noblacklist ${PATH}/lua* noblacklist /usr/lib/lua noblacklist /usr/include/lua* noblacklist /usr/share/lua noblacklist ${PATH}/python2* noblacklist /usr/include/python2* noblacklist /usr/lib/python2* noblacklist /usr/local/lib/python2* noblacklist /usr/share/python2* ignore noblacklist ${HOME}/.cache/wesnoth ignore mkdir ${HOME}/.cache/wesnoth ignore whitelist ${HOME}/.cache/wesnoth include disable-exec.inc include disable-xdg.inc # # alsa audio will work with ipc-namespace, # # but it hogs the alsa device from other applications ignore ipc-namespace machine-id ignore net netfilter ignore no3d nodbus nogroups novideo protocol unix,inet,inet6 shell none tracelog disable-mnt private-bin wesnoth private-cache private-etc asound.conf,fonts,group,localtime,machine-id,pulse,resolv.conf ignore memory-deny-write-execute