include_rules = [
  "+components/nacl",
  "+content/public/app/startup_helper_win.h",
  "+content/public/common",
  "+crypto",
  "+sandbox/linux/bpf_dsl",
  "+sandbox/linux/seccomp-bpf",
  "+sandbox/linux/seccomp-bpf-helpers",
  "+sandbox/linux/services",
  "+sandbox/linux/suid",
  "+sandbox/linux/system_headers",
  "+sandbox/win/src",
  "+ppapi/c",  # header files only

  "+native_client/src/include",
  "+native_client/src/public",
  "+native_client/src/trusted/desc/nacl_desc_quota.h",
  "+native_client/src/trusted/desc/nacl_desc_quota_interface.h",
  "+native_client/src/trusted/service_runtime/include",
  "+native_client/src/trusted/service_runtime/nacl_error_code.h",
  "+native_client/src/untrusted/irt/irt.h",

  # For message scanning and handle conversion in nacl_ipc_adapter.cc:
  "+ppapi/proxy/nacl_message_scanner.h",
  "+ppapi/proxy/serialized_handle.h",

  # For setting FDs in non-SFI mode.
  "+ppapi/nacl_irt",

  # For sending PpapiHostMsg_ChannelCreated in nacl_ipc_adapter.cc:
  "+ppapi/proxy/ppapi_messages.h",

  "+third_party/mojo/src/mojo/edk",
]