1234567891011121314 | # The "write" policy, installed with blinker: "read", but the project is
# writable, and commands get the XDG base directory variables.
# policies/write.policy in blinker's config directory comes first.
# type access pattern
file write .
file read $PATH
file read $LD_LIBRARY_PATH
include hide-secrets
env allow XDG_CONFIG_HOME
env allow XDG_CACHE_HOME
env allow XDG_DATA_HOME
env allow XDG_STATE_HOME
|