# rustc: the "write" policy, with the toolchains rustup installed, and no
# network. policies/commands/rustc.policy in blinker's config directory
# comes first.

# type  access  pattern
include write
file    read    ${CARGO_HOME:-~/.cargo}
file    read    ${RUSTUP_HOME:-~/.rustup}

env     allow   CARGO_HOME
env     allow   RUSTUP_HOME
env     allow   RUSTUP_TOOLCHAIN
env     allow   RUSTFLAGS