# mutt profile
blacklist /tmp/.X11-unix

noblacklist /var/mail
noblacklist /var/spool/mail
noblacklist ${HOME}/.Mail
noblacklist ${HOME}/.bogofilter
noblacklist ${HOME}/.cache/mutt
noblacklist ${HOME}/.elinks
noblacklist ${HOME}/.emacs
noblacklist ${HOME}/.emacs.d
noblacklist ${HOME}/.gnupg
noblacklist ${HOME}/.mail
noblacklist ${HOME}/.mailcap
noblacklist ${HOME}/.msmtprc
noblacklist ${HOME}/.mutt
noblacklist ${HOME}/.muttrc
noblacklist ${HOME}/.signature
noblacklist ${HOME}/.vim
noblacklist ${HOME}/.viminfo
noblacklist ${HOME}/.vimrc
noblacklist ${HOME}/.w3m
noblacklist ${HOME}/Mail
noblacklist ${HOME}/mail
noblacklist ${HOME}/postponed
noblacklist ${HOME}/sent

# custom
quiet
noblacklist ~/.custom
noblacklist ~/.config/msmtp/config
noblacklist ~/.procmailrc
noblacklist ~/.fetchmailrc
noblacklist ~/.getmail
noblacklist ~/.smime
noblacklist ~/apps/utils-mail
noblacklist /usr/bin/fetchmail
noblacklist /usr/bin/getmail
noblacklist /usr/bin/getmails
noblacklist /usr/bin/muttprint
noblacklist /usr/bin/perl
noblacklist /usr/bin/cpan*
noblacklist /usr/share/perl*
noblacklist /usr/lib/perl*
noblacklist ${PATH}/procmail

# allow local mail
whitelist /var/mail

# allow write operations in non-default folders
include whitelist-common.local

include disable-common.inc
include disable-devel.inc

# These restrictions prevent the use of the getmails(1) script
#include disable-interpreters.inc

include disable-programs.inc

caps.drop all
netfilter
no3d
nodvd
nogroups
noroot
nosound
notv
nou2f
novideo
writable-run-user

# These restrictions prevent msmtp to use the passwordeval option
#nonewprivs
#protocol unix,inet,inet6
#seccomp
#shell none

private-dev