Better unveil list

While not perfect this is a lot better than the old list.

1 files changed, 4 insertions, 3 deletions

diff --git a/ara.pl b/ara.pl
index 4f5170a..a351eb6 100755
--- a/ara.pl
+++ b/ara.pl
@@ -43,9 +43,10 @@ die "Can't use --local and --latest together\n"
 
 # %unveil contains list of paths to unveil with their permissions.
 my %unveil = (
-    "/" => "rx", # Unveil "/", remove this later after profiling with
-                 # ktrace.
-    "/home" => "", # Veil "/home", we don't want to read it.
+    "/usr" => "rx",
+    "/var" => "rx",
+    "/etc" => "rx",
+    "/dev" => "rx",
     "/tmp" => "rwc",
     "/dev/null" => "rw",
 );