Plucky can allow or block programs by filename, absolute path, or directory.

pluck + allow program foo.exe
pluck + allow program:C:\Windows\System32\notepad.exe
pluck + allow program /usr/bin/env

To allow a program only for a specific user:

pluck + allow user jane program foo.exe

To allow specific hosts, ips, or ports for a program:

pluck + allow host:microsoft.com program foo.exe
pluck + allow ipv4:1.2.3.4 program foo.exe
pluck + allow port:53 program foo.exe

To allow a program only during specific times, use when:

pluck + when 11-12 allow program foo.exe

To allow a program only during specific times and for a specific user:

pluck + when 11-12 allow user jane program foo.exe

Do not allow a browser

An allow rule that names a program is relatively high priority, and sometimes users do not realize this. For example, the following rule combination would ordinarily cause all content in Chrome to be allowed, including youtube.com.

pluck + block youtube.com
pluck + allow program chrome.exe

That’s usually undesirable.


Last updated: 2025-04-29