Yeah a cron shell script that wipes all these files would do it nicely, that bleachbit program seems to wipe out everything, if it has a good CLE then I can make various bleachbit cron jobs. Restricting access to the LSO folder is more of a hardening measure. Why let sites write LSOs in the first place since they're not necessary. I have BetterPrivacy, and the LSO window is always empty because nothing can read the folder where LSOs are stored. Same thing could be done for things like cookies.sqlite for firefox. A shell script that contains an array of files/directories, and an array of file permissions to chmod them. I'm gonna try that and see if firefox can still run without it, or whether it changes the file permissions (can it do that?).