For the music player, you can whitelist files via extension: (allow file-read* (regex #"\.mp3")) For a file manager, you can limit it to reading file meta

For the music player, you can whitelist files via extension: (allow file-read* (regex #"\.mp3")) For a file manager, you can limit it to reading file metadata for any file: (allow file-read-metadata)