
# Rules for /home
#
# Allow full access to $HOME.
# Forbid write ops on $HOME itself.
# rpath = stat,read,chdir,readdir
allow/rpath+${HOME}
allow/all+${HOME}/**

# Disallow all dotfiles except history.
deny/all+${HOME}/**/.*/***
allow/all+${HOME}/**/.*history*

# Mark shell-history files as append-only.
append+${HOME}/.*history
