profile
+++ b/etc/profile-a-l/gtk3-youtube-viewer.profile
@@ -8,8 +8,8 @@ include gtk3-youtube-viewer.local
8 8
9ignore quiet 9ignore quiet
10 10
11nodeny /tmp/.X11-unix 11noblacklist /tmp/.X11-unix
12nodeny ${RUNUSER} 12noblacklist ${RUNUSER}
13 13
14include whitelist-runuser-common.inc 14include whitelist-runuser-common.inc
15 15
diff --git a/etc/profile-a-l/guayadeque.profile b/etc/profile-a-l/guayadeque.profile
index 731bcad1d..3d2b71e9d 100644
--- a/etc/profile-a-l/guayadeque.profile
+++ b/etc/profile-a-l/guayadeque.profile
@@ -5,8 +5,8 @@ include guayadeque.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.guayadeque 8noblacklist ${HOME}/.guayadeque
9nodeny ${MUSIC} 9noblacklist ${MUSIC}
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/gummi.profile b/etc/profile-a-l/gummi.profile
index 5cdc2cc18..2223c37a1 100644
--- a/etc/profile-a-l/gummi.profile
+++ b/etc/profile-a-l/gummi.profile
@@ -5,8 +5,8 @@ include gummi.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.cache/gummi 8noblacklist ${HOME}/.cache/gummi
9nodeny ${HOME}/.config/gummi 9noblacklist ${HOME}/.config/gummi
10 10
11# Allow lua (blacklisted by disable-interpreters.inc) 11# Allow lua (blacklisted by disable-interpreters.inc)
12include allow-lua.inc 12include allow-lua.inc
diff --git a/etc/profile-a-l/guvcview.profile b/etc/profile-a-l/guvcview.profile
index 3404f5177..9221ca31c 100644
--- a/etc/profile-a-l/guvcview.profile
+++ b/etc/profile-a-l/guvcview.profile
@@ -6,10 +6,10 @@ include guvcview.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/guvcview2 9noblacklist ${HOME}/.config/guvcview2
10 10
11nodeny ${PICTURES} 11noblacklist ${PICTURES}
12nodeny ${VIDEOS} 12noblacklist ${VIDEOS}
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
@@ -21,9 +21,9 @@ include disable-shell.inc
21include disable-xdg.inc 21include disable-xdg.inc
22 22
23mkdir ${HOME}/.config/guvcview2 23mkdir ${HOME}/.config/guvcview2
24allow ${HOME}/.config/guvcview2 24whitelist ${HOME}/.config/guvcview2
25allow ${PICTURES} 25whitelist ${PICTURES}
26allow ${VIDEOS} 26whitelist ${VIDEOS}
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-runuser-common.inc 28include whitelist-runuser-common.inc
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/gwenview.profile b/etc/profile-a-l/gwenview.profile
index 132b5a2e2..d33e2a673 100644
--- a/etc/profile-a-l/gwenview.profile
+++ b/etc/profile-a-l/gwenview.profile
@@ -6,17 +6,17 @@ include gwenview.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/GIMP 9noblacklist ${HOME}/.config/GIMP
10nodeny ${HOME}/.config/gwenviewrc 10noblacklist ${HOME}/.config/gwenviewrc
11nodeny ${HOME}/.config/org.kde.gwenviewrc 11noblacklist ${HOME}/.config/org.kde.gwenviewrc
12nodeny ${HOME}/.gimp* 12noblacklist ${HOME}/.gimp*
13nodeny ${HOME}/.kde/share/apps/gwenview 13noblacklist ${HOME}/.kde/share/apps/gwenview
14nodeny ${HOME}/.kde/share/config/gwenviewrc 14noblacklist ${HOME}/.kde/share/config/gwenviewrc
15nodeny ${HOME}/.kde4/share/apps/gwenview 15noblacklist ${HOME}/.kde4/share/apps/gwenview
16nodeny ${HOME}/.kde4/share/config/gwenviewrc 16noblacklist ${HOME}/.kde4/share/config/gwenviewrc
17nodeny ${HOME}/.local/share/gwenview 17noblacklist ${HOME}/.local/share/gwenview
18nodeny ${HOME}/.local/share/kxmlgui5/gwenview 18noblacklist ${HOME}/.local/share/kxmlgui5/gwenview
19nodeny ${HOME}/.local/share/org.kde.gwenview 19noblacklist ${HOME}/.local/share/org.kde.gwenview
20 20
21include disable-common.inc 21include disable-common.inc
22include disable-devel.inc 22include disable-devel.inc
diff --git a/etc/profile-a-l/gzip.profile b/etc/profile-a-l/gzip.profile
index 46c98bdc2..b261c16f4 100644
--- a/etc/profile-a-l/gzip.profile
+++ b/etc/profile-a-l/gzip.profile
@@ -9,7 +9,7 @@ include globals.local
9 9
10# Arch Linux (based distributions) need access to /var/lib/pacman. As we drop 10# Arch Linux (based distributions) need access to /var/lib/pacman. As we drop
11# all capabilities this is automatically read-only. 11# all capabilities this is automatically read-only.
12nodeny /var/lib/pacman 12noblacklist /var/lib/pacman
13 13
14# Redirect 14# Redirect
15include archiver-common.profile 15include archiver-common.profile
diff --git a/etc/profile-a-l/handbrake.profile b/etc/profile-a-l/handbrake.profile
index c102ac4cb..847e1ec1e 100644
--- a/etc/profile-a-l/handbrake.profile
+++ b/etc/profile-a-l/handbrake.profile
@@ -6,9 +6,9 @@ include handbrake.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/ghb 9noblacklist ${HOME}/.config/ghb
10nodeny ${MUSIC} 10noblacklist ${MUSIC}
11nodeny ${VIDEOS} 11noblacklist ${VIDEOS}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/hashcat.profile b/etc/profile-a-l/hashcat.profile
index d98a1b554..aab4b0c21 100644
--- a/etc/profile-a-l/hashcat.profile
+++ b/etc/profile-a-l/hashcat.profile
@@ -7,11 +7,11 @@ include hashcat.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10deny ${RUNUSER}/wayland-* 10blacklist ${RUNUSER}/wayland-*
11 11
12nodeny ${HOME}/.hashcat 12noblacklist ${HOME}/.hashcat
13nodeny /usr/include 13noblacklist /usr/include
14nodeny ${DOCUMENTS} 14noblacklist ${DOCUMENTS}
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/hasher-common.profile b/etc/profile-a-l/hasher-common.profile
index 1c2a44e06..44584f26b 100644
--- a/etc/profile-a-l/hasher-common.profile
+++ b/etc/profile-a-l/hasher-common.profile
@@ -4,7 +4,7 @@ include hasher-common.local
4 4
5# common profile for hasher/checksum tools 5# common profile for hasher/checksum tools
6 6
7deny ${RUNUSER} 7blacklist ${RUNUSER}
8 8
9# Comment/uncomment the relevant include file(s) in your hasher-common.local 9# Comment/uncomment the relevant include file(s) in your hasher-common.local
10# to (un)restrict file access for **all** hashers. Another option is to do this **per hasher** 10# to (un)restrict file access for **all** hashers. Another option is to do this **per hasher**
diff --git a/etc/profile-a-l/hedgewars.profile b/etc/profile-a-l/hedgewars.profile
index 90833af91..c0675d8ec 100644
--- a/etc/profile-a-l/hedgewars.profile
+++ b/etc/profile-a-l/hedgewars.profile
@@ -6,7 +6,7 @@ include hedgewars.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.hedgewars 9noblacklist ${HOME}/.hedgewars
10 10
11include allow-lua.inc 11include allow-lua.inc
12 12
@@ -17,7 +17,7 @@ include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18 18
19mkdir ${HOME}/.hedgewars 19mkdir ${HOME}/.hedgewars
20allow ${HOME}/.hedgewars 20whitelist ${HOME}/.hedgewars
21include whitelist-common.inc 21include whitelist-common.inc
22 22
23caps.drop all 23caps.drop all
diff --git a/etc/profile-a-l/hexchat.profile b/etc/profile-a-l/hexchat.profile
index 993efb591..b887de147 100644
--- a/etc/profile-a-l/hexchat.profile
+++ b/etc/profile-a-l/hexchat.profile
@@ -6,7 +6,7 @@ include hexchat.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/hexchat 9noblacklist ${HOME}/.config/hexchat
10 10
11# Allow /bin/sh (blacklisted by disable-shell.inc) 11# Allow /bin/sh (blacklisted by disable-shell.inc)
12include allow-bin-sh.inc 12include allow-bin-sh.inc
@@ -28,7 +28,7 @@ include disable-shell.inc
28include disable-xdg.inc 28include disable-xdg.inc
29 29
30mkdir ${HOME}/.config/hexchat 30mkdir ${HOME}/.config/hexchat
31allow ${HOME}/.config/hexchat 31whitelist ${HOME}/.config/hexchat
32include whitelist-common.inc 32include whitelist-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
34 34
diff --git a/etc/profile-a-l/highlight.profile b/etc/profile-a-l/highlight.profile
index 53db642dc..643736ac7 100644
--- a/etc/profile-a-l/highlight.profile
+++ b/etc/profile-a-l/highlight.profile
@@ -6,7 +6,7 @@ include highlight.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9deny ${RUNUSER} 9blacklist ${RUNUSER}
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/homebank.profile b/etc/profile-a-l/homebank.profile
index ef259cc00..199b1a5e5 100644
--- a/etc/profile-a-l/homebank.profile
+++ b/etc/profile-a-l/homebank.profile
@@ -6,7 +6,7 @@ include homebank.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/homebank 9noblacklist ${HOME}/.config/homebank
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,9 +18,9 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.config/homebank 20mkdir ${HOME}/.config/homebank
21allow ${DOWNLOADS} 21whitelist ${DOWNLOADS}
22allow ${HOME}/.config/homebank 22whitelist ${HOME}/.config/homebank
23allow /usr/share/homebank 23whitelist /usr/share/homebank
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-runuser-common.inc 25include whitelist-runuser-common.inc
26include whitelist-usr-share-common.inc 26include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/host.profile b/etc/profile-a-l/host.profile
index 63e1be259..00d9f7a76 100644
--- a/etc/profile-a-l/host.profile
+++ b/etc/profile-a-l/host.profile
@@ -7,8 +7,8 @@ include host.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10deny ${RUNUSER} 10blacklist ${RUNUSER}
11nodeny ${PATH}/host 11noblacklist ${PATH}/host
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/hugin.profile b/etc/profile-a-l/hugin.profile
index db5cd29cc..267712c87 100644
--- a/etc/profile-a-l/hugin.profile
+++ b/etc/profile-a-l/hugin.profile
@@ -6,9 +6,9 @@ include hugin.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.hugin 9noblacklist ${HOME}/.hugin
10nodeny ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11nodeny ${PICTURES} 11noblacklist ${PICTURES}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/hyperrogue.profile b/etc/profile-a-l/hyperrogue.profile
index 1fb33ceb8..e66ffd7e1 100644
--- a/etc/profile-a-l/hyperrogue.profile
+++ b/etc/profile-a-l/hyperrogue.profile
@@ -6,7 +6,7 @@ include hyperrogue.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/hyperrogue.ini 9noblacklist ${HOME}/hyperrogue.ini
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkfile ${HOME}/hyperrogue.ini 20mkfile ${HOME}/hyperrogue.ini
21allow ${HOME}/hyperrogue.ini 21whitelist ${HOME}/hyperrogue.ini
22allow /usr/share/hyperrogue 22whitelist /usr/share/hyperrogue
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-usr-share-common.inc 24include whitelist-usr-share-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
diff --git a/etc/profile-a-l/i2prouter.profile b/etc/profile-a-l/i2prouter.profile
index c8a2e8a04..47c984175 100644
--- a/etc/profile-a-l/i2prouter.profile
+++ b/etc/profile-a-l/i2prouter.profile
@@ -14,12 +14,12 @@ include globals.local
14# Only needed when i2prouter binary resides in home directory (official I2P java installer does so). 14# Only needed when i2prouter binary resides in home directory (official I2P java installer does so).
15ignore noexec ${HOME} 15ignore noexec ${HOME}
16 16
17nodeny ${HOME}/.config/i2p 17noblacklist ${HOME}/.config/i2p
18nodeny ${HOME}/.i2p 18noblacklist ${HOME}/.i2p
19nodeny ${HOME}/.local/share/i2p 19noblacklist ${HOME}/.local/share/i2p
20nodeny ${HOME}/i2p 20noblacklist ${HOME}/i2p
21# Only needed when wrapper resides in /usr/sbin/ (Ubuntu official I2P PPA package does so). 21# Only needed when wrapper resides in /usr/sbin/ (Ubuntu official I2P PPA package does so).
22nodeny /usr/sbin 22noblacklist /usr/sbin
23 23
24# Allow java (blacklisted by disable-devel.inc) 24# Allow java (blacklisted by disable-devel.inc)
25include allow-java.inc 25include allow-java.inc
@@ -36,12 +36,12 @@ mkdir ${HOME}/.config/i2p
36mkdir ${HOME}/.i2p 36mkdir ${HOME}/.i2p
37mkdir ${HOME}/.local/share/i2p 37mkdir ${HOME}/.local/share/i2p
38mkdir ${HOME}/i2p 38mkdir ${HOME}/i2p
39allow ${HOME}/.config/i2p 39whitelist ${HOME}/.config/i2p
40allow ${HOME}/.i2p 40whitelist ${HOME}/.i2p
41allow ${HOME}/.local/share/i2p 41whitelist ${HOME}/.local/share/i2p
42allow ${HOME}/i2p 42whitelist ${HOME}/i2p
43# Only needed when wrapper resides in /usr/sbin/ (Ubuntu official I2P PPA package does so). 43# Only needed when wrapper resides in /usr/sbin/ (Ubuntu official I2P PPA package does so).
44allow /usr/sbin/wrapper* 44whitelist /usr/sbin/wrapper*
45 45
46include whitelist-common.inc 46include whitelist-common.inc
47 47
diff --git a/etc/profile-a-l/i3.profile b/etc/profile-a-l/i3.profile
index 95ddad221..e96b1843c 100644
--- a/etc/profile-a-l/i3.profile
+++ b/etc/profile-a-l/i3.profile
@@ -7,7 +7,7 @@ include i3.local
7include globals.local 7include globals.local
8 8
9# all applications started in i3 will run in this profile 9# all applications started in i3 will run in this profile
10nodeny ${HOME}/.config/i3 10noblacklist ${HOME}/.config/i3
11include disable-common.inc 11include disable-common.inc
12 12
13caps.drop all 13caps.drop all
diff --git a/etc/profile-a-l/icecat.profile b/etc/profile-a-l/icecat.profile
index 0de2f658b..660343a29 100644
--- a/etc/profile-a-l/icecat.profile
+++ b/etc/profile-a-l/icecat.profile
@@ -5,13 +5,13 @@ include icecat.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.cache/mozilla 8noblacklist ${HOME}/.cache/mozilla
9nodeny ${HOME}/.mozilla 9noblacklist ${HOME}/.mozilla
10 10
11mkdir ${HOME}/.cache/mozilla/icecat 11mkdir ${HOME}/.cache/mozilla/icecat
12mkdir ${HOME}/.mozilla 12mkdir ${HOME}/.mozilla
13allow ${HOME}/.cache/mozilla/icecat 13whitelist ${HOME}/.cache/mozilla/icecat
14allow ${HOME}/.mozilla 14whitelist ${HOME}/.mozilla
15 15
16# private-etc must first be enabled in firefox-common.profile 16# private-etc must first be enabled in firefox-common.profile
17#private-etc icecat 17#private-etc icecat
diff --git a/etc/profile-a-l/icedove.profile b/etc/profile-a-l/icedove.profile
index 0c22d87d0..19690cd5a 100644
--- a/etc/profile-a-l/icedove.profile
+++ b/etc/profile-a-l/icedove.profile
@@ -9,16 +9,16 @@ include icedove.local
9# Users have icedove set to open a browser by clicking a link in an email 9# Users have icedove set to open a browser by clicking a link in an email
10# We are not allowed to blacklist browser-specific directories 10# We are not allowed to blacklist browser-specific directories
11 11
12nodeny ${HOME}/.cache/icedove 12noblacklist ${HOME}/.cache/icedove
13nodeny ${HOME}/.gnupg 13noblacklist ${HOME}/.gnupg
14nodeny ${HOME}/.icedove 14noblacklist ${HOME}/.icedove
15 15
16mkdir ${HOME}/.cache/icedove 16mkdir ${HOME}/.cache/icedove
17mkdir ${HOME}/.gnupg 17mkdir ${HOME}/.gnupg
18mkdir ${HOME}/.icedove 18mkdir ${HOME}/.icedove
19allow ${HOME}/.cache/icedove 19whitelist ${HOME}/.cache/icedove
20allow ${HOME}/.gnupg 20whitelist ${HOME}/.gnupg
21allow ${HOME}/.icedove 21whitelist ${HOME}/.icedove
22include whitelist-common.inc 22include whitelist-common.inc
23 23
24ignore private-tmp 24ignore private-tmp
diff --git a/etc/profile-a-l/idea.sh.profile b/etc/profile-a-l/idea.sh.profile
index 180b62ec2..680b8e777 100644
--- a/etc/profile-a-l/idea.sh.profile
+++ b/etc/profile-a-l/idea.sh.profile
@@ -5,12 +5,12 @@ include idea.sh.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.IdeaIC* 8noblacklist ${HOME}/.IdeaIC*
9nodeny ${HOME}/.android 9noblacklist ${HOME}/.android
10nodeny ${HOME}/.jack-server 10noblacklist ${HOME}/.jack-server
11nodeny ${HOME}/.jack-settings 11noblacklist ${HOME}/.jack-settings
12nodeny ${HOME}/.local/share/JetBrains 12noblacklist ${HOME}/.local/share/JetBrains
13nodeny ${HOME}/.tooling 13noblacklist ${HOME}/.tooling
14 14
15# Allows files commonly used by IDEs 15# Allows files commonly used by IDEs
16include allow-common-devel.inc 16include allow-common-devel.inc
diff --git a/etc/profile-a-l/imagej.profile b/etc/profile-a-l/imagej.profile
index 5d28e7aca..12ce7976b 100644
--- a/etc/profile-a-l/imagej.profile
+++ b/etc/profile-a-l/imagej.profile
@@ -6,7 +6,7 @@ include imagej.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.imagej 9noblacklist ${HOME}/.imagej
10 10
11# Allow java (blacklisted by disable-devel.inc) 11# Allow java (blacklisted by disable-devel.inc)
12include allow-java.inc 12include allow-java.inc
diff --git a/etc/profile-a-l/img2txt.profile b/etc/profile-a-l/img2txt.profile
index 70d56a7dc..c26958d06 100644
--- a/etc/profile-a-l/img2txt.profile
+++ b/etc/profile-a-l/img2txt.profile
@@ -5,10 +5,10 @@ include img2txt.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8deny ${RUNUSER}/wayland-* 8blacklist ${RUNUSER}/wayland-*
9 9
10nodeny ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11nodeny ${PICTURES} 11noblacklist ${PICTURES}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
@@ -18,7 +18,7 @@ include disable-passwdmgr.inc
18include disable-programs.inc 18include disable-programs.inc
19include disable-xdg.inc 19include disable-xdg.inc
20 20
21allow /usr/share/imlib2 21whitelist /usr/share/imlib2
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/impressive.profile b/etc/profile-a-l/impressive.profile
index 4914cd9d0..c152be01c 100644
--- a/etc/profile-a-l/impressive.profile
+++ b/etc/profile-a-l/impressive.profile
@@ -6,9 +6,9 @@ include impressive.local
6# Persistent global definitions 6# Persistent global definitions
7#include globals.local 7#include globals.local
8 8
9nodeny ${DOCUMENTS} 9noblacklist ${DOCUMENTS}
10nodeny /sbin 10noblacklist /sbin
11nodeny /usr/sbin 11noblacklist /usr/sbin
12 12
13# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
14#include allow-python2.inc 14#include allow-python2.inc
@@ -23,8 +23,8 @@ include disable-programs.inc
23include disable-xdg.inc 23include disable-xdg.inc
24 24
25mkdir ${HOME}/.cache/mesa_shader_cache 25mkdir ${HOME}/.cache/mesa_shader_cache
26allow /usr/share/opengl-games-utils 26whitelist /usr/share/opengl-games-utils
27allow /usr/share/zenity 27whitelist /usr/share/zenity
28include whitelist-usr-share-common.inc 28include whitelist-usr-share-common.inc
29include whitelist-var-common.inc 29include whitelist-var-common.inc
30 30
diff --git a/etc/profile-a-l/inkscape.profile b/etc/profile-a-l/inkscape.profile
index 1a949b300..35dd86b32 100644
--- a/etc/profile-a-l/inkscape.profile
+++ b/etc/profile-a-l/inkscape.profile
@@ -6,14 +6,14 @@ include inkscape.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/inkscape 9noblacklist ${HOME}/.cache/inkscape
10nodeny ${HOME}/.config/inkscape 10noblacklist ${HOME}/.config/inkscape
11nodeny ${HOME}/.inkscape 11noblacklist ${HOME}/.inkscape
12nodeny ${DOCUMENTS} 12noblacklist ${DOCUMENTS}
13nodeny ${PICTURES} 13noblacklist ${PICTURES}
14# Allow exporting .xcf files 14# Allow exporting .xcf files
15nodeny ${HOME}/.config/GIMP 15noblacklist ${HOME}/.config/GIMP
16nodeny ${HOME}/.gimp* 16noblacklist ${HOME}/.gimp*
17 17
18 18
19# Allow python (blacklisted by disable-interpreters.inc) 19# Allow python (blacklisted by disable-interpreters.inc)
@@ -28,7 +28,7 @@ include disable-passwdmgr.inc
28include disable-programs.inc 28include disable-programs.inc
29include disable-xdg.inc 29include disable-xdg.inc
30 30
31allow /usr/share/inkscape 31whitelist /usr/share/inkscape
32include whitelist-usr-share-common.inc 32include whitelist-usr-share-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
34 34
diff --git a/etc/profile-a-l/inox.profile b/etc/profile-a-l/inox.profile
index 1591ed7ea..a5cac12f2 100644
--- a/etc/profile-a-l/inox.profile
+++ b/etc/profile-a-l/inox.profile
@@ -10,13 +10,13 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13nodeny ${HOME}/.cache/inox 13noblacklist ${HOME}/.cache/inox
14nodeny ${HOME}/.config/inox 14noblacklist ${HOME}/.config/inox
15 15
16mkdir ${HOME}/.cache/inox 16mkdir ${HOME}/.cache/inox
17mkdir ${HOME}/.config/inox 17mkdir ${HOME}/.config/inox
18allow ${HOME}/.cache/inox 18whitelist ${HOME}/.cache/inox
19allow ${HOME}/.config/inox 19whitelist ${HOME}/.config/inox
20 20
21# Redirect 21# Redirect
22include chromium-common.profile 22include chromium-common.profile
diff --git a/etc/profile-a-l/iridium.profile b/etc/profile-a-l/iridium.profile
index f361fd663..3037d00e9 100644
--- a/etc/profile-a-l/iridium.profile
+++ b/etc/profile-a-l/iridium.profile
@@ -10,13 +10,13 @@ ignore whitelist /usr/share/chromium
10ignore include whitelist-runuser-common.inc 10ignore include whitelist-runuser-common.inc
11ignore include whitelist-usr-share-common.inc 11ignore include whitelist-usr-share-common.inc
12 12
13nodeny ${HOME}/.cache/iridium 13noblacklist ${HOME}/.cache/iridium
14nodeny ${HOME}/.config/iridium 14noblacklist ${HOME}/.config/iridium
15 15
16mkdir ${HOME}/.cache/iridium 16mkdir ${HOME}/.cache/iridium
17mkdir ${HOME}/.config/iridium 17mkdir ${HOME}/.config/iridium
18allow ${HOME}/.cache/iridium 18whitelist ${HOME}/.cache/iridium
19allow ${HOME}/.config/iridium 19whitelist ${HOME}/.config/iridium
20 20
21# Redirect 21# Redirect
22include chromium-common.profile 22include chromium-common.profile
diff --git a/etc/profile-a-l/itch.profile b/etc/profile-a-l/itch.profile
index fa0bcf986..e02dcbdb1 100644
--- a/etc/profile-a-l/itch.profile
+++ b/etc/profile-a-l/itch.profile
@@ -8,8 +8,8 @@ include globals.local
8# itch.io has native firejail/sandboxing support bundled in 8# itch.io has native firejail/sandboxing support bundled in
9# See https://itch.io/docs/itch/using/sandbox/linux.html 9# See https://itch.io/docs/itch/using/sandbox/linux.html
10 10
11nodeny ${HOME}/.itch 11noblacklist ${HOME}/.itch
12nodeny ${HOME}/.config/itch 12noblacklist ${HOME}/.config/itch
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
@@ -19,8 +19,8 @@ include disable-programs.inc
19 19
20mkdir ${HOME}/.itch 20mkdir ${HOME}/.itch
21mkdir ${HOME}/.config/itch 21mkdir ${HOME}/.config/itch
22allow ${HOME}/.itch 22whitelist ${HOME}/.itch
23allow ${HOME}/.config/itch 23whitelist ${HOME}/.config/itch
24include whitelist-common.inc 24include whitelist-common.inc
25 25
26caps.drop all 26caps.drop all
diff --git a/etc/profile-a-l/jami-gnome.profile b/etc/profile-a-l/jami-gnome.profile
index e4be574df..3e9abf369 100644
--- a/etc/profile-a-l/jami-gnome.profile
+++ b/etc/profile-a-l/jami-gnome.profile
@@ -6,8 +6,8 @@ include jami-gnome.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/jami 9noblacklist ${HOME}/.config/jami
10nodeny ${HOME}/.local/share/jami 10noblacklist ${HOME}/.local/share/jami
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -18,8 +18,8 @@ include disable-programs.inc
18 18
19mkdir ${HOME}/.config/jami 19mkdir ${HOME}/.config/jami
20mkdir ${HOME}/.local/share/jami 20mkdir ${HOME}/.local/share/jami
21allow ${HOME}/.config/jami 21whitelist ${HOME}/.config/jami
22allow ${HOME}/.local/share/jami 22whitelist ${HOME}/.local/share/jami
23include whitelist-common.inc 23include whitelist-common.inc
24include whitelist-var-common.inc 24include whitelist-var-common.inc
25 25
diff --git a/etc/profile-a-l/jd-gui.profile b/etc/profile-a-l/jd-gui.profile
index bfea84c69..7d29f1068 100644
--- a/etc/profile-a-l/jd-gui.profile
+++ b/etc/profile-a-l/jd-gui.profile
@@ -5,7 +5,7 @@ include jd-gui.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.config/jd-gui.cfg 8noblacklist ${HOME}/.config/jd-gui.cfg
9 9
10# Allow java (blacklisted by disable-devel.inc) 10# Allow java (blacklisted by disable-devel.inc)
11include allow-java.inc 11include allow-java.inc
diff --git a/etc/profile-a-l/jerry.profile b/etc/profile-a-l/jerry.profile
index c41027618..85b1f2120 100644
--- a/etc/profile-a-l/jerry.profile
+++ b/etc/profile-a-l/jerry.profile
@@ -6,7 +6,7 @@ include jerry.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/dkl 9noblacklist ${HOME}/.config/dkl
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/jitsi-meet-desktop.profile b/etc/profile-a-l/jitsi-meet-desktop.profile
index 9ca30c36d..edb7ed840 100644
--- a/etc/profile-a-l/jitsi-meet-desktop.profile
+++ b/etc/profile-a-l/jitsi-meet-desktop.profile
@@ -13,12 +13,12 @@ ignore shell none
13 13
14ignore noexec /tmp 14ignore noexec /tmp
15 15
16nodeny ${HOME}/.config/Jitsi Meet 16noblacklist ${HOME}/.config/Jitsi Meet
17 17
18noallow ${DOWNLOADS} 18nowhitelist ${DOWNLOADS}
19 19
20mkdir ${HOME}/.config/Jitsi Meet 20mkdir ${HOME}/.config/Jitsi Meet
21allow ${HOME}/.config/Jitsi Meet 21whitelist ${HOME}/.config/Jitsi Meet
22 22
23private-bin bash,electron,electron[0-9],electron[0-9][0-9],jitsi-meet-desktop,sh 23private-bin bash,electron,electron[0-9],electron[0-9][0-9],jitsi-meet-desktop,sh
24private-etc alsa,alternatives,asound.conf,bumblebee,ca-certificates,crypto-policies,drirc,fonts,glvnd,group,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,machine-id,mime.types,nsswitch.conf,nvidia,pango,passwd,pki,protocols,pulse,resolv.conf,rpc,services,ssl,X11,xdg 24private-etc alsa,alternatives,asound.conf,bumblebee,ca-certificates,crypto-policies,drirc,fonts,glvnd,group,host.conf,hostname,hosts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,locale,locale.alias,locale.conf,localtime,machine-id,mime.types,nsswitch.conf,nvidia,pango,passwd,pki,protocols,pulse,resolv.conf,rpc,services,ssl,X11,xdg
diff --git a/etc/profile-a-l/jitsi.profile b/etc/profile-a-l/jitsi.profile
index f53e6ca32..223c360b8 100644
--- a/etc/profile-a-l/jitsi.profile
+++ b/etc/profile-a-l/jitsi.profile
@@ -5,7 +5,7 @@ include jitsi.local
5# Persistent global definitions 5# Persistent global definitions
6include globals.local 6include globals.local
7 7
8nodeny ${HOME}/.jitsi 8noblacklist ${HOME}/.jitsi
9 9
10# Allow java (blacklisted by disable-devel.inc) 10# Allow java (blacklisted by disable-devel.inc)
11include allow-java.inc 11include allow-java.inc
diff --git a/etc/profile-a-l/jumpnbump.profile b/etc/profile-a-l/jumpnbump.profile
index c0a78ecc0..9954b8aea 100644
--- a/etc/profile-a-l/jumpnbump.profile
+++ b/etc/profile-a-l/jumpnbump.profile
@@ -6,7 +6,7 @@ include jumpnbump.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.jumpnbump 9noblacklist ${HOME}/.jumpnbump
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -17,8 +17,8 @@ include disable-programs.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19mkdir ${HOME}/.jumpnbump 19mkdir ${HOME}/.jumpnbump
20allow ${HOME}/.jumpnbump 20whitelist ${HOME}/.jumpnbump
21allow /usr/share/jumpnbump 21whitelist /usr/share/jumpnbump
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-usr-share-common.inc 23include whitelist-usr-share-common.inc
24include whitelist-var-common.inc 24include whitelist-var-common.inc
diff --git a/etc/profile-a-l/k3b.profile b/etc/profile-a-l/k3b.profile
index 73ce8670f..5ae90dff6 100644
--- a/etc/profile-a-l/k3b.profile
+++ b/etc/profile-a-l/k3b.profile
@@ -6,11 +6,11 @@ include k3b.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/k3brc 9noblacklist ${HOME}/.config/k3brc
10nodeny ${HOME}/.kde/share/config/k3brc 10noblacklist ${HOME}/.kde/share/config/k3brc
11nodeny ${HOME}/.kde4/share/config/k3brc 11noblacklist ${HOME}/.kde4/share/config/k3brc
12nodeny ${HOME}/.local/share/kxmlgui5/k3b 12noblacklist ${HOME}/.local/share/kxmlgui5/k3b
13nodeny ${MUSIC} 13noblacklist ${MUSIC}
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/kaffeine.profile b/etc/profile-a-l/kaffeine.profile
index e6a00e350..d55fd22cb 100644
--- a/etc/profile-a-l/kaffeine.profile
+++ b/etc/profile-a-l/kaffeine.profile
@@ -6,14 +6,14 @@ include kaffeine.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/kaffeinerc 9noblacklist ${HOME}/.config/kaffeinerc
10nodeny ${HOME}/.kde/share/apps/kaffeine 10noblacklist ${HOME}/.kde/share/apps/kaffeine
11nodeny ${HOME}/.kde/share/config/kaffeinerc 11noblacklist ${HOME}/.kde/share/config/kaffeinerc
12nodeny ${HOME}/.kde4/share/apps/kaffeine 12noblacklist ${HOME}/.kde4/share/apps/kaffeine
13nodeny ${HOME}/.kde4/share/config/kaffeinerc 13noblacklist ${HOME}/.kde4/share/config/kaffeinerc
14nodeny ${HOME}/.local/share/kaffeine 14noblacklist ${HOME}/.local/share/kaffeine
15nodeny ${MUSIC} 15noblacklist ${MUSIC}
16nodeny ${VIDEOS} 16noblacklist ${VIDEOS}
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
diff --git a/etc/profile-a-l/kalgebra.profile b/etc/profile-a-l/kalgebra.profile
index 98b04353e..503dac4b6 100644
--- a/etc/profile-a-l/kalgebra.profile
+++ b/etc/profile-a-l/kalgebra.profile
@@ -6,8 +6,8 @@ include kalgebra.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/kalgebrarc 9noblacklist ${HOME}/.config/kalgebrarc
10nodeny ${HOME}/.local/share/kalgebra 10noblacklist ${HOME}/.local/share/kalgebra
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20allow /usr/share/kalgebramobile 20whitelist /usr/share/kalgebramobile
21include whitelist-usr-share-common.inc 21include whitelist-usr-share-common.inc
22include whitelist-var-common.inc 22include whitelist-var-common.inc
23 23
diff --git a/etc/profile-a-l/karbon.profile b/etc/profile-a-l/karbon.profile
index db5394550..231299a2f 100644
--- a/etc/profile-a-l/karbon.profile
+++ b/etc/profile-a-l/karbon.profile
@@ -6,7 +6,7 @@ include karbon.local
6# added by included profile 6# added by included profile
7#include globals.local 7#include globals.local
8 8
9nodeny ${HOME}/.local/share/kxmlgui5/karbon 9noblacklist ${HOME}/.local/share/kxmlgui5/karbon
10 10
11# Redirect 11# Redirect
12include krita.profile 12include krita.profile
diff --git a/etc/profile-a-l/kate.profile b/etc/profile-a-l/kate.profile
index d2b180492..27b87e7c3 100644
--- a/etc/profile-a-l/kate.profile
+++ b/etc/profile-a-l/kate.profile
@@ -8,20 +8,20 @@ include globals.local
8 8
9ignore noexec ${HOME} 9ignore noexec ${HOME}
10 10
11nodeny ${HOME}/.config/katemetainfos 11noblacklist ${HOME}/.config/katemetainfos
12nodeny ${HOME}/.config/katepartrc 12noblacklist ${HOME}/.config/katepartrc
13nodeny ${HOME}/.config/katerc 13noblacklist ${HOME}/.config/katerc
14nodeny ${HOME}/.config/kateschemarc 14noblacklist ${HOME}/.config/kateschemarc
15nodeny ${HOME}/.config/katesyntaxhighlightingrc 15noblacklist ${HOME}/.config/katesyntaxhighlightingrc
16nodeny ${HOME}/.config/katevirc 16noblacklist ${HOME}/.config/katevirc
17nodeny ${HOME}/.local/share/kate 17noblacklist ${HOME}/.local/share/kate
18nodeny ${HOME}/.local/share/kxmlgui5/kate 18noblacklist ${HOME}/.local/share/kxmlgui5/kate
19nodeny ${HOME}/.local/share/kxmlgui5/katefiletree 19noblacklist ${HOME}/.local/share/kxmlgui5/katefiletree
20nodeny ${HOME}/.local/share/kxmlgui5/katekonsole 20noblacklist ${HOME}/.local/share/kxmlgui5/katekonsole
21nodeny ${HOME}/.local/share/kxmlgui5/kateopenheaderplugin 21noblacklist ${HOME}/.local/share/kxmlgui5/kateopenheaderplugin
22nodeny ${HOME}/.local/share/kxmlgui5/katepart 22noblacklist ${HOME}/.local/share/kxmlgui5/katepart
23nodeny ${HOME}/.local/share/kxmlgui5/kateproject 23noblacklist ${HOME}/.local/share/kxmlgui5/kateproject
24nodeny ${HOME}/.local/share/kxmlgui5/katesearch 24noblacklist ${HOME}/.local/share/kxmlgui5/katesearch
25 25
26include disable-common.inc 26include disable-common.inc
27# include disable-devel.inc 27# include disable-devel.inc
diff --git a/etc/profile-a-l/kazam.profile b/etc/profile-a-l/kazam.profile
index a4e2e64f4..9795cf168 100644
--- a/etc/profile-a-l/kazam.profile
+++ b/etc/profile-a-l/kazam.profile
@@ -8,9 +8,9 @@ include globals.local
8 8
9ignore noexec ${HOME} 9ignore noexec ${HOME}
10 10
11nodeny ${PICTURES} 11noblacklist ${PICTURES}
12nodeny ${VIDEOS} 12noblacklist ${VIDEOS}
13nodeny ${HOME}/.config/kazam 13noblacklist ${HOME}/.config/kazam
14 14
15# Allow python (blacklisted by disable-interpreters.inc) 15# Allow python (blacklisted by disable-interpreters.inc)
16include allow-python2.inc 16include allow-python2.inc
@@ -25,7 +25,7 @@ include disable-passwdmgr.inc
25include disable-shell.inc 25include disable-shell.inc
26include disable-xdg.inc 26include disable-xdg.inc
27 27
28allow /usr/share/kazam 28whitelist /usr/share/kazam
29include whitelist-runuser-common.inc 29include whitelist-runuser-common.inc
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31include whitelist-var-common.inc 31include whitelist-var-common.inc
diff --git a/etc/profile-a-l/kcalc.profile b/etc/profile-a-l/kcalc.profile
index fcb168d4d..e36ee5ed2 100644
--- a/etc/profile-a-l/kcalc.profile
+++ b/etc/profile-a-l/kcalc.profile
@@ -6,7 +6,7 @@ include kcalc.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/kxmlgui5/kcalc 9noblacklist ${HOME}/.local/share/kxmlgui5/kcalc
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -21,13 +21,13 @@ mkdir ${HOME}/.local/share/kxmlgui5/kcalc
21mkfile ${HOME}/.config/kcalcrc 21mkfile ${HOME}/.config/kcalcrc
22mkfile ${HOME}/.kde/share/config/kcalcrc 22mkfile ${HOME}/.kde/share/config/kcalcrc
23mkfile ${HOME}/.kde4/share/config/kcalcrc 23mkfile ${HOME}/.kde4/share/config/kcalcrc
24allow ${HOME}/.config/kcalcrc 24whitelist ${HOME}/.config/kcalcrc
25allow ${HOME}/.kde/share/config/kcalcrc 25whitelist ${HOME}/.kde/share/config/kcalcrc
26allow ${HOME}/.kde4/share/config/kcalcrc 26whitelist ${HOME}/.kde4/share/config/kcalcrc
27allow ${HOME}/.local/share/kxmlgui5/kcalc 27whitelist ${HOME}/.local/share/kxmlgui5/kcalc
28allow /usr/share/config.kcfg/kcalc.kcfg 28whitelist /usr/share/config.kcfg/kcalc.kcfg
29allow /usr/share/kcalc 29whitelist /usr/share/kcalc
30allow /usr/share/kconf_update/kcalcrc.upd 30whitelist /usr/share/kconf_update/kcalcrc.upd
31include whitelist-common.inc 31include whitelist-common.inc
32include whitelist-runuser-common.inc 32include whitelist-runuser-common.inc
33include whitelist-usr-share-common.inc 33include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/kdenlive.profile b/etc/profile-a-l/kdenlive.profile
index 4acafbf2a..d2a08a269 100644
--- a/etc/profile-a-l/kdenlive.profile
+++ b/etc/profile-a-l/kdenlive.profile
@@ -8,10 +8,10 @@ include globals.local
8 8
9ignore noexec ${HOME} 9ignore noexec ${HOME}
10 10
11nodeny ${HOME}/.cache/kdenlive 11noblacklist ${HOME}/.cache/kdenlive
12nodeny ${HOME}/.config/kdenliverc 12noblacklist ${HOME}/.config/kdenliverc
13nodeny ${HOME}/.local/share/kdenlive 13noblacklist ${HOME}/.local/share/kdenlive
14nodeny ${HOME}/.local/share/kxmlgui5/kdenlive 14noblacklist ${HOME}/.local/share/kxmlgui5/kdenlive
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/kdiff3.profile b/etc/profile-a-l/kdiff3.profile
index 0c37f7968..7c1cb2294 100644
--- a/etc/profile-a-l/kdiff3.profile
+++ b/etc/profile-a-l/kdiff3.profile
@@ -6,14 +6,14 @@ include kdiff3.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/kdiff3fileitemactionrc 9noblacklist ${HOME}/.config/kdiff3fileitemactionrc
10nodeny ${HOME}/.config/kdiff3rc 10noblacklist ${HOME}/.config/kdiff3rc
11 11
12# Add the next line to your kdiff3.local if you don't need to compare files in disable-common.inc. 12# Add the next line to your kdiff3.local if you don't need to compare files in disable-common.inc.
13# By default we deny access only to .ssh and .gnupg. 13# By default we deny access only to .ssh and .gnupg.
14#include disable-common.inc 14#include disable-common.inc
15deny ${HOME}/.ssh 15blacklist ${HOME}/.ssh
16deny ${HOME}/.gnupg 16blacklist ${HOME}/.gnupg
17 17
18include disable-devel.inc 18include disable-devel.inc
19include disable-exec.inc 19include disable-exec.inc
diff --git a/etc/profile-a-l/keepass.profile b/etc/profile-a-l/keepass.profile
index 9c06962bc..ae8971ab4 100644
--- a/etc/profile-a-l/keepass.profile
+++ b/etc/profile-a-l/keepass.profile
@@ -6,14 +6,14 @@ include keepass.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/*.kdb 9noblacklist ${HOME}/*.kdb
10nodeny ${HOME}/*.kdbx 10noblacklist ${HOME}/*.kdbx
11nodeny ${HOME}/.config/KeePass 11noblacklist ${HOME}/.config/KeePass
12nodeny ${HOME}/.config/keepass 12noblacklist ${HOME}/.config/keepass
13nodeny ${HOME}/.keepass 13noblacklist ${HOME}/.keepass
14nodeny ${HOME}/.local/share/KeePass 14noblacklist ${HOME}/.local/share/KeePass
15nodeny ${HOME}/.local/share/keepass 15noblacklist ${HOME}/.local/share/keepass
16nodeny ${DOCUMENTS} 16noblacklist ${DOCUMENTS}
17 17
18include disable-common.inc 18include disable-common.inc
19include disable-devel.inc 19include disable-devel.inc
diff --git a/etc/profile-a-l/keepassx.profile b/etc/profile-a-l/keepassx.profile
index 2772fa8bf..ac364986d 100644
--- a/etc/profile-a-l/keepassx.profile
+++ b/etc/profile-a-l/keepassx.profile
@@ -6,11 +6,11 @@ include keepassx.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/*.kdb 9noblacklist ${HOME}/*.kdb
10nodeny ${HOME}/*.kdbx 10noblacklist ${HOME}/*.kdbx
11nodeny ${HOME}/.config/keepassx 11noblacklist ${HOME}/.config/keepassx
12nodeny ${HOME}/.keepassx 12noblacklist ${HOME}/.keepassx
13nodeny ${DOCUMENTS} 13noblacklist ${DOCUMENTS}
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/keepassxc.profile b/etc/profile-a-l/keepassxc.profile
index 9c530b20d..f71dcf82b 100644
--- a/etc/profile-a-l/keepassxc.profile
+++ b/etc/profile-a-l/keepassxc.profile
@@ -6,23 +6,23 @@ include keepassxc.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/*.kdb 9noblacklist ${HOME}/*.kdb
10nodeny ${HOME}/*.kdbx 10noblacklist ${HOME}/*.kdbx
11nodeny ${HOME}/.cache/keepassxc 11noblacklist ${HOME}/.cache/keepassxc
12nodeny ${HOME}/.config/keepassxc 12noblacklist ${HOME}/.config/keepassxc
13nodeny ${HOME}/.config/KeePassXCrc 13noblacklist ${HOME}/.config/KeePassXCrc
14nodeny ${HOME}/.keepassxc 14noblacklist ${HOME}/.keepassxc
15nodeny ${DOCUMENTS} 15noblacklist ${DOCUMENTS}
16 16
17# Allow browser profiles, required for browser integration. 17# Allow browser profiles, required for browser integration.
18nodeny ${HOME}/.config/BraveSoftware 18noblacklist ${HOME}/.config/BraveSoftware
19nodeny ${HOME}/.config/chromium 19noblacklist ${HOME}/.config/chromium
20nodeny ${HOME}/.config/google-chrome 20noblacklist ${HOME}/.config/google-chrome
21nodeny ${HOME}/.config/vivaldi 21noblacklist ${HOME}/.config/vivaldi
22nodeny ${HOME}/.local/share/torbrowser 22noblacklist ${HOME}/.local/share/torbrowser
23nodeny ${HOME}/.mozilla 23noblacklist ${HOME}/.mozilla
24 24
25deny /usr/libexec 25blacklist /usr/libexec
26 26
27include disable-common.inc 27include disable-common.inc
28include disable-devel.inc 28include disable-devel.inc
@@ -57,7 +57,7 @@ include disable-xdg.inc
57#whitelist ${HOME}/.config/KeePassXCrc 57#whitelist ${HOME}/.config/KeePassXCrc
58#include whitelist-common.inc 58#include whitelist-common.inc
59 59
60allow /usr/share/keepassxc 60whitelist /usr/share/keepassxc
61include whitelist-usr-share-common.inc 61include whitelist-usr-share-common.inc
62include whitelist-var-common.inc 62include whitelist-var-common.inc
63 63
diff --git a/etc/profile-a-l/kget.profile b/etc/profile-a-l/kget.profile
index 30c041cbc..2c684504b 100644
--- a/etc/profile-a-l/kget.profile
+++ b/etc/profile-a-l/kget.profile
@@ -6,13 +6,13 @@ include kget.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/kgetrc 9noblacklist ${HOME}/.config/kgetrc
10nodeny ${HOME}/.kde/share/apps/kget 10noblacklist ${HOME}/.kde/share/apps/kget
11nodeny ${HOME}/.kde/share/config/kgetrc 11noblacklist ${HOME}/.kde/share/config/kgetrc
12nodeny ${HOME}/.kde4/share/apps/kget 12noblacklist ${HOME}/.kde4/share/apps/kget
13nodeny ${HOME}/.kde4/share/config/kgetrc 13noblacklist ${HOME}/.kde4/share/config/kgetrc
14nodeny ${HOME}/.local/share/kget 14noblacklist ${HOME}/.local/share/kget
15nodeny ${HOME}/.local/share/kxmlgui5/kget 15noblacklist ${HOME}/.local/share/kxmlgui5/kget
16 16
17include disable-common.inc 17include disable-common.inc
18include disable-devel.inc 18include disable-devel.inc
diff --git a/etc/profile-a-l/kid3-qt.profile b/etc/profile-a-l/kid3-qt.profile
index 84d135fc3..9bcede077 100644
--- a/etc/profile-a-l/kid3-qt.profile
+++ b/etc/profile-a-l/kid3-qt.profile
@@ -2,7 +2,7 @@
2# This file is overwritten after every install/update 2# This file is overwritten after every install/update
3include kid3-qt.local 3include kid3-qt.local
4 4
5nodeny ${HOME}/.config/Kid3 5noblacklist ${HOME}/.config/Kid3
6 6
7# Redirect 7# Redirect
8include kid3.profile 8include kid3.profile
diff --git a/etc/profile-a-l/kid3.profile b/etc/profile-a-l/kid3.profile
index 0ef2a7845..e18292e99 100644
--- a/etc/profile-a-l/kid3.profile
+++ b/etc/profile-a-l/kid3.profile
@@ -6,9 +6,9 @@ include kid3.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${MUSIC} 9noblacklist ${MUSIC}
10nodeny ${HOME}/.config/kid3rc 10noblacklist ${HOME}/.config/kid3rc
11nodeny ${HOME}/.local/share/kxmlgui5/kid3 11noblacklist ${HOME}/.local/share/kxmlgui5/kid3
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/kino.profile b/etc/profile-a-l/kino.profile
index 833c1d22a..74014ffe6 100644
--- a/etc/profile-a-l/kino.profile
+++ b/etc/profile-a-l/kino.profile
@@ -6,8 +6,8 @@ include kino.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.kino-history 9noblacklist ${HOME}/.kino-history
10nodeny ${HOME}/.kinorc 10noblacklist ${HOME}/.kinorc
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/kiwix-desktop.profile b/etc/profile-a-l/kiwix-desktop.profile
index b188ba0e3..40ee0bbc7 100644
--- a/etc/profile-a-l/kiwix-desktop.profile
+++ b/etc/profile-a-l/kiwix-desktop.profile
@@ -6,8 +6,8 @@ include kiwix-desktop.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/kiwix 9noblacklist ${HOME}/.local/share/kiwix
10nodeny ${HOME}/.local/share/kiwix-desktop 10noblacklist ${HOME}/.local/share/kiwix-desktop
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -19,8 +19,8 @@ include disable-xdg.inc
19 19
20mkdir ${HOME}/.local/share/kiwix 20mkdir ${HOME}/.local/share/kiwix
21mkdir ${HOME}/.local/share/kiwix-desktop 21mkdir ${HOME}/.local/share/kiwix-desktop
22allow ${HOME}/.local/share/kiwix 22whitelist ${HOME}/.local/share/kiwix
23allow ${HOME}/.local/share/kiwix-desktop 23whitelist ${HOME}/.local/share/kiwix-desktop
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
26 26
diff --git a/etc/profile-a-l/klatexformula.profile b/etc/profile-a-l/klatexformula.profile
index e087e4973..c6a9023f1 100644
--- a/etc/profile-a-l/klatexformula.profile
+++ b/etc/profile-a-l/klatexformula.profile
@@ -6,8 +6,8 @@ include klatexformula.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.kde/share/apps/klatexformula 9noblacklist ${HOME}/.kde/share/apps/klatexformula
10nodeny ${HOME}/.klatexformula 10noblacklist ${HOME}/.klatexformula
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/klavaro.profile b/etc/profile-a-l/klavaro.profile
index ec3912419..f5cd3a48c 100644
--- a/etc/profile-a-l/klavaro.profile
+++ b/etc/profile-a-l/klavaro.profile
@@ -6,8 +6,8 @@ include klavaro.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/klavaro 9noblacklist ${HOME}/.config/klavaro
10nodeny ${HOME}/.local/share/klavaro 10noblacklist ${HOME}/.local/share/klavaro
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -19,8 +19,8 @@ include disable-xdg.inc
19 19
20mkdir ${HOME}/.local/share/klavaro 20mkdir ${HOME}/.local/share/klavaro
21mkdir ${HOME}/.config/klavaro 21mkdir ${HOME}/.config/klavaro
22allow ${HOME}/.local/share/klavaro 22whitelist ${HOME}/.local/share/klavaro
23allow ${HOME}/.config/klavaro 23whitelist ${HOME}/.config/klavaro
24include whitelist-common.inc 24include whitelist-common.inc
25include whitelist-var-common.inc 25include whitelist-var-common.inc
26 26
diff --git a/etc/profile-a-l/kmail.profile b/etc/profile-a-l/kmail.profile
index 3c582c08c..95ae98e53 100644
--- a/etc/profile-a-l/kmail.profile
+++ b/etc/profile-a-l/kmail.profile
@@ -9,27 +9,27 @@ include globals.local
9# kmail has problems launching akonadi in debian and ubuntu. 9# kmail has problems launching akonadi in debian and ubuntu.
10# one solution is to have akonadi already running when kmail is started 10# one solution is to have akonadi already running when kmail is started
11 11
12nodeny ${HOME}/.cache/akonadi* 12noblacklist ${HOME}/.cache/akonadi*
13nodeny ${HOME}/.cache/kmail2 13noblacklist ${HOME}/.cache/kmail2
14nodeny ${HOME}/.config/akonadi* 14noblacklist ${HOME}/.config/akonadi*
15nodeny ${HOME}/.config/baloorc 15noblacklist ${HOME}/.config/baloorc
16nodeny ${HOME}/.config/emaildefaults 16noblacklist ${HOME}/.config/emaildefaults
17nodeny ${HOME}/.config/emailidentities 17noblacklist ${HOME}/.config/emailidentities
18nodeny ${HOME}/.config/kmail2rc 18noblacklist ${HOME}/.config/kmail2rc
19nodeny ${HOME}/.config/kmailsearchindexingrc 19noblacklist ${HOME}/.config/kmailsearchindexingrc
20nodeny ${HOME}/.config/mailtransports 20noblacklist ${HOME}/.config/mailtransports
21nodeny ${HOME}/.config/specialmailcollectionsrc 21noblacklist ${HOME}/.config/specialmailcollectionsrc
22nodeny ${HOME}/.gnupg 22noblacklist ${HOME}/.gnupg
23nodeny ${HOME}/.local/share/akonadi* 23noblacklist ${HOME}/.local/share/akonadi*
24nodeny ${HOME}/.local/share/apps/korganizer 24noblacklist ${HOME}/.local/share/apps/korganizer
25nodeny ${HOME}/.local/share/contacts 25noblacklist ${HOME}/.local/share/contacts
26nodeny ${HOME}/.local/share/emailidentities 26noblacklist ${HOME}/.local/share/emailidentities
27nodeny ${HOME}/.local/share/kmail2 27noblacklist ${HOME}/.local/share/kmail2
28nodeny ${HOME}/.local/share/kxmlgui5/kmail 28noblacklist ${HOME}/.local/share/kxmlgui5/kmail
29nodeny ${HOME}/.local/share/kxmlgui5/kmail2 29noblacklist ${HOME}/.local/share/kxmlgui5/kmail2
30nodeny ${HOME}/.local/share/local-mail 30noblacklist ${HOME}/.local/share/local-mail
31nodeny ${HOME}/.local/share/notes 31noblacklist ${HOME}/.local/share/notes
32nodeny /tmp/akonadi-* 32noblacklist /tmp/akonadi-*
33 33
34include disable-common.inc 34include disable-common.inc
35include disable-devel.inc 35include disable-devel.inc
diff --git a/etc/profile-a-l/kmplayer.profile b/etc/profile-a-l/kmplayer.profile
index d2ce14ab6..e88b53499 100644
--- a/etc/profile-a-l/kmplayer.profile
+++ b/etc/profile-a-l/kmplayer.profile
@@ -6,11 +6,11 @@ include kmplayer.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/kmplayerrc 9noblacklist ${HOME}/.config/kmplayerrc
10nodeny ${HOME}/.kde/share/config/kmplayerrc 10noblacklist ${HOME}/.kde/share/config/kmplayerrc
11nodeny ${HOME}/.local/share/kmplayer 11noblacklist ${HOME}/.local/share/kmplayer
12nodeny ${MUSIC} 12noblacklist ${MUSIC}
13nodeny ${VIDEOS} 13noblacklist ${VIDEOS}
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/knotes.profile b/etc/profile-a-l/knotes.profile
index 5a9ac34da..f155d0ad6 100644
--- a/etc/profile-a-l/knotes.profile
+++ b/etc/profile-a-l/knotes.profile
@@ -10,9 +10,9 @@ include knotes.local
10# knotes has problems launching akonadi in debian and ubuntu. 10# knotes has problems launching akonadi in debian and ubuntu.
11# one solution is to have akonadi already running when knotes is started 11# one solution is to have akonadi already running when knotes is started
12 12
13nodeny ${HOME}/.config/knotesrc 13noblacklist ${HOME}/.config/knotesrc
14nodeny ${HOME}/.local/share/knotes 14noblacklist ${HOME}/.local/share/knotes
15nodeny ${HOME}/.local/share/kxmlgui5/knotes 15noblacklist ${HOME}/.local/share/kxmlgui5/knotes
16 16
17# Redirect 17# Redirect
18include kmail.profile 18include kmail.profile
diff --git a/etc/profile-a-l/kodi.profile b/etc/profile-a-l/kodi.profile
index 2725c87be..b7091f1fc 100644
--- a/etc/profile-a-l/kodi.profile
+++ b/etc/profile-a-l/kodi.profile
@@ -13,10 +13,10 @@ ignore noexec ${HOME}
13#ignore noroot 13#ignore noroot
14#ignore private-dev 14#ignore private-dev
15 15
16nodeny ${HOME}/.kodi 16noblacklist ${HOME}/.kodi
17nodeny ${MUSIC} 17noblacklist ${MUSIC}
18nodeny ${PICTURES} 18noblacklist ${PICTURES}
19nodeny ${VIDEOS} 19noblacklist ${VIDEOS}
20 20
21# Allow python (blacklisted by disable-interpreters.inc) 21# Allow python (blacklisted by disable-interpreters.inc)
22include allow-python2.inc 22include allow-python2.inc
diff --git a/etc/profile-a-l/konversation.profile b/etc/profile-a-l/konversation.profile
index d8ce33838..5b5ed6e24 100644
--- a/etc/profile-a-l/konversation.profile
+++ b/etc/profile-a-l/konversation.profile
@@ -6,11 +6,11 @@ include konversation.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/konversationrc 9noblacklist ${HOME}/.config/konversationrc
10nodeny ${HOME}/.config/konversation.notifyrc 10noblacklist ${HOME}/.config/konversation.notifyrc
11nodeny ${HOME}/.kde/share/config/konversationrc 11noblacklist ${HOME}/.kde/share/config/konversationrc
12nodeny ${HOME}/.kde4/share/config/konversationrc 12noblacklist ${HOME}/.kde4/share/config/konversationrc
13nodeny ${HOME}/.local/share/kxmlgui5/konversation 13noblacklist ${HOME}/.local/share/kxmlgui5/konversation
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
diff --git a/etc/profile-a-l/kopete.profile b/etc/profile-a-l/kopete.profile
index 749591f32..88f47d1bf 100644
--- a/etc/profile-a-l/kopete.profile
+++ b/etc/profile-a-l/kopete.profile
@@ -6,11 +6,11 @@ include kopete.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.kde/share/apps/kopete 9noblacklist ${HOME}/.kde/share/apps/kopete
10nodeny ${HOME}/.kde/share/config/kopeterc 10noblacklist ${HOME}/.kde/share/config/kopeterc
11nodeny ${HOME}/.kde4/share/apps/kopete 11noblacklist ${HOME}/.kde4/share/apps/kopete
12nodeny ${HOME}/.kde4/share/config/kopeterc 12noblacklist ${HOME}/.kde4/share/config/kopeterc
13nodeny ${HOME}/.local/share/kxmlgui5/kopete 13noblacklist ${HOME}/.local/share/kxmlgui5/kopete
14 14
15include disable-common.inc 15include disable-common.inc
16include disable-devel.inc 16include disable-devel.inc
@@ -19,7 +19,7 @@ include disable-interpreters.inc
19include disable-passwdmgr.inc 19include disable-passwdmgr.inc
20include disable-programs.inc 20include disable-programs.inc
21 21
22allow /var/lib/winpopup 22whitelist /var/lib/winpopup
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
25caps.drop all 25caps.drop all
diff --git a/etc/profile-a-l/krita.profile b/etc/profile-a-l/krita.profile
index 950341def..8604e63d0 100644
--- a/etc/profile-a-l/krita.profile
+++ b/etc/profile-a-l/krita.profile
@@ -9,10 +9,10 @@ include globals.local
9# noexec ${HOME} may break krita, see issue #1953 9# noexec ${HOME} may break krita, see issue #1953
10ignore noexec ${HOME} 10ignore noexec ${HOME}
11 11
12nodeny ${HOME}/.config/kritarc 12noblacklist ${HOME}/.config/kritarc
13nodeny ${HOME}/.local/share/krita 13noblacklist ${HOME}/.local/share/krita
14nodeny ${DOCUMENTS} 14noblacklist ${DOCUMENTS}
15nodeny ${PICTURES} 15noblacklist ${PICTURES}
16 16
17# Allow python (blacklisted by disable-interpreters.inc) 17# Allow python (blacklisted by disable-interpreters.inc)
18include allow-python2.inc 18include allow-python2.inc
diff --git a/etc/profile-a-l/krunner.profile b/etc/profile-a-l/krunner.profile
index 7b325d273..9cb5eff87 100644
--- a/etc/profile-a-l/krunner.profile
+++ b/etc/profile-a-l/krunner.profile
@@ -13,9 +13,9 @@ include globals.local
13# noblacklist ${HOME}/.cache/krunner 13# noblacklist ${HOME}/.cache/krunner
14# noblacklist ${HOME}/.cache/krunnerbookmarkrunnerfirefoxdbfile.sqlite* 14# noblacklist ${HOME}/.cache/krunnerbookmarkrunnerfirefoxdbfile.sqlite*
15# noblacklist ${HOME}/.config/chromium 15# noblacklist ${HOME}/.config/chromium
16nodeny ${HOME}/.config/krunnerrc 16noblacklist ${HOME}/.config/krunnerrc
17nodeny ${HOME}/.kde/share/config/krunnerrc 17noblacklist ${HOME}/.kde/share/config/krunnerrc
18nodeny ${HOME}/.kde4/share/config/krunnerrc 18noblacklist ${HOME}/.kde4/share/config/krunnerrc
19# noblacklist ${HOME}/.local/share/baloo 19# noblacklist ${HOME}/.local/share/baloo
20# noblacklist ${HOME}/.mozilla 20# noblacklist ${HOME}/.mozilla
21 21
diff --git a/etc/profile-a-l/ktorrent.profile b/etc/profile-a-l/ktorrent.profile
index ac9fee585..5a85194e0 100644
--- a/etc/profile-a-l/ktorrent.profile
+++ b/etc/profile-a-l/ktorrent.profile
@@ -6,13 +6,13 @@ include ktorrent.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/ktorrentrc 9noblacklist ${HOME}/.config/ktorrentrc
10nodeny ${HOME}/.kde/share/apps/ktorrent 10noblacklist ${HOME}/.kde/share/apps/ktorrent
11nodeny ${HOME}/.kde/share/config/ktorrentrc 11noblacklist ${HOME}/.kde/share/config/ktorrentrc
12nodeny ${HOME}/.kde4/share/apps/ktorrent 12noblacklist ${HOME}/.kde4/share/apps/ktorrent
13nodeny ${HOME}/.kde4/share/config/ktorrentrc 13noblacklist ${HOME}/.kde4/share/config/ktorrentrc
14nodeny ${HOME}/.local/share/ktorrent 14noblacklist ${HOME}/.local/share/ktorrent
15nodeny ${HOME}/.local/share/kxmlgui5/ktorrent 15noblacklist ${HOME}/.local/share/kxmlgui5/ktorrent
16 16
17include disable-common.inc 17include disable-common.inc
18include disable-devel.inc 18include disable-devel.inc
@@ -29,14 +29,14 @@ mkdir ${HOME}/.local/share/kxmlgui5/ktorrent
29mkfile ${HOME}/.config/ktorrentrc 29mkfile ${HOME}/.config/ktorrentrc
30mkfile ${HOME}/.kde/share/config/ktorrentrc 30mkfile ${HOME}/.kde/share/config/ktorrentrc
31mkfile ${HOME}/.kde4/share/config/ktorrentrc 31mkfile ${HOME}/.kde4/share/config/ktorrentrc
32allow ${DOWNLOADS} 32whitelist ${DOWNLOADS}
33allow ${HOME}/.config/ktorrentrc 33whitelist ${HOME}/.config/ktorrentrc
34allow ${HOME}/.kde/share/apps/ktorrent 34whitelist ${HOME}/.kde/share/apps/ktorrent
35allow ${HOME}/.kde/share/config/ktorrentrc 35whitelist ${HOME}/.kde/share/config/ktorrentrc
36allow ${HOME}/.kde4/share/apps/ktorrent 36whitelist ${HOME}/.kde4/share/apps/ktorrent
37allow ${HOME}/.kde4/share/config/ktorrentrc 37whitelist ${HOME}/.kde4/share/config/ktorrentrc
38allow ${HOME}/.local/share/ktorrent 38whitelist ${HOME}/.local/share/ktorrent
39allow ${HOME}/.local/share/kxmlgui5/ktorrent 39whitelist ${HOME}/.local/share/kxmlgui5/ktorrent
40include whitelist-common.inc 40include whitelist-common.inc
41include whitelist-var-common.inc 41include whitelist-var-common.inc
42 42
diff --git a/etc/profile-a-l/ktouch.profile b/etc/profile-a-l/ktouch.profile
index 71f8e4977..4cf72b74c 100644
--- a/etc/profile-a-l/ktouch.profile
+++ b/etc/profile-a-l/ktouch.profile
@@ -6,8 +6,8 @@ include ktouch.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/ktouch2rc 9noblacklist ${HOME}/.config/ktouch2rc
10nodeny ${HOME}/.local/share/ktouch 10noblacklist ${HOME}/.local/share/ktouch
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
@@ -20,8 +20,8 @@ include disable-xdg.inc
20 20
21mkfile ${HOME}/.config/ktouch2rc 21mkfile ${HOME}/.config/ktouch2rc
22mkdir ${HOME}/.local/share/ktouch 22mkdir ${HOME}/.local/share/ktouch
23allow ${HOME}/.config/ktouch2rc 23whitelist ${HOME}/.config/ktouch2rc
24allow ${HOME}/.local/share/ktouch 24whitelist ${HOME}/.local/share/ktouch
25include whitelist-common.inc 25include whitelist-common.inc
26include whitelist-var-common.inc 26include whitelist-var-common.inc
27 27
diff --git a/etc/profile-a-l/kube.profile b/etc/profile-a-l/kube.profile
index 74ffd1162..4e9a12e5f 100644
--- a/etc/profile-a-l/kube.profile
+++ b/etc/profile-a-l/kube.profile
@@ -6,13 +6,13 @@ include kube.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.gnupg 9noblacklist ${HOME}/.gnupg
10nodeny ${HOME}/.mozilla 10noblacklist ${HOME}/.mozilla
11nodeny ${HOME}/.cache/kube 11noblacklist ${HOME}/.cache/kube
12nodeny ${HOME}/.config/kube 12noblacklist ${HOME}/.config/kube
13nodeny ${HOME}/.config/sink 13noblacklist ${HOME}/.config/sink
14nodeny ${HOME}/.local/share/kube 14noblacklist ${HOME}/.local/share/kube
15nodeny ${HOME}/.local/share/sink 15noblacklist ${HOME}/.local/share/sink
16 16
17include disable-common.inc 17include disable-common.inc
18include disable-devel.inc 18include disable-devel.inc
@@ -29,17 +29,17 @@ mkdir ${HOME}/.config/kube
29mkdir ${HOME}/.config/sink 29mkdir ${HOME}/.config/sink
30mkdir ${HOME}/.local/share/kube 30mkdir ${HOME}/.local/share/kube
31mkdir ${HOME}/.local/share/sink 31mkdir ${HOME}/.local/share/sink
32allow ${HOME}/.gnupg 32whitelist ${HOME}/.gnupg
33allow ${HOME}/.mozilla/firefox/profiles.ini 33whitelist ${HOME}/.mozilla/firefox/profiles.ini
34allow ${HOME}/.cache/kube 34whitelist ${HOME}/.cache/kube
35allow ${HOME}/.config/kube 35whitelist ${HOME}/.config/kube
36allow ${HOME}/.config/sink 36whitelist ${HOME}/.config/sink
37allow ${HOME}/.local/share/kube 37whitelist ${HOME}/.local/share/kube
38allow ${HOME}/.local/share/sink 38whitelist ${HOME}/.local/share/sink
39allow ${RUNUSER}/gnupg 39whitelist ${RUNUSER}/gnupg
40allow /usr/share/kube 40whitelist /usr/share/kube
41allow /usr/share/gnupg 41whitelist /usr/share/gnupg
42allow /usr/share/gnupg2 42whitelist /usr/share/gnupg2
43include whitelist-common.inc 43include whitelist-common.inc
44include whitelist-runuser-common.inc 44include whitelist-runuser-common.inc
45include whitelist-usr-share-common.inc 45include whitelist-usr-share-common.inc
diff --git a/etc/profile-a-l/kwin_x11.profile b/etc/profile-a-l/kwin_x11.profile
index 580f93736..15e7ceb17 100644
--- a/etc/profile-a-l/kwin_x11.profile
+++ b/etc/profile-a-l/kwin_x11.profile
@@ -8,10 +8,10 @@ include globals.local
8# fix automatical kwin_x11 sandboxing: 8# fix automatical kwin_x11 sandboxing:
9# echo KDEWM=kwin_x11 >> ~/.pam_environment 9# echo KDEWM=kwin_x11 >> ~/.pam_environment
10 10
11nodeny ${HOME}/.cache/kwin 11noblacklist ${HOME}/.cache/kwin
12nodeny ${HOME}/.config/kwinrc 12noblacklist ${HOME}/.config/kwinrc
13nodeny ${HOME}/.config/kwinrulesrc 13noblacklist ${HOME}/.config/kwinrulesrc
14nodeny ${HOME}/.local/share/kwin 14noblacklist ${HOME}/.local/share/kwin
15 15
16include disable-common.inc 16include disable-common.inc
17include disable-devel.inc 17include disable-devel.inc
diff --git a/etc/profile-a-l/kwrite.profile b/etc/profile-a-l/kwrite.profile
index 08b0e0224..804ffafeb 100644
--- a/etc/profile-a-l/kwrite.profile
+++ b/etc/profile-a-l/kwrite.profile
@@ -6,15 +6,15 @@ include kwrite.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/katepartrc 9noblacklist ${HOME}/.config/katepartrc
10nodeny ${HOME}/.config/katerc 10noblacklist ${HOME}/.config/katerc
11nodeny ${HOME}/.config/kateschemarc 11noblacklist ${HOME}/.config/kateschemarc
12nodeny ${HOME}/.config/katesyntaxhighlightingrc 12noblacklist ${HOME}/.config/katesyntaxhighlightingrc
13nodeny ${HOME}/.config/katevirc 13noblacklist ${HOME}/.config/katevirc
14nodeny ${HOME}/.config/kwriterc 14noblacklist ${HOME}/.config/kwriterc
15nodeny ${HOME}/.local/share/kwrite 15noblacklist ${HOME}/.local/share/kwrite
16nodeny ${HOME}/.local/share/kxmlgui5/kwrite 16noblacklist ${HOME}/.local/share/kxmlgui5/kwrite
17nodeny ${DOCUMENTS} 17noblacklist ${DOCUMENTS}
18 18
19include disable-common.inc 19include disable-common.inc
20include disable-devel.inc 20include disable-devel.inc
diff --git a/etc/profile-a-l/latex-common.profile b/etc/profile-a-l/latex-common.profile
index 91693bfc1..ac1b8785d 100644
--- a/etc/profile-a-l/latex-common.profile
+++ b/etc/profile-a-l/latex-common.profile
@@ -13,7 +13,7 @@ include disable-interpreters.inc
13include disable-passwdmgr.inc 13include disable-passwdmgr.inc
14include disable-programs.inc 14include disable-programs.inc
15 15
16allow /var/lib 16whitelist /var/lib
17include whitelist-runuser-common.inc 17include whitelist-runuser-common.inc
18include whitelist-var-common.inc 18include whitelist-var-common.inc
19 19
diff --git a/etc/profile-a-l/leafpad.profile b/etc/profile-a-l/leafpad.profile
index e154708eb..4bbb0a86d 100644
--- a/etc/profile-a-l/leafpad.profile
+++ b/etc/profile-a-l/leafpad.profile
@@ -6,7 +6,7 @@ include leafpad.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/leafpad 9noblacklist ${HOME}/.config/leafpad
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/less.profile b/etc/profile-a-l/less.profile
index abee392de..8eb5ad0c2 100644
--- a/etc/profile-a-l/less.profile
+++ b/etc/profile-a-l/less.profile
@@ -7,9 +7,9 @@ include less.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10deny ${RUNUSER} 10blacklist ${RUNUSER}
11 11
12nodeny ${HOME}/.lesshst 12noblacklist ${HOME}/.lesshst
13 13
14include disable-devel.inc 14include disable-devel.inc
15include disable-exec.inc 15include disable-exec.inc
diff --git a/etc/profile-a-l/librecad.profile b/etc/profile-a-l/librecad.profile
index 8ec41eee3..c57eae73d 100644
--- a/etc/profile-a-l/librecad.profile
+++ b/etc/profile-a-l/librecad.profile
@@ -4,8 +4,8 @@ include librecad.local
4# Persistent global definitions 4# Persistent global definitions
5include globals.local 5include globals.local
6 6
7nodeny ${HOME}/.config/LibreCAD 7noblacklist ${HOME}/.config/LibreCAD
8nodeny ${HOME}/.local/share/LibreCAD 8noblacklist ${HOME}/.local/share/LibreCAD
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
@@ -16,7 +16,7 @@ include disable-programs.inc
16include disable-shell.inc 16include disable-shell.inc
17include disable-xdg.inc 17include disable-xdg.inc
18 18
19allow /usr/share/librecad 19whitelist /usr/share/librecad
20include whitelist-usr-share-common.inc 20include whitelist-usr-share-common.inc
21include whitelist-var-common.inc 21include whitelist-var-common.inc
22 22
diff --git a/etc/profile-a-l/libreoffice.profile b/etc/profile-a-l/libreoffice.profile
index ae01d39b8..b1a24888c 100644
--- a/etc/profile-a-l/libreoffice.profile
+++ b/etc/profile-a-l/libreoffice.profile
@@ -6,15 +6,15 @@ include libreoffice.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny /usr/local/sbin 9noblacklist /usr/local/sbin
10nodeny ${HOME}/.config/libreoffice 10noblacklist ${HOME}/.config/libreoffice
11 11
12# libreoffice uses java for some functionality. 12# libreoffice uses java for some functionality.
13# Add 'ignore include allow-java.inc' to your libreoffice.local if you don't need that functionality. 13# Add 'ignore include allow-java.inc' to your libreoffice.local if you don't need that functionality.
14# Allow java (blacklisted by disable-devel.inc) 14# Allow java (blacklisted by disable-devel.inc)
15include allow-java.inc 15include allow-java.inc
16 16
17deny /usr/libexec 17blacklist /usr/libexec
18 18
19include disable-common.inc 19include disable-common.inc
20include disable-devel.inc 20include disable-devel.inc
diff --git a/etc/profile-a-l/librewolf.profile b/etc/profile-a-l/librewolf.profile
index 5c614ab8e..da047357a 100644
--- a/etc/profile-a-l/librewolf.profile
+++ b/etc/profile-a-l/librewolf.profile
@@ -6,13 +6,13 @@ include librewolf.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/librewolf 9noblacklist ${HOME}/.cache/librewolf
10nodeny ${HOME}/.librewolf 10noblacklist ${HOME}/.librewolf
11 11
12mkdir ${HOME}/.cache/librewolf 12mkdir ${HOME}/.cache/librewolf
13mkdir ${HOME}/.librewolf 13mkdir ${HOME}/.librewolf
14allow ${HOME}/.cache/librewolf 14whitelist ${HOME}/.cache/librewolf
15allow ${HOME}/.librewolf 15whitelist ${HOME}/.librewolf
16 16
17# Add the next lines to your librewolf.local if you want to use the migration wizard. 17# Add the next lines to your librewolf.local if you want to use the migration wizard.
18#noblacklist ${HOME}/.mozilla 18#noblacklist ${HOME}/.mozilla
@@ -23,10 +23,10 @@ allow ${HOME}/.librewolf
23#whitelist ${RUNUSER}/kpxc_server 23#whitelist ${RUNUSER}/kpxc_server
24#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer 24#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer
25 25
26allow /usr/share/doc 26whitelist /usr/share/doc
27allow /usr/share/gtk-doc/html 27whitelist /usr/share/gtk-doc/html
28allow /usr/share/mozilla 28whitelist /usr/share/mozilla
29allow /usr/share/webext 29whitelist /usr/share/webext
30include whitelist-usr-share-common.inc 30include whitelist-usr-share-common.inc
31 31
32# Add the next line to your librewolf.local to enable private-bin (Arch Linux). 32# Add the next line to your librewolf.local to enable private-bin (Arch Linux).
diff --git a/etc/profile-a-l/liferea.profile b/etc/profile-a-l/liferea.profile
index 595ecc257..7afca1d5f 100644
--- a/etc/profile-a-l/liferea.profile
+++ b/etc/profile-a-l/liferea.profile
@@ -6,9 +6,9 @@ include liferea.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/liferea 9noblacklist ${HOME}/.cache/liferea
10nodeny ${HOME}/.config/liferea 10noblacklist ${HOME}/.config/liferea
11nodeny ${HOME}/.local/share/liferea 11noblacklist ${HOME}/.local/share/liferea
12 12
13# Allow python (blacklisted by disable-interpreters.inc) 13# Allow python (blacklisted by disable-interpreters.inc)
14include allow-python2.inc 14include allow-python2.inc
@@ -24,10 +24,10 @@ include disable-programs.inc
24mkdir ${HOME}/.cache/liferea 24mkdir ${HOME}/.cache/liferea
25mkdir ${HOME}/.config/liferea 25mkdir ${HOME}/.config/liferea
26mkdir ${HOME}/.local/share/liferea 26mkdir ${HOME}/.local/share/liferea
27allow ${HOME}/.cache/liferea 27whitelist ${HOME}/.cache/liferea
28allow ${HOME}/.config/liferea 28whitelist ${HOME}/.config/liferea
29allow ${HOME}/.local/share/liferea 29whitelist ${HOME}/.local/share/liferea
30allow /usr/share/liferea 30whitelist /usr/share/liferea
31include whitelist-common.inc 31include whitelist-common.inc
32include whitelist-usr-share-common.inc 32include whitelist-usr-share-common.inc
33include whitelist-var-common.inc 33include whitelist-var-common.inc
diff --git a/etc/profile-a-l/lightsoff.profile b/etc/profile-a-l/lightsoff.profile
index 58d5bcd6d..c065c44a9 100644
--- a/etc/profile-a-l/lightsoff.profile
+++ b/etc/profile-a-l/lightsoff.profile
@@ -6,7 +6,7 @@ include lightsoff.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9allow /usr/share/lightsoff 9whitelist /usr/share/lightsoff
10 10
11private-bin lightsoff 11private-bin lightsoff
12 12
diff --git a/etc/profile-a-l/lincity-ng.profile b/etc/profile-a-l/lincity-ng.profile
index e14c50d77..4254b7f33 100644
--- a/etc/profile-a-l/lincity-ng.profile
+++ b/etc/profile-a-l/lincity-ng.profile
@@ -6,7 +6,7 @@ include lincity-ng.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.lincity-ng 9noblacklist ${HOME}/.lincity-ng
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
@@ -18,7 +18,7 @@ include disable-shell.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20mkdir ${HOME}/.lincity-ng 20mkdir ${HOME}/.lincity-ng
21allow ${HOME}/.lincity-ng 21whitelist ${HOME}/.lincity-ng
22include whitelist-common.inc 22include whitelist-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
24 24
diff --git a/etc/profile-a-l/links-common.profile b/etc/profile-a-l/links-common.profile
index 51e3d5b94..cd885b1d4 100644
--- a/etc/profile-a-l/links-common.profile
+++ b/etc/profile-a-l/links-common.profile
@@ -4,8 +4,8 @@ include links-common.local
4 4
5# common profile for links browsers 5# common profile for links browsers
6 6
7deny /tmp/.X11-unix 7blacklist /tmp/.X11-unix
8deny ${RUNUSER}/wayland-* 8blacklist ${RUNUSER}/wayland-*
9 9
10include disable-common.inc 10include disable-common.inc
11include disable-devel.inc 11include disable-devel.inc
@@ -17,7 +17,7 @@ include disable-passwdmgr.inc
17include disable-programs.inc 17include disable-programs.inc
18include disable-xdg.inc 18include disable-xdg.inc
19 19
20allow ${DOWNLOADS} 20whitelist ${DOWNLOADS}
21include whitelist-runuser-common.inc 21include whitelist-runuser-common.inc
22include whitelist-usr-share-common.inc 22include whitelist-usr-share-common.inc
23include whitelist-var-common.inc 23include whitelist-var-common.inc
diff --git a/etc/profile-a-l/links.profile b/etc/profile-a-l/links.profile
index ae57601ca..8ce39cc7f 100644
--- a/etc/profile-a-l/links.profile
+++ b/etc/profile-a-l/links.profile
@@ -7,10 +7,10 @@ include links.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${HOME}/.links 10noblacklist ${HOME}/.links
11 11
12mkdir ${HOME}/.links 12mkdir ${HOME}/.links
13allow ${HOME}/.links 13whitelist ${HOME}/.links
14 14
15private-bin links 15private-bin links
16 16
diff --git a/etc/profile-a-l/links2.profile b/etc/profile-a-l/links2.profile
index eb349c73a..5f91dfcd2 100644
--- a/etc/profile-a-l/links2.profile
+++ b/etc/profile-a-l/links2.profile
@@ -7,10 +7,10 @@ include links2.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10nodeny ${HOME}/.links2 10noblacklist ${HOME}/.links2
11 11
12mkdir ${HOME}/.links2 12mkdir ${HOME}/.links2
13allow ${HOME}/.links2 13whitelist ${HOME}/.links2
14 14
15private-bin links2 15private-bin links2
16 16
diff --git a/etc/profile-a-l/linphone.profile b/etc/profile-a-l/linphone.profile
index dd1dac05b..7ebdbef4c 100644
--- a/etc/profile-a-l/linphone.profile
+++ b/etc/profile-a-l/linphone.profile
@@ -6,10 +6,10 @@ include linphone.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/linphone 9noblacklist ${HOME}/.config/linphone
10nodeny ${HOME}/.linphone-history.db 10noblacklist ${HOME}/.linphone-history.db
11nodeny ${HOME}/.linphonerc 11noblacklist ${HOME}/.linphonerc
12nodeny ${HOME}/.local/share/linphone 12noblacklist ${HOME}/.local/share/linphone
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
@@ -23,11 +23,11 @@ include disable-programs.inc
23# ${HOME}/.linphone-history.db and ${HOME}/.linphonerc but no longer mkfile. 23# ${HOME}/.linphone-history.db and ${HOME}/.linphonerc but no longer mkfile.
24mkdir ${HOME}/.config/linphone 24mkdir ${HOME}/.config/linphone
25mkdir ${HOME}/.local/share/linphone 25mkdir ${HOME}/.local/share/linphone
26allow ${HOME}/.config/linphone 26whitelist ${HOME}/.config/linphone
27allow ${HOME}/.linphone-history.db 27whitelist ${HOME}/.linphone-history.db
28allow ${HOME}/.linphonerc 28whitelist ${HOME}/.linphonerc
29allow ${HOME}/.local/share/linphone 29whitelist ${HOME}/.local/share/linphone
30allow ${DOWNLOADS} 30whitelist ${DOWNLOADS}
31include whitelist-common.inc 31include whitelist-common.inc
32 32
33caps.drop all 33caps.drop all
diff --git a/etc/profile-a-l/lmms.profile b/etc/profile-a-l/lmms.profile
index b22110fdc..48b0e14dc 100644
--- a/etc/profile-a-l/lmms.profile
+++ b/etc/profile-a-l/lmms.profile
@@ -6,9 +6,9 @@ include lmms.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.lmmsrc.xml 9noblacklist ${HOME}/.lmmsrc.xml
10nodeny ${DOCUMENTS} 10noblacklist ${DOCUMENTS}
11nodeny ${MUSIC} 11noblacklist ${MUSIC}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/lollypop.profile b/etc/profile-a-l/lollypop.profile
index 0a7ce86e8..f2676fec5 100644
--- a/etc/profile-a-l/lollypop.profile
+++ b/etc/profile-a-l/lollypop.profile
@@ -6,8 +6,8 @@ include lollypop.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.local/share/lollypop 9noblacklist ${HOME}/.local/share/lollypop
10nodeny ${MUSIC} 10noblacklist ${MUSIC}
11 11
12# Allow python (blacklisted by disable-interpreters.inc) 12# Allow python (blacklisted by disable-interpreters.inc)
13include allow-python2.inc 13include allow-python2.inc
diff --git a/etc/profile-a-l/lugaru.profile b/etc/profile-a-l/lugaru.profile
index 30802b3b7..174c65a65 100644
--- a/etc/profile-a-l/lugaru.profile
+++ b/etc/profile-a-l/lugaru.profile
@@ -8,8 +8,8 @@ include globals.local
8 8
9# note: crashes after entering 9# note: crashes after entering
10 10
11nodeny ${HOME}/.config/lugaru 11noblacklist ${HOME}/.config/lugaru
12nodeny ${HOME}/.local/share/lugaru 12noblacklist ${HOME}/.local/share/lugaru
13 13
14include disable-common.inc 14include disable-common.inc
15include disable-devel.inc 15include disable-devel.inc
@@ -22,8 +22,8 @@ include disable-xdg.inc
22 22
23mkdir ${HOME}/.config/lugaru 23mkdir ${HOME}/.config/lugaru
24mkdir ${HOME}/.local/share/lugaru 24mkdir ${HOME}/.local/share/lugaru
25allow ${HOME}/.config/lugaru 25whitelist ${HOME}/.config/lugaru
26allow ${HOME}/.local/share/lugaru 26whitelist ${HOME}/.local/share/lugaru
27include whitelist-common.inc 27include whitelist-common.inc
28include whitelist-var-common.inc 28include whitelist-var-common.inc
29 29
diff --git a/etc/profile-a-l/luminance-hdr.profile b/etc/profile-a-l/luminance-hdr.profile
index 73400dbd6..31067034e 100644
--- a/etc/profile-a-l/luminance-hdr.profile
+++ b/etc/profile-a-l/luminance-hdr.profile
@@ -6,8 +6,8 @@ include luminance-hdr.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/Luminance 9noblacklist ${HOME}/.config/Luminance
10nodeny ${PICTURES} 10noblacklist ${PICTURES}
11 11
12include disable-common.inc 12include disable-common.inc
13include disable-devel.inc 13include disable-devel.inc
diff --git a/etc/profile-a-l/lutris.profile b/etc/profile-a-l/lutris.profile
index 9d5169b80..80a3aba86 100644
--- a/etc/profile-a-l/lutris.profile
+++ b/etc/profile-a-l/lutris.profile
@@ -6,18 +6,18 @@ include lutris.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${PATH}/llvm* 9noblacklist ${PATH}/llvm*
10nodeny ${HOME}/Games 10noblacklist ${HOME}/Games
11nodeny ${HOME}/.cache/lutris 11noblacklist ${HOME}/.cache/lutris
12nodeny ${HOME}/.cache/winetricks 12noblacklist ${HOME}/.cache/winetricks
13nodeny ${HOME}/.config/lutris 13noblacklist ${HOME}/.config/lutris
14nodeny ${HOME}/.local/share/lutris 14noblacklist ${HOME}/.local/share/lutris
15# noblacklist ${HOME}/.wine 15# noblacklist ${HOME}/.wine
16nodeny /tmp/.wine-* 16noblacklist /tmp/.wine-*
17# Don't block access to /sbin and /usr/sbin to allow using ldconfig. Otherwise 17# Don't block access to /sbin and /usr/sbin to allow using ldconfig. Otherwise
18# Lutris won't even start. 18# Lutris won't even start.
19nodeny /sbin 19noblacklist /sbin
20nodeny /usr/sbin 20noblacklist /usr/sbin
21 21
22ignore noexec ${HOME} 22ignore noexec ${HOME}
23 23
@@ -39,15 +39,15 @@ mkdir ${HOME}/.cache/winetricks
39mkdir ${HOME}/.config/lutris 39mkdir ${HOME}/.config/lutris
40mkdir ${HOME}/.local/share/lutris 40mkdir ${HOME}/.local/share/lutris
41# mkdir ${HOME}/.wine 41# mkdir ${HOME}/.wine
42allow ${DOWNLOADS} 42whitelist ${DOWNLOADS}
43allow ${HOME}/Games 43whitelist ${HOME}/Games
44allow ${HOME}/.cache/lutris 44whitelist ${HOME}/.cache/lutris
45allow ${HOME}/.cache/winetricks 45whitelist ${HOME}/.cache/winetricks
46allow ${HOME}/.config/lutris 46whitelist ${HOME}/.config/lutris
47allow ${HOME}/.local/share/lutris 47whitelist ${HOME}/.local/share/lutris
48# whitelist ${HOME}/.wine 48# whitelist ${HOME}/.wine
49allow /usr/share/lutris 49whitelist /usr/share/lutris
50allow /usr/share/wine 50whitelist /usr/share/wine
51include whitelist-common.inc 51include whitelist-common.inc
52include whitelist-usr-share-common.inc 52include whitelist-usr-share-common.inc
53include whitelist-runuser-common.inc 53include whitelist-runuser-common.inc
diff --git a/etc/profile-a-l/lximage-qt.profile b/etc/profile-a-l/lximage-qt.profile
index 43147211b..b2a56012e 100644
--- a/etc/profile-a-l/lximage-qt.profile
+++ b/etc/profile-a-l/lximage-qt.profile
@@ -6,7 +6,7 @@ include lximage-qt.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.config/lximage-qt 9noblacklist ${HOME}/.config/lximage-qt
10 10
11include disable-common.inc 11include disable-common.inc
12include disable-devel.inc 12include disable-devel.inc
diff --git a/etc/profile-a-l/lxmusic.profile b/etc/profile-a-l/lxmusic.profile
index c849f2ad2..cc4b95551 100644
--- a/etc/profile-a-l/lxmusic.profile
+++ b/etc/profile-a-l/lxmusic.profile
@@ -6,9 +6,9 @@ include lxmusic.local
6# Persistent global definitions 6# Persistent global definitions
7include globals.local 7include globals.local
8 8
9nodeny ${HOME}/.cache/xmms2 9noblacklist ${HOME}/.cache/xmms2
10nodeny ${HOME}/.config/xmms2 10noblacklist ${HOME}/.config/xmms2
11nodeny ${MUSIC} 11noblacklist ${MUSIC}
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/lynx.profile b/etc/profile-a-l/lynx.profile
index 15c8f1faa..a919e924b 100644
--- a/etc/profile-a-l/lynx.profile
+++ b/etc/profile-a-l/lynx.profile
@@ -7,8 +7,8 @@ include lynx.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10deny /tmp/.X11-unix 10blacklist /tmp/.X11-unix
11deny ${RUNUSER}/wayland-* 11blacklist ${RUNUSER}/wayland-*
12 12
13include disable-common.inc 13include disable-common.inc
14include disable-devel.inc 14include disable-devel.inc
diff --git a/etc/profile-a-l/lyx.profile b/etc/profile-a-l/lyx.profile
index 358dbf2f2..fa69463d1 100644
--- a/etc/profile-a-l/lyx.profile
+++ b/etc/profile-a-l/lyx.profile
@@ -8,8 +8,8 @@ include globals.local
8 8
9ignore private-tmp 9ignore private-tmp
10 10
11nodeny ${HOME}/.config/LyX 11noblacklist ${HOME}/.config/LyX
12nodeny ${HOME}/.lyx 12noblacklist ${HOME}/.lyx
13 13
14# Allow lua (blacklisted by disable-interpreters.inc) 14# Allow lua (blacklisted by disable-interpreters.inc)
15include allow-lua.inc 15include allow-lua.inc
@@ -21,11 +21,11 @@ include allow-perl.inc
21include allow-python2.inc 21include allow-python2.inc
22include allow-python3.inc 22include allow-python3.inc
23 23
24allow /usr/share/lyx 24whitelist /usr/share/lyx
25allow /usr/share/texinfo 25whitelist /usr/share/texinfo
26allow /usr/share/texlive 26whitelist /usr/share/texlive
27allow /usr/share/texmf-dist 27whitelist /usr/share/texmf-dist
28allow /usr/share/tlpkg 28whitelist /usr/share/tlpkg
29include whitelist-usr-share-common.inc 29include whitelist-usr-share-common.inc
30 30
31apparmor 31apparmor
diff --git a/etc/profile-a-l/sway.profile b/etc/profile-a-l/sway.profile
index 3a4edcf69..4637419bf 100644
--- a/etc/profile-a-l/sway.profile
+++ b/etc/profile-a-l/sway.profile
@@ -7,9 +7,9 @@ include sway.local
7include globals.local 7include globals.local
8 8
9# all applications started in sway will run in this profile 9# all applications started in sway will run in this profile
10nodeny ${HOME}/.config/sway 10noblacklist ${HOME}/.config/sway
11# sway uses ~/.config/i3 as fallback if there is no ~/.config/sway 11# sway uses ~/.config/i3 as fallback if there is no ~/.config/sway
12nodeny ${HOME}/.config/i3 12noblacklist ${HOME}/.config/i3
13include disable-common.inc 13include disable-common.inc
14 14
15caps.drop all 15caps.drop all
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-06-26 08:08:09 +0000