#include <tunables/global>
/opt/kingsoft/** {
  #include <abstractions/audio>
  #include <abstractions/base>
  #include <abstractions/dbus>
  #include <abstractions/dbus-session>
  #include <abstractions/fonts>
  #include <abstractions/freedesktop.org>
  #include <abstractions/gnome>
  #include <abstractions/ibus>
  #include <abstractions/kde>
  #include <abstractions/nameservice>
  #include <abstractions/nvidia>
  #include <abstractions/ssl_certs>
  #include <abstractions/user-tmp>
  #include <abstractions/X>

  /opt/kingsoft/** rwmkl,
  owner @{HOME}/.kingsoft/** rw,
  owner @{HOME}/.config/Kingsoft/ rwmkl,
  owner @{HOME}/.config/Kingsoft/** rwmkl,
  owner @{HOME}/ r,
  owner @{HOME}/Documents/ rw,
  owner @{HOME}/Documents/** rw,

  deny network inet,
}