#include <tunables/global> /opt/kingsoft/** { #include <abstractions/audio> #include <abstractions/base> #include <abstractions/dbus> #include <abstractions/dbus-session> #include <abstractions/fonts> #include <abstractions/freedesktop.org> #include <abstractions/gnome> #include <abstractions/ibus> #include <abstractions/kde> #include <abstractions/nameservice> #include <abstractions/nvidia> #include <abstractions/ssl_certs> #include <abstractions/user-tmp> #include <abstractions/X> /opt/kingsoft/** rwmkl, owner @{HOME}/.kingsoft/** rw, owner @{HOME}/.config/Kingsoft/ rwmkl, owner @{HOME}/.config/Kingsoft/** rwmkl, owner @{HOME}/ r, owner @{HOME}/Documents/ rw, owner @{HOME}/Documents/** rw, deny network inet, }