# nano: the "write" policy, with your nanorc, read-only: it names
# programs that run outside the sandbox later. Its history and cursor
# positions are writable. policies/commands/nano.policy in blinker's config
# directory comes first.

# type  access  pattern
include write
file    read    ~/.nanorc
file    read    ${XDG_CONFIG_HOME:-~/.config}/nano
file    write   ${XDG_DATA_HOME:-~/.local/share}/nano/