blacklist /tmp/.X11-unix

#protocol unix,inet,inet6
tracelog

private-bin newsboat,curl
private-etc ca-certificates,resolv.conf,ssl

# # Use with hardened-malloc package
env LD_PRELOAD=/usr/lib/libhardened_malloc.so