> but the configuration file syntax and user
> interface, ewwww. It renders it almost unusable in my eyes. You have
> *numbered* 'profiles' corresponding to (non-POSIX) capability sets, so you
> have to remember what each number corresponds to; backslashing of *all*
> metacharacters, including *, combined with the absence of an 'all below'
> option, leading to insanity like
I'm sorry for your eyes. ;-)
Profiles can be defined up to 256, but most cases you can live with
the following predefined ones.