# Vim: the "build" policy, for the language servers it runs and the
# package registries, with its configuration and plugins, which it can
# change and which run outside the sandbox later, its state in
# ~/.local/state/vim, where an XDG vimrc keeps undo files and viminfo,
# its swap, undo and backup files where Arch's vim keeps them, and
# GitHub's API, which plugin managers use. ~/.vimrc and ~/.vim stay
# read-only, as the floor keeps them. With viminfo in ~/.viminfo, it
# cannot save its history: that needs a file made in home itself; set
# viminfofile to ~/.local/state/vim/viminfo instead.
# policies/commands/vim.policy in blinker's config directory comes first.

# type  access  pattern
include build
file    read    ~/.vimrc
file    read    ~/.gvimrc
file    read    ~/.exrc
file    read    ~/.vim
file    write   ${XDG_CONFIG_HOME:-~/.config}/vim
file    write   ${XDG_STATE_HOME:-~/.local/state}/vim/
file    write   ${XDG_CACHE_HOME:-~/.cache}/vim/

host    allow   api.github.com