# The "read" policy, installed with blinker: read the project and the
# programs in $PATH, write nothing but $TMPDIR, no network. For looking at
# or running code you do not trust. policies/read.policy in blinker's config
# directory comes first.

# type  access  pattern
file    read    .
file    read    $PATH
file    read    $LD_LIBRARY_PATH
include hide-secrets