Plucky can allow or block programs by filename, absolute path, or directory.
pluck + allow program foo.exe
pluck + allow program:C:\Windows\System32\notepad.exe
pluck + allow program /usr/bin/env
To allow a program only for a specific user:
pluck + allow user jane program foo.exe
To allow specific hosts, ips, or ports for a program:
pluck + allow host:microsoft.com program foo.exe
pluck + allow ipv4:1.2.3.4 program foo.exe
pluck + allow port:53 program foo.exe
To allow a program only during specific times, use when:
pluck + when 11-12 allow program foo.exe
To allow a program only during specific times and for a specific user:
pluck + when 11-12 allow user jane program foo.exe
Do not allow a browser
An allow rule that names a program is relatively high priority, and sometimes users do not realize this. For example, the following rule combination would ordinarily cause all content in Chrome to be allowed, including youtube.com.
pluck + block youtube.com
pluck + allow program chrome.exe
That’s usually undesirable.
Last updated: 2025-04-29