Is it possible to blacklist and hide a folder without whitelisting everything else?

[danielkrajnik]

from https://github.com/netblue30/firejail/wiki/Creating-Profiles#common-mistakes

Common mistakes
blacklist PATH: PATH is still present, but not accessible (with whitelist they don't exist)

is it possible to specificy a directory that should be inaccessible and not even visible in a sandbox?

[rusty-snake]

With firejail: no

Technical: You must always whitelist (with a parent directory as base) unless you intercept syscalls (LSM).

[danielkrajnik]

thank you again, that's good to know. Interesting, haven't seen LSM before