Disallow network access for an application
net none
AddAllow access to a file or directory
noblacklist ~/MyPictures
noblacklist /mydisk/videos
whitelist ~/MyPictures
noblacklist ~/MyPictures
whitelist /mydisk/videos
noblacklist /mydisk/videos
whitelist /myimportant.file
noblacklist /myimportant.file
Some profiles use whitelisting instead of blacklisting, specifying both directives ensures that one of them will match.
Disallow access to a file or directory
nowhitelist ~/MyPictures
blacklist ~/MyPictures
nowhitelist /mydisk/videos
blacklist /mydisk/videos
nowhitelist /myimportant.file
blacklist /myimportant.file
Depending on the profile, the file or directory will still be visible but not accessible.
Ignore a specific directive
ignore nou2f
ignore net