add link, symlink, and chmod to RESTRICTED.setting