# The "toolchains" policy, installed with blinker: what toolchains read,
# and the variables they use: their configuration and dotfiles, their
# libraries, and the directories in $PATH and their search paths. Their
# caches are the agent's policies' to give. The agent's policies include
# it. policies/toolchains.policy in blinker's config directory comes
# first.

# type  access  pattern
# Toolchain configuration and dotfiles.
file    read    ${XDG_CONFIG_HOME:-~/.config}
file    read    ~/.gitconfig
file    read    ${XDG_DATA_HOME:-~/.local/share}
# Libraries and headers installed with --user or a ~/.local prefix.
file    read    ~/.local/lib
file    read    ~/.local/libexec
file    read    ~/.local/include
# Toolchains.
file    read    ${RUSTUP_HOME:-~/.rustup}
file    read    ${GOPATH:-~/go}
# The directories in $PATH, and the toolchains' search paths.
file    read    $PATH
file    read    $LD_LIBRARY_PATH
file    read    $LIBRARY_PATH
file    read    $CPATH
file    read    $C_INCLUDE_PATH
file    read    $CPLUS_INCLUDE_PATH
file    read    $PKG_CONFIG_PATH
file    read    $MANPATH

env     allow   GOPATH
env     allow   GOMODCACHE
env     allow   GOCACHE
env     allow   GOROOT
env     allow   GOFLAGS
env     allow   GOPROXY
env     allow   GOPRIVATE
env     allow   CGO_*
env     allow   CARGO_HOME
env     allow   RUSTUP_HOME
env     allow   npm_config_cache
env     allow   RUSTFLAGS
env     allow   JAVA_HOME
env     allow   NVM_DIR
env     allow   NODE_PATH
env     allow   PYENV_ROOT
env     allow   PYTHONPATH
env     allow   VIRTUAL_ENV
env     allow   CONDA_PREFIX
env     allow   CC
env     allow   CXX
env     allow   CFLAGS
env     allow   CXXFLAGS
env     allow   LDFLAGS
env     allow   CPATH
env     allow   C_INCLUDE_PATH
env     allow   CPLUS_INCLUDE_PATH
env     allow   LIBRARY_PATH
env     allow   LD_LIBRARY_PATH
env     allow   PKG_CONFIG_PATH
env     allow   MANPATH
env     allow   XDG_CONFIG_HOME
env     allow   XDG_CACHE_HOME
env     allow   XDG_DATA_HOME
env     allow   XDG_STATE_HOME