# # alsa audio will work with ipc-namespace,
# # but it hogs the alsa device from other applications
ignore ipc-namespace
machine-id
# # no3d breaks gpu rendering
ignore no3d
seccomp !name_to_handle_at

private-bin pioneer
private-etc asound.conf,group,localtime,machine-id,pulse

ignore memory-deny-write-execute