noblacklist ${PATH}/lua* noblacklist /usr/include/lua* noblacklist /usr/lib/liblua* noblacklist /usr/lib/lua noblacklist /usr/lib64/liblua* noblacklist /usr/lib64/lua noblacklist /usr/share/lua* # # alsa audio will work with ipc-namespace, # # but it hogs the alsa device from other applications ignore ipc-namespace machine-id seccomp !name_to_handle_at private-etc asound.conf,group,localtime,machine-id,pulse ignore memory-deny-write-execute ignore dbus-user none ignore dbus-system none