Ah, I think the true source of the problem was that my .XCompose was a symlink into a subdirectory of .config, so that’s what was actually denied. This is at least understandable, even if it still makes no sense (~/.config/my-dotfiles-git-repository is off limits but ~/Documents/financial-report-top-secret.pdf is not).
Ah, I think the true source of the problem was that my .XCompose was a symlink into a subdirectory of .config, so that’s what was actually denied. This is at least understandable, even if it still makes no sense (~/.config/ my-dotfiles- git-repository is off limits but ~/Documents/ financial- report- top-secret. pdf is not).
Sorry for the misleading bug description.