unveil.main diff

--- /tmp/unveil.main    Thu Dec  3 12:29:52 2020
+++ unveil.main Wed Sep 16 10:24:20 2020
@@ -1,4 +1,3 @@
-# $OpenBSD: unveil.main,v 1.5 2020/07/28 14:13:35 landry Exp $
 # for uuid generation?
 /dev/urandom r
 /dev/video rw
@@ -21,6 +20,9 @@
 # printing
 /usr/bin/lpr rx
 
+# for launching registered 3rd party applications like pdf readers
+/usr/local/bin/gio-launch-desktop rx
+/usr/local/bin/xpdf rx
 /etc/mailcap r
 ~/.mailcap r
 ~/.mime.types r
@@ -39,6 +41,9 @@
 
 ~/.mozilla rwc
 ~/Downloads rwc
+~/.cache rwc
+~/.config rwc
+~/.local/share rwc
 
 # for at least shm_open (for now)
 /tmp rwc
@@ -46,20 +51,20 @@
 # $XDG_CACHE_HOME, $XDG_CONFIG_HOME, and $XDG_DATA_HOME will expand to the
 # given variable if it exists in the environment, otherwise defaulting to
 # ~/.cache, ~/.config, and ~/.local/share
-$XDG_CACHE_HOME/dconf rwc
-$XDG_CACHE_HOME/thumbnails rwc
-$XDG_CACHE_HOME/mozilla/firefox rwc
-$XDG_CONFIG_HOME/dconf rw
-$XDG_CONFIG_HOME/fontconfig r
-$XDG_CONFIG_HOME/gtk-3.0 r
-$XDG_CONFIG_HOME/mimeapps.list r
-$XDG_CONFIG_HOME/mozilla rwc
-$XDG_CONFIG_HOME/user-dirs.dirs r
-$XDG_DATA_HOME/applications rwc
-$XDG_DATA_HOME/applnk r
-$XDG_DATA_HOME/fonts r
-$XDG_DATA_HOME/glib-2.0 r
-$XDG_DATA_HOME/icons r
-$XDG_DATA_HOME/mime r
-$XDG_DATA_HOME/recently-used.xbel rwc
-$XDG_DATA_HOME/themes r
+#$XDG_CACHE_HOME/dconf rwc
+#$XDG_CACHE_HOME/thumbnails rwc
+#$XDG_CACHE_HOME/mozilla/firefox rwc
+#$XDG_CONFIG_HOME/dconf rw
+#$XDG_CONFIG_HOME/fontconfig r
+#$XDG_CONFIG_HOME/gtk-3.0 r
+#$XDG_CONFIG_HOME/mimeapps.list r
+#$XDG_CONFIG_HOME/mozilla rwc
+#$XDG_CONFIG_HOME/user-dirs.dirs r
+#$XDG_DATA_HOME/applications rwc
+#$XDG_DATA_HOME/applnk r
+#$XDG_DATA_HOME/fonts r
+#$XDG_DATA_HOME/glib-2.0 r
+#$XDG_DATA_HOME/icons r
+#$XDG_DATA_HOME/mime r
+#$XDG_DATA_HOME/recently-used.xbel rwc
+#$XDG_DATA_HOME/themes r