noblacklist ${PATH}/python2* noblacklist /usr/include/python2* noblacklist /usr/lib/python2* noblacklist /usr/local/lib/python2* noblacklist /usr/share/python2* noblacklist ${PATH}/python3* noblacklist /usr/include/python3* noblacklist /usr/lib/python3* noblacklist /usr/local/lib/python3* noblacklist /usr/share/python3* include disable-exec.inc include disable-interpreters.inc include disable-programs.inc include disable-write-mnt.inc include disable-xdg.inc whitelist ${HOME}/.weechat # # alsa audio will work with ipc-namespace, # # but it hogs the alsa device from other applications ignore ipc-namespace machine-id no3d nogroups # nosound nou2f novideo shell none tracelog disable-mnt # private-bin private-dev private-etc asound.conf,ca-certificates,machine-id,resolv.conf,ssl private-tmp # memory-deny-write-execute dbus-user none dbus-system none