arg checking: 1. --output=filename - not supported in profiles - checking no "..", - checking no link, - checking no dir, - checking same permissions, - checking no hard links - unit test 2. --chroot=dirname - not supported in profiles - expand "~" - checking no "..", - checking is dir, - checking no link - checking directory structure - unit test 3. --bind=dirname1,dirname2, --bind=filename1,filenam2 - supported in profiles - accepted only when running as root - checking string chars - checking no ".." - unit test non root 4. --tmpfs=dirname - supported in profiles - checking string chars - checking no ".." - unit test 5. --blacklist=filename, --blacklist=dirname - supported in profiles - checking string chars - checking no ".." - unit test 6. --read-only=filename, --read-only=dirname - supported in profiles - checking string chars - checking no ".." - unit test 7. --profile=filename - check access as real GID/UID - checking no dir - checking no link - checking no ".." - unit test 8. --private=dirname - supported in profiles - expand "~" - check is dir - check no link - checking no ".." - check same owner - unit test 9. --private-home=filelist - supported in profiles - checking no ".." - checking file found - checking same owner - checking no link - unit test 10. --netfilter=filename - supported in profiles - check access as real GID/UID - checking no dir - checking no link - checking no ".." - unit test 11. --shell=filename - not supported in profiles - check access as real GID/UID - checking no dir - checking no link - checking no ".." - unit test