Constant DEFAULT_PROFILE 

pub const DEFAULT_PROFILE: &str = r#"(version 1)
(deny default)
(allow process-exec (regex #"^/bin/"))
(allow process-exec (regex #"^/usr/bin/"))
(allow process-exec (regex #"^/opt/homebrew/"))
(allow process-fork)
(allow file-read* (subpath "/"))
(allow file-write* (subpath "/tmp"))
(allow file-write* (subpath "/private/tmp"))
(allow file-write* (subpath "/private/var/folders"))
(allow file-write* (regex #"^/dev/(null|zero|tty|dtracehelper|urandom|random|stdout|stderr|fd/|pts/)"))
(allow file-write* (regex #"^/dev/ptmx"))
(allow sysctl*)
(allow mach*)
(allow signal)
(allow process-info* (target self))
"#;