ignore noblacklist ${HOME}/.mozilla
ignore noblacklist ${DOCUMENTS}

whitelist ${HOME}/.keepassxc
whitelist ${HOME}/.config/keepassxc
whitelist ${HOME}/.config/keepassxcrc
include whitelist-common.inc

# # no3d breaks decryption for some reason
ignore no3d

# # nodbus breaks systray support
ignore nodbus

# # machine-id and net=none breaks systray support with openrc/eudev
ignore machine-id
ignore net
netfilter
protocol unix

# # seccomp breaks integrated file manager on kde applications
# # due to syscall name_to_handle_at
seccomp !name_to_handle_at

tracelog

disable-mnt
private-bin keepassxc,dbus-launch
private-etc fonts,ld.so.cache,localtime,machine-id,passwd