What is the diffrence between noblacklist and whitelist?

[rusty-snake]

Also one more query i had was what is diffrence between noblacklist and whitelist.
if i use noblacklist ${HOME}/.vim followed by whitelist ${HOME}/.config/joplin then ~/.vim doesn't show up in the sandbox.
if i use noblacklist both places then all elements in home directory are visible for the app (including ~/my_personal_folder).
if i use whitelist both place then only .vim and required config shows up.

#1139 (comment) by @sak96

[rusty-snake]

noblacklist

noblacklist ${HOME}/foo/bar makes that all following blacklist ${HOME}/foo/bar commands are ignored.
It is, if you will, only syntactic-sugar for ignore blacklist ${HOME}/foo/bar.

• Having a noblacklist ${HOME}/foo/bar without blacklist ${HOME}/foo/bar in a include disable-*.inc is just useless.
• noblacklist ${HOME}/foo/bar and blacklist ${HOME}/foo does not work. You can only noblacklist a path that is blackliste
  d.

whitelist

whitelist ${HOME}/foo/bar enables whitelisting in ${HOME} (i.e. everything without a explicit whitelist is hidden and discard on close) and makes ${HOME}/foo/bar and persistent.

• blacklist ${HOME}/foo/bar is still applied, even with whitelist ${HOME}/foo/bar.

[rusty-snake]

if i use noblacklist ${HOME}/.vim followed by whitelist ${HOME}/.config/joplin then ~/.vim doesn't show up in the sandbox.

because of missing whitelist in a whitelisting situation

if i use noblacklist both places then all elements in home directory are visible for the app (including ~/my_personal_folder).

no whitelist, no whitelisting

if i use whitelist both place then only .vim and required config shows up.

whitelisting enabled, everything else hidden

[sak96]

how is the depth determined in whitelist
example /usr/share/z/y will hide all thing in /usr ?
can it be made to only hide /usr/share contents ?

[rusty-snake]

--whitelist=dirname_or_filename
Whitelist directory or file. A temporary file system is mounted on the top directory, and the
whitelisted files are mount-binded inside. Modifications to whitelisted files are persistent,
everything else is discarded when the sandbox is closed. The top directory could be
user home, /dev, /etc, /media, /mnt, /opt, /run/user/$UID, /srv, /sys/module, /tmp, /usr/share and /var.