/usr/lib/cups/backend/usbvidpid {
  #include <abstractions/base>
  #include <abstractions/fonts>
  #include <abstractions/nameservice>
  #include <abstractions/user-tmp>

  capability chown,
  capability fowner,
  capability fsetid,
  capability setgid,
  capability setuid,

  capability dac_override,
  capability dac_read_search,

  unix peer=(label=/usr/sbin/cupsd),

  @{PROC}/*/auxv r,

  /{usr/,}bin/bash ixr,
  /{usr/,}bin/cp ixr,
  /{usr/,}bin/dash ixr,
  /{usr/,}bin/udevadm ixr,
  /{usr/,}bin/rsync ixr,
  /usr/lib/cups/backend/usbvidpid mr,
  /var/log/cups/usbvidpid*_log w,
  /var/spool/cups/** r,
  /var/spool/usbvidpid/** rw,

  @{HOME}/[^.]*/{,**/} rw,
}