ignore noblacklist ${HOME}/.kde/share/apps/digikam
ignore noblacklist ${HOME}/.kde4/share/apps/digikam

ignore netfilter
net none
protocol unix
# # seccomp breaks integrated file manager on kde applications
# # due to syscall name_to_handle_at
ignore seccomp !chroot
seccomp !name_to_handle_at
restrict-namespaces

private-dev