abi <abi/4.0>,

include <tunables/global>

profile dino /usr/bin/dino {
  include <abstractions/base>
  include <abstractions/nameservice>
  include <abstractions/openssl>
  include <abstractions/ssl_certs>
  include <abstractions/X>
  include <abstractions/audio>
  include <abstractions/fonts>
  include <abstractions/gnome>
  include <abstractions/dconf>
  include <abstractions/vulkan>
  include <abstractions/enchant>

  # TODO: shouldnt this be in abstractions/dconf
  owner /run/user/*/dconf/user rw,

  /usr/lib{,64}/dino/plugins/*.so rm,

  owner @{HOME}/.local/share/dino/   r,
  owner @{HOME}/.local/share/dino/** rwlk,

  /usr/share/icu/*/icu*.dat r,
  /usr/share/xml/iso-codes/* r,

  /proc/@{pid}/fd/ r,

  /usr/bin/gpgconf Ux,
  /usr/bin/gpgsm   Ux,
  /usr/bin/gpg2    Ux,
  /usr/bin/gpg     Ux,

  owner /proc/@{pid}/comm r,

  /etc/machine-id r,

  /usr/lib{,exec}/gstreamer-1.0/gst-plugin-scanner-* Ux,

  include if exists <local/usr.bin.dino>
  include if exists <local/dino>
}
