1 files changed, 18 insertions, 4 deletions

diff --git a/etc/enpass.profile b/etc/enpass.profile
index 284b9259d..b337c721d 100644
--- a/etc/enpass.profile
+++ b/etc/enpass.profile
@@ -6,7 +6,10 @@ include enpass.local
 # Persistent global definitions
 include globals.local
 
+noblacklist ${HOME}/.cache/Enpass
+noblacklist ${HOME}/.config/sinew.in
 noblacklist ${HOME}/.config/Sinew Software Systems
+noblacklist ${HOME}/.local/share/Enpass
 noblacklist ${DOCUMENTS}
 
 include disable-common.inc
@@ -17,11 +20,21 @@ include disable-passwdmgr.inc
 include disable-programs.inc
 include disable-xdg.inc
 
+whitelist ${HOME}/.cache/Enpass
+whitelist ${HOME}/.config/sinew.in
+whitelist ${HOME}/.config/Sinew Software Systems
+whitelist ${HOME}/.local/share/Enpass
+whitelist ${DOCUMENTS}
+
 include whitelist-var-common.inc
 
+# machine-id and nosound break audio notification functionality
+# comment both if you need that functionality or put 'ignore machine-id'
+# and 'ignore nosound' in your enpass.local
+
 caps.drop all
 machine-id
-net none
+netfilter
 no3d
 nodvd
 nogroups
@@ -31,14 +44,15 @@ nosound
 notv
 nou2f
 novideo
-protocol unix
+protocol unix,inet,inet6,netlink
 seccomp
 shell none
 tracelog
 
-private-bin sh,readlink,dirname
+private-bin dirname,Enpass,importer_enpass,sh,readlink
+?HAS_APPIMAGE: ignore private-dev
 private-dev
 private-opt Enpass
 private-tmp
 
-memory-deny-write-execute
+#memory-deny-write-execute - breaks on Arch