1# needed for video(4)
  2/dev/video0 rw
  3/dev/video1 rw
  4/dev/video2 rw
  5/dev/video3 rw
  6/dev/video4 rw
  7/dev/video5 rw
  8/dev/video6 rw
  9/dev/video7 rw
 10
 11/dev/dri rw
 12
 13# needed for FIDO authentication
 14/dev/fido rw
 15
 16/dev/null rw
 17
 18# needed for chromium
 19/etc/chromium r
 20
 21# needed for fontconfig
 22/etc/fonts r
 23
 24# needed for dbus
 25/etc/machine-id r
 26
 27# needed for IPC communication, X.Org, etc.
 28/tmp rwc
 29
 30# needed for printing with lpr(1)
 31/usr/bin/lpr rx
 32
 33# needed for xdg tools
 34/usr/local/bin/update-desktop-database rx
 35/usr/local/bin/xdg-desktop-menu rx
 36/usr/local/bin/xdg-icon-resource rx
 37/usr/local/bin/xdg-open rx
 38/usr/local/bin/xdg-settings rx
 39
 40# libexpat is required for file dialog
 41/usr/lib r
 42
 43# misc. files and libraries
 44/usr/local/lib r
 45/usr/local/chrome rx
 46/usr/local/share r
 47
 48# fontconfig
 49/var/cache/fontconfig r
 50
 51# drm and misc xorg stuff
 52/usr/X11R6/lib r
 53/usr/X11R6/share r
 54
 55# needs /var/run in case /var/run/dbus is not available
 56# needed by messagebus
 57/var/run rw
 58
 59# ~ gets expanded to $HOME
 60~/.XCompose r
 61~/.Xauthority r
 62~/.Xdefaults r
 63~/.fontconfig r
 64~/.fonts r
 65~/.fonts.conf r
 66~/.fonts.conf.d r
 67~/.icons r
 68~/.pki rwc
 69~/.sndio rwc
 70~/.terminfo r
 71
 72~/.cache/chromium rwc
 73~/.cache/at-spi rw
 74~/.cache/dconf rwc
 75~/.cache/fontconfig rwc
 76~/.cache/gvfsd rwc
 77~/.cache/thumbnails rwc
 78
 79~/.config/chromium rwc
 80~/.config/dconf r
 81~/.config/fcitx r
 82~/.config/fontconfig r
 83~/.config/gtk-3.0 r
 84~/.config/ibus r
 85~/.config/mimeapps.list r
 86~/.config/user-dirs.dirs r
 87
 88~/.local/share/applications rwc
 89~/.local/share/applnk r
 90~/.local/share/fonts r
 91~/.local/share/glib-2.0 r
 92
 93# needs write access due to chromium profile icons 
 94~/.local/share/icons rwc
 95
 96~/.local/share/mime r
 97~/.local/share/recently-used.xbel rwc
 98~/.local/share/themes r
 99
100# use this directory for downloading and uploading
101~/Downloads rwc
102
103~/Projects/dotfiles r
104~/.local/share/profanity/downloads r
105
106XDG_RUNTIME_DIR rwc