blob: 323dbc1f386ac486b9b983e5c41fc8f2d122690f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
blacklist /tmp/.X11-unix
blacklist ${RUNUSER}/wayland-*
whitelist ${HOME}/.moc
whitelist ${MUSIC}
read-only ${MUSIC}
# # alsa audio will work with ipc-namespace,
# # but it hogs the alsa device from other applications
ignore ipc-namespace
machine-id
ignore netfilter
net none
protocol unix
disable-mnt
private-bin moc,mocp
private-etc asound.conf,group,localtime,machine-id
|