ignore noblacklist ${HOME}/.cache/okular
ignore noblacklist ${HOME}/.kde/share/apps/okular
ignore noblacklist ${HOME}/.kde/share/config/okularpartrc
ignore noblacklist ${HOME}/.kde/share/config/okularrc
ignore noblacklist ${HOME}/.kde4/share/apps/okular
ignore noblacklist ${HOME}/.kde4/share/config/okularpartrc
ignore noblacklist ${HOME}/.kde4/share/config/okularrc

net none
# no3d
nodbus
# # seccomp breaks integrated file manager on kde applications
# # due to syscall name_to_handle_at
seccomp !name_to_handle_at

private-cache
private-tmp