diff --git a/data/syntax/apparmor.xml b/data/syntax/apparmor.xml
--- a/data/syntax/apparmor.xml
+++ b/data/syntax/apparmor.xml
@@ -16,7 +16,7 @@
   ==========================================================================================
    This file is part of the KDE's KSyntaxHighlighting framework.
 
-   Copyright (c) 2017-2018 Nibaldo González S. (nibgonz@gmail.com)
+   Copyright (c) 2017-2019 Nibaldo González S. (nibgonz@gmail.com)
 
    Permission is hereby granted, free of charge, to any person obtaining a copy of this
    software and associated documentation files (the "Software"), to deal in the Software
@@ -42,25 +42,25 @@
       http://manpages.ubuntu.com/manpages/cosmic/en/man5/apparmor.d.5.html
 
   Change log:
-	* Version 7 [15-Sep-2018]:
-		- Update itemData's style for the new Solarized color schemes.
-		- Fixes in "_end_rule_irnc".
-	* Version 6 [24-Jul-2018, by Nibaldo G.]: (AppArmor 2.13.0)
-		- Fixes for Include rules, add 'if exists'. Fix escapes & globbing in text quoted.
-		- Improvements in paths that start with variables, hats, comments and variable
-		  assignments and others. Add some abstractions & filesystems.
-	* Version 4 [25-Jan-2018, by Nibaldo G.]: (AppArmor 2.12.0)
-		- New keywords: network and mount rules, default abstractions, variables and others.
-		- Multiple improvements and fixes.
-		- Do not allow comments within rules and in variable assignment lines.
-	* Version 3 [24-Sep-2017, by Nibaldo G.]:
-		- Fix incorrect highlighting of the DBus rule 'name' keyword.
-	* Version 2 [29-Aug-2017, by Nibaldo G.]:
-		- Improvements in highlighting and bug fixes.
-		- Each rule has its own context.
-		- The profile name is highlighted in the profile header and profile transition rules.
-  	* Version 1 [22-Feb-2017, by Nibaldo González]:
-		- Initial version. Support for profile syntax of Apparmor 2.11.
+   * Version 7 [15-Sep-2018]:
+      - Update itemData's style for the new Solarized color schemes.
+      - Fixes in "_end_rule_irnc".
+   * Version 6 [24-Jul-2018, by Nibaldo G.]: (AppArmor 2.13.0)
+      - Fixes for Include rules, add 'if exists'. Fix escapes & globbing in text quoted.
+      - Improvements in paths that start with variables, hats, comments and variable
+        assignments and others. Add some abstractions & filesystems.
+   * Version 4 [25-Jan-2018, by Nibaldo G.]: (AppArmor 2.12.0)
+      - New keywords: network and mount rules, default abstractions, variables and others.
+      - Multiple improvements and fixes.
+      - Do not allow comments within rules and in variable assignment lines.
+   * Version 3 [24-Sep-2017, by Nibaldo G.]:
+      - Fix incorrect highlighting of the DBus rule 'name' keyword.
+   * Version 2 [29-Aug-2017, by Nibaldo G.]:
+      - Improvements in highlighting and bug fixes.
+      - Each rule has its own context.
+      - The profile name is highlighted in the profile header and profile transition rules.
+   * Version 1 [22-Feb-2017, by Nibaldo González]:
+      - Initial version. Support for profile syntax of Apparmor 2.11.
 -->
 
 <language name="AppArmor Security Profile"
@@ -73,1483 +73,1483 @@
           author="Nibaldo González (nibgonz@gmail.com)"
           license="MIT">
 
-	<highlighting>
-
-		<!-- Profile Header -->
-		<list name="profile_head">
-			<item>profile</item>
-			<item>hat</item>
-		</list>
-		<list name="profile_options">
-			<item>flags</item>
-			<item>xattrs</item>
-		</list>
-		<list name="profile_flags">
-			<item>audit</item>
-			<item>complain</item>
-			<item>enforce</item>
-			<item>mediate_deleted</item>
-			<item>attach_disconnected</item>
-			<item>chroot_relative</item>
-			<item>chroot_attach</item>
-			<item>chroot_no_attach</item>
-			<item>delegate_deleted</item>
-			<item>no_attach_disconnected</item>
-			<item>namespace_relative</item>
-		</list>
-
-		<!-- Rule Qualifiers -->
-		<list name="access_types">
-			<item>allow</item>
-			<item>deny</item>
-		</list>
-		<list name="file_qualifiers">
-			<item>owner</item>
-			<!-- other -->
-		</list>
-		<list name="qualifiers">
-			<item>audit</item>
-			<!-- noaudit/quiet, defined, not -->
-		</list>
-		<!-- Conditional: if, else -->
-
-		<!-- Capabilities, Capability Rule.
-		     Lowercase capability name without 'CAP_' prefix.
-		     http://man7.org/linux/man-pages/man7/capabilities.7.html -->
-		<list name="rule_capability">
-			<item>audit_control</item>
-			<item>audit_read</item>
-			<item>audit_write</item>
-			<item>block_suspend</item>
-			<item>chown</item>
-			<item>dac_override</item>
-			<item>dac_read_search</item>
-			<item>fowner</item>
-			<item>fsetid</item>
-			<item>ipc_lock</item>
-			<item>ipc_owner</item>
-			<item>kill</item>
-			<item>lease</item>
-			<item>linux_immutable</item>
-			<item>mac_admin</item>
-			<item>mac_override</item>
-			<item>mknod</item>
-			<item>net_admin</item>
-			<item>net_bind_service</item>
-			<item>net_broadcast</item>
-			<item>net_raw</item>
-			<item>setgid</item>
-			<item>setfcap</item>
-			<item>setpcap</item>
-			<item>setuid</item>
-			<item>sys_admin</item>
-			<item>sys_boot</item>
-			<item>sys_chroot</item>
-			<item>sys_module</item>
-			<item>sys_nice</item>
-			<item>sys_pacct</item>
-			<item>sys_ptrace</item>
-			<item>sys_rawio</item>
-			<item>sys_resource</item>
-			<item>sys_time</item>
-			<item>sys_tty_config</item>
-			<item>syslog</item>
-			<item>wake_alarm</item>
-		</list>
+<highlighting>
+
+	<!-- Profile Header -->
+	<list name="profile_head">
+		<item>profile</item>
+		<item>hat</item>
+	</list>
+	<list name="profile_options">
+		<item>flags</item>
+		<item>xattrs</item>
+	</list>
+	<list name="profile_flags">
+		<item>audit</item>
+		<item>complain</item>
+		<item>enforce</item>
+		<item>mediate_deleted</item>
+		<item>attach_disconnected</item>
+		<item>chroot_relative</item>
+		<item>chroot_attach</item>
+		<item>chroot_no_attach</item>
+		<item>delegate_deleted</item>
+		<item>no_attach_disconnected</item>
+		<item>namespace_relative</item>
+	</list>
+
+	<!-- Rule Qualifiers -->
+	<list name="access_types">
+		<item>allow</item>
+		<item>deny</item>
+	</list>
+	<list name="file_qualifiers">
+		<item>owner</item>
+		<!-- other -->
+	</list>
+	<list name="qualifiers">
+		<item>audit</item>
+		<!-- noaudit/quiet, defined, not -->
+	</list>
+	<!-- Conditional: if, else -->
+
+	<!-- Capabilities, Capability Rule.
+	     Lowercase capability name without 'CAP_' prefix.
+	     http://man7.org/linux/man-pages/man7/capabilities.7.html -->
+	<list name="rule_capability">
+		<item>audit_control</item>
+		<item>audit_read</item>
+		<item>audit_write</item>
+		<item>block_suspend</item>
+		<item>chown</item>
+		<item>dac_override</item>
+		<item>dac_read_search</item>
+		<item>fowner</item>
+		<item>fsetid</item>
+		<item>ipc_lock</item>
+		<item>ipc_owner</item>
+		<item>kill</item>
+		<item>lease</item>
+		<item>linux_immutable</item>
+		<item>mac_admin</item>
+		<item>mac_override</item>
+		<item>mknod</item>
+		<item>net_admin</item>
+		<item>net_bind_service</item>
+		<item>net_broadcast</item>
+		<item>net_raw</item>
+		<item>setgid</item>
+		<item>setfcap</item>
+		<item>setpcap</item>
+		<item>setuid</item>
+		<item>sys_admin</item>
+		<item>sys_boot</item>
+		<item>sys_chroot</item>
+		<item>sys_module</item>
+		<item>sys_nice</item>
+		<item>sys_pacct</item>
+		<item>sys_ptrace</item>
+		<item>sys_rawio</item>
+		<item>sys_resource</item>
+		<item>sys_time</item>
+		<item>sys_tty_config</item>
+		<item>syslog</item>
+		<item>wake_alarm</item>
+	</list>
+
+	<!-- Network Rule -->
+	<list name="rule_network">
+		<!-- Domain.
+		     Also: unix -->
+		<item>inet</item>
+		<item>ax25</item>
+		<item>ipx</item>
+		<item>appletalk</item>
+		<item>netrom</item>
+		<item>bridge</item>
+		<item>atmpvc</item>
+		<item>x25</item>
+		<item>inet6</item>
+		<item>rose</item>
+		<item>netbeui</item>
+		<item>security</item>
+		<item>key</item>
+		<item>packet</item>
+		<item>ash</item>
+		<item>econet</item>
+		<item>atmsvc</item>
+		<item>sna</item>
+		<item>irda</item>
+		<item>pppox</item>
+		<item>wanpipe</item>
+		<item>bluetooth</item>
+		<item>netlink</item>
+		<item>rds</item>
+		<item>llc</item>
+		<item>can</item>
+		<item>tipc</item>
+		<item>iucv</item>
+		<item>rxrpc</item>
+		<item>isdn</item>
+		<item>phonet</item>
+		<item>ieee802154</item>
+		<item>caif</item>
+		<item>alg</item>
+		<item>nfc</item>
+		<item>vsock</item>
+		<item>mpls</item>
+		<item>ib</item>
+		<item>kcm</item>
+		<item>smc</item>
+
+		<!-- Type.
+		     Also: packet -->
+		<item>stream</item>
+		<item>dgram</item>
+		<item>seqpacket</item>
+		<item>rdm</item>
+		<item>raw</item>
+
+		<!-- Protocol -->
+		<item>tcp</item>
+		<item>udp</item>
+		<item>icmp</item>
+	</list>
+	<list name="rule_network_unix">
+		<!-- NOTE: This keyword is placed in a separate list,
+		     to avoid conflicts with the 'unix' rule name. -->
+		<item>unix</item>
+	</list>
+
+	<!-- Mount Rule -->
+	<list name="rule_mount_options">
+		<item>fstype</item>
+		<item>vfstype</item>
+		<item>options</item>
+		<item>option</item>
+	</list>
+	<list name="rule_mount_flags">
+		<item>r</item>
+		<item>w</item>
+		<item>rw</item>
+		<item>ro</item>
+		<item>read-only</item>
+		<item>suid</item>
+		<item>nosuid</item>
+		<item>dev</item>
+		<item>nodev</item>
+		<item>exec</item>
+		<item>noexec</item>
+		<item>sync</item>
+		<item>async</item>
+		<item>remount</item>
+		<item>mand</item>
+		<item>nomand</item>
+		<item>dirsync</item>
+		<item>atime</item>
+		<item>noatime</item>
+		<item>diratime</item>
+		<item>nodiratime</item>
+		<item>bind</item>
+		<item>B</item>
+		<item>move</item>
+		<item>M</item>
+		<item>rbind</item>
+		<item>R</item>
+		<item>verbose</item>
+		<item>silent</item>
+		<item>loud</item>
+		<item>acl</item>
+		<item>noacl</item>
+		<item>unbindable</item>
+		<item>make-unbindable</item>
+		<item>runbindable</item>
+		<item>make-runbindable</item>
+		<item>private</item>
+		<item>make-private</item>
+		<item>rprivate</item>
+		<item>make-rprivate</item>
+		<item>slave</item>
+		<item>make-slave</item>
+		<item>rslave</item>
+		<item>make-rslave</item>
+		<item>shared</item>
+		<item>make-shared</item>
+		<item>rshared</item>
+		<item>make-rshared</item>
+		<item>relatime</item>
+		<item>norelatime</item>
+		<item>iversion</item>
+		<item>noiversion</item>
+		<item>strictatime</item>
+		<item>user</item>
+		<item>nouser</item>
+	</list>
+	<list name="rule_mount_fstypes">
+		<item>ecryptfs</item>
+		<item>overlayfs</item>
+		<item>unionfs</item>
+		<item>shm</item>
+		<!-- VFS Types -->
+		<item>cryfs</item>
+		<item>encfs</item>
+		<item>apparmorfs</item>
+		<item>autofs</item>
+		<item>bdev</item>
+		<item>bpf</item>
+		<item>cachefs</item>
+		<item>cgroup</item>
+		<item>cgroup2</item>
+		<item>cifs</item>
+		<item>coherent</item>
+		<item>configfs</item>
+		<item>cpuset</item>
+		<item>cramfs</item>
+		<item>debugfs</item>
+		<item>devfs</item>
+		<item>devpts</item>
+		<item>devtmpfs</item>
+		<item>efs</item>
+		<item>fuse</item>
+		<item>fuseblk</item>
+		<item>fusectl</item>
+		<item>futexfs</item>
+		<item>hugetlbfs</item>
+		<item>kernfs</item>
+		<item>mqueue</item>
+		<item>pipefs</item>
+		<item>proc</item>
+		<item>procfs</item>
+		<item>pstorefs</item>
+		<item>pstore</item>
+		<item>ramfs</item>
+		<item>romfs</item>
+		<item>rootfs</item>
+		<item>sdcardfs</item>
+		<item>securityfs</item>
+		<item>selinuxfs</item>
+		<item>sockfs</item>
+		<item>specfs</item>
+		<item>squashfs</item>
+		<item>swapfs</item>
+		<item>sysfs</item>
+		<item>sysv</item>
+		<item>tmpfs</item>
+		<item>usbfs</item>
+		<item>vfat</item>
+		<item>functionfs</item>
+		<item>inotifyfs</item>
+		<item>labeledfs</item>
+		<item>oemfs</item>
+		<!-- FS Types -->
+		<item>adfs</item>
+		<item>affs</item>
+		<item>afs</item>
+		<item>apfs</item>
+		<item>bfs</item>
+		<item>btrfs</item>
+		<item>ceph</item>
+		<item>coda</item>
+		<item>exfat</item>
+		<item>ext2</item>
+		<item>ext3</item>
+		<item>ext4</item>
+		<item>f2fs</item>
+		<item>fatx</item>
+		<item>gfs</item>
+		<item>hfs</item>
+		<item>hfsplus</item>
+		<item>hpfs</item>
+		<item>ifs</item>
+		<item>iso9660</item>
+		<item>jffs2</item>
+		<item>jffs</item>
+		<item>jfs</item>
+		<item>lvm2</item>
+		<item>minix</item>
+		<item>msdos</item>
+		<item>ncpfs</item>
+		<item>nilfs</item>
+		<item>nilfs2</item>
+		<item>nfs</item>
+		<item>nfs4</item>
+		<item>ntfs-3g</item>
+		<item>ntfs</item>
+		<item>ocfs</item>
+		<item>qnx4</item>
+		<item>qnx6</item>
+		<item>reiser4</item>
+		<item>reiserfs</item>
+		<item>smbfs</item>
+		<item>swap</item>
+		<item>tracefs</item>
+		<item>ubifs</item>
+		<item>udf</item>
+		<item>ufs</item>
+		<item>umsdos</item>
+		<item>urefs</item>
+		<item>xenix</item>
+		<item>yaffs2</item>
+		<item>yaffs</item>
+		<item>xfs</item>
+		<item>zfs</item>
+		<!-- Not included: ext, usbdevfs, xiafs -->
+	</list>
+
+	<!-- Pivot Root Rule -->
+	<list name="rule_pivotroot_options">
+		<item>oldroot</item>
+	</list>
+
+	<!-- Ptrace Rule -->
+	<list name="rule_ptrace_options">
+		<item>peer</item>
+	</list>
+	<list name="rule_ptrace_access">
+		<!-- Also: r, w, rw, read -->
+		<item>readby</item>
+		<item>trace</item>
+		<item>tracedby</item>
+	</list>
+
+	<!-- Signal Rule -->
+	<list name="rule_signal_options">
+		<item>set</item>
+		<item>peer</item>
+	</list>
+	<list name="rule_signal">
+		<!-- Also: rtmin+0 ... rtmin+32 -->
+		<item>bus</item>
+		<item>hup</item>
+		<item>int</item>
+		<item>quit</item>
+		<item>ill</item>
+		<item>trap</item>
+		<item>abrt</item>
+		<item>fpe</item>
+		<item>kill</item>
+		<item>usr1</item>
+		<item>segv</item>
+		<item>usr2</item>
+		<item>pipe</item>
+		<item>alrm</item>
+		<item>term</item>
+		<item>stkflt</item>
+		<item>chld</item>
+		<item>cont</item>
+		<item>stop</item>
+		<item>stp</item>
+		<item>ttin</item>
+		<item>ttou</item>
+		<item>urg</item>
+		<item>xcpu</item>
+		<item>xfsz</item>
+		<item>vtalrm</item>
+		<item>prof</item>
+		<item>winch</item>
+		<item>io</item>
+		<item>pwr</item>
+		<item>sys</item>
+		<item>emt</item>
+		<item>exists</item>
+	</list>
+	<list name="rule_signal_access">
+		<!-- Also: r, w, rw, read, write -->
+		<item>send</item>
+		<item>receive</item>
+	</list>
+
+	<!-- DBus Rule -->
+	<list name="rule_dbus_options">
+		<item>peer</item>
+		<item>bus</item>
+		<item>path</item>
+		<item>interface</item>
+		<item>member</item>
+		<item>name</item>
+	</list>
+	<list name="rule_dbus_peer">
+		<item>name</item>
+		<item>label</item>
+	</list>
+	<list name="rule_dbus_access">
+		<!-- Also: r, w, rw, read, write -->
+		<item>send</item>
+		<item>receive</item>
+		<item>bind</item>
+		<item>eavesdrop</item>
+	</list>
+	<list name="rule_dbus_bus">
+		<item>system</item>
+		<item>session</item>
+	</list>
+
+	<!-- Unix Rule -->
+	<list name="rule_unix_options">
+		<item>peer</item>
+		<item>set</item>
+		<item>label</item>
+		<item>type</item>
+		<item>protocol</item>
+		<item>addr</item>
+		<item>attr</item>
+		<item>opt</item>
+	</list>
+	<list name="rule_unix_access">
+		<!-- Also: r, w, rw, read, write -->
+		<item>send</item>
+		<item>receive</item>
+		<item>bind</item>
+		<item>create</item>
+		<item>listen</item>
+		<item>accept</item>
+		<item>connect</item>
+		<item>shutdown</item>
+		<item>getattr</item>
+		<item>setattr</item>
+		<item>getopt</item>
+		<item>setopt</item>
+	</list>
+
+	<!-- Rlimit Rule -->
+	<list name="rule_rlimit">
+		<item>cpu</item>
+		<item>fsize</item>
+		<item>data</item>
+		<item>stack</item>
+		<item>core</item>
+		<item>rss</item>
+		<item>nofile</item>
+		<item>ofile</item>
+		<item>as</item>
+		<item>nproc</item>
+		<item>memlock</item>
+		<item>locks</item>
+		<item>sigpending</item>
+		<item>msgqueue</item>
+		<item>nice</item>
+		<item>rtprio</item>
+		<item>rttime</item>
+	</list>
+
+	<!-- Link Rule -->
+	<list name="rule_link">
+		<item>subset</item>
+	</list>
+
+	<!-- Change Profile Rule -->
+	<list name="rule_changeprofile">
+		<item>safe</item>
+		<item>unsafe</item>
+	</list>
+
+	<list name="rule_include">
+		<item>if</item>
+		<item>exists</item>
+	</list>
+
+	<!-- Permissions -->
+	<list name="base_accesses">
+		<item>rw</item>
+		<item>r</item>
+		<item>w</item>
+		<item>read</item>
+		<item>write</item>
+	</list>
+
+	<!-- Abstractions and variables defined in the provided AppArmor policy.
+	     NOTE: The following keywords are not used for highlighting. The purpose of these
+	     is to provide autocomplete suggestions when writing Include rules and variables. -->
+	<list name="default_variables">
+		<item>profile_name</item> <!-- Special variable -->
+
+		<item>HOME</item>
+		<item>HOMEDIRS</item>
+		<item>multiarch</item>
+		<item>pid</item>
+		<item>pids</item>
+		<item>PROC</item>
+		<item>securityfs</item>
+		<item>apparmorfs</item>
+		<item>sys</item>
+		<item>tid</item>
+		<item>XDG_DESKTOP_DIR</item>
+		<item>XDG_DOWNLOAD_DIR</item>
+		<item>XDG_TEMPLATES_DIR</item>
+		<item>XDG_PUBLICSHARE_DIR</item>
+		<item>XDG_DOCUMENTS_DIR</item>
+		<item>XDG_MUSIC_DIR</item>
+		<item>XDG_PICTURES_DIR</item>
+		<item>XDG_VIDEOS_DIR</item>
+	</list>
+	<list name="default_abstractions">
+		<item>abstractions/</item>
+		<item>apache2-common</item>
+		<item>aspell</item>
+		<item>audio</item>
+		<item>authentication</item>
+		<item>base</item>
+		<item>bash</item>
+		<item>consoles</item>
+		<item>cups-client</item>
+		<item>dbus</item>
+		<item>dbus-accessibility</item>
+		<item>dbus-accessibility-strict</item>
+		<item>dbus-session</item>
+		<item>dbus-session-strict</item>
+		<item>dbus-strict</item>
+		<item>dconf</item>
+		<item>dovecot-common</item>
+		<item>dri-common</item>
+		<item>dri-enumerate</item>
+		<item>enchant</item>
+		<item>fcitx</item>
+		<item>fcitx-strict</item>
+		<item>fonts</item>
+		<item>freedesktop.org</item>
+		<item>gnome</item>
+		<item>gnupg</item>
+		<item>ibus</item>
+		<item>kde-icon-cache-write</item>
+		<item>kde-globals-write</item>
+		<item>kde-language-write</item>
+		<item>kde</item>
+		<item>kerberosclient</item>
+		<item>launchpad-integration</item>
+		<item>ldapclient</item>
+		<item>libpam-systemd</item>
+		<item>likewise</item>
+		<item>mdns</item>
+		<item>mesa</item>
+		<item>mir</item>
+		<item>mozc</item>
+		<item>mysql</item>
+		<item>nameservice</item>
+		<item>nis</item>
+		<item>nvidia</item>
+		<item>opencl</item>
+		<item>opencl-common</item>
+		<item>opencl-intel</item>
+		<item>opencl-mesa</item>
+		<item>opencl-nvidia</item>
+		<item>opencl-pocl</item>
+		<item>openssl</item>
+		<item>orbit2</item>
+		<item>p11-kit</item>
+		<item>perl</item>
+		<item>php</item>
+		<item>php5</item>
+		<item>postfix-common</item>
+		<item>private-files</item>
+		<item>private-files-strict</item>
+		<item>python</item>
+		<item>qt5-compose-cache-write</item>
+		<item>qt5-settings-write</item>
+		<item>qt5</item>
+		<item>recent-documents-write</item>
+		<item>ruby</item>
+		<item>samba</item>
+		<item>smbpass</item>
+		<item>ssl_certs</item>
+		<item>ssl_keys</item>
+		<item>svn-repositories</item>
+		<item>ubuntu-bittorrent-clients</item>
+		<item>ubuntu-browsers</item>
+		<item>ubuntu-console-browsers</item>
+		<item>ubuntu-console-email</item>
+		<item>ubuntu-email</item>
+		<item>ubuntu-feed-readers</item>
+		<item>ubuntu-gnome-terminal</item>
+		<item>ubuntu-helpers</item>
+		<item>ubuntu-konsole</item>
+		<item>ubuntu-media-players</item>
+		<item>ubuntu-unity7-base</item>
+		<item>ubuntu-unity7-launcher</item>
+		<item>ubuntu-unity7-messaging</item>
+		<item>ubuntu-xterm</item>
+		<item>user-download</item>
+		<item>user-mail</item>
+		<item>user-manpages</item>
+		<item>user-tmp</item>
+		<item>user-write</item>
+		<item>video</item>
+		<item>vulkan</item>
+		<item>wayland</item>
+		<item>web-data</item>
+		<item>winbind</item>
+		<item>wutmp</item>
+		<item>X</item>
+		<item>xad</item>
+		<item>xdg-desktop</item>
+
+		<item>ubuntu-browsers.d/</item>
+		<item>java</item>
+		<item>mailto</item>
+		<item>multimedia</item>
+		<item>plugins-common</item>
+		<item>productivity</item>
+		<item>text-editors</item>
+		<item>ubuntu-integration</item>
+		<item>ubuntu-integration-xul</item>
+		<item>user-files</item>
+
+		<item>apparmor_api/</item>
+		<item>change_profile</item>
+		<item>examine</item>
+		<item>find_mountpoint</item>
+		<item>introspect</item>
+		<item>is_enabled</item>
+
+		<item>tunables/</item>
+		<item>alias</item>
+		<item>apparmorfs</item>
+		<item>dovecot</item>
+		<item>global</item>
+		<item>home</item>
+		<item>kernelvars</item>
+		<item>multiarch</item>
+		<item>ntpd</item>
+		<item>proc</item>
+		<item>securityfs</item>
+		<item>sys</item>
+		<item>xdg-user-dirs</item>
+		<item>home.d/</item>
+		<item>multiarch.d/</item>
+		<item>xdg-user-dirs.d/</item>
+		<item>site.local</item>
+
+		<item>local/</item>
+	</list>
+
+	<list name="boolean">
+		<item>true</item>
+		<item>false</item>
+	</list>
+	<list name="other_words">
+		<item>unspec</item>
+		<item>none</item>
+		<item>unconfined</item>
+	</list>
+
+	<!-- Rule Names.
+	     NOTE:
+	      - Each rule name is a keyword in separate lists, since each
+	        has a different context and for a correct delimitation of the words.
+	      - The content of a rule is found in the contexts "_default_rule"
+	        and "_default_rule_with_comments".
+	      - When adding a new rule, add it also in "_end_rule_irnc". -->
+	<list name="rule_name_mount">
+		<item>mount</item>
+		<item>remount</item>
+		<item>umount</item>
+	</list>
+	<list name="rule_name_alias"><item>alias</item></list>
+	<list name="rule_name_file"><item>file</item></list>
+	<list name="rule_name_capability"><item>capability</item></list>
+	<list name="rule_name_network"><item>network</item></list>
+	<list name="rule_name_pivotroot"><item>pivot_root</item></list>
+	<list name="rule_name_ptrace"><item>ptrace</item></list>
+	<list name="rule_name_signal"><item>signal</item></list>
+	<list name="rule_name_dbus"><item>dbus</item></list>
+	<list name="rule_name_unix"><item>unix</item></list>
+	<list name="rule_name_link"><item>link</item></list>
+	<list name="rule_name_changeprofile"><item>change_profile</item></list>
+	<list name="rule_name_rlimit"><item>rlimit</item></list>
+	<list name="rule_name_set"><item>set</item></list>
+
+	<!-- AppArmor 2.12.0: Keywords not currently supported:
+	     if, else, not, defined, other, rewrite, quiet, kill, nokill -->
+
+	<contexts>
+
+		<!-- Profile Content -->
+		<context name="_profile" attribute="Normal Text" lineEndContext="#stay">
+
+			<!-- Header -->
+			<keyword context="_profile_name" attribute="Profile Head" String="profile_head"/>
+			<RegExpr context="_profile_name" attribute="Profile Head" String="(^|\s)\^(?=\S)"/>
+			<keyword context="#stay" attribute="Option" String="profile_options"/>
+
+			<!-- Preamble -->
+			<StringDetect context="_include" attribute="Preprocessor" String="#include" insensitive="true"/>
+			<RegExpr context="_include" attribute="Preprocessor" String="(^|\s)include(?=\s)"/>
+			<DetectChar context="_comment" attribute="Comment" char="#"/>
+
+			<!-- Variable Assignment.
+			     NOTE:
+			      - Variable assignments are not allowed within profiles, but this behavior is not addressed.
+			        When writing assignments within profiles, the parser shows an error because it does
+			        not allow + or = after a variable, so there are no conflicts with file rules.
+			      - [Jul 24, 2018] Variables of type "@VAR" will only be highlighted in assignments, as long
+			        as they are not fully supported (apparently, they will be used in conditional expressions). -->
+			<Detect2Chars context="_variable_assignment" attribute="Variable" char="@" char1="{" lookAhead="true" firstNonSpace="true"/>
+			<RegExpr context="_variable_assignment_operator" attribute="Variable" String="@&varName;(?=\s*(\+?\=|$|\s#))" firstNonSpace="true"/>
+			<DetectChar context="_variable_assignment_line_general" attribute="Operator 1" char="=" firstNonSpace="true"/>
+			<Detect2Chars context="_variable_assignment_line" attribute="Operator 1" char="+" char1="=" firstNonSpace="true"/>
+
+			<Detect2Chars context="_variable" attribute="Variable" char="@" char1="{" lookAhead="true"/>
+			<Detect2Chars context="_boolean" attribute="Variable" char="$" char1="{" lookAhead="true"/>
+			<keyword context="#stay" attribute="Other Option" String="boolean" insensitive="true"/>
+			<RegExpr context="#stay" attribute="Variable" String="\$&varName;(?=[\s\(\)\{\}&quot;@\$#\=\+]|$)"/>
+
+			<IncludeRules context="_brackets_error"/>
+			<DetectChar context="#stay" attribute="Operator 1" char="{" beginRegion="Profile"/>
+			<DetectChar context="#stay" attribute="Operator 1" char="}" endRegion="Profile"/>
+			<DetectChar context="_parentheses_block_profile" attribute="Normal Text" char="("/>
+			<DetectChar context="_r_square_brackets" attribute="Globbing Brackets" char="["/>
+
+			<keyword context="#stay" attribute="Access Qualifier" String="access_types"/>
+			<keyword context="#stay" attribute="Qualifier" String="qualifiers"/>
+			<keyword context="#stay" attribute="File Qualifier" String="file_qualifiers"/>
+
+			<!-- Rules -->
+			<keyword context="_rule_file" attribute="Rule" String="rule_name_file" beginRegion="Rule"/>
+			<keyword context="_rule_mount" attribute="Rule" String="rule_name_mount" beginRegion="Rule"/>
+			<keyword context="_default_rule_with_comments" attribute="Rule" String="rule_name_alias" beginRegion="Rule"/>
+			<keyword context="_rule_capability" attribute="Rule" String="rule_name_capability" beginRegion="Rule"/>
+			<keyword context="_rule_network" attribute="Rule" String="rule_name_network" beginRegion="Rule"/>
+			<keyword context="_rule_pivotroot" attribute="Rule" String="rule_name_pivotroot" beginRegion="Rule"/>
+			<keyword context="_rule_ptrace" attribute="Rule" String="rule_name_ptrace" beginRegion="Rule"/>
+			<keyword context="_rule_signal" attribute="Rule" String="rule_name_signal" beginRegion="Rule"/>
+			<keyword context="_rule_dbus" attribute="Rule" String="rule_name_dbus" beginRegion="Rule"/>
+			<keyword context="_rule_unix" attribute="Rule" String="rule_name_unix" beginRegion="Rule"/>
+			<keyword context="_rule_link" attribute="Rule" String="rule_name_link" beginRegion="Rule"/>
+			<keyword context="_rule_changeprofile" attribute="Rule" String="rule_name_changeprofile" beginRegion="Rule"/>
+			<keyword context="_rule_rlimit" attribute="Rule Error" String="rule_name_rlimit" beginRegion="Rule"/> <!-- set rlimit -->
+			<keyword context="_rule_set" attribute="Rule" String="rule_name_set"/>
+
+			<IncludeRules context="_operators"/>
+			<IncludeRules context="_find_path"/>
+			<IncludeRules context="_find_text_quoted"/>
+			<IncludeRules context="_file_rule_permissions"/>
+			<keyword context="#stay" String="default_variables"/>
+		</context>
+
+		<!-- Within rules and blocks of parentheses -->
+		<context name="_common" attribute="Normal Text" lineEndContext="#stay">
+			<StringDetect context="#stay" attribute="Error" String="#include" insensitive="true"/>
+			<RegExpr context="#stay" attribute="Error" String="include(?=\s)" firstNonSpace="true"/>
+			<IncludeRules context="_brackets_error"/>
+
+			<IncludeRules context="_operators"/>
+			<IncludeRules context="_find_text_quoted"/>
+			<keyword context="#stay" attribute="Other Data" String="other_words" insensitive="true"/>
+			<keyword context="#stay" attribute="Other Data" String="boolean" insensitive="true"/>
+		</context>
+
+		<context name="_comment" attribute="Comment" lineEndContext="#pop">
+			<LineContinue context="#pop" attribute="Comment"/>
+			<DetectSpaces />
+			<IncludeRules context="##Alerts"/>
+			<IncludeRules context="##Modelines"/>
+			<!-- URL -->
+			<RegExpr context="#stay" attribute="URL in Comment" String="\bhttps?://[^\s&lt;&gt;&quot;&apos;`]*[^\s&lt;&gt;&quot;&apos;`\}\)\]\.,;\|]"/>
+			<!-- Email (Source: http://emailregex.com) -->
+			<RegExpr context="#stay" attribute="URL in Comment" String="(([^&lt;&gt;\(\)\[\]\\\.,;:\s@&quot;]+(\.[^&lt;&gt;\(\)\[\]\\\.,;:\s@&quot;]+)*)|(&quot;[^&quot;]+&quot;))@((\[\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}])|(([a-zA-Z\-\d]+\.)+[a-zA-Z]{2,}))\b"/>
+		</context>
+
+		<!-- Profile Header:
+		     Highlight the name of the profile.
+		     The profile name label is optional. This is written after the hat character (^) or a profile keyword. -->
+		<context name="_profile_name" attribute="Profile Name" lineEndContext="#stay" fallthrough="true" fallthroughContext="#pop">
+			<DetectSpaces context="#stay" attribute="Normal Text"/>
+			<!-- Not highlighting paths and paths quoted.
+			     NOTE: Some profile labels may contain "/" (like [/]). These cases are not considered. -->
+			<RegExpr context="#pop" attribute="Normal Text" String="&quot;([^/&quot;\\]|\\.)*/" lookAhead="true"/>
+			<RegExpr context="#pop!_path_content" attribute="Path" String="([^\s&quot;\\]|\\.)*/" lookAhead="true"/>
+			<DetectChar context="#pop!_profile_name_quoted" attribute="Profile Name" char="&quot;"/>
+			<!-- First word (the profile name) -->
+			<RegExpr context="#pop!_profile_name_content" attribute="Normal Text" String="[^\s/\^\{]" lookAhead="true"/>
+		</context>
+		<context name="_profile_name_content" attribute="Profile Name" lineEndContext="#pop">
+			<!-- NOTE: "(" generates errors when calling "get_profiles()" (apparmor_status). This forces to put a space before. -->
+			<RegExpr context="#pop" attribute="Error" String="\(\S*\)?"/>
+			<!-- End of the profile name label -->
+			<DetectSpaces context="#pop" attribute="Normal Text" lookAhead="true"/>
+			<!-- The quote ends the profile name, but it is ideal to put a space before -->
+			<DetectChar context="#pop" attribute="Normal Text" char="&quot;" lookAhead="true"/>
+			<RegExpr context="#stay" attribute="Profile Name Error" String="[^\s\(\\](?=[&quot;\(])"/>
+
+			<StringDetect context="#pop" attribute="Error" String="#include" insensitive="true"/>
+			<IncludeRules context="_variable_simple"/>
+			<IncludeRules context="_escape"/>
+		</context>
+		<context name="_profile_name_quoted" attribute="Profile Name" lineEndContext="#stay">
+			<DetectChar context="#pop" attribute="Profile Name" char="&quot;"/>
+			<IncludeRules context="_variable_simple"/>
+			<IncludeRules context="_escape"/>
+		</context>
+
+		<!-- Include Rule: include <abstraction/path> -->
+		<context name="_include" attribute="Preprocessor" lineEndContext="#pop">
+			<Detect2Chars context="#pop" attribute="Error" char="&quot;" char1="&quot;"/>
+			<Detect2Chars context="#pop" attribute="Error" char="&lt;" char1="&gt;"/>
+			<RegExpr context="#stay" attribute="Error" String="&lt;+(?=[&lt;\s])"/>
+			<RegExpr context="#pop!_include_preplib_thanquot" attribute="Prep. Lib" String="&lt;\s*(?=&quot;)"/> <!-- <"path"> -->
+			<DetectChar context="#pop!_include_preplib_than" attribute="Prep. Lib" char="&lt;" lookAhead="true"/> <!-- <magic/path> -->
+			<DetectChar context="#pop!_include_preplib_quot" attribute="Prep. Lib" char="&quot;"/> <!-- "/abs/path" -->
+			<keyword context="#stay" attribute="Preprocessor" String="rule_include"/>
+			<RegExpr context="#pop" attribute="Prep. Lib" String="[^\s/&quot;&lt;&gt;]*/\S*(?=\s|$)"/> <!-- /abs/path -->
+		</context>
+		<context name="_include_preplib_than" attribute="Prep. Lib" lineEndContext="#pop">
+			<DetectChar context="#pop" attribute="Prep. Lib" char="&gt;"/>
+			<keyword context="#stay" attribute="Prep. Lib" String="default_abstractions"/>
+			<RegExpr context="#pop" attribute="Open Prep. Lib" String="[^&gt;\s](?=\s*$)"/>
+		</context>
+		<context name="_include_preplib_quot" attribute="Prep. Lib" lineEndContext="#pop">
+			<DetectChar context="#pop" attribute="Prep. Lib" char="&quot;"/>
+			<keyword context="#stay" attribute="Prep. Lib" String="default_abstractions"/>
+			<RegExpr context="#pop" attribute="Open Prep. Lib" String="[^&quot;\s](?=\s*$)"/>
+		</context>
+		<context name="_include_preplib_thanquot" attribute="Prep. Lib" lineEndContext="#pop">
+			<DetectChar context="_include_preplib_quot" attribute="Prep. Lib" char="&quot;"/>
+			<IncludeRules context="_include_preplib_than"/>
+		</context>
+
+		<!-- @{VARIABLE} -->
+		<context name="_variable" attribute="Variable" lineEndContext="#pop">
+			<RegExpr context="#pop!_find_path_after_variable" attribute="Variable" String="&variable;"/>
+			<DetectChar context="#pop" attribute="Error" char="@"/>
+		</context>
+		<context name="_parentheses_variable" attribute="Variable" lineEndContext="#pop">
+			<RegExpr context="#pop!_parentheses_find_path_after_variable" attribute="Variable" String="&variable;"/>
+			<DetectChar context="#pop" attribute="Error" char="@"/>
+		</context>
+		<context name="_variable_simple" attribute="Normal Text" lineEndContext="#stay">
+			<RegExpr context="#stay" attribute="Variable" String="&variable;"/>
+		</context>
+
+		<!-- Find path after a variable -->
+		<context name="_find_path_after_variable" attribute="Path" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_path_content">
+			<DetectSpaces context="#pop" lookAhead="true"/>
+			<AnyChar context="#pop" String="&noPathCharWithoutSpace;]}=" lookAhead="true"/>
+			<RegExpr context="#pop" String="[[:cntrl:]]" lookAhead="true"/> <!-- It is necessary? -->
+		</context>
+		<context name="_parentheses_find_path_after_variable" attribute="Path" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_parentheses_path_content">
+			<DetectChar context="#pop" char="," lookAhead="true"/>
+			<IncludeRules context="_find_path_after_variable"/>
+		</context>
+
+		<!-- @{VARIABLE} = A B C -->
+		<context name="_variable_assignment" attribute="Variable" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
+			<RegExpr context="#pop!_variable_assignment_operator" attribute="Variable" String="&variable;"/>
+			<DetectChar context="#pop" attribute="Error" char="@"/>
+		</context>
+		<context name="_variable_assignment_operator" attribute="Normal Text" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_path_content">
+			<!-- After the operator, highlighting as "Path" the entire line -->
+			<RegExpr context="#pop!_variable_assignment_line" attribute="Operator 1" String="\s*\+?\="/>
+			<DetectChar context="#pop!_path_content" attribute="Error" char="+"/>
+			<IncludeRules context="_find_path_after_variable"/>
+		</context>
+		<context name="_variable_assignment_line" attribute="Path" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_variable_assignment_line_content">
+			<DetectChar context="#pop!_variable_assignment_line_content" attribute="Error" char="#"/> <!-- Comment -->
+		</context>
+		<context name="_variable_assignment_line_content" attribute="Path" lineEndContext="#pop">
+			<LineContinue context="#stay" attribute="Escape Char"/>
+			<IncludeRules context="_path_globbing"/>
+			<IncludeRules context="_find_text_quoted"/>
+			<IncludeRules context="_variable_simple"/>
+			<Detect2Chars context="_hat_path" char="/" char1="/" lookAhead="true"/>
+			<RegExpr context="#stay" attribute="Error" String=",(?=[\s&quot;]|$)"/> <!-- End of rule comma (&endPath;) -->
+			<StringDetect context="#stay" attribute="Error" String="#include" insensitive="true"/>
+
+			<!-- NOTE: [V4][Jan 06, 2018] AppArmor does not detect comments in variable assignment lines
+			     (these are carried through to the policy). This is an AppArmor bug, therefore, the hash
+			     character after a space is highlighted as "Error". Check this when the bug has been fixed. -->
+			<RegExpr context="_comment_variable_assignment_line" attribute="Path" String="\s(?=#)"/>
+		</context>
+		<context name="_comment_variable_assignment_line" attribute="Error" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
+			<DetectChar context="#pop" attribute="Error" char="#"/>
+		</context>
+		<context name="_variable_assignment_line_general" attribute="Path" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_variable_assignment_line">
+			<keyword context="#pop!_variable_assignment_line" attribute="Other Option" String="boolean" insensitive="true"/>
+			<DetectSpaces context="#stay"/>
+		</context>
+
+		<!-- ${BOOLEAN} -->
+		<context name="_boolean" attribute="Variable" lineEndContext="#pop">
+			<RegExpr context="#pop" attribute="Variable" String="\$\{&varName;\}"/>
+			<DetectChar context="#pop" attribute="Error" char="$"/>
+		</context>
+
+		<!-- Access Modes / File Permissions -->
+		<context name="_permissions" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_permissions_correction"/>
+			<RegExpr context="#stay" attribute="Permissions" String="(^|\s)([rwkml]|&exec;)+(?=[\s,]|$)"/>
+			<RegExpr context="#stay" attribute="Permissions" String="(^|\s)([rakml]|&exec;)+(?=[\s,]|$)"/>
+		</context>
+		<context name="_file_rule_permissions" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_permissions_correction"/>
+			<RegExpr context="_rule_file" attribute="Permissions" String="(^|\s)([rwkml]|&exec;)+(?=[\s,]|$)"/>
+			<RegExpr context="_rule_file" attribute="Permissions" String="(^|\s)([rakml]|&exec;)+(?=[\s,]|$)"/>
+		</context>
+		<context name="_permissions_correction" attribute="Normal Text" lineEndContext="#stay">
+			<!-- Incompatible execution modes -->
+			<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*p[iUu]?x([rwakml]|p[iUu]?x)*[PcC]?[iUu]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- p -->
+			<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*P[iUu]?x([rwakml]|P[iUu]?x)*[pcC]?[iUu]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- P -->
+			<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*c[iUu]?x([rwakml]|c[iUu]?x)*[PpC]?[iUu]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- c -->
+			<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*C[iUu]?x([rwakml]|C[iUu]?x)*[Ppc]?[iUu]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- C -->
+			<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*[PpCc]?ix([rwakml]|[PpCc]?ix)*[PpCc]?[Uu]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- i -->
+			<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*[PpCc]?ux([rwakml]|[PpCc]?ux)*[PpCc]?[iU]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- u -->
+			<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*[PpCc]?Ux([rwakml]|[PpCc]?Ux)*[PpCc]?[iu]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- U -->
+			<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*[iuU]?x([rwakml]|[iuU]?x)*[PpCc][iuU]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- x, ix, ux or Ux followed by P, p, C or c -->
+			<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*x[rwakmlx]*[iuU]x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- x followed by ix, ux or Ux -->
+		</context>
+		<context name="_perm_correction_in" attribute="Normal Text" lineEndContext="#pop">
+			<!-- Highlight the previous space or the full permission -->
+			<DetectSpaces context="#pop"/>
+			<DetectIdentifier context="#pop"/>
+		</context>
+
+		<!-- Operators -->
+		<context name="_operators" attribute="Normal Text" lineEndContext="#stay">
+			<DetectChar context="#stay" attribute="Operator 1" char="="/>
+			<Detect2Chars context="#stay" attribute="Operator 1" char="+" char1="="/>
+			<Detect2Chars context="#stay" attribute="Operator 2" char="-" char1="&gt;"/>
+		</context>
+		<context name="_operators_keywords" attribute="Normal Text" lineEndContext="#stay">
+			<RegExpr context="#stay" attribute="Operator 2" String="\b(in|to)(?=[\s\(\{\[&quot;/@\$]|$)"/>
+		</context>
+
+		<!-- RULES -->
+
+		<!-- For all rules -->
+		<context name="_common_rule" attribute="Normal Text" lineEndContext="#stay">
+			<!-- Highlight as path the text after the '=' operator, except keywords or simple words ([\w\-\+]+) -->
+			<RegExpr context="#stay" attribute="Error" String="\=(?=\s*($|&endPath;))"/>
+			<RegExpr context="_path_content" attribute="Operator 1" String="\=\s*(?=[^\s&quot;\(]*([^&noPathChar;\]\}\=\w\+\-\(,]|,[^&noPathChar;]))"/>
+			<Detect2Chars context="_variable" attribute="Variable" char="@" char1="{" lookAhead="true"/>
+			<IncludeRules context="_find_path"/>
+
+			<IncludeRules context="_common"/>
+			<DetectChar context="_r_curly_brackets" attribute="Globbing Brackets" char="{"/>
+			<DetectChar context="_r_square_brackets" attribute="Globbing Brackets" char="["/>
+			<IncludeRules context="_operators_keywords"/>
+			<!-- This must be at the end of each context (to avoid conflicts with some keywords) -->
+			<IncludeRules context="_end_rule"/>
+		</context>
+		<context name="_default_rule_without_parentheses" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_common_rule"/>
+			<!-- AppArmor does not detect comments within rules (except in file & alias rules) -->
+			<IncludeRules context="_comment_not_allowed"/>
+		</context>
+		<context name="_default_rule" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_default_rule_without_parentheses"/>
+			<DetectChar context="_default_parentheses_block_rule" attribute="Normal Text" char="("/>
+		</context>
+		<context name="_default_rule_with_comments" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_common_rule"/>
+			<DetectChar context="_comment" attribute="Comment" char="#"/>
+		</context>
+
+		<context name="_comment_not_allowed" attribute="Normal Text" lineEndContext="#stay">
+			<DetectChar context="_comment" attribute="Error" char="#" firstNonSpace="true"/>
+			<DetectChar context="#stay" attribute="Error" char="#"/>
+		</context>
 
 		<!-- Network Rule -->
-		<list name="rule_network">
-			<!-- Domain.
-			     Also: unix -->
-			<item>inet</item>
-			<item>ax25</item>
-			<item>ipx</item>
-			<item>appletalk</item>
-			<item>netrom</item>
-			<item>bridge</item>
-			<item>atmpvc</item>
-			<item>x25</item>
-			<item>inet6</item>
-			<item>rose</item>
-			<item>netbeui</item>
-			<item>security</item>
-			<item>key</item>
-			<item>packet</item>
-			<item>ash</item>
-			<item>econet</item>
-			<item>atmsvc</item>
-			<item>sna</item>
-			<item>irda</item>
-			<item>pppox</item>
-			<item>wanpipe</item>
-			<item>bluetooth</item>
-			<item>netlink</item>
-			<item>rds</item>
-			<item>llc</item>
-			<item>can</item>
-			<item>tipc</item>
-			<item>iucv</item>
-			<item>rxrpc</item>
-			<item>isdn</item>
-			<item>phonet</item>
-			<item>ieee802154</item>
-			<item>caif</item>
-			<item>alg</item>
-			<item>nfc</item>
-			<item>vsock</item>
-			<item>mpls</item>
-			<item>ib</item>
-			<item>kcm</item>
-			<item>smc</item>
-
-			<!-- Type.
-			     Also: packet -->
-			<item>stream</item>
-			<item>dgram</item>
-			<item>seqpacket</item>
-			<item>rdm</item>
-			<item>raw</item>
-
-			<!-- Protocol -->
-			<item>tcp</item>
-			<item>udp</item>
-			<item>icmp</item>
-		</list>
-		<list name="rule_network_unix">
-			<!-- NOTE: This keyword is placed in a separate list,
-			     to avoid conflicts with the 'unix' rule name. -->
-			<item>unix</item>
-		</list>
+		<context name="_rule_network" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Data" String="rule_network"/>
+			<keyword context="#stay" attribute="Data" String="rule_network_unix"/>
+			<IncludeRules context="_default_rule"/>
+		</context>
+
+		<!-- Capability Rule -->
+		<context name="_rule_capability" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Data" String="rule_capability"/>
+			<IncludeRules context="_default_rule"/>
+		</context>
 
 		<!-- Mount Rule -->
-		<list name="rule_mount_options">
-			<item>fstype</item>
-			<item>vfstype</item>
-			<item>options</item>
-			<item>option</item>
-		</list>
-		<list name="rule_mount_flags">
-			<item>r</item>
-			<item>w</item>
-			<item>rw</item>
-			<item>ro</item>
-			<item>read-only</item>
-			<item>suid</item>
-			<item>nosuid</item>
-			<item>dev</item>
-			<item>nodev</item>
-			<item>exec</item>
-			<item>noexec</item>
-			<item>sync</item>
-			<item>async</item>
-			<item>remount</item>
-			<item>mand</item>
-			<item>nomand</item>
-			<item>dirsync</item>
-			<item>atime</item>
-			<item>noatime</item>
-			<item>diratime</item>
-			<item>nodiratime</item>
-			<item>bind</item>
-			<item>B</item>
-			<item>move</item>
-			<item>M</item>
-			<item>rbind</item>
-			<item>R</item>
-			<item>verbose</item>
-			<item>silent</item>
-			<item>loud</item>
-			<item>acl</item>
-			<item>noacl</item>
-			<item>unbindable</item>
-			<item>make-unbindable</item>
-			<item>runbindable</item>
-			<item>make-runbindable</item>
-			<item>private</item>
-			<item>make-private</item>
-			<item>rprivate</item>
-			<item>make-rprivate</item>
-			<item>slave</item>
-			<item>make-slave</item>
-			<item>rslave</item>
-			<item>make-rslave</item>
-			<item>shared</item>
-			<item>make-shared</item>
-			<item>rshared</item>
-			<item>make-rshared</item>
-			<item>relatime</item>
-			<item>norelatime</item>
-			<item>iversion</item>
-			<item>noiversion</item>
-			<item>strictatime</item>
-			<item>user</item>
-			<item>nouser</item>
-		</list>
-		<list name="rule_mount_fstypes">
-			<item>ecryptfs</item>
-			<item>overlayfs</item>
-			<item>unionfs</item>
-			<item>shm</item>
-			<!-- VFS Types -->
-			<item>cryfs</item>
-			<item>encfs</item>
-			<item>apparmorfs</item>
-			<item>autofs</item>
-			<item>bdev</item>
-			<item>bpf</item>
-			<item>cachefs</item>
-			<item>cgroup</item>
-			<item>cgroup2</item>
-			<item>cifs</item>
-			<item>coherent</item>
-			<item>configfs</item>
-			<item>cpuset</item>
-			<item>cramfs</item>
-			<item>debugfs</item>
-			<item>devfs</item>
-			<item>devpts</item>
-			<item>devtmpfs</item>
-			<item>efs</item>
-			<item>fuse</item>
-			<item>fuseblk</item>
-			<item>fusectl</item>
-			<item>futexfs</item>
-			<item>hugetlbfs</item>
-			<item>kernfs</item>
-			<item>mqueue</item>
-			<item>pipefs</item>
-			<item>proc</item>
-			<item>procfs</item>
-			<item>pstorefs</item>
-			<item>pstore</item>
-			<item>ramfs</item>
-			<item>romfs</item>
-			<item>rootfs</item>
-			<item>sdcardfs</item>
-			<item>securityfs</item>
-			<item>selinuxfs</item>
-			<item>sockfs</item>
-			<item>specfs</item>
-			<item>squashfs</item>
-			<item>swapfs</item>
-			<item>sysfs</item>
-			<item>sysv</item>
-			<item>tmpfs</item>
-			<item>usbfs</item>
-			<item>vfat</item>
-			<item>functionfs</item>
-			<item>inotifyfs</item>
-			<item>labeledfs</item>
-			<item>oemfs</item>
-			<!-- FS Types -->
-			<item>adfs</item>
-			<item>affs</item>
-			<item>afs</item>
-			<item>apfs</item>
-			<item>bfs</item>
-			<item>btrfs</item>
-			<item>ceph</item>
-			<item>coda</item>
-			<item>exfat</item>
-			<item>ext2</item>
-			<item>ext3</item>
-			<item>ext4</item>
-			<item>f2fs</item>
-			<item>fatx</item>
-			<item>gfs</item>
-			<item>hfs</item>
-			<item>hfsplus</item>
-			<item>hpfs</item>
-			<item>ifs</item>
-			<item>iso9660</item>
-			<item>jffs2</item>
-			<item>jffs</item>
-			<item>jfs</item>
-			<item>lvm2</item>
-			<item>minix</item>
-			<item>msdos</item>
-			<item>ncpfs</item>
-			<item>nilfs</item>
-			<item>nilfs2</item>
-			<item>nfs</item>
-			<item>nfs4</item>
-			<item>ntfs-3g</item>
-			<item>ntfs</item>
-			<item>ocfs</item>
-			<item>qnx4</item>
-			<item>qnx6</item>
-			<item>reiser4</item>
-			<item>reiserfs</item>
-			<item>smbfs</item>
-			<item>swap</item>
-			<item>tracefs</item>
-			<item>ubifs</item>
-			<item>udf</item>
-			<item>ufs</item>
-			<item>umsdos</item>
-			<item>urefs</item>
-			<item>xenix</item>
-			<item>yaffs2</item>
-			<item>yaffs</item>
-			<item>xfs</item>
-			<item>zfs</item>
-			<!-- Not included: ext, usbdevfs, xiafs -->
-		</list>
+		<context name="_rule_mount" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Option" String="rule_mount_options"/>
+			<IncludeRules context="_mount_rule_keywords"/>
+			<IncludeRules context="_default_rule_without_parentheses"/>
+			<DetectChar context="_mount_parentheses_block" attribute="Normal Text" char="("/>
+		</context>
+		<context name="_mount_parentheses_block" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_mount_rule_keywords"/>
+			<IncludeRules context="_default_parentheses_block_rule"/>
+		</context>
+		<context name="_mount_rule_keywords" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Permissions" String="rule_mount_flags"/>
+			<keyword context="#stay" attribute="Flags" String="rule_mount_fstypes"/>
+		</context>
 
 		<!-- Pivot Root Rule -->
-		<list name="rule_pivotroot_options">
-			<item>oldroot</item>
-		</list>
+		<context name="_rule_pivotroot" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Option" String="rule_pivotroot_options"/>
+			<IncludeRules context="_default_rule"/>
+		</context>
 
 		<!-- Ptrace Rule -->
-		<list name="rule_ptrace_options">
-			<item>peer</item>
-		</list>
-		<list name="rule_ptrace_access">
-			<!-- Also: r, w, rw, read -->
-			<item>readby</item>
-			<item>trace</item>
-			<item>tracedby</item>
-		</list>
+		<context name="_rule_ptrace" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Option" String="rule_ptrace_options"/>
+			<IncludeRules context="_ptrace_rule_keywords"/>
+			<IncludeRules context="_default_rule_without_parentheses"/>
+			<DetectChar context="_ptrace_parentheses_block" attribute="Normal Text" char="("/>
+		</context>
+		<context name="_ptrace_parentheses_block" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Other Option" String="rule_ptrace_options"/>
+			<IncludeRules context="_ptrace_rule_keywords"/>
+			<IncludeRules context="_default_parentheses_block_rule"/>
+		</context>
+		<context name="_ptrace_rule_keywords" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Permissions" String="rule_ptrace_access"/>
+			<keyword context="#stay" attribute="Permissions" String="base_accesses"/>
+		</context>
 
 		<!-- Signal Rule -->
-		<list name="rule_signal_options">
-			<item>set</item>
-			<item>peer</item>
-		</list>
-		<list name="rule_signal">
-			<!-- Also: rtmin+0 ... rtmin+32 -->
-			<item>bus</item>
-			<item>hup</item>
-			<item>int</item>
-			<item>quit</item>
-			<item>ill</item>
-			<item>trap</item>
-			<item>abrt</item>
-			<item>fpe</item>
-			<item>kill</item>
-			<item>usr1</item>
-			<item>segv</item>
-			<item>usr2</item>
-			<item>pipe</item>
-			<item>alrm</item>
-			<item>term</item>
-			<item>stkflt</item>
-			<item>chld</item>
-			<item>cont</item>
-			<item>stop</item>
-			<item>stp</item>
-			<item>ttin</item>
-			<item>ttou</item>
-			<item>urg</item>
-			<item>xcpu</item>
-			<item>xfsz</item>
-			<item>vtalrm</item>
-			<item>prof</item>
-			<item>winch</item>
-			<item>io</item>
-			<item>pwr</item>
-			<item>sys</item>
-			<item>emt</item>
-			<item>exists</item>
-		</list>
-		<list name="rule_signal_access">
-			<!-- Also: r, w, rw, read, write -->
-			<item>send</item>
-			<item>receive</item>
-		</list>
+		<context name="_rule_signal" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Option" String="rule_signal_options"/>
+			<IncludeRules context="_signal_rule_keywords"/>
+			<IncludeRules context="_default_rule_without_parentheses"/>
+			<DetectChar context="_signal_parentheses_block" attribute="Normal Text" char="("/>
+		</context>
+		<context name="_signal_parentheses_block" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_signal_rule_keywords"/>
+			<keyword context="#stay" attribute="Other Option" String="rule_signal_options"/>
+			<IncludeRules context="_default_parentheses_block_rule"/>
+		</context>
+		<context name="_signal_rule_keywords" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Flags" String="rule_signal"/>
+			<keyword context="#stay" attribute="Permissions" String="rule_signal_access"/>
+			<keyword context="#stay" attribute="Permissions" String="base_accesses"/>
+			<RegExpr context="#stay" attribute="Flags" String="\b(rtmin\+)0*(3[012]|[12]?\d)\b"/>
+		</context>
 
 		<!-- DBus Rule -->
-		<list name="rule_dbus_options">
-			<item>peer</item>
-			<item>bus</item>
-			<item>path</item>
-			<item>interface</item>
-			<item>member</item>
-			<item>name</item>
-		</list>
-		<list name="rule_dbus_peer">
-			<item>name</item>
-			<item>label</item>
-		</list>
-		<list name="rule_dbus_access">
-			<!-- Also: r, w, rw, read, write -->
-			<item>send</item>
-			<item>receive</item>
-			<item>bind</item>
-			<item>eavesdrop</item>
-		</list>
-		<list name="rule_dbus_bus">
-			<item>system</item>
-			<item>session</item>
-		</list>
+		<context name="_rule_dbus" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Option" String="rule_dbus_options"/>
+			<IncludeRules context="_dbus_rule_keywords"/>
+			<IncludeRules context="_default_rule_without_parentheses"/>
+			<DetectChar context="_dbus_parentheses_block" attribute="Normal Text" char="("/>
+		</context>
+		<context name="_dbus_parentheses_block" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Other Option" String="rule_dbus_peer"/>
+			<IncludeRules context="_dbus_rule_keywords"/>
+			<IncludeRules context="_default_parentheses_block_rule"/>
+		</context>
+		<context name="_dbus_rule_keywords" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Other Data" String="rule_dbus_bus"/>
+			<keyword context="#stay" attribute="Permissions" String="rule_dbus_access"/>
+			<keyword context="#stay" attribute="Permissions" String="base_accesses"/>
+		</context>
 
 		<!-- Unix Rule -->
-		<list name="rule_unix_options">
-			<item>peer</item>
-			<item>set</item>
-			<item>label</item>
-			<item>type</item>
-			<item>protocol</item>
-			<item>addr</item>
-			<item>attr</item>
-			<item>opt</item>
-		</list>
-		<list name="rule_unix_access">
-			<!-- Also: r, w, rw, read, write -->
-			<item>send</item>
-			<item>receive</item>
-			<item>bind</item>
-			<item>create</item>
-			<item>listen</item>
-			<item>accept</item>
-			<item>connect</item>
-			<item>shutdown</item>
-			<item>getattr</item>
-			<item>setattr</item>
-			<item>getopt</item>
-			<item>setopt</item>
-		</list>
+		<context name="_rule_unix" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Option" String="rule_unix_options"/>
+			<IncludeRules context="_unix_rule_keywords"/>
+			<IncludeRules context="_default_rule_without_parentheses"/>
+			<DetectChar context="_path_content" attribute="Path" char="@" lookAhead="true"/> <!-- Socket -->
+			<DetectChar context="_unix_parentheses_block" attribute="Normal Text" char="("/>
+		</context>
+		<context name="_unix_parentheses_block" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_unix_rule_keywords"/>
+			<keyword context="#stay" attribute="Other Option" String="rule_unix_options"/>
+			<IncludeRules context="_default_parentheses_block_rule"/>
+			<DetectChar context="_parentheses_path_content" attribute="Path" char="@" lookAhead="true"/>
+		</context>
+		<context name="_unix_rule_keywords" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Permissions" String="rule_unix_access"/>
+			<keyword context="#stay" attribute="Permissions" String="base_accesses"/>
+			<keyword context="#stay" attribute="Data" String="rule_network"/>
+		</context>
 
 		<!-- Rlimit Rule -->
-		<list name="rule_rlimit">
-			<item>cpu</item>
-			<item>fsize</item>
-			<item>data</item>
-			<item>stack</item>
-			<item>core</item>
-			<item>rss</item>
-			<item>nofile</item>
-			<item>ofile</item>
-			<item>as</item>
-			<item>nproc</item>
-			<item>memlock</item>
-			<item>locks</item>
-			<item>sigpending</item>
-			<item>msgqueue</item>
-			<item>nice</item>
-			<item>rtprio</item>
-			<item>rttime</item>
-		</list>
+		<context name="_rule_set" attribute="Normal Text" lineEndContext="#stay" fallthrough="true" fallthroughContext="#pop">
+			<keyword context="#pop!_rule_rlimit" attribute="Rule" String="rule_name_rlimit" beginRegion="Rule"/>
+			<DetectSpaces context="#stay" attribute="Normal Text"/>
+			<RegExpr context="_comment" attribute="Comment" String="#(?!include)" insensitive="true"/>
+		</context>
+		<context name="_rule_rlimit" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Data" String="rule_rlimit"/>
+			<Detect2Chars context="#stay" attribute="Operator 2" char="&lt;" char1="="/>
+			<HlCHex context="_number_unit" attribute="Number"/>
+			<Float context="_number_unit" attribute="Number"/>
+			<Int context="_number_unit" attribute="Number"/>
+			<AnyChar context="#stay" attribute="Number" String="-+"/>
+			<WordDetect context="#stay" attribute="Number" String="infinity"/> <!-- WordDetect uses -+ as delimiter -->
+			<RegExpr context="#stay" attribute="Numerical Unit" String="\b([KMG]B?|[shd]|us|ms|min|sec|(minute|day|hour|week|second)(s?)|(milli|micro)second(s?))\b"/>
+			<IncludeRules context="_default_rule"/>
+		</context>
+		<context name="_number_unit" attribute="Normal Text" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
+			<RegExpr context="#pop" attribute="Numerical Unit" String="([KMG]B?|[shd]|us|ms|min|sec|(minute|day|hour|week|second)(s?)|(milli|micro)second(s?))\b"/>
+		</context>
 
 		<!-- Link Rule -->
-		<list name="rule_link">
-			<item>subset</item>
-		</list>
+		<context name="_rule_link" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Data" String="rule_link"/>
+			<IncludeRules context="_default_rule"/>
+		</context>
 
 		<!-- Change Profile Rule -->
-		<list name="rule_changeprofile">
-			<item>safe</item>
-			<item>unsafe</item>
-		</list>
-
-		<list name="rule_include">
-			<item>if</item>
-			<item>exists</item>
-		</list>
-
-		<!-- Permissions -->
-		<list name="base_accesses">
-			<item>rw</item>
-			<item>r</item>
-			<item>w</item>
-			<item>read</item>
-			<item>write</item>
-		</list>
-
-		<!-- Abstractions and variables defined in the provided AppArmor policy.
-		     NOTE: The following keywords are not used for highlighting. The purpose of these
-		     is to provide autocomplete suggestions when writing Include rules and variables. -->
-		<list name="default_variables">
-			<item>profile_name</item> <!-- Special variable -->
-
-			<item>HOME</item>
-			<item>HOMEDIRS</item>
-			<item>multiarch</item>
-			<item>pid</item>
-			<item>pids</item>
-			<item>PROC</item>
-			<item>securityfs</item>
-			<item>apparmorfs</item>
-			<item>sys</item>
-			<item>tid</item>
-			<item>XDG_DESKTOP_DIR</item>
-			<item>XDG_DOWNLOAD_DIR</item>
-			<item>XDG_TEMPLATES_DIR</item>
-			<item>XDG_PUBLICSHARE_DIR</item>
-			<item>XDG_DOCUMENTS_DIR</item>
-			<item>XDG_MUSIC_DIR</item>
-			<item>XDG_PICTURES_DIR</item>
-			<item>XDG_VIDEOS_DIR</item>
-		</list>
-		<list name="default_abstractions">
-			<item>abstractions/</item>
-			<item>apache2-common</item>
-			<item>aspell</item>
-			<item>audio</item>
-			<item>authentication</item>
-			<item>base</item>
-			<item>bash</item>
-			<item>consoles</item>
-			<item>cups-client</item>
-			<item>dbus</item>
-			<item>dbus-accessibility</item>
-			<item>dbus-accessibility-strict</item>
-			<item>dbus-session</item>
-			<item>dbus-session-strict</item>
-			<item>dbus-strict</item>
-			<item>dconf</item>
-			<item>dovecot-common</item>
-			<item>dri-common</item>
-			<item>dri-enumerate</item>
-			<item>enchant</item>
-			<item>fcitx</item>
-			<item>fcitx-strict</item>
-			<item>fonts</item>
-			<item>freedesktop.org</item>
-			<item>gnome</item>
-			<item>gnupg</item>
-			<item>ibus</item>
-			<item>kde-icon-cache-write</item>
-			<item>kde-globals-write</item>
-			<item>kde-language-write</item>
-			<item>kde</item>
-			<item>kerberosclient</item>
-			<item>launchpad-integration</item>
-			<item>ldapclient</item>
-			<item>libpam-systemd</item>
-			<item>likewise</item>
-			<item>mdns</item>
-			<item>mesa</item>
-			<item>mir</item>
-			<item>mozc</item>
-			<item>mysql</item>
-			<item>nameservice</item>
-			<item>nis</item>
-			<item>nvidia</item>
-			<item>opencl</item>
-			<item>opencl-common</item>
-			<item>opencl-intel</item>
-			<item>opencl-mesa</item>
-			<item>opencl-nvidia</item>
-			<item>opencl-pocl</item>
-			<item>openssl</item>
-			<item>orbit2</item>
-			<item>p11-kit</item>
-			<item>perl</item>
-			<item>php</item>
-			<item>php5</item>
-			<item>postfix-common</item>
-			<item>private-files</item>
-			<item>private-files-strict</item>
-			<item>python</item>
-			<item>qt5-compose-cache-write</item>
-			<item>qt5-settings-write</item>
-			<item>qt5</item>
-			<item>recent-documents-write</item>
-			<item>ruby</item>
-			<item>samba</item>
-			<item>smbpass</item>
-			<item>ssl_certs</item>
-			<item>ssl_keys</item>
-			<item>svn-repositories</item>
-			<item>ubuntu-bittorrent-clients</item>
-			<item>ubuntu-browsers</item>
-			<item>ubuntu-console-browsers</item>
-			<item>ubuntu-console-email</item>
-			<item>ubuntu-email</item>
-			<item>ubuntu-feed-readers</item>
-			<item>ubuntu-gnome-terminal</item>
-			<item>ubuntu-helpers</item>
-			<item>ubuntu-konsole</item>
-			<item>ubuntu-media-players</item>
-			<item>ubuntu-unity7-base</item>
-			<item>ubuntu-unity7-launcher</item>
-			<item>ubuntu-unity7-messaging</item>
-			<item>ubuntu-xterm</item>
-			<item>user-download</item>
-			<item>user-mail</item>
-			<item>user-manpages</item>
-			<item>user-tmp</item>
-			<item>user-write</item>
-			<item>video</item>
-			<item>vulkan</item>
-			<item>wayland</item>
-			<item>web-data</item>
-			<item>winbind</item>
-			<item>wutmp</item>
-			<item>X</item>
-			<item>xad</item>
-			<item>xdg-desktop</item>
-
-			<item>ubuntu-browsers.d/</item>
-			<item>java</item>
-			<item>mailto</item>
-			<item>multimedia</item>
-			<item>plugins-common</item>
-			<item>productivity</item>
-			<item>text-editors</item>
-			<item>ubuntu-integration</item>
-			<item>ubuntu-integration-xul</item>
-			<item>user-files</item>
-
-			<item>apparmor_api/</item>
-			<item>change_profile</item>
-			<item>examine</item>
-			<item>find_mountpoint</item>
-			<item>introspect</item>
-			<item>is_enabled</item>
-
-			<item>tunables/</item>
-			<item>alias</item>
-			<item>apparmorfs</item>
-			<item>dovecot</item>
-			<item>global</item>
-			<item>home</item>
-			<item>kernelvars</item>
-			<item>multiarch</item>
-			<item>ntpd</item>
-			<item>proc</item>
-			<item>securityfs</item>
-			<item>sys</item>
-			<item>xdg-user-dirs</item>
-			<item>home.d/</item>
-			<item>multiarch.d/</item>
-			<item>xdg-user-dirs.d/</item>
-			<item>site.local</item>
-
-			<item>local/</item>
-		</list>
-
-		<list name="boolean">
-			<item>true</item>
-			<item>false</item>
-		</list>
-		<list name="other_words">
-			<item>unspec</item>
-			<item>none</item>
-			<item>unconfined</item>
-		</list>
-
-		<!-- Rule Names.
-		     NOTE:
-		      - Each rule name is a keyword in separate lists, since each
-		        has a different context and for a correct delimitation of the words.
-		      - The content of a rule is found in the contexts "_default_rule"
-		        and "_default_rule_with_comments".
-		      - When adding a new rule, add it also in "_end_rule_irnc". -->
-		<list name="rule_name_mount">
-			<item>mount</item>
-			<item>remount</item>
-			<item>umount</item>
-		</list>
-		<list name="rule_name_alias"><item>alias</item></list>
-		<list name="rule_name_file"><item>file</item></list>
-		<list name="rule_name_capability"><item>capability</item></list>
-		<list name="rule_name_network"><item>network</item></list>
-		<list name="rule_name_pivotroot"><item>pivot_root</item></list>
-		<list name="rule_name_ptrace"><item>ptrace</item></list>
-		<list name="rule_name_signal"><item>signal</item></list>
-		<list name="rule_name_dbus"><item>dbus</item></list>
-		<list name="rule_name_unix"><item>unix</item></list>
-		<list name="rule_name_link"><item>link</item></list>
-		<list name="rule_name_changeprofile"><item>change_profile</item></list>
-		<list name="rule_name_rlimit"><item>rlimit</item></list>
-		<list name="rule_name_set"><item>set</item></list>
-
-		<!-- AppArmor 2.12.0: Keywords not currently supported:
-		     if, else, not, defined, other, rewrite, quiet, kill, nokill -->
-
-		<contexts>
-
-			<!-- Profile Content -->
-			<context name="_profile" attribute="Normal Text" lineEndContext="#stay">
-
-				<!-- Header -->
-				<keyword context="_profile_name" attribute="Profile Head" String="profile_head"/>
-				<RegExpr context="_profile_name" attribute="Profile Head" String="(^|\s)\^(?=\S)"/>
-				<keyword context="#stay" attribute="Option" String="profile_options"/>
-
-				<!-- Preamble -->
-				<StringDetect context="_include" attribute="Preprocessor" String="#include" insensitive="true"/>
-				<RegExpr context="_include" attribute="Preprocessor" String="(^|\s)include(?=\s)"/>
-				<DetectChar context="_comment" attribute="Comment" char="#"/>
-
-				<!-- Variable Assignment.
-				     NOTE:
-				      - Variable assignments are not allowed within profiles, but this behavior is not addressed.
-				        When writing assignments within profiles, the parser shows an error because it does
-				        not allow + or = after a variable, so there are no conflicts with file rules.
-				      - [Jul 24, 2018] Variables of type "@VAR" will only be highlighted in assignments, as long
-				        as they are not fully supported (apparently, they will be used in conditional expressions). -->
-				<Detect2Chars context="_variable_assignment" attribute="Variable" char="@" char1="{" lookAhead="true" firstNonSpace="true"/>
-				<RegExpr context="_variable_assignment_operator" attribute="Variable" String="@&varName;(?=\s*(\+?\=|$|\s#))" firstNonSpace="true"/>
-				<DetectChar context="_variable_assignment_line_general" attribute="Operator 1" char="=" firstNonSpace="true"/>
-				<Detect2Chars context="_variable_assignment_line" attribute="Operator 1" char="+" char1="=" firstNonSpace="true"/>
-
-				<Detect2Chars context="_variable" attribute="Variable" char="@" char1="{" lookAhead="true"/>
-				<Detect2Chars context="_boolean" attribute="Variable" char="$" char1="{" lookAhead="true"/>
-				<keyword context="#stay" attribute="Other Option" String="boolean" insensitive="true"/>
-				<RegExpr context="#stay" attribute="Variable" String="\$&varName;(?=[\s\(\)\{\}&quot;@\$#\=\+]|$)"/>
-
-				<IncludeRules context="_brackets_error"/>
-				<DetectChar context="#stay" attribute="Operator 1" char="{" beginRegion="Profile"/>
-				<DetectChar context="#stay" attribute="Operator 1" char="}" endRegion="Profile"/>
-				<DetectChar context="_parentheses_block_profile" attribute="Normal Text" char="("/>
-				<DetectChar context="_r_square_brackets" attribute="Globbing Brackets" char="["/>
-
-				<keyword context="#stay" attribute="Access Qualifier" String="access_types"/>
-				<keyword context="#stay" attribute="Qualifier" String="qualifiers"/>
-				<keyword context="#stay" attribute="File Qualifier" String="file_qualifiers"/>
-
-				<!-- Rules -->
-				<keyword context="_rule_file" attribute="Rule" String="rule_name_file" beginRegion="Rule"/>
-				<keyword context="_rule_mount" attribute="Rule" String="rule_name_mount" beginRegion="Rule"/>
-				<keyword context="_default_rule_with_comments" attribute="Rule" String="rule_name_alias" beginRegion="Rule"/>
-				<keyword context="_rule_capability" attribute="Rule" String="rule_name_capability" beginRegion="Rule"/>
-				<keyword context="_rule_network" attribute="Rule" String="rule_name_network" beginRegion="Rule"/>
-				<keyword context="_rule_pivotroot" attribute="Rule" String="rule_name_pivotroot" beginRegion="Rule"/>
-				<keyword context="_rule_ptrace" attribute="Rule" String="rule_name_ptrace" beginRegion="Rule"/>
-				<keyword context="_rule_signal" attribute="Rule" String="rule_name_signal" beginRegion="Rule"/>
-				<keyword context="_rule_dbus" attribute="Rule" String="rule_name_dbus" beginRegion="Rule"/>
-				<keyword context="_rule_unix" attribute="Rule" String="rule_name_unix" beginRegion="Rule"/>
-				<keyword context="_rule_link" attribute="Rule" String="rule_name_link" beginRegion="Rule"/>
-				<keyword context="_rule_changeprofile" attribute="Rule" String="rule_name_changeprofile" beginRegion="Rule"/>
-				<keyword context="_rule_rlimit" attribute="Rule Error" String="rule_name_rlimit" beginRegion="Rule"/> <!-- set rlimit -->
-				<keyword context="_rule_set" attribute="Rule" String="rule_name_set"/>
-
-				<IncludeRules context="_operators"/>
-				<IncludeRules context="_find_path"/>
-				<IncludeRules context="_find_text_quoted"/>
-				<IncludeRules context="_file_rule_permissions"/>
-				<keyword context="#stay" String="default_variables"/>
-			</context>
-
-			<!-- Within rules and blocks of parentheses -->
-			<context name="_common" attribute="Normal Text" lineEndContext="#stay">
-				<StringDetect context="#stay" attribute="Error" String="#include" insensitive="true"/>
-				<RegExpr context="#stay" attribute="Error" String="include(?=\s)" firstNonSpace="true"/>
-				<IncludeRules context="_brackets_error"/>
-
-				<IncludeRules context="_operators"/>
-				<IncludeRules context="_find_text_quoted"/>
-				<keyword context="#stay" attribute="Other Data" String="other_words" insensitive="true"/>
-				<keyword context="#stay" attribute="Other Data" String="boolean" insensitive="true"/>
-			</context>
-
-			<context name="_comment" attribute="Comment" lineEndContext="#pop">
-				<LineContinue context="#pop" attribute="Comment"/>
-				<DetectSpaces />
-				<IncludeRules context="##Alerts"/>
-				<IncludeRules context="##Modelines"/>
-				<!-- URL -->
-				<RegExpr context="#stay" attribute="URL in Comment" String="\bhttps?://[^\s&lt;&gt;&quot;&apos;`]*[^\s&lt;&gt;&quot;&apos;`\}\)\]\.,;\|]"/>
-				<!-- Email (Source: http://emailregex.com) -->
-				<RegExpr context="#stay" attribute="URL in Comment" String="(([^&lt;&gt;\(\)\[\]\\\.,;:\s@&quot;]+(\.[^&lt;&gt;\(\)\[\]\\\.,;:\s@&quot;]+)*)|(&quot;[^&quot;]+&quot;))@((\[\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}])|(([a-zA-Z\-\d]+\.)+[a-zA-Z]{2,}))\b"/>
-			</context>
-
-			<!-- Profile Header:
-			     Highlight the name of the profile.
-			     The profile name label is optional. This is written after the hat character (^) or a profile keyword. -->
-			<context name="_profile_name" attribute="Profile Name" lineEndContext="#stay" fallthrough="true" fallthroughContext="#pop">
-				<DetectSpaces context="#stay" attribute="Normal Text"/>
-				<!-- Not highlighting paths and paths quoted.
-				     NOTE: Some profile labels may contain "/" (like [/]). These cases are not considered. -->
-				<RegExpr context="#pop" attribute="Normal Text" String="&quot;([^/&quot;\\]|\\.)*/" lookAhead="true"/>
-				<RegExpr context="#pop!_path_content" attribute="Path" String="([^\s&quot;\\]|\\.)*/" lookAhead="true"/>
-				<DetectChar context="#pop!_profile_name_quoted" attribute="Profile Name" char="&quot;"/>
-				<!-- First word (the profile name) -->
-				<RegExpr context="#pop!_profile_name_content" attribute="Normal Text" String="[^\s/\^\{]" lookAhead="true"/>
-			</context>
-			<context name="_profile_name_content" attribute="Profile Name" lineEndContext="#pop">
-				<!-- NOTE: "(" generates errors when calling "get_profiles()" (apparmor_status). This forces to put a space before. -->
-				<RegExpr context="#pop" attribute="Error" String="\(\S*\)?"/>
-				<!-- End of the profile name label -->
-				<DetectSpaces context="#pop" attribute="Normal Text" lookAhead="true"/>
-				<!-- The quote ends the profile name, but it is ideal to put a space before -->
-				<DetectChar context="#pop" attribute="Normal Text" char="&quot;" lookAhead="true"/>
-				<RegExpr context="#stay" attribute="Profile Name Error" String="[^\s\(\\](?=[&quot;\(])"/>
-
-				<StringDetect context="#pop" attribute="Error" String="#include" insensitive="true"/>
-				<IncludeRules context="_variable_simple"/>
-				<IncludeRules context="_escape"/>
-			</context>
-			<context name="_profile_name_quoted" attribute="Profile Name" lineEndContext="#stay">
-				<DetectChar context="#pop" attribute="Profile Name" char="&quot;"/>
-				<IncludeRules context="_variable_simple"/>
-				<IncludeRules context="_escape"/>
-			</context>
-
-			<!-- Include Rule: include <abstraction/path> -->
-			<context name="_include" attribute="Preprocessor" lineEndContext="#pop">
-				<Detect2Chars context="#pop" attribute="Error" char="&quot;" char1="&quot;"/>
-				<Detect2Chars context="#pop" attribute="Error" char="&lt;" char1="&gt;"/>
-				<RegExpr context="#stay" attribute="Error" String="&lt;+(?=[&lt;\s])"/>
-				<RegExpr context="#pop!_include_preplib_thanquot" attribute="Prep. Lib" String="&lt;\s*(?=&quot;)"/> <!-- <"path"> -->
-				<DetectChar context="#pop!_include_preplib_than" attribute="Prep. Lib" char="&lt;" lookAhead="true"/> <!-- <magic/path> -->
-				<DetectChar context="#pop!_include_preplib_quot" attribute="Prep. Lib" char="&quot;"/> <!-- "/abs/path" -->
-				<keyword context="#stay" attribute="Preprocessor" String="rule_include"/>
-				<RegExpr context="#pop" attribute="Prep. Lib" String="[^\s/&quot;&lt;&gt;]*/\S*(?=\s|$)"/> <!-- /abs/path -->
-			</context>
-			<context name="_include_preplib_than" attribute="Prep. Lib" lineEndContext="#pop">
-				<DetectChar context="#pop" attribute="Prep. Lib" char="&gt;"/>
-				<keyword context="#stay" attribute="Prep. Lib" String="default_abstractions"/>
-				<RegExpr context="#pop" attribute="Open Prep. Lib" String="[^&gt;\s](?=\s*$)"/>
-			</context>
-			<context name="_include_preplib_quot" attribute="Prep. Lib" lineEndContext="#pop">
-				<DetectChar context="#pop" attribute="Prep. Lib" char="&quot;"/>
-				<keyword context="#stay" attribute="Prep. Lib" String="default_abstractions"/>
-				<RegExpr context="#pop" attribute="Open Prep. Lib" String="[^&quot;\s](?=\s*$)"/>
-			</context>
-			<context name="_include_preplib_thanquot" attribute="Prep. Lib" lineEndContext="#pop">
-				<DetectChar context="_include_preplib_quot" attribute="Prep. Lib" char="&quot;"/>
-				<IncludeRules context="_include_preplib_than"/>
-			</context>
-
-			<!-- @{VARIABLE} -->
-			<context name="_variable" attribute="Variable" lineEndContext="#pop">
-				<RegExpr context="#pop!_find_path_after_variable" attribute="Variable" String="&variable;"/>
-				<DetectChar context="#pop" attribute="Error" char="@"/>
-			</context>
-			<context name="_parentheses_variable" attribute="Variable" lineEndContext="#pop">
-				<RegExpr context="#pop!_parentheses_find_path_after_variable" attribute="Variable" String="&variable;"/>
-				<DetectChar context="#pop" attribute="Error" char="@"/>
-			</context>
-			<context name="_variable_simple" attribute="Normal Text" lineEndContext="#stay">
-				<RegExpr context="#stay" attribute="Variable" String="&variable;"/>
-			</context>
-
-			<!-- Find path after a variable -->
-			<context name="_find_path_after_variable" attribute="Path" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_path_content">
-				<DetectSpaces context="#pop" lookAhead="true"/>
-				<AnyChar context="#pop" String="&noPathCharWithoutSpace;]}=" lookAhead="true"/>
-				<RegExpr context="#pop" String="[[:cntrl:]]" lookAhead="true"/> <!-- It is necessary? -->
-			</context>
-			<context name="_parentheses_find_path_after_variable" attribute="Path" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_parentheses_path_content">
-				<DetectChar context="#pop" char="," lookAhead="true"/>
-				<IncludeRules context="_find_path_after_variable"/>
-			</context>
-
-			<!-- @{VARIABLE} = A B C -->
-			<context name="_variable_assignment" attribute="Variable" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
-				<RegExpr context="#pop!_variable_assignment_operator" attribute="Variable" String="&variable;"/>
-				<DetectChar context="#pop" attribute="Error" char="@"/>
-			</context>
-			<context name="_variable_assignment_operator" attribute="Normal Text" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_path_content">
-				<!-- After the operator, highlighting as "Path" the entire line -->
-				<RegExpr context="#pop!_variable_assignment_line" attribute="Operator 1" String="\s*\+?\="/>
-				<DetectChar context="#pop!_path_content" attribute="Error" char="+"/>
-				<IncludeRules context="_find_path_after_variable"/>
-			</context>
-			<context name="_variable_assignment_line" attribute="Path" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_variable_assignment_line_content">
-				<DetectChar context="#pop!_variable_assignment_line_content" attribute="Error" char="#"/> <!-- Comment -->
-			</context>
-			<context name="_variable_assignment_line_content" attribute="Path" lineEndContext="#pop">
-				<LineContinue context="#stay" attribute="Escape Char"/>
-				<IncludeRules context="_path_globbing"/>
-				<IncludeRules context="_find_text_quoted"/>
-				<IncludeRules context="_variable_simple"/>
-				<Detect2Chars context="_hat_path" char="/" char1="/" lookAhead="true"/>
-				<RegExpr context="#stay" attribute="Error" String=",(?=[\s&quot;]|$)"/> <!-- End of rule comma (&endPath;) -->
-				<StringDetect context="#stay" attribute="Error" String="#include" insensitive="true"/>
-
-				<!-- NOTE: [V4][Jan 06, 2018] AppArmor does not detect comments in variable assignment lines
-				     (these are carried through to the policy). This is an AppArmor bug, therefore, the hash
-				     character after a space is highlighted as "Error". Check this when the bug has been fixed. -->
-				<RegExpr context="_comment_variable_assignment_line" attribute="Path" String="\s(?=#)"/>
-			</context>
-			<context name="_comment_variable_assignment_line" attribute="Error" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
-				<DetectChar context="#pop" attribute="Error" char="#"/>
-			</context>
-			<context name="_variable_assignment_line_general" attribute="Path" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_variable_assignment_line">
-				<keyword context="#pop!_variable_assignment_line" attribute="Other Option" String="boolean" insensitive="true"/>
-				<DetectSpaces context="#stay"/>
-			</context>
-
-			<!-- ${BOOLEAN} -->
-			<context name="_boolean" attribute="Variable" lineEndContext="#pop">
-				<RegExpr context="#pop" attribute="Variable" String="\$\{&varName;\}"/>
-				<DetectChar context="#pop" attribute="Error" char="$"/>
-			</context>
-
-			<!-- Access Modes / File Permissions -->
-			<context name="_permissions" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_permissions_correction"/>
-				<RegExpr context="#stay" attribute="Permissions" String="(^|\s)([rwkml]|&exec;)+(?=[\s,]|$)"/>
-				<RegExpr context="#stay" attribute="Permissions" String="(^|\s)([rakml]|&exec;)+(?=[\s,]|$)"/>
-			</context>
-			<context name="_file_rule_permissions" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_permissions_correction"/>
-				<RegExpr context="_rule_file" attribute="Permissions" String="(^|\s)([rwkml]|&exec;)+(?=[\s,]|$)"/>
-				<RegExpr context="_rule_file" attribute="Permissions" String="(^|\s)([rakml]|&exec;)+(?=[\s,]|$)"/>
-			</context>
-			<context name="_permissions_correction" attribute="Normal Text" lineEndContext="#stay">
-				<!-- Incompatible execution modes -->
-				<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*p[iUu]?x([rwakml]|p[iUu]?x)*[PcC]?[iUu]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- p -->
-				<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*P[iUu]?x([rwakml]|P[iUu]?x)*[pcC]?[iUu]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- P -->
-				<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*c[iUu]?x([rwakml]|c[iUu]?x)*[PpC]?[iUu]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- c -->
-				<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*C[iUu]?x([rwakml]|C[iUu]?x)*[Ppc]?[iUu]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- C -->
-				<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*[PpCc]?ix([rwakml]|[PpCc]?ix)*[PpCc]?[Uu]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- i -->
-				<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*[PpCc]?ux([rwakml]|[PpCc]?ux)*[PpCc]?[iU]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- u -->
-				<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*[PpCc]?Ux([rwakml]|[PpCc]?Ux)*[PpCc]?[iu]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- U -->
-				<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*[iuU]?x([rwakml]|[iuU]?x)*[PpCc][iuU]?x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- x, ix, ux or Ux followed by P, p, C or c -->
-				<RegExpr context="_perm_correction_in" String="(^|\s)[rwakml]*x[rwakmlx]*[iuU]x([rwakml]|&exec;)*([\s,]|$)" lookAhead="true"/> <!-- x followed by ix, ux or Ux -->
-			</context>
-			<context name="_perm_correction_in" attribute="Normal Text" lineEndContext="#pop">
-				<!-- Highlight the previous space or the full permission -->
-				<DetectSpaces context="#pop"/>
-				<DetectIdentifier context="#pop"/>
-			</context>
-
-			<!-- Operators -->
-			<context name="_operators" attribute="Normal Text" lineEndContext="#stay">
-				<DetectChar context="#stay" attribute="Operator 1" char="="/>
-				<Detect2Chars context="#stay" attribute="Operator 1" char="+" char1="="/>
-				<Detect2Chars context="#stay" attribute="Operator 2" char="-" char1="&gt;"/>
-			</context>
-			<context name="_operators_keywords" attribute="Normal Text" lineEndContext="#stay">
-				<RegExpr context="#stay" attribute="Operator 2" String="\b(in|to)(?=[\s\(\{\[&quot;/@\$]|$)"/>
-			</context>
-
-			<!-- RULES -->
-
-			<!-- For all rules -->
-			<context name="_common_rule" attribute="Normal Text" lineEndContext="#stay">
-				<!-- Highlight as path the text after the '=' operator, except keywords or simple words ([\w\-\+]+) -->
-				<RegExpr context="#stay" attribute="Error" String="\=(?=\s*($|&endPath;))"/>
-				<RegExpr context="_path_content" attribute="Operator 1" String="\=\s*(?=[^\s&quot;\(]*([^&noPathChar;\]\}\=\w\+\-\(,]|,[^&noPathChar;]))"/>
-				<Detect2Chars context="_variable" attribute="Variable" char="@" char1="{" lookAhead="true"/>
-				<IncludeRules context="_find_path"/>
-
-				<IncludeRules context="_common"/>
-				<DetectChar context="_r_curly_brackets" attribute="Globbing Brackets" char="{"/>
-				<DetectChar context="_r_square_brackets" attribute="Globbing Brackets" char="["/>
-				<IncludeRules context="_operators_keywords"/>
-				<!-- This must be at the end of each context (to avoid conflicts with some keywords) -->
-				<IncludeRules context="_end_rule"/>
-			</context>
-			<context name="_default_rule_without_parentheses" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_common_rule"/>
-				<!-- AppArmor does not detect comments within rules (except in file & alias rules) -->
-				<IncludeRules context="_comment_not_allowed"/>
-			</context>
-			<context name="_default_rule" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_default_rule_without_parentheses"/>
-				<DetectChar context="_default_parentheses_block_rule" attribute="Normal Text" char="("/>
-			</context>
-			<context name="_default_rule_with_comments" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_common_rule"/>
-				<DetectChar context="_comment" attribute="Comment" char="#"/>
-			</context>
-
-			<context name="_comment_not_allowed" attribute="Normal Text" lineEndContext="#stay">
-				<DetectChar context="_comment" attribute="Error" char="#" firstNonSpace="true"/>
-				<DetectChar context="#stay" attribute="Error" char="#"/>
-			</context>
-
-			<!-- Network Rule -->
-			<context name="_rule_network" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Data" String="rule_network"/>
-				<keyword context="#stay" attribute="Data" String="rule_network_unix"/>
-				<IncludeRules context="_default_rule"/>
-			</context>
-
-			<!-- Capability Rule -->
-			<context name="_rule_capability" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Data" String="rule_capability"/>
-				<IncludeRules context="_default_rule"/>
-			</context>
-
-			<!-- Mount Rule -->
-			<context name="_rule_mount" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Option" String="rule_mount_options"/>
-				<IncludeRules context="_mount_rule_keywords"/>
-				<IncludeRules context="_default_rule_without_parentheses"/>
-				<DetectChar context="_mount_parentheses_block" attribute="Normal Text" char="("/>
-			</context>
-			<context name="_mount_parentheses_block" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_mount_rule_keywords"/>
-				<IncludeRules context="_default_parentheses_block_rule"/>
-			</context>
-			<context name="_mount_rule_keywords" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Permissions" String="rule_mount_flags"/>
-				<keyword context="#stay" attribute="Flags" String="rule_mount_fstypes"/>
-			</context>
-
-			<!-- Pivot Root Rule -->
-			<context name="_rule_pivotroot" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Option" String="rule_pivotroot_options"/>
-				<IncludeRules context="_default_rule"/>
-			</context>
-
-			<!-- Ptrace Rule -->
-			<context name="_rule_ptrace" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Option" String="rule_ptrace_options"/>
-				<IncludeRules context="_ptrace_rule_keywords"/>
-				<IncludeRules context="_default_rule_without_parentheses"/>
-				<DetectChar context="_ptrace_parentheses_block" attribute="Normal Text" char="("/>
-			</context>
-			<context name="_ptrace_parentheses_block" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Other Option" String="rule_ptrace_options"/>
-				<IncludeRules context="_ptrace_rule_keywords"/>
-				<IncludeRules context="_default_parentheses_block_rule"/>
-			</context>
-			<context name="_ptrace_rule_keywords" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Permissions" String="rule_ptrace_access"/>
-				<keyword context="#stay" attribute="Permissions" String="base_accesses"/>
-			</context>
-
-			<!-- Signal Rule -->
-			<context name="_rule_signal" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Option" String="rule_signal_options"/>
-				<IncludeRules context="_signal_rule_keywords"/>
-				<IncludeRules context="_default_rule_without_parentheses"/>
-				<DetectChar context="_signal_parentheses_block" attribute="Normal Text" char="("/>
-			</context>
-			<context name="_signal_parentheses_block" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_signal_rule_keywords"/>
-				<keyword context="#stay" attribute="Other Option" String="rule_signal_options"/>
-				<IncludeRules context="_default_parentheses_block_rule"/>
-			</context>
-			<context name="_signal_rule_keywords" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Flags" String="rule_signal"/>
-				<keyword context="#stay" attribute="Permissions" String="rule_signal_access"/>
-				<keyword context="#stay" attribute="Permissions" String="base_accesses"/>
-				<RegExpr context="#stay" attribute="Flags" String="\b(rtmin\+)0*(3[012]|[12]?\d)\b"/>
-			</context>
-
-			<!-- DBus Rule -->
-			<context name="_rule_dbus" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Option" String="rule_dbus_options"/>
-				<IncludeRules context="_dbus_rule_keywords"/>
-				<IncludeRules context="_default_rule_without_parentheses"/>
-				<DetectChar context="_dbus_parentheses_block" attribute="Normal Text" char="("/>
-			</context>
-			<context name="_dbus_parentheses_block" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Other Option" String="rule_dbus_peer"/>
-				<IncludeRules context="_dbus_rule_keywords"/>
-				<IncludeRules context="_default_parentheses_block_rule"/>
-			</context>
-			<context name="_dbus_rule_keywords" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Other Data" String="rule_dbus_bus"/>
-				<keyword context="#stay" attribute="Permissions" String="rule_dbus_access"/>
-				<keyword context="#stay" attribute="Permissions" String="base_accesses"/>
-			</context>
-
-			<!-- Unix Rule -->
-			<context name="_rule_unix" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Option" String="rule_unix_options"/>
-				<IncludeRules context="_unix_rule_keywords"/>
-				<IncludeRules context="_default_rule_without_parentheses"/>
-				<DetectChar context="_path_content" attribute="Path" char="@" lookAhead="true"/> <!-- Socket -->
-				<DetectChar context="_unix_parentheses_block" attribute="Normal Text" char="("/>
-			</context>
-			<context name="_unix_parentheses_block" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_unix_rule_keywords"/>
-				<keyword context="#stay" attribute="Other Option" String="rule_unix_options"/>
-				<IncludeRules context="_default_parentheses_block_rule"/>
-				<DetectChar context="_parentheses_path_content" attribute="Path" char="@" lookAhead="true"/>
-			</context>
-			<context name="_unix_rule_keywords" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Permissions" String="rule_unix_access"/>
-				<keyword context="#stay" attribute="Permissions" String="base_accesses"/>
-				<keyword context="#stay" attribute="Data" String="rule_network"/>
-			</context>
-
-			<!-- Rlimit Rule -->
-			<context name="_rule_set" attribute="Normal Text" lineEndContext="#stay" fallthrough="true" fallthroughContext="#pop">
-				<keyword context="#pop!_rule_rlimit" attribute="Rule" String="rule_name_rlimit" beginRegion="Rule"/>
-				<DetectSpaces context="#stay" attribute="Normal Text"/>
-				<RegExpr context="_comment" attribute="Comment" String="#(?!include)" insensitive="true"/>
-			</context>
-			<context name="_rule_rlimit" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Data" String="rule_rlimit"/>
-				<Detect2Chars context="#stay" attribute="Operator 2" char="&lt;" char1="="/>
-        		<HlCHex context="_number_unit" attribute="Number"/>
-				<Float context="_number_unit" attribute="Number"/>
-				<Int context="_number_unit" attribute="Number"/>
-				<AnyChar context="#stay" attribute="Number" String="-+"/>
-				<WordDetect context="#stay" attribute="Number" String="infinity"/> <!-- WordDetect uses -+ as delimiter -->
-				<RegExpr context="#stay" attribute="Numerical Unit" String="\b([KMG]B?|[shd]|us|ms|min|sec|(minute|day|hour|week|second)(s?)|(milli|micro)second(s?))\b"/>
-				<IncludeRules context="_default_rule"/>
-			</context>
-			<context name="_number_unit" attribute="Normal Text" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
-				<RegExpr context="#pop" attribute="Numerical Unit" String="([KMG]B?|[shd]|us|ms|min|sec|(minute|day|hour|week|second)(s?)|(milli|micro)second(s?))\b"/>
-			</context>
-
-			<!-- Link Rule -->
-			<context name="_rule_link" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Data" String="rule_link"/>
-				<IncludeRules context="_default_rule"/>
-			</context>
-
-			<!-- Change Profile Rule -->
-			<context name="_rule_changeprofile" attribute="Normal Text" lineEndContext="#stay">
-				<Detect2Chars context="#pop!_profile_transition" attribute="Operator 2" char="-" char1="&gt;"/>
-				<keyword context="#stay" attribute="Data" String="rule_changeprofile"/>
-				<IncludeRules context="_default_rule"/>
-			</context>
-
-			<!-- File Rule -->
-			<context name="_rule_file" attribute="Normal Text" lineEndContext="#stay">
-				<Detect2Chars context="#pop!_profile_transition" attribute="Operator 2" char="-" char1="&gt;"/>
-				<IncludeRules context="_default_rule_with_comments"/>
-				<IncludeRules context="_permissions"/>
-			</context>
-
-			<!-- Profile Transition:
-			     Highlight the profile name in File Rule (Execute Mode) and Change Profile Rule. -->
-			<context name="_profile_transition" attribute="Transition Profile Name" lineEndContext="#stay" fallthrough="true" fallthroughContext="#pop">
-				<DetectSpaces context="#stay" attribute="Normal Text"/>
-				<!-- Not highlighting paths and paths quoted -->
-				<RegExpr context="#pop!_default_rule_with_comments" attribute="Path" String="([^\s/\[\\]|//|\\.|\[([^\s\]\\]|\\.)*\])*/($|[^/])" lookAhead="true"/>
-				<RegExpr context="#pop!_default_rule_with_comments" attribute="Normal Text" String="&quot;([^/&quot;\[\\]|//|\\.|\[([^&quot;\]\\]|\\.)*\])*/($|[^/])" lookAhead="true"/>
-
-				<DetectChar context="#pop!_t_profile_name_quoted" attribute="Transition Profile Name" char="&quot;"/>
-				<RegExpr context="#pop!_profile_transition_content" attribute="Normal Text" String="[^\s/]" lookAhead="true"/> <!-- First word -->
-			</context>
-			<context name="_profile_transition_content" attribute="Transition Profile Name" lineEndContext="#pop!_default_rule_with_comments">
-				<RegExpr context="#pop!_default_rule_with_comments" attribute="Error" String="\(\S*(?=,([&noPathChar;]|$))"/>
-				<RegExpr context="#pop!_default_rule_with_comments" attribute="Normal Text" String="&endPath;" lookAhead="true"/> <!-- End rule -->
-				<DetectSpaces context="#pop" attribute="Normal Text" lookAhead="true"/> <!-- End of the profile name -->
-
-				<DetectChar context="#stay" attribute="Error" char="&quot;"/>
-				<StringDetect context="#pop!_default_rule_with_comments" attribute="Error" String="#include" insensitive="true"/>
-				<RegExpr context="#stay" String="//(?=&endPath;)"/>
-				<IncludeRules context="_default_profile_transition"/>
-			</context>
-			<context name="_t_profile_name_quoted" attribute="Transition Profile Name" lineEndContext="#pop!_default_rule_with_comments">
-				<DetectChar context="#pop!_default_rule_with_comments" attribute="Transition Profile Name" char="&quot;"/>
-				<IncludeRules context="_default_profile_transition"/>
-			</context>
-			<context name="_default_profile_transition" attribute="Transition Profile Name" lineEndContext="#stay">
-				<IncludeRules context="_variable_simple"/>
-				<AnyChar context="#stay" attribute="Globbing Char in Tran. Prof." String="&globbChars;"/>
-				<IncludeRules context="_profile_transition_escape"/>
-				<RegExpr context="#stay" attribute="Hat Operator in Tran. Prof." String="//(?=[^&noPathChar;/])"/>
-			</context>
-
-			<!-- Change Hat / Child Profile (name//HAT).
-			     NOTE: Old style (name^HAT) not included -->
-			<context name="_hat_path" attribute="Path" lineEndContext="#pop">
-				<RegExpr context="#pop" attribute="Path" String="/(?=/&endPath;)"/>
-				<RegExpr context="#pop!_hat_path_content" attribute="SubProfile/Hat Operator" String="//(?=([^\s&quot;/\\]|\\.)+([\s&quot;]|$))"/>
-				<DetectChar context="#pop" attribute="Path" char="/"/>
-			</context>
-			<context name="_hat_path_parentheses" attribute="Path" lineEndContext="#pop">
-				<RegExpr context="#pop!_hat_path_parentheses_content" attribute="SubProfile/Hat Operator" String="//(?=([^&noPathChar;/\\,]|\\.)+([&noPathChar;,]|$))"/>
-				<DetectChar context="#pop" attribute="Path" char="/"/>
-			</context>
-			<context name="_hat_path_quoted" attribute="Text Quoted" lineEndContext="#pop">
-				<RegExpr context="#pop!_hat_path_quoted_content" attribute="SubProfile/Hat Operator" String="//(?=([^&quot;/\\]|\\.)+&quot;)"/>
-				<DetectChar context="#pop" attribute="Text Quoted" char="/"/>
-			</context>
-
-			<context name="_hat_path_content" attribute="SubProfile/Hat" lineEndContext="#pop">
-				<RegExpr context="#pop" String="&endPath;" lookAhead="true"/> <!-- End Path -->
-				<IncludeRules context="_default_path"/>
-			</context>
-			<context name="_hat_path_parentheses_content" attribute="SubProfile/Hat" lineEndContext="#pop">
-				<DetectChar context="#pop" char="," lookAhead="true"/> <!-- End Path -->
-				<IncludeRules context="_default_path"/>
-			</context>
-			<context name="_hat_path_quoted_content" attribute="SubProfile/Hat" lineEndContext="#pop">
-				<DetectChar context="#pop" char="&quot;" lookAhead="true"/>
-				<IncludeRules context="_default_quoted"/>
-			</context>
-
-			<!-- Parentheses Block: ( ) -->
-			<context name="_common_parentheses_block" attribute="Normal Text" lineEndContext="#stay">
-				<DetectChar context="#pop" attribute="Normal Text" char=")"/>
-				<!-- Highlight as path the text after the '=' operator, except keywords or simple words ([\w\-\+]+) -->
-				<RegExpr context="#stay" attribute="Error" String="\=(?=\s*($|[,\)]))"/>
-				<RegExpr context="_parentheses_path_content" attribute="Operator 1" String="\=\s*(?=[^\s&quot;\(\),]*[^&noPathChar;\]\}\=\w\+\-\(,])"/>
-				<DetectChar context="_parentheses_path_content" attribute="Path" char="/" lookAhead="true"/>
-				<Detect2Chars context="_parentheses_variable" attribute="Variable" char="@" char1="{" lookAhead="true"/>
-
-				<IncludeRules context="_common"/>
-				<DetectChar context="_round_brackets" attribute="Globbing Brackets" char="("/>
-				<DetectChar context="_p_curly_brackets" attribute="Globbing Brackets" char="{"/>
-				<DetectChar context="_p_square_brackets" attribute="Globbing Brackets" char="["/>
-				<IncludeRules context="_comment_not_allowed"/>
-			</context>
-			<context name="_parentheses_block_profile" attribute="Normal Text" lineEndContext="#stay">
-				<keyword context="#stay" attribute="Flags" String="profile_flags"/>
-				<!-- Used by xattrs -->
-				<RegExpr context="#stay" attribute="Other Option" String="\b[a-zA-Z](\.?[\w\-])*(?=\s*\=)"/>
-				<IncludeRules context="_common_parentheses_block"/>
-				<IncludeRules context="_end_rule_irnc"/>
-			</context>
-			<context name="_default_parentheses_block_rule" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_common_parentheses_block"/>
-				<IncludeRules context="_operators_keywords"/>
-				<IncludeRules context="_end_rule_irnc_parentheses_rule"/>
-			</context>
-
-			<!-- Finding the end of a rule -->
-			<context name="_end_rule" attribute="Normal Text" lineEndContext="#stay">
-				<RegExpr context="#stay" attribute="Normal Text" String=",(?=(\)|[\w\-]+[^\s\w\-,#\(&quot;]))"/> <!-- Fix possible incorrect rule closures -->
-				<DetectChar  context="#pop" attribute="End of Rule Char" char="," endRegion="Rule"/>
-				<IncludeRules context="_end_rule_irnc"/>
-			</context>
-			<!-- Rule/Profile on new line, in rule not closed -->
-			<context name="_end_rule_irnc" attribute="Normal Text" lineEndContext="#stay">
-				<keyword String="profile_head" context="#pop!_profile_name" attribute="Profile Head Error" firstNonSpace="true" endRegion="Rule"/>
-				<keyword String="access_types"          context="#pop" attribute="Access Qualifier Error"  firstNonSpace="true" endRegion="Rule"/>
-				<keyword String="qualifiers"            context="#pop" attribute="Qualifier Error"         firstNonSpace="true" endRegion="Rule"/>
-				<keyword String="file_qualifiers"       context="#pop" attribute="File Qualifier Error"    firstNonSpace="true" endRegion="Rule"/>
-				<RegExpr String="set(?=\s+rlimit\b)"    context="#pop" attribute="Rule Error"              firstNonSpace="true" endRegion="Rule"/>
-
-				<keyword String="rule_name_file"          context="#pop!_rule_file"          attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
-				<keyword String="rule_name_alias" context="#pop!_default_rule_with_comments" attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
-				<keyword String="rule_name_capability"    context="#pop!_rule_capability"    attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
-				<keyword String="rule_name_network"       context="#pop!_rule_network"       attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
-				<keyword String="rule_name_pivotroot"     context="#pop!_rule_pivotroot"     attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
-				<keyword String="rule_name_ptrace"        context="#pop!_rule_ptrace"        attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
-				<keyword String="rule_name_signal"        context="#pop!_rule_signal"        attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
-				<keyword String="rule_name_dbus"          context="#pop!_rule_dbus"          attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
-				<keyword String="rule_name_link"          context="#pop!_rule_link"          attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
-				<keyword String="rule_name_changeprofile" context="#pop!_rule_changeprofile" attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
-				<keyword String="rule_name_rlimit"        context="#pop!_rule_rlimit"        attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
-				<!-- This must be at the end of each rule context, to avoid replacing the 'unix' & 'remount' keywords
-				     ('unix' is also a domain of the network rule; 'remount' is also a flag of the mount rule). -->
-				<keyword String="rule_name_mount" context="#pop!_rule_mount" attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
-				<keyword String="rule_name_unix"  context="#pop!_rule_unix"  attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
-			</context>
-			<!-- For blocks of parentheses within rules (the same keywords as "_end_rule_irnc"!) -->
-			<context name="_end_rule_irnc_parentheses_rule" attribute="Normal Text" lineEndContext="#stay">
-				<keyword String="profile_head"            context="#pop" attribute="Profile Head Error"     lookAhead="true" firstNonSpace="true"/>
-				<keyword String="access_types"            context="#pop" attribute="Access Qualifier Error" lookAhead="true" firstNonSpace="true"/>
-				<keyword String="qualifiers"              context="#pop" attribute="Qualifier Error"        lookAhead="true" firstNonSpace="true"/>
-				<keyword String="file_qualifiers"         context="#pop" attribute="File Qualifier Error"   lookAhead="true" firstNonSpace="true"/>
-				<RegExpr String="set(?=\s+rlimit\b)"      context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-				<keyword String="rule_name_file"          context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-				<keyword String="rule_name_alias"         context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-				<keyword String="rule_name_capability"    context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-				<keyword String="rule_name_network"       context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-				<keyword String="rule_name_pivotroot"     context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-				<keyword String="rule_name_ptrace"        context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-				<keyword String="rule_name_signal"        context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-				<keyword String="rule_name_dbus"          context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-				<keyword String="rule_name_link"          context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-				<keyword String="rule_name_changeprofile" context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-				<keyword String="rule_name_rlimit"        context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-				<!-- Keep at the end to avoid conflicts! -->
-				<keyword String="rule_name_mount" context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-				<keyword String="rule_name_unix"  context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
-			</context>
-
-			<!-- Paths & File Globals -->
-
-			<context name="_find_path" attribute="Normal Text" lineEndContext="#stay">
-				<DetectChar context="_path_content" attribute="Path" char="/" lookAhead="true"/>
-				<RegExpr context="_path_content" String=":([^:&noPathChar;\(\\]|\\.)+:" lookAhead="true"/> <!-- :namespace: -->
-			</context>
-			<context name="_path_content" attribute="Path" lineEndContext="#pop">
-				<RegExpr context="#pop" String="&endPath;" lookAhead="true"/>
-				<IncludeRules context="_default_path"/>
-				<Detect2Chars context="_hat_path" char="/" char1="/" lookAhead="true"/>
-			</context>
-			<context name="_parentheses_path_content" attribute="Path" lineEndContext="#pop">
-				<DetectChar context="#pop" char="," lookAhead="true"/>
-				<IncludeRules context="_default_path"/>
-				<Detect2Chars context="_hat_path_parentheses" char="/" char1="/" lookAhead="true"/>
-			</context>
-			<context name="_default_path" attribute="Path" lineEndContext="#pop">
-				<DetectSpaces context="#pop" lookAhead="true"/>
-				<AnyChar context="#pop" String="&noPathCharWithoutSpace;" lookAhead="true"/>
-				<IncludeRules context="_variable_simple"/>
-				<IncludeRules context="_path_globbing"/>
-			</context>
-
-			<!-- Globbing -->
-			<context name="_path_globbing" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_brackets_error"/>
-				<DetectChar context="_curly_brackets" attribute="Globbing Brackets" char="{"/>
-				<DetectChar context="_square_brackets" attribute="Globbing Brackets" char="["/>
-				<DetectChar context="_round_brackets" attribute="Globbing Brackets" char="("/>
-				<IncludeRules context="_path_globbing_chars"/>
-			</context>
-			<context name="_path_globbing_chars" attribute="Normal Text" lineEndContext="#stay">
-				<AnyChar context="#stay" attribute="Globbing Char" String="&globbChars;"/>
-				<IncludeRules context="_escape"/>
-			</context>
-			<!-- Escapes: Hexadecimal (\xNN), decimal (\dNNN) & octal (\NNN). Also make literal any character.
-			     NOTE: Reserved character escape sequences: \\&quot;aefnrt0 -->
-			<context name="_escape" attribute="Normal Text" lineEndContext="#stay">
-				<RegExpr context="#stay" attribute="Escape Char" String="\\(x[a-fA-F\d]{1,2}|d\d{1,3}|[0-3][0-7]{0,2}|[4-7][0-7]?|.)"/>
-			</context>
-			<context name="_profile_transition_escape" attribute="Transition Profile Name" lineEndContext="#stay">
-				<RegExpr context="#stay" attribute="Globbing Char in Tran. Prof." String="\\(x[a-fA-F\d]{1,2}|d\d{1,3}|[0-3][0-7]{0,2}|[4-7][0-7]?|.)"/>
-			</context>
-
-			<!-- Groups of brackets: { }, [ ] and ( ) -->
-			<context name="_curly_brackets" attribute="Globbing Brackets" lineEndContext="#pop">
-				<DetectChar context="#pop" attribute="Globbing Brackets" char="}"/>
-				<RegExpr context="#stay" attribute="Open Globbing Brackets" String="[^&noPathChar;\(\[\{\}\\](?=[&noPathChar;]|$)"/>
-				<IncludeRules context="_default_path"/>
-				<IncludeRules context="_default_curly_brackets"/>
-			</context>
-			<context name="_square_brackets" attribute="Globbing Brackets" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_square_brackets_content">
-				<RegExpr context="#pop!_square_brackets_content" attribute="Globbing Char of Brackets" String="\^(?=[^\s\]&quot;])"/>
-			</context>
-			<context name="_square_brackets_content" attribute="Globbing Brackets" lineEndContext="#pop">
-				<DetectChar context="#pop" attribute="Globbing Brackets" char="]"/>
-				<DetectSpaces context="#pop" lookAhead="true"/>
-				<DetectChar context="#pop" char="&quot;" lookAhead="true"/> <!-- &noPathChar; -->
-				<RegExpr context="#stay" attribute="Open Globbing Brackets" String="[^\s\[\]\\](?=[&quot;\s]|$)"/> <!-- &noPathChar; -->
-				<IncludeRules context="_default_square_brackets"/>
-			</context>
-			<context name="_round_brackets" attribute="Globbing Brackets" lineEndContext="#pop">
-				<DetectChar context="#pop" attribute="Globbing Brackets" char=")"/>
-				<RegExpr context="#stay" attribute="Open Globbing Brackets" String="[^&noPathChar;\(\[\{\\](?=[&quot;\s]|$)"/> <!-- &noPathChar; -->
-				<IncludeRules context="_default_path"/>
-				<IncludeRules context="_default_round_brackets"/>
-			</context>
-
-			<!-- Brackets quoted (allow spaces and line breaks) -->
-			<context name="_curly_brackets_quoted" attribute="Globbing Brackets" lineEndContext="#stay">
-				<DetectChar context="#pop" attribute="Globbing Brackets" char="}"/>
-				<DetectChar context="#pop" char="&quot;" lookAhead="true"/>
-				<RegExpr context="#stay" attribute="Open Globbing Brackets" String="[^\s&quot;\(\[\{\}\\](?=\s*&quot;)"/>
-				<IncludeRules context="_default_quoted"/>
-				<IncludeRules context="_default_curly_brackets"/>
-			</context>
-			<context name="_square_brackets_quoted" attribute="Globbing Brackets" lineEndContext="#pop!_square_brackets_content_quoted" fallthrough="true" fallthroughContext="#pop!_square_brackets_content_quoted">
-				<RegExpr context="#pop!_square_brackets_content_quoted" attribute="Globbing Char of Brackets" String="\^(?=[^\]&quot;])"/>
-			</context>
-			<context name="_square_brackets_content_quoted" attribute="Globbing Brackets" lineEndContext="#stay">
-				<DetectChar context="#pop" attribute="Globbing Brackets" char="]"/>
-				<DetectChar context="#pop" char="&quot;" lookAhead="true"/>
-				<RegExpr context="#stay" attribute="Open Globbing Brackets" String="[^\s&quot;\[\]\\](?=\s*&quot;)"/>
-				<IncludeRules context="_default_square_brackets"/>
-			</context>
-			<context name="_round_brackets_quoted" attribute="Globbing Brackets" lineEndContext="#stay">
-				<DetectChar context="#pop" attribute="Globbing Brackets" char=")"/>
-				<DetectChar context="#pop" char="&quot;" lookAhead="true"/>
-				<RegExpr context="#stay" attribute="Open Globbing Brackets" String="[^\s&quot;\[\{\(\)\\](?=\s*&quot;)"/>
-				<IncludeRules context="_default_quoted"/>
-				<IncludeRules context="_default_round_brackets"/>
-			</context>
-
-			<context name="_default_curly_brackets" attribute="Globbing Brackets" lineEndContext="#stay">
-				<DetectChar context="#stay" attribute="Globbing Char of Brackets" char=","/>
-				<keyword context="#stay" String="default_variables"/>
-			</context>
-			<context name="_default_round_brackets" attribute="Globbing Brackets" lineEndContext="#stay">
-				<DetectChar context="#stay" attribute="Globbing Char of Brackets" char="|"/>
-			</context>
-			<context name="_default_square_brackets" attribute="Globbing Brackets" lineEndContext="#stay">
-				<IncludeRules context="_variable_simple"/>
-				<DetectChar context="#stay" attribute="Error" char="["/>
-				<IncludeRules context="_path_globbing_chars"/>
-			</context>
-			<context name="_brackets_error" attribute="Normal Text" lineEndContext="#stay">
-				<Detect2Chars context="#stay" attribute="Error" char="[" char1="]"/>
-				<Detect2Chars context="#stay" attribute="Error" char="{" char1="}"/>
-				<Detect2Chars context="#stay" attribute="Error" char="(" char1=")"/>
-			</context>
-
-			<!-- If the brackets are outside a path -->
-			<context name="_r_curly_brackets" attribute="Globbing Brackets" lineEndContext="#pop">
-				<DetectChar context="#pop!_find_path_after_variable" attribute="Globbing Brackets" char="}"/>
-				<IncludeRules context="_curly_brackets"/>
-			</context>
-			<context name="_r_square_brackets" attribute="Globbing Brackets" lineEndContext="#pop">
-				<DetectChar context="#pop!_find_path_after_variable" attribute="Globbing Brackets" char="]"/>
-				<IncludeRules context="_square_brackets"/>
-			</context>
-			<!-- In block of parentheses... -->
-			<context name="_p_curly_brackets" attribute="Globbing Brackets" lineEndContext="#pop">
-				<DetectChar context="#pop!_parentheses_find_path_after_variable" attribute="Globbing Brackets" char="}"/>
-				<IncludeRules context="_curly_brackets"/>
-			</context>
-			<context name="_p_square_brackets" attribute="Globbing Brackets" lineEndContext="#pop">
-				<DetectChar context="#pop!_parentheses_find_path_after_variable" attribute="Globbing Brackets" char="]"/>
-				<IncludeRules context="_square_brackets"/>
-			</context>
-
-			<!-- Path Quoted -->
-			<context name="_find_text_quoted" attribute="Normal Text" lineEndContext="#stay">
-				<DetectChar context="_quoted" attribute="Text Quoted" char="&quot;"/>
-			</context>
-			<context name="_quoted" attribute="Text Quoted" lineEndContext="#stay">
-				<DetectChar context="#pop" attribute="Text Quoted" char="&quot;"/>
-				<IncludeRules context="_default_quoted"/>
-				<Detect2Chars context="_hat_path_quoted" char="/" char1="/" lookAhead="true"/>
-			</context>
-			<context name="_default_quoted" attribute="Text Quoted" lineEndContext="#stay">
-				<IncludeRules context="_variable_simple"/>
-				<IncludeRules context="_brackets_error"/>
-				<DetectChar context="_curly_brackets_quoted" attribute="Globbing Brackets" char="{"/>
-				<DetectChar context="_square_brackets_quoted" attribute="Globbing Brackets" char="["/>
-				<DetectChar context="_round_brackets_quoted" attribute="Globbing Brackets" char="("/>
-				<IncludeRules context="_path_globbing_chars"/>
-			</context>
-
-		</contexts>
-
-		<itemDatas>
-			<itemData name="Normal Text"    defStyleNum="dsNormal"       spellChecking="false"/>
-			<itemData name="Path"           defStyleNum="dsNormal"       bold="0" spellChecking="false"/>
-			<itemData name="Text Quoted"    defStyleNum="dsString"       bold="0" spellChecking="false"/>
-			<itemData name="Comment"        defStyleNum="dsComment"/>
-			<itemData name="URL in Comment" defStyleNum="dsComment"      underline="1" spellChecking="false" />
-			<itemData name="Preprocessor"   defStyleNum="dsPreprocessor" spellChecking="false"/>
-			<itemData name="Prep. Lib"      defStyleNum="dsImport"       underline="0" spellChecking="false"/>
-			<itemData name="Open Prep. Lib" defStyleNum="dsImport"       underline="1" spellChecking="false"/>
-			<itemData name="Variable"       defStyleNum="dsInformation"  bold="0" spellChecking="false"/>
-
-			<itemData name="Profile Head"     defStyleNum="dsFunction"  bold="1" underline="0" spellChecking="false"/>
-			<itemData name="Profile Name"     defStyleNum="dsFunction"  bold="0" underline="0" spellChecking="false"/>
-			<itemData name="Qualifier"        defStyleNum="dsKeyword"   bold="1" underline="0" spellChecking="false"/>
-			<itemData name="Access Qualifier" defStyleNum="dsWarning"   bold="1" underline="0" spellChecking="false"/>
-			<itemData name="File Qualifier"   defStyleNum="dsVariable"  bold="1" underline="0" spellChecking="false"/>
-			<itemData name="Rule"             defStyleNum="dsVariable"  bold="1" underline="0" spellChecking="false"/>
-			<itemData name="Data"             defStyleNum="dsVariable"  bold="0" spellChecking="false"/>
-			<itemData name="Other Data"       defStyleNum="dsNormal"    bold="0" italic="1" spellChecking="false"/>
-			<itemData name="Permissions"      defStyleNum="dsNormal"    bold="1" spellChecking="false"/>
-
-			<itemData name="Option"                  defStyleNum="dsOthers"        bold="0" spellChecking="false"/>
-			<itemData name="Other Option"            defStyleNum="dsDataType"      bold="0" spellChecking="false"/>
-			<itemData name="Flags"                   defStyleNum="dsVerbatimString"         spellChecking="false"/>
-			<itemData name="SubProfile/Hat"          defStyleNum="dsAnnotation"    bold="0" spellChecking="false"/>
-			<itemData name="SubProfile/Hat Operator" defStyleNum="dsAnnotation"    bold="1" spellChecking="false"/>
-			<itemData name="Operator 1"              defStyleNum="dsOperator"      spellChecking="false"/>
-			<itemData name="Operator 2"              defStyleNum="dsWarning"       bold="1" spellChecking="false"/>
-			<itemData name="Number"                  defStyleNum="dsDecVal"        spellChecking="false"/>
-			<itemData name="Numerical Unit"          defStyleNum="dsDecVal"        bold="1" spellChecking="false"/>
-			<itemData name="End of Rule Char"        defStyleNum="dsNormal"        spellChecking="false"/>
-
-			<itemData name="Escape Char"               defStyleNum="dsSpecialChar"    bold="0" spellChecking="false"/>
-			<itemData name="Globbing Char"             defStyleNum="dsSpecialChar"    bold="0" spellChecking="false"/>
-			<itemData name="Globbing Char of Brackets" defStyleNum="dsBuiltIn"        bold="0" spellChecking="false"/>
-			<itemData name="Globbing Brackets"         defStyleNum="dsVerbatimString" bold="0" underline="0" spellChecking="false"/>
-			<itemData name="Open Globbing Brackets"    defStyleNum="dsVerbatimString" bold="0" underline="1" spellChecking="false"/>
-
-			<itemData name="Transition Profile Name"      defStyleNum="dsFunction"    bold="0" italic="1" underline="0" spellChecking="false"/>
-			<itemData name="Globbing Char in Tran. Prof." defStyleNum="dsSpecialChar" bold="0" italic="1" spellChecking="false"/>
-			<itemData name="Hat Operator in Tran. Prof."  defStyleNum="dsAnnotation"  bold="1" italic="1" spellChecking="false"/>
-
-			<itemData name="Rule Error"             defStyleNum="dsVariable" bold="1" underline="1" spellChecking="false"/>
-			<itemData name="Qualifier Error"        defStyleNum="dsNormal"   bold="1" underline="1" spellChecking="false"/>
-			<itemData name="Access Qualifier Error" defStyleNum="dsWarning"  bold="1" underline="1" spellChecking="false"/>
-			<itemData name="File Qualifier Error"   defStyleNum="dsVariable" bold="1" underline="1" spellChecking="false"/>
-			<itemData name="Profile Head Error"     defStyleNum="dsFunction" bold="1" underline="1" spellChecking="false"/>
-			<itemData name="Profile Name Error"     defStyleNum="dsFunction" bold="0" underline="1" spellChecking="false"/>
-			<itemData name="Error"                  defStyleNum="dsError"    spellChecking="false"/>
-		</itemDatas>
-
-	</highlighting>
-
-	<general>
-		<!-- Keyword delimiters: .()<>=/\[]{},"'^;:| -->
-		<keywords casesensitive="true" additionalDeliminator="&quot;&apos;" weakDeliminator="!+-%*?~&amp;"/>
-
-		<comments>
-			<comment name="singleLine" start="#"/>
-		</comments>
-	</general>
+		<context name="_rule_changeprofile" attribute="Normal Text" lineEndContext="#stay">
+			<Detect2Chars context="#pop!_profile_transition" attribute="Operator 2" char="-" char1="&gt;"/>
+			<keyword context="#stay" attribute="Data" String="rule_changeprofile"/>
+			<IncludeRules context="_default_rule"/>
+		</context>
+
+		<!-- File Rule -->
+		<context name="_rule_file" attribute="Normal Text" lineEndContext="#stay">
+			<Detect2Chars context="#pop!_profile_transition" attribute="Operator 2" char="-" char1="&gt;"/>
+			<IncludeRules context="_default_rule_with_comments"/>
+			<IncludeRules context="_permissions"/>
+		</context>
+
+		<!-- Profile Transition:
+		     Highlight the profile name in File Rule (Execute Mode) and Change Profile Rule. -->
+		<context name="_profile_transition" attribute="Transition Profile Name" lineEndContext="#stay" fallthrough="true" fallthroughContext="#pop">
+			<DetectSpaces context="#stay" attribute="Normal Text"/>
+			<!-- Not highlighting paths and paths quoted -->
+			<RegExpr context="#pop!_default_rule_with_comments" attribute="Path" String="([^\s/\[\\]|//|\\.|\[([^\s\]\\]|\\.)*\])*/($|[^/])" lookAhead="true"/>
+			<RegExpr context="#pop!_default_rule_with_comments" attribute="Normal Text" String="&quot;([^/&quot;\[\\]|//|\\.|\[([^&quot;\]\\]|\\.)*\])*/($|[^/])" lookAhead="true"/>
+
+			<DetectChar context="#pop!_t_profile_name_quoted" attribute="Transition Profile Name" char="&quot;"/>
+			<RegExpr context="#pop!_profile_transition_content" attribute="Normal Text" String="[^\s/]" lookAhead="true"/> <!-- First word -->
+		</context>
+		<context name="_profile_transition_content" attribute="Transition Profile Name" lineEndContext="#pop!_default_rule_with_comments">
+			<RegExpr context="#pop!_default_rule_with_comments" attribute="Error" String="\(\S*(?=,([&noPathChar;]|$))"/>
+			<RegExpr context="#pop!_default_rule_with_comments" attribute="Normal Text" String="&endPath;" lookAhead="true"/> <!-- End rule -->
+			<DetectSpaces context="#pop" attribute="Normal Text" lookAhead="true"/> <!-- End of the profile name -->
+
+			<DetectChar context="#stay" attribute="Error" char="&quot;"/>
+			<StringDetect context="#pop!_default_rule_with_comments" attribute="Error" String="#include" insensitive="true"/>
+			<RegExpr context="#stay" String="//(?=&endPath;)"/>
+			<IncludeRules context="_default_profile_transition"/>
+		</context>
+		<context name="_t_profile_name_quoted" attribute="Transition Profile Name" lineEndContext="#pop!_default_rule_with_comments">
+			<DetectChar context="#pop!_default_rule_with_comments" attribute="Transition Profile Name" char="&quot;"/>
+			<IncludeRules context="_default_profile_transition"/>
+		</context>
+		<context name="_default_profile_transition" attribute="Transition Profile Name" lineEndContext="#stay">
+			<IncludeRules context="_variable_simple"/>
+			<AnyChar context="#stay" attribute="Globbing Char in Tran. Prof." String="&globbChars;"/>
+			<IncludeRules context="_profile_transition_escape"/>
+			<RegExpr context="#stay" attribute="Hat Operator in Tran. Prof." String="//(?=[^&noPathChar;/])"/>
+		</context>
+
+		<!-- Change Hat / Child Profile (name//HAT).
+		     NOTE: Old style (name^HAT) not included -->
+		<context name="_hat_path" attribute="Path" lineEndContext="#pop">
+			<RegExpr context="#pop" attribute="Path" String="/(?=/&endPath;)"/>
+			<RegExpr context="#pop!_hat_path_content" attribute="SubProfile/Hat Operator" String="//(?=([^\s&quot;/\\]|\\.)+([\s&quot;]|$))"/>
+			<DetectChar context="#pop" attribute="Path" char="/"/>
+		</context>
+		<context name="_hat_path_parentheses" attribute="Path" lineEndContext="#pop">
+			<RegExpr context="#pop!_hat_path_parentheses_content" attribute="SubProfile/Hat Operator" String="//(?=([^&noPathChar;/\\,]|\\.)+([&noPathChar;,]|$))"/>
+			<DetectChar context="#pop" attribute="Path" char="/"/>
+		</context>
+		<context name="_hat_path_quoted" attribute="Text Quoted" lineEndContext="#pop">
+			<RegExpr context="#pop!_hat_path_quoted_content" attribute="SubProfile/Hat Operator" String="//(?=([^&quot;/\\]|\\.)+&quot;)"/>
+			<DetectChar context="#pop" attribute="Text Quoted" char="/"/>
+		</context>
+
+		<context name="_hat_path_content" attribute="SubProfile/Hat" lineEndContext="#pop">
+			<RegExpr context="#pop" String="&endPath;" lookAhead="true"/> <!-- End Path -->
+			<IncludeRules context="_default_path"/>
+		</context>
+		<context name="_hat_path_parentheses_content" attribute="SubProfile/Hat" lineEndContext="#pop">
+			<DetectChar context="#pop" char="," lookAhead="true"/> <!-- End Path -->
+			<IncludeRules context="_default_path"/>
+		</context>
+		<context name="_hat_path_quoted_content" attribute="SubProfile/Hat" lineEndContext="#pop">
+			<DetectChar context="#pop" char="&quot;" lookAhead="true"/>
+			<IncludeRules context="_default_quoted"/>
+		</context>
+
+		<!-- Parentheses Block: ( ) -->
+		<context name="_common_parentheses_block" attribute="Normal Text" lineEndContext="#stay">
+			<DetectChar context="#pop" attribute="Normal Text" char=")"/>
+			<!-- Highlight as path the text after the '=' operator, except keywords or simple words ([\w\-\+]+) -->
+			<RegExpr context="#stay" attribute="Error" String="\=(?=\s*($|[,\)]))"/>
+			<RegExpr context="_parentheses_path_content" attribute="Operator 1" String="\=\s*(?=[^\s&quot;\(\),]*[^&noPathChar;\]\}\=\w\+\-\(,])"/>
+			<DetectChar context="_parentheses_path_content" attribute="Path" char="/" lookAhead="true"/>
+			<Detect2Chars context="_parentheses_variable" attribute="Variable" char="@" char1="{" lookAhead="true"/>
+
+			<IncludeRules context="_common"/>
+			<DetectChar context="_round_brackets" attribute="Globbing Brackets" char="("/>
+			<DetectChar context="_p_curly_brackets" attribute="Globbing Brackets" char="{"/>
+			<DetectChar context="_p_square_brackets" attribute="Globbing Brackets" char="["/>
+			<IncludeRules context="_comment_not_allowed"/>
+		</context>
+		<context name="_parentheses_block_profile" attribute="Normal Text" lineEndContext="#stay">
+			<keyword context="#stay" attribute="Flags" String="profile_flags"/>
+			<!-- Used by xattrs -->
+			<RegExpr context="#stay" attribute="Other Option" String="\b[a-zA-Z](\.?[\w\-])*(?=\s*\=)"/>
+			<IncludeRules context="_common_parentheses_block"/>
+			<IncludeRules context="_end_rule_irnc"/>
+		</context>
+		<context name="_default_parentheses_block_rule" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_common_parentheses_block"/>
+			<IncludeRules context="_operators_keywords"/>
+			<IncludeRules context="_end_rule_irnc_parentheses_rule"/>
+		</context>
+
+		<!-- Finding the end of a rule -->
+		<context name="_end_rule" attribute="Normal Text" lineEndContext="#stay">
+			<RegExpr context="#stay" attribute="Normal Text" String=",(?=(\)|[\w\-]+[^\s\w\-,#\(&quot;]))"/> <!-- Fix possible incorrect rule closures -->
+			<DetectChar  context="#pop" attribute="End of Rule Char" char="," endRegion="Rule"/>
+			<IncludeRules context="_end_rule_irnc"/>
+		</context>
+		<!-- Rule/Profile on new line, in rule not closed -->
+		<context name="_end_rule_irnc" attribute="Normal Text" lineEndContext="#stay">
+			<keyword String="profile_head" context="#pop!_profile_name" attribute="Profile Head Error" firstNonSpace="true" endRegion="Rule"/>
+			<keyword String="access_types"          context="#pop" attribute="Access Qualifier Error"  firstNonSpace="true" endRegion="Rule"/>
+			<keyword String="qualifiers"            context="#pop" attribute="Qualifier Error"         firstNonSpace="true" endRegion="Rule"/>
+			<keyword String="file_qualifiers"       context="#pop" attribute="File Qualifier Error"    firstNonSpace="true" endRegion="Rule"/>
+			<RegExpr String="set(?=\s+rlimit\b)"    context="#pop" attribute="Rule Error"              firstNonSpace="true" endRegion="Rule"/>
+
+			<keyword String="rule_name_file"          context="#pop!_rule_file"          attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
+			<keyword String="rule_name_alias" context="#pop!_default_rule_with_comments" attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
+			<keyword String="rule_name_capability"    context="#pop!_rule_capability"    attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
+			<keyword String="rule_name_network"       context="#pop!_rule_network"       attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
+			<keyword String="rule_name_pivotroot"     context="#pop!_rule_pivotroot"     attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
+			<keyword String="rule_name_ptrace"        context="#pop!_rule_ptrace"        attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
+			<keyword String="rule_name_signal"        context="#pop!_rule_signal"        attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
+			<keyword String="rule_name_dbus"          context="#pop!_rule_dbus"          attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
+			<keyword String="rule_name_link"          context="#pop!_rule_link"          attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
+			<keyword String="rule_name_changeprofile" context="#pop!_rule_changeprofile" attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
+			<keyword String="rule_name_rlimit"        context="#pop!_rule_rlimit"        attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
+			<!-- This must be at the end of each rule context, to avoid replacing the 'unix' & 'remount' keywords
+			     ('unix' is also a domain of the network rule; 'remount' is also a flag of the mount rule). -->
+			<keyword String="rule_name_mount" context="#pop!_rule_mount" attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
+			<keyword String="rule_name_unix"  context="#pop!_rule_unix"  attribute="Rule Error" firstNonSpace="true" endRegion="Rule" beginRegion="Rule"/>
+		</context>
+		<!-- For blocks of parentheses within rules (the same keywords as "_end_rule_irnc"!) -->
+		<context name="_end_rule_irnc_parentheses_rule" attribute="Normal Text" lineEndContext="#stay">
+			<keyword String="profile_head"            context="#pop" attribute="Profile Head Error"     lookAhead="true" firstNonSpace="true"/>
+			<keyword String="access_types"            context="#pop" attribute="Access Qualifier Error" lookAhead="true" firstNonSpace="true"/>
+			<keyword String="qualifiers"              context="#pop" attribute="Qualifier Error"        lookAhead="true" firstNonSpace="true"/>
+			<keyword String="file_qualifiers"         context="#pop" attribute="File Qualifier Error"   lookAhead="true" firstNonSpace="true"/>
+			<RegExpr String="set(?=\s+rlimit\b)"      context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+			<keyword String="rule_name_file"          context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+			<keyword String="rule_name_alias"         context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+			<keyword String="rule_name_capability"    context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+			<keyword String="rule_name_network"       context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+			<keyword String="rule_name_pivotroot"     context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+			<keyword String="rule_name_ptrace"        context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+			<keyword String="rule_name_signal"        context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+			<keyword String="rule_name_dbus"          context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+			<keyword String="rule_name_link"          context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+			<keyword String="rule_name_changeprofile" context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+			<keyword String="rule_name_rlimit"        context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+			<!-- Keep at the end to avoid conflicts! -->
+			<keyword String="rule_name_mount" context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+			<keyword String="rule_name_unix"  context="#pop" attribute="Rule Error" lookAhead="true" firstNonSpace="true"/>
+		</context>
+
+		<!-- Paths & File Globals -->
+
+		<context name="_find_path" attribute="Normal Text" lineEndContext="#stay">
+			<DetectChar context="_path_content" attribute="Path" char="/" lookAhead="true"/>
+			<RegExpr context="_path_content" String=":([^:&noPathChar;\(\\]|\\.)+:" lookAhead="true"/> <!-- :namespace: -->
+		</context>
+		<context name="_path_content" attribute="Path" lineEndContext="#pop">
+			<RegExpr context="#pop" String="&endPath;" lookAhead="true"/>
+			<IncludeRules context="_default_path"/>
+			<Detect2Chars context="_hat_path" char="/" char1="/" lookAhead="true"/>
+		</context>
+		<context name="_parentheses_path_content" attribute="Path" lineEndContext="#pop">
+			<DetectChar context="#pop" char="," lookAhead="true"/>
+			<IncludeRules context="_default_path"/>
+			<Detect2Chars context="_hat_path_parentheses" char="/" char1="/" lookAhead="true"/>
+		</context>
+		<context name="_default_path" attribute="Path" lineEndContext="#pop">
+			<DetectSpaces context="#pop" lookAhead="true"/>
+			<AnyChar context="#pop" String="&noPathCharWithoutSpace;" lookAhead="true"/>
+			<IncludeRules context="_variable_simple"/>
+			<IncludeRules context="_path_globbing"/>
+		</context>
+
+		<!-- Globbing -->
+		<context name="_path_globbing" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_brackets_error"/>
+			<DetectChar context="_curly_brackets" attribute="Globbing Brackets" char="{"/>
+			<DetectChar context="_square_brackets" attribute="Globbing Brackets" char="["/>
+			<DetectChar context="_round_brackets" attribute="Globbing Brackets" char="("/>
+			<IncludeRules context="_path_globbing_chars"/>
+		</context>
+		<context name="_path_globbing_chars" attribute="Normal Text" lineEndContext="#stay">
+			<AnyChar context="#stay" attribute="Globbing Char" String="&globbChars;"/>
+			<IncludeRules context="_escape"/>
+		</context>
+		<!-- Escapes: Hexadecimal (\xNN), decimal (\dNNN) & octal (\NNN). Also make literal any character.
+		     NOTE: Reserved character escape sequences: \\&quot;aefnrt0 -->
+		<context name="_escape" attribute="Normal Text" lineEndContext="#stay">
+			<RegExpr context="#stay" attribute="Escape Char" String="\\(x[a-fA-F\d]{1,2}|d\d{1,3}|[0-3][0-7]{0,2}|[4-7][0-7]?|.)"/>
+		</context>
+		<context name="_profile_transition_escape" attribute="Transition Profile Name" lineEndContext="#stay">
+			<RegExpr context="#stay" attribute="Globbing Char in Tran. Prof." String="\\(x[a-fA-F\d]{1,2}|d\d{1,3}|[0-3][0-7]{0,2}|[4-7][0-7]?|.)"/>
+		</context>
+
+		<!-- Groups of brackets: { }, [ ] and ( ) -->
+		<context name="_curly_brackets" attribute="Globbing Brackets" lineEndContext="#pop">
+			<DetectChar context="#pop" attribute="Globbing Brackets" char="}"/>
+			<RegExpr context="#stay" attribute="Open Globbing Brackets" String="[^&noPathChar;\(\[\{\}\\](?=[&noPathChar;]|$)"/>
+			<IncludeRules context="_default_path"/>
+			<IncludeRules context="_default_curly_brackets"/>
+		</context>
+		<context name="_square_brackets" attribute="Globbing Brackets" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_square_brackets_content">
+			<RegExpr context="#pop!_square_brackets_content" attribute="Globbing Char of Brackets" String="\^(?=[^\s\]&quot;])"/>
+		</context>
+		<context name="_square_brackets_content" attribute="Globbing Brackets" lineEndContext="#pop">
+			<DetectChar context="#pop" attribute="Globbing Brackets" char="]"/>
+			<DetectSpaces context="#pop" lookAhead="true"/>
+			<DetectChar context="#pop" char="&quot;" lookAhead="true"/> <!-- &noPathChar; -->
+			<RegExpr context="#stay" attribute="Open Globbing Brackets" String="[^\s\[\]\\](?=[&quot;\s]|$)"/> <!-- &noPathChar; -->
+			<IncludeRules context="_default_square_brackets"/>
+		</context>
+		<context name="_round_brackets" attribute="Globbing Brackets" lineEndContext="#pop">
+			<DetectChar context="#pop" attribute="Globbing Brackets" char=")"/>
+			<RegExpr context="#stay" attribute="Open Globbing Brackets" String="[^&noPathChar;\(\[\{\\](?=[&quot;\s]|$)"/> <!-- &noPathChar; -->
+			<IncludeRules context="_default_path"/>
+			<IncludeRules context="_default_round_brackets"/>
+		</context>
+
+		<!-- Brackets quoted (allow spaces and line breaks) -->
+		<context name="_curly_brackets_quoted" attribute="Globbing Brackets" lineEndContext="#stay">
+			<DetectChar context="#pop" attribute="Globbing Brackets" char="}"/>
+			<DetectChar context="#pop" char="&quot;" lookAhead="true"/>
+			<RegExpr context="#stay" attribute="Open Globbing Brackets" String="[^\s&quot;\(\[\{\}\\](?=\s*&quot;)"/>
+			<IncludeRules context="_default_quoted"/>
+			<IncludeRules context="_default_curly_brackets"/>
+		</context>
+		<context name="_square_brackets_quoted" attribute="Globbing Brackets" lineEndContext="#pop!_square_brackets_content_quoted" fallthrough="true" fallthroughContext="#pop!_square_brackets_content_quoted">
+			<RegExpr context="#pop!_square_brackets_content_quoted" attribute="Globbing Char of Brackets" String="\^(?=[^\]&quot;])"/>
+		</context>
+		<context name="_square_brackets_content_quoted" attribute="Globbing Brackets" lineEndContext="#stay">
+			<DetectChar context="#pop" attribute="Globbing Brackets" char="]"/>
+			<DetectChar context="#pop" char="&quot;" lookAhead="true"/>
+			<RegExpr context="#stay" attribute="Open Globbing Brackets" String="[^\s&quot;\[\]\\](?=\s*&quot;)"/>
+			<IncludeRules context="_default_square_brackets"/>
+		</context>
+		<context name="_round_brackets_quoted" attribute="Globbing Brackets" lineEndContext="#stay">
+			<DetectChar context="#pop" attribute="Globbing Brackets" char=")"/>
+			<DetectChar context="#pop" char="&quot;" lookAhead="true"/>
+			<RegExpr context="#stay" attribute="Open Globbing Brackets" String="[^\s&quot;\[\{\(\)\\](?=\s*&quot;)"/>
+			<IncludeRules context="_default_quoted"/>
+			<IncludeRules context="_default_round_brackets"/>
+		</context>
+
+		<context name="_default_curly_brackets" attribute="Globbing Brackets" lineEndContext="#stay">
+			<DetectChar context="#stay" attribute="Globbing Char of Brackets" char=","/>
+			<keyword context="#stay" String="default_variables"/>
+		</context>
+		<context name="_default_round_brackets" attribute="Globbing Brackets" lineEndContext="#stay">
+			<DetectChar context="#stay" attribute="Globbing Char of Brackets" char="|"/>
+		</context>
+		<context name="_default_square_brackets" attribute="Globbing Brackets" lineEndContext="#stay">
+			<IncludeRules context="_variable_simple"/>
+			<DetectChar context="#stay" attribute="Error" char="["/>
+			<IncludeRules context="_path_globbing_chars"/>
+		</context>
+		<context name="_brackets_error" attribute="Normal Text" lineEndContext="#stay">
+			<Detect2Chars context="#stay" attribute="Error" char="[" char1="]"/>
+			<Detect2Chars context="#stay" attribute="Error" char="{" char1="}"/>
+			<Detect2Chars context="#stay" attribute="Error" char="(" char1=")"/>
+		</context>
+
+		<!-- If the brackets are outside a path -->
+		<context name="_r_curly_brackets" attribute="Globbing Brackets" lineEndContext="#pop">
+			<DetectChar context="#pop!_find_path_after_variable" attribute="Globbing Brackets" char="}"/>
+			<IncludeRules context="_curly_brackets"/>
+		</context>
+		<context name="_r_square_brackets" attribute="Globbing Brackets" lineEndContext="#pop">
+			<DetectChar context="#pop!_find_path_after_variable" attribute="Globbing Brackets" char="]"/>
+			<IncludeRules context="_square_brackets"/>
+		</context>
+		<!-- In block of parentheses... -->
+		<context name="_p_curly_brackets" attribute="Globbing Brackets" lineEndContext="#pop">
+			<DetectChar context="#pop!_parentheses_find_path_after_variable" attribute="Globbing Brackets" char="}"/>
+			<IncludeRules context="_curly_brackets"/>
+		</context>
+		<context name="_p_square_brackets" attribute="Globbing Brackets" lineEndContext="#pop">
+			<DetectChar context="#pop!_parentheses_find_path_after_variable" attribute="Globbing Brackets" char="]"/>
+			<IncludeRules context="_square_brackets"/>
+		</context>
+
+		<!-- Path Quoted -->
+		<context name="_find_text_quoted" attribute="Normal Text" lineEndContext="#stay">
+			<DetectChar context="_quoted" attribute="Text Quoted" char="&quot;"/>
+		</context>
+		<context name="_quoted" attribute="Text Quoted" lineEndContext="#stay">
+			<DetectChar context="#pop" attribute="Text Quoted" char="&quot;"/>
+			<IncludeRules context="_default_quoted"/>
+			<Detect2Chars context="_hat_path_quoted" char="/" char1="/" lookAhead="true"/>
+		</context>
+		<context name="_default_quoted" attribute="Text Quoted" lineEndContext="#stay">
+			<IncludeRules context="_variable_simple"/>
+			<IncludeRules context="_brackets_error"/>
+			<DetectChar context="_curly_brackets_quoted" attribute="Globbing Brackets" char="{"/>
+			<DetectChar context="_square_brackets_quoted" attribute="Globbing Brackets" char="["/>
+			<DetectChar context="_round_brackets_quoted" attribute="Globbing Brackets" char="("/>
+			<IncludeRules context="_path_globbing_chars"/>
+		</context>
+
+	</contexts>
+
+	<itemDatas>
+		<itemData name="Normal Text"    defStyleNum="dsNormal"       spellChecking="false"/>
+		<itemData name="Path"           defStyleNum="dsNormal"       bold="0" spellChecking="false"/>
+		<itemData name="Text Quoted"    defStyleNum="dsString"       bold="0" spellChecking="false"/>
+		<itemData name="Comment"        defStyleNum="dsComment"/>
+		<itemData name="URL in Comment" defStyleNum="dsComment"      underline="1" spellChecking="false" />
+		<itemData name="Preprocessor"   defStyleNum="dsPreprocessor" spellChecking="false"/>
+		<itemData name="Prep. Lib"      defStyleNum="dsImport"       underline="0" spellChecking="false"/>
+		<itemData name="Open Prep. Lib" defStyleNum="dsImport"       underline="1" spellChecking="false"/>
+		<itemData name="Variable"       defStyleNum="dsInformation"  bold="0" spellChecking="false"/>
+
+		<itemData name="Profile Head"     defStyleNum="dsFunction"  bold="1" underline="0" spellChecking="false"/>
+		<itemData name="Profile Name"     defStyleNum="dsFunction"  bold="0" underline="0" spellChecking="false"/>
+		<itemData name="Qualifier"        defStyleNum="dsKeyword"   bold="1" underline="0" spellChecking="false"/>
+		<itemData name="Access Qualifier" defStyleNum="dsWarning"   bold="1" underline="0" spellChecking="false"/>
+		<itemData name="File Qualifier"   defStyleNum="dsVariable"  bold="1" underline="0" spellChecking="false"/>
+		<itemData name="Rule"             defStyleNum="dsVariable"  bold="1" underline="0" spellChecking="false"/>
+		<itemData name="Data"             defStyleNum="dsVariable"  bold="0" spellChecking="false"/>
+		<itemData name="Other Data"       defStyleNum="dsNormal"    bold="0" italic="1" spellChecking="false"/>
+		<itemData name="Permissions"      defStyleNum="dsNormal"    bold="1" spellChecking="false"/>
+
+		<itemData name="Option"                  defStyleNum="dsOthers"        bold="0" spellChecking="false"/>
+		<itemData name="Other Option"            defStyleNum="dsDataType"      bold="0" spellChecking="false"/>
+		<itemData name="Flags"                   defStyleNum="dsVerbatimString"         spellChecking="false"/>
+		<itemData name="SubProfile/Hat"          defStyleNum="dsAnnotation"    bold="0" spellChecking="false"/>
+		<itemData name="SubProfile/Hat Operator" defStyleNum="dsAnnotation"    bold="1" spellChecking="false"/>
+		<itemData name="Operator 1"              defStyleNum="dsOperator"      spellChecking="false"/>
+		<itemData name="Operator 2"              defStyleNum="dsWarning"       bold="1" spellChecking="false"/>
+		<itemData name="Number"                  defStyleNum="dsDecVal"        spellChecking="false"/>
+		<itemData name="Numerical Unit"          defStyleNum="dsDecVal"        bold="1" spellChecking="false"/>
+		<itemData name="End of Rule Char"        defStyleNum="dsNormal"        spellChecking="false"/>
+
+		<itemData name="Escape Char"               defStyleNum="dsSpecialChar"    bold="0" spellChecking="false"/>
+		<itemData name="Globbing Char"             defStyleNum="dsSpecialChar"    bold="0" spellChecking="false"/>
+		<itemData name="Globbing Char of Brackets" defStyleNum="dsBuiltIn"        bold="0" spellChecking="false"/>
+		<itemData name="Globbing Brackets"         defStyleNum="dsVerbatimString" bold="0" underline="0" spellChecking="false"/>
+		<itemData name="Open Globbing Brackets"    defStyleNum="dsVerbatimString" bold="0" underline="1" spellChecking="false"/>
+
+		<itemData name="Transition Profile Name"      defStyleNum="dsFunction"    bold="0" italic="1" underline="0" spellChecking="false"/>
+		<itemData name="Globbing Char in Tran. Prof." defStyleNum="dsSpecialChar" bold="0" italic="1" spellChecking="false"/>
+		<itemData name="Hat Operator in Tran. Prof."  defStyleNum="dsAnnotation"  bold="1" italic="1" spellChecking="false"/>
+
+		<itemData name="Rule Error"             defStyleNum="dsVariable" bold="1" underline="1" spellChecking="false"/>
+		<itemData name="Qualifier Error"        defStyleNum="dsNormal"   bold="1" underline="1" spellChecking="false"/>
+		<itemData name="Access Qualifier Error" defStyleNum="dsWarning"  bold="1" underline="1" spellChecking="false"/>
+		<itemData name="File Qualifier Error"   defStyleNum="dsVariable" bold="1" underline="1" spellChecking="false"/>
+		<itemData name="Profile Head Error"     defStyleNum="dsFunction" bold="1" underline="1" spellChecking="false"/>
+		<itemData name="Profile Name Error"     defStyleNum="dsFunction" bold="0" underline="1" spellChecking="false"/>
+		<itemData name="Error"                  defStyleNum="dsError"    spellChecking="false"/>
+	</itemDatas>
+
+</highlighting>
+
+<general>
+	<!-- Keyword delimiters: .()<>=/\[]{},"'^;:| -->
+	<keywords casesensitive="true" additionalDeliminator="&quot;&apos;" weakDeliminator="!+-%*?~&amp;"/>
+
+	<comments>
+		<comment name="singleLine" start="#"/>
+	</comments>
+</general>
 
 </language>
 <!-- kate: replace-tabs off; tab-width 3; indent-width 3; remove-trailing-spaces mod; dynamic-word-wrap off; -->
diff --git a/data/syntax/selinux-cil.xml b/data/syntax/selinux-cil.xml
--- a/data/syntax/selinux-cil.xml
+++ b/data/syntax/selinux-cil.xml
@@ -14,7 +14,7 @@
   ==========================================================================================
    This file is part of the KDE's KSyntaxHighlighting framework.
 
-   Copyright (c) 2018 Nibaldo González S. (nibgonz@gmail.com)
+   Copyright (c) 2018-2019 Nibaldo González S. (nibgonz@gmail.com)
 
    Permission is hereby granted, free of charge, to any person obtaining a copy of this
    software and associated documentation files (the "Software"), to deal in the Software
@@ -41,643 +41,645 @@
     https://github.com/SELinuxProject/selinux/tree/master/secilc/docs
 
   Change log:
-	* Version 2 [28-Aug-2018]:
-		- Implement "selinux.xml": some rules and keywords are moved there. Improve RegExp
-		  highlighting, add Android permissions and BPF permissions, improve IPv6
-		  detection and others improvements.
-		- Fix permissions list in "ioctl" kind and "call" statements.
-		- Add "sctp" protocol keyword and policy capabilities keywords.
-	* Version 1 [26-Jan-2018, by Nibaldo González]:
-		- Initial version.
+   * Version 3 [02-Apr-2019]: Remove one indentation.
+   * Version 2 [28-Aug-2018]:
+      - Implement "selinux.xml": some rules and keywords are moved there. Improve RegExp
+        highlighting, add Android permissions and BPF permissions, improve IPv6
+        detection and others improvements.
+      - Fix permissions list in "ioctl" kind and "call" statements.
+      - Add "sctp" protocol keyword and policy capabilities keywords.
+   * Version 1 [26-Jan-2018, by Nibaldo González]:
+      - Initial version.
 -->
 
 <language name="SELinux CIL Policy"
-          version="2"
+          version="3"
           kateversion="5.0"
           section="Sources"
           extensions="*.cil"
           priority="9"
           mimetype=""
           author="Nibaldo González (nibgonz@gmail.com)"
           license="MIT">
 
-	<highlighting>
-
-		<list name="expr_keys">
-			<item>and</item>
-			<item>or</item>
-			<item>xor</item>
-			<item>not</item>
-			<item>all</item>
-			<item>eq</item>
-			<item>ne</item>
-			<item>neq</item>
-			<item>dom</item>
-			<item>domby</item>
-			<item>incomp</item>
-			<item>range</item>
-		</list>
-
-		<!-- Access Vector Rules -->
-		<list name="access">
-			<item>allow</item>
-			<item>auditallow</item>
-			<item>dontaudit</item>
-			<item>neverallow</item>
-			<item>auditdeny</item>
-			<item>allowx</item>
-			<item>auditallowx</item>
-			<item>dontauditx</item>
-			<item>neverallowx</item>
-		</list>
-
-		<list name="booleans">
-			<item>true</item>
-			<item>false</item>
-		</list>
-
-		<list name="file_types">
-			<item>file</item>
-			<item>dir</item>
-			<item>char</item>
-			<item>block</item>
-			<item>socket</item>
-			<item>pipe</item>
-			<item>symlink</item>
-			<item>any</item>
-		</list>
-		<list name="fs_types">
-			<item>task</item>
-			<item>trans</item>
-			<item>xattr</item>
-		</list>
-		<list name="protocols">
-			<item>tcp</item>
-			<item>udp</item>
-			<item>dccp</item>
-			<item>sctp</item>
-		</list>
-
-		<list name="special_keys">
-			<item>self</item>
-		</list>
-		<list name="classorder_keys">
-			<item>unordered</item>
-		</list>
-		<list name="handleunknown_keys">
-			<item>allow</item>
-			<item>deny</item>
-			<item>reject</item>
-		</list>
-
-		<list name="type_statements">
-			<item>block</item>
-			<item>optional</item>
-			<item>common</item>
-			<item>class</item>
-			<item>classmap</item>
-			<item>classmapping</item>
-			<item>sid</item>
-			<item>user</item>
-			<item>role</item>
-			<item>roleattribute</item>
-			<item>type</item>
-			<item>classpermission</item>
-			<item>typeattribute</item>
-			<item>typealias</item>
-			<item>tunable</item>
-			<item>sensitivity</item>
-			<item>sensitivityalias</item>
-			<item>category</item>
-			<item>categoryalias</item>
-			<item>categoryset</item>
-			<item>level</item>
-			<item>levelrange</item>
-			<item>context</item>
-			<item>ipaddr</item>
-			<item>macro</item>
-			<item>boolean</item>
-			<!-- policycap, classpermissionset -->
-		</list>
-		<list name="policy_config_statements">
-			<item>policycap</item>
-			<item>mls</item>
-			<item>handleunknown</item>
-		</list>
-		<list name="statements">
-			<!-- Container Statements.
-			     Also: block, optional, macro -->
-			<item>blockabstract</item>
-			<item>blockinherit</item>
-			<item>in</item>
-			<item>call</item>
-
-			<!-- Default Object Statements -->
-			<item>defaultuser</item>
-			<item>defaultrole</item>
-			<item>defaulttype</item>
-			<item>defaultrange</item>
-
-			<!-- User Statements.
-			     Also: user -->
-			<item>userrole</item>
-			<item>userattribute</item>
-			<item>userattributeset</item>
-			<item>userlevel</item>
-			<item>userrange</item>
-			<item>userbounds</item>
-			<item>userprefix</item>
-			<item>selinuxuser</item>
-			<item>selinuxuserdefault</item>
-
-			<!-- Role Statements.
-			     Also: role, roleattribute -->
-			<item>roletype</item>
-			<item>roleattributeset</item>
-			<item>roleallow</item>
-			<item>roletransition</item>
-			<item>rolebounds</item>
-
-			<!-- Type Statements.
-			     Also: type, typeattribute, typealias -->
-			<item>typealiasactual</item>
-			<item>typeattributeset</item>
-			<item>typebounds</item>
-			<item>typechange</item>
-			<item>typemember</item>
-			<item>typetransition</item>
-			<item>typepermissive</item>
-			<item>attributetype</item>
-
-			<item>expandtypeattribute</item>
-			<item>nametypetransition</item>
-
-			<!-- Class and Permission Statements.
-			     Also: common, class, classmap, classmapping, classpermission -->
-			<item>classcommon</item>
-			<item>classorder</item>
-			<item>permission</item>
-			<item>permissionset</item>
-			<item>classpermissionset</item>
-			<item>permissionx</item>
-
-			<!-- Conditional Statements.
-			     Also: tunable, boolean -->
-			<item>booleanif</item>
-			<item>tunableif</item>
-
-			<!-- Constraint Statements -->
-			<item>constrain</item>
-			<item>validatetrans</item>
-			<item>mlsconstrain</item>
-			<item>mlsvalidatetrans</item>
-
-			<!-- Multi-Level Security Labeling Statements.
-			     Also: sensitivity, sensitivityalias, category, categoryalias, categoryset, level, levelrange -->
-			<item>sensitivityaliasactual</item>
-			<item>sensitivityorder</item>
-			<item>categoryaliasactual</item>
-			<item>categoryorder</item>
-			<item>sensitivitycategory</item>
-			<item>rangetransition</item>
-			<item>categoryrange</item>
-
-			<!-- Context Statement: context -->
-			<!-- SID Statements.
-			     Also: sid -->
-			<item>sidorder</item>
-			<item>sidcontext</item>
-
-			<!-- File Labeling Statements -->
-			<item>filecon</item>
-			<item>fsuse</item>
-			<item>genfscon</item>
-			<item>fscon</item>
-			<item>fsusexattr</item>
-			<item>fsusetask</item>
-			<item>fsusetrans</item>
-
-			<!-- Network Labeling Statements.
-			     Also: ipaddr -->
-			<item>netifcon</item>
-			<item>nodecon</item>
-			<item>portcon</item>
-			<!-- ipv4_addr, ipv6_addr -->
-
-			<!-- Xen Statements -->
-			<item>iomemcon</item>
-			<item>ioportcon</item>
-			<item>pcidevicecon</item>
-			<item>pirqcon</item>
-			<item>devicetreecon</item>
-
-			<!-- Infiniband Statements -->
-			<item>ibpkeycon</item>
-			<item>ibendportcon</item>
-
-			<!-- Others -->
-			<item>dominance</item>
-			<item>allowxperm</item>
-			<item>auditallowxperm</item>
-			<item>dontauditxperm</item>
-			<item>neverallowxperm</item>
-		</list>
-
-		<list name="type_name">
-			<item>string</item>
-			<item>name</item>
-			<item>ioctl</item> <!-- permissionx -->
-		</list>
-
-		<list name="other_keywords">
-			<item>source</item>
-			<item>target</item>
-			<item>low</item>
-			<item>high</item>
-			<item>low-high</item>
-
-			<item>perm</item>
-			<item>object_r</item>
-			<item>t1</item>
-			<item>t2</item>
-			<item>t3</item>
-			<item>r1</item>
-			<item>r2</item>
-			<item>r3</item>
-			<item>u1</item>
-			<item>u2</item>
-			<item>u3</item>
-			<item>l1</item>
-			<item>l2</item>
-			<item>h1</item>
-			<item>h2</item>
-		</list>
-
-		<contexts>
-
-			<context name="_normal" attribute="Normal Text" lineEndContext="#stay">
-				<DetectChar context="_rule_bracket_level1" attribute="Brackets1" char="("/>
-				<DetectChar context="#stay" attribute="Error"  char=")"/>
-				<IncludeRules context="_common"/>
-				<IncludeRules context="_identifiers"/>
-			</context>
-			<context name="_common" attribute="Normal Text" lineEndContext="#stay">
-				<DetectChar context="_comment" attribute="Comment" char=";"/>
-				<DetectChar context="_quoted" attribute="Text Quoted" char="&quot;"/>
-				<DetectChar context="_path_content" attribute="Path" char="/"/>
-
-				<!-- IP Address -->
-				<IncludeRules context="_ip_addr##SELinux Policy"/>
-				<!-- Special Characters -->
-				<DetectChar context="#stay" attribute="Special Char" char="*"/>
-
-				<!-- File Contexts: user_u:role_r:type_t:s0:c0 -->
-				<RegExpr context="_file_contexts" attribute="File Contexts" String="\b&fullIdentifier;(:&fullIdentifier;){2}(:&mlsLevel;(\s*\-\s*&mlsLevel;)?)?([^&symbol;:]|\s|$)" lookAhead="true"/>
-				<!-- Global Namespace (this avoids highlighting keywords) -->
-				<RegExpr context="#stay" String="(\b&identifier;)?(\.&identifier;)+(?=\s|[^&symbol;]|$)"/>
-
-				<!-- Numbers -->
-				<HlCHex context="#stay" attribute="Hexadecimal"/>
-				<Float context="#stay" attribute="Number"/>
-				<Int context="#stay" attribute="Number"/>
-			</context>
-			<context name="_identifiers" attribute="Normal Text" lineEndContext="#stay">
-				<!-- Avoid highlighting numbers in identifiers.
-				     IMPORTANT: Do not put this rule before the keywords! -->
-				<RegExpr context="#stay" String="&identifier;"/>
-			</context>
-
-			<context name="_comment" attribute="Comment" lineEndContext="#pop">
-				<DetectSpaces />
-				<LineContinue context="#pop" attribute="Comment"/>
-				<IncludeRules context="##Alerts"/>
-				<IncludeRules context="##Modelines"/>
-				<IncludeRules context="_default_comment##SELinux Policy"/>
-			</context>
-
-			<context name="_quoted" attribute="Text Quoted" lineEndContext="#pop">
-				<DetectChar context="#pop" attribute="Text Quoted" char="&quot;"/>
-				<IncludeRules context="_regex_quoted##SELinux Policy"/> <!-- This does not support line breaks and line cont. escape -->
-				<RegExpr context="#stay" attribute="Text Quoted Open" String="[^\s&quot;\[\(\\](?=\s*$)"/>
-			</context>
-
-			<context name="_path_content" attribute="Path" lineEndContext="#pop">
-				<DetectSpaces context="#pop" attribute="Normal Text" lookAhead="true"/>
-				<RegExpr context="#pop" attribute="Normal Text" String="[^&symbol;]" lookAhead="true"/>
-
-				<IncludeRules context="_default_regex##SELinux Policy"/>
-				<DetectChar context="_square_brackets_cil_path" attribute="RegExp Brackets (Paths)" char="["/>
-			</context>
-			<context name="_square_brackets_cil_path" attribute="RegExp Brackets (Paths)"
-			         lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_square_brackets_cil_path_content">
-			<RegExpr context="#pop!_square_brackets_cil_path_content" attribute="Special Char of Brackets (Paths)" String="\^(?=[&symbol;])"/>
-			</context>
-			<context name="_square_brackets_cil_path_content" attribute="RegExp Brackets (Paths)" lineEndContext="#pop">
-				<DetectChar context="#pop" attribute="RegExp Brackets (Paths)" char="]"/>
-				<RegExpr context="#pop" String="[^&symbol;]" lookAhead="true"/>
-				<RegExpr context="#stay" attribute="Open RegExp Brackets (Paths)" String="[^\s\[\]\\](?![&symbol;])"/>
-				<DetectChar context="#stay" attribute="Error" char="["/>
-				<IncludeRules context="_special_chars##SELinux Policy"/>
-			</context>
-
-			<!-- RULES -->
-
-			<!-- Highlighting specific keywords in some rules -->
-			<context name="_filecon_statement" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_default_end"/>
-				<keyword context="#pop" attribute="Types" String="file_types"/>
-				<IncludeRules context="_default_rule"/>
-			</context>
-			<context name="_portcon_statement" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_default_end"/>
-				<keyword context="#pop" attribute="Types" String="protocols"/>
-				<IncludeRules context="_default_rule"/>
-			</context>
-			<context name="_fsuse_statement" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_default_end"/>
-				<keyword context="#pop" attribute="Types" String="fs_types"/>
-				<IncludeRules context="_default_rule"/>
-			</context>
-			<context name="_handleunknown_statement" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_default_end"/>
-				<keyword context="#pop" attribute="Access Keys" String="handleunknown_keys"/>
-				<IncludeRules context="_default_rule"/>
-			</context>
-			<context name="_policycap_statement" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_default_end"/>
-				<IncludeRules context="_policy_capabilities##SELinux Policy"/>
-				<IncludeRules context="_common"/>
-				<IncludeRules context="_identifiers"/>
-			</context>
-			<context name="_av_permissions_statement" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_default_end"/>
-				<IncludeRules context="_av_permissions##SELinux Policy"/>
-				<IncludeRules context="_default_rule"/>
-			</context>
-			<context name="_default_end" attribute="Normal Text" lineEndContext="#stay">
-				<AnyChar context="#pop" attribute="Normal Text" String=")(" lookAhead="true"/>
-			</context>
-
-			<context name="_find_ioctl_kind" attribute="Normal Text"
-			         lineEndContext="#pop!_av_permissions_statement" fallthrough="true" fallthroughContext="#pop!_av_permissions_statement">
-				<!-- ioctl is a kind in permissionx/accessx statement:
-				     (permissionx permissionx_id (ioctl class_id (permission ... | expr ...))) -->
-				<RegExpr context="#pop" attribute="Type Name Statements" String="ioctl(?=\s+[&symbol;]+\s*\()"/>
-				<!-- ioctl can be a kind of permissionx or AV permission -->
-				<RegExpr context="#pop!_av_permissions_statement" attribute="Type Name Statements" String="ioctl(?=(\s+[&symbol;]+)?\s*($|;))"/>
-				<RegExpr context="#pop!_av_permissions_statement" attribute="Type Name Statements" String="ioctl(?=\s+[&symbol;]+\s+\d)"/>
-			</context>
-
-			<context name="_default_statement" attribute="Normal Text" lineEndContext="#stay">
-				<WordDetect context="_handleunknown_statement" attribute="Policy Config. Statements" String="handleunknown"/>
-				<WordDetect context="_policycap_statement" attribute="Policy Config. Statements" String="policycap"/>
-				<WordDetect context="_filecon_statement" attribute="Statements" String="filecon"/>
-				<WordDetect context="_fsuse_statement" attribute="Statements" String="fsuse"/>
-				<WordDetect context="_portcon_statement" attribute="Statements" String="portcon"/>
-				<!-- Fix permissions list if the keywords "ioctl" or "call" are not statements,
-				     but a permissions (see "av_permissions" keyword list of "selinux.xml"). -->
-				<RegExpr context="_av_permissions_statement" String="\b(call|ioctl)\s*\)" lookAhead="true"/>
-				<WordDetect context="_find_ioctl_kind" String="ioctl" lookAhead="true"/>
-				<WordDetect context="_av_permissions_statement" attribute="Statements" String="call"/>
-
-				<keyword context="#stay" attribute="Policy Config. Statements" String="policy_config_statements"/>
-				<keyword context="#stay" attribute="Type Statements" String="type_statements"/>
-				<keyword context="#stay" attribute="Statements" String="statements"/>
-				<keyword context="#stay" attribute="Expression Keys" String="expr_keys"/>
-				<keyword context="#stay" attribute="Access Keys" String="access"/>
-
-				<keyword context="#stay" attribute="Booleans" String="booleans"/>
-				<keyword context="#stay" attribute="Type Name Statements" String="classorder_keys"/>
-				<keyword context="#stay" attribute="Type Name Statements" String="type_name"/>
-			</context>
-			<context name="_default_rule" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_common"/>
-				<keyword context="#stay" attribute="Booleans" String="booleans"/>
-				<keyword context="#stay" attribute="Special Keys" String="special_keys"/>
-
-				<WordDetect context="#stay" attribute="Other Keywords" String="&lt;root&gt;"/>
-				<WordDetect context="#stay" attribute="Other Keywords" String="&lt;node&gt;"/>
-				<WordDetect context="#stay" attribute="Other Keywords" String="&lt;src_info&gt;"/>
-				<WordDetect context="#stay" attribute="Other Keywords" String="&lt;src_cil&gt;"/>
-				<WordDetect context="#stay" attribute="Other Keywords" String="&lt;src_hll&gt;"/>
-				<keyword context="#stay" attribute="Other Keywords" String="other_keywords"/>
-				<IncludeRules context="_filesystem##SELinux Policy"/>
-
-				<IncludeRules context="_identifiers"/>
-			</context>
-			<context name="_default_rule_without_statement" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_av_permissions##SELinux Policy"/>
-			</context>
-			<context name="_default_rule_bracket" attribute="Normal Text" lineEndContext="#stay">
-				<DetectSpaces context="#stay" attribute="Normal Text"/>
-				<DetectChar context="_comment" attribute="Comment" char=";"/>
-			</context>
-
-			<!-- Levels of rule brackets.
-			     Only the first word of a rule can be highlighted as a statement keyword. -->
-			<context name="_rule_bracket_level1" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_without_statement_level1" lineEndContext="#stay">
-				<IncludeRules context="_default_rule_bracket"/> <!-- Detect spaces & comments -->
-				<!-- Detect first word -->
-				<RegExpr context="#pop!_statement_level1" attribute="Normal Text" String="&statementchar;" lookAhead="true"/>
-			</context>
-			<context name="_statement_level1" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_level1" lineEndContext="#pop!_rule_level1">
-				<!-- When writing a statement and then a delimiter (like a space), go to the context "_rule_level1" -->
-				<IncludeRules context="_default_statement"/>
-				<RegExpr context="#pop!_rule_without_statement_level1" attribute="Normal Text" String="&statementchar;+" lookAhead="true"/>
-			</context>
-			<context name="_rule_level1" attribute="Normal Text" lineEndContext="#stay"> <!-- Rule content -->
-				<DetectChar attribute="Brackets2" context="_rule_bracket_level2" char="("/>
-				<DetectChar attribute="Brackets1" context="#pop" char=")" />
-				<IncludeRules context="_default_rule"/>
-			</context>
-			<context name="_rule_without_statement_level1" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_default_rule_without_statement"/>
-				<IncludeRules context="_rule_level1"/>
-			</context>
-
-			<context name="_rule_bracket_level2" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_without_statement_level2" lineEndContext="#stay">
-				<IncludeRules context="_default_rule_bracket"/>
-				<RegExpr context="#pop!_statement_level2" attribute="Normal Text" String="&statementchar;" lookAhead="true"/>
-			</context>
-			<context name="_statement_level2" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_level2" lineEndContext="#pop!_rule_level2">
-				<IncludeRules context="_default_statement"/>
-				<RegExpr context="#pop!_rule_without_statement_level2" attribute="Normal Text" String="&statementchar;+" lookAhead="true"/>
-			</context>
-			<context name="_rule_level2" attribute="Normal Text" lineEndContext="#stay">
-				<DetectChar attribute="Brackets3" context="_rule_bracket_level3" char="("/>
-				<DetectChar attribute="Brackets2" context="#pop" char=")" />
-				<IncludeRules context="_default_rule"/>
-			</context>
-			<context name="_rule_without_statement_level2" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_default_rule_without_statement"/>
-				<IncludeRules context="_rule_level2"/>
-			</context>
-
-			<context name="_rule_bracket_level3" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_without_statement_level3" lineEndContext="#stay">
-				<IncludeRules context="_default_rule_bracket"/>
-				<RegExpr context="#pop!_statement_level3" attribute="Normal Text" String="&statementchar;" lookAhead="true"/>
-			</context>
-			<context name="_statement_level3" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_level3" lineEndContext="#pop!_rule_level3">
-				<IncludeRules context="_default_statement"/>
-				<RegExpr context="#pop!_rule_without_statement_level3" attribute="Normal Text" String="&statementchar;+" lookAhead="true"/>
-			</context>
-			<context name="_rule_level3" attribute="Normal Text" lineEndContext="#stay">
-				<DetectChar attribute="Brackets4" context="_rule_bracket_level4" char="("/>
-				<DetectChar attribute="Brackets3" context="#pop" char=")" />
-				<IncludeRules context="_default_rule"/>
-			</context>
-			<context name="_rule_without_statement_level3" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_default_rule_without_statement"/>
-				<IncludeRules context="_rule_level3"/>
-			</context>
-
-			<context name="_rule_bracket_level4" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_without_statement_level4" lineEndContext="#stay">
-				<IncludeRules context="_default_rule_bracket"/>
-				<RegExpr context="#pop!_statement_level4" attribute="Normal Text" String="&statementchar;" lookAhead="true"/>
-			</context>
-			<context name="_statement_level4" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_level4" lineEndContext="#pop!_rule_level4">
-				<IncludeRules context="_default_statement"/>
-				<RegExpr context="#pop!_rule_without_statement_level4" attribute="Normal Text" String="&statementchar;+" lookAhead="true"/>
-			</context>
-			<context name="_rule_level4" attribute="Normal Text" lineEndContext="#stay">
-				<DetectChar attribute="Brackets5" context="_rule_bracket_level5" char="("/>
-				<DetectChar attribute="Brackets4" context="#pop" char=")" />
-				<IncludeRules context="_default_rule"/>
-			</context>
-			<context name="_rule_without_statement_level4" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_default_rule_without_statement"/>
-				<IncludeRules context="_rule_level4"/>
-			</context>
-
-			<context name="_rule_bracket_level5" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_without_statement_level5" lineEndContext="#stay">
-				<IncludeRules context="_default_rule_bracket"/>
-				<RegExpr context="#pop!_statement_level5" attribute="Normal Text" String="&statementchar;" lookAhead="true"/>
-			</context>
-			<context name="_statement_level5" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_level5" lineEndContext="#pop!_rule_level5">
-				<IncludeRules context="_default_statement"/>
-				<RegExpr context="#pop!_rule_without_statement_level5" attribute="Normal Text" String="&statementchar;+" lookAhead="true"/>
-			</context>
-			<context name="_rule_level5" attribute="Normal Text" lineEndContext="#stay">
-				<DetectChar attribute="Brackets6" context="_rule_bracket_level6" char="("/>
-				<DetectChar attribute="Brackets5" context="#pop" char=")" />
-				<IncludeRules context="_default_rule"/>
-			</context>
-			<context name="_rule_without_statement_level5" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_default_rule_without_statement"/>
-				<IncludeRules context="_rule_level5"/>
-			</context>
-
-			<context name="_rule_bracket_level6" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_without_statement_level6" lineEndContext="#stay">
-				<IncludeRules context="_default_rule_bracket"/>
-				<RegExpr context="#pop!_statement_level6" attribute="Normal Text" String="&statementchar;" lookAhead="true"/>
-			</context>
-			<context name="_statement_level6" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_level6" lineEndContext="#pop!_rule_level6">
-				<IncludeRules context="_default_statement"/>
-				<RegExpr context="#pop!_rule_without_statement_level6" attribute="Normal Text" String="&statementchar;+" lookAhead="true"/>
-			</context>
-			<context name="_rule_level6" attribute="Normal Text" lineEndContext="#stay">
-				<DetectChar attribute="Brackets1" context="_rule_bracket_level1" char="("/>
-				<DetectChar attribute="Brackets6" context="#pop" char=")" />
-				<IncludeRules context="_default_rule"/>
-			</context>
-			<context name="_rule_without_statement_level6" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_default_rule_without_statement"/>
-				<IncludeRules context="_rule_level6"/>
-			</context>
-
-			<!-- File Contexts -->
-			<!-- user:role:type -->
-			<context name="_file_contexts" attribute="File Contexts" lineEndContext="#pop">
-				<DetectChar context="#pop!_fc_role" attribute="Normal Text" char=":"/>
-				<DetectSpaces context="#pop" attribute="Normal Text" lookAhead="true"/>
-			</context>
-			<context name="_fc_role" attribute="File Contexts" lineEndContext="#pop">
-				<DetectChar context="#pop!_fc_type" attribute="Normal Text" char=":"/>
-				<DetectSpaces context="#pop" attribute="Normal Text" lookAhead="true"/>
-			</context>
-			<context name="_fc_type" attribute="File Contexts (Type Enforcement)" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
-				<RegExpr context="#pop!_fc_mls" attribute="File Contexts (Type Enforcement)" String="&fullIdentifier;(?=:&mlsLevel;)"/> <!-- Find Level/Range -->
-				<RegExpr context="#pop" attribute="File Contexts (Type Enforcement)" String="&fullIdentifier;"/>
-			</context>
-			<!-- (MLS/MCS) user:role:type:level -->
-			<context name="_fc_mls" attribute="File Contexts" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
-				<DetectChar context="#pop!_fc_level_range_sen" attribute="Normal Text" char=":"/>
-			</context>
-			<context name="_fc_level_range_sen" attribute="File Contexts" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
-				<RegExpr context="#pop!_fc_level_range_cat" attribute="Normal Text" String=":(?=&identifier;)"/> <!-- Find Category -->
-				<RegExpr context="#pop!_fc_level_sen" attribute="Normal Text" String="\s*\-\s*(?=&mlsLevel;)"/> <!-- Find Range -->
-				<RegExpr context="#stay" attribute="Normal Text" String="\.(?=&identifier;)"/>
-				<IncludeRules context="_default_fc_level"/>
-			</context>
-			<context name="_fc_level_range_cat" attribute="File Contexts" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
-				<RegExpr context="#pop!_fc_level_sen" attribute="Normal Text" String="\s*\-\s*(?=&mlsLevel;)"/> <!-- Find Range -->
-				<RegExpr context="#stay" attribute="Normal Text" String="(\.|\s*,\s*)(?=&identifier;)"/>
-				<IncludeRules context="_default_fc_level"/>
-			</context>
-			<!-- (MLS/MCS) user:role:type:level-level -->
-			<context name="_fc_level_sen" attribute="File Contexts" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
-				<RegExpr context="#pop!_fc_level_cat" attribute="Normal Text" String=":(?=&identifier;)"/> <!-- Find Category -->
-				<RegExpr context="#stay" attribute="Normal Text" String="\.(?=&identifier;)"/>
-				<IncludeRules context="_default_fc_level"/>
-			</context>
-			<context name="_fc_level_cat" attribute="File Contexts" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
-				<RegExpr context="#stay" attribute="Normal Text" String="(\.|\s*,\s*)(?=&identifier;)"/>
-				<IncludeRules context="_default_fc_level"/>
-			</context>
-			<context name="_default_fc_level" attribute="File Contexts" lineEndContext="#pop">
-				<RegExpr context="#stay" attribute="File Contexts" String="\w+"/>
-				<DetectChar context="#stay" attribute="File Contexts" char="-"/>
-			</context>
-
-		</contexts>
-
-		<itemDatas>
-			<itemData name="Normal Text" defStyleNum="dsNormal" spellChecking="false"/>
-			<itemData name="Comment"     defStyleNum="dsComment"/>
-			<itemData name="Text Quoted" defStyleNum="dsString" spellChecking="false"/>
-			<itemData name="Path"        defStyleNum="dsNormal" spellChecking="false"/>
-
-			<itemData name="Statements"                defStyleNum="dsKeyword"      bold="1" spellChecking="false"/>
-			<itemData name="Type Statements"           defStyleNum="dsFunction"     bold="1" spellChecking="false"/>
-			<itemData name="Policy Config. Statements" defStyleNum="dsPreprocessor" bold="1" spellChecking="false"/>
-			<itemData name="Access Keys"               defStyleNum="dsWarning"      bold="1" spellChecking="false"/>
-			<itemData name="Expression Keys"           defStyleNum="dsVariable"     bold="1" spellChecking="false"/>
-			<itemData name="Type Name Statements"      defStyleNum="dsDataType"     bold="1" spellChecking="false"/>
-			<itemData name="Booleans"                  defStyleNum="dsExtension"    bold="1" spellChecking="false"/>
-
-			<itemData name="Types"                defStyleNum="dsDataType"      spellChecking="false"/>
-			<itemData name="Special Keys"         defStyleNum="dsOthers"        spellChecking="false"/>
-			<itemData name="File Contexts"        defStyleNum="dsSpecialString" spellChecking="false"/>
-			<itemData name="File Contexts (Type Enforcement)" defStyleNum="dsInformation" spellChecking="false"/>
-			<itemData name="Other Keywords"       defStyleNum="dsNormal"        italic="1" spellChecking="false"/>
-
-			<itemData name="Number"      defStyleNum="dsDecVal" spellChecking="false"/>
-			<itemData name="Hexadecimal" defStyleNum="dsBaseN"  spellChecking="false"/>
-
-			<itemData name="Brackets1" defStyleNum="dsNormal" color="#ff0000" bold="1" />
-			<itemData name="Brackets2" defStyleNum="dsNormal" color="#ff8800" bold="1" />
-			<itemData name="Brackets3" defStyleNum="dsNormal" color="#888800" bold="1" />
-			<itemData name="Brackets4" defStyleNum="dsNormal" color="#008800" bold="1" />
-			<itemData name="Brackets5" defStyleNum="dsNormal" color="#000088" bold="1" />
-			<itemData name="Brackets6" defStyleNum="dsNormal" color="#880088" bold="1" />
-
-			<itemData name="Special Char"                     defStyleNum="dsSpecialChar"   spellChecking="false"/>
-			<itemData name="Special Char of Brackets (Paths)" defStyleNum="dsAnnotation"    spellChecking="false"/>
-			<itemData name="RegExp Brackets (Paths)"          defStyleNum="dsSpecialString" spellChecking="false"/>
-			<itemData name="Open RegExp Brackets (Paths)"     defStyleNum="dsSpecialString" underline="1" spellChecking="false"/>
-			<itemData name="Text Quoted Open"                 defStyleNum="dsString"        underline="1" spellChecking="false"/>
-
-			<itemData name="Error" defStyleNum="dsError" spellChecking="false"/>
-		</itemDatas>
-
-	</highlighting>
-
-	<general>
-		<keywords casesensitive="true" additionalDeliminator="&quot;&apos;&#096;" weakDeliminator="-"/>
-		<comments>
-			<comment name="singleLine" start=";"/>
-		</comments>
-	</general>
+<highlighting>
+
+	<list name="expr_keys">
+		<item>and</item>
+		<item>or</item>
+		<item>xor</item>
+		<item>not</item>
+		<item>all</item>
+		<item>eq</item>
+		<item>ne</item>
+		<item>neq</item>
+		<item>dom</item>
+		<item>domby</item>
+		<item>incomp</item>
+		<item>range</item>
+	</list>
+
+	<!-- Access Vector Rules -->
+	<list name="access">
+		<item>allow</item>
+		<item>auditallow</item>
+		<item>dontaudit</item>
+		<item>neverallow</item>
+		<item>auditdeny</item>
+		<item>allowx</item>
+		<item>auditallowx</item>
+		<item>dontauditx</item>
+		<item>neverallowx</item>
+	</list>
+
+	<list name="booleans">
+		<item>true</item>
+		<item>false</item>
+	</list>
+
+	<list name="file_types">
+		<item>file</item>
+		<item>dir</item>
+		<item>char</item>
+		<item>block</item>
+		<item>socket</item>
+		<item>pipe</item>
+		<item>symlink</item>
+		<item>any</item>
+	</list>
+	<list name="fs_types">
+		<item>task</item>
+		<item>trans</item>
+		<item>xattr</item>
+	</list>
+	<list name="protocols">
+		<item>tcp</item>
+		<item>udp</item>
+		<item>dccp</item>
+		<item>sctp</item>
+	</list>
+
+	<list name="special_keys">
+		<item>self</item>
+	</list>
+	<list name="classorder_keys">
+		<item>unordered</item>
+	</list>
+	<list name="handleunknown_keys">
+		<item>allow</item>
+		<item>deny</item>
+		<item>reject</item>
+	</list>
+
+	<list name="type_statements">
+		<item>block</item>
+		<item>optional</item>
+		<item>common</item>
+		<item>class</item>
+		<item>classmap</item>
+		<item>classmapping</item>
+		<item>sid</item>
+		<item>user</item>
+		<item>role</item>
+		<item>roleattribute</item>
+		<item>type</item>
+		<item>classpermission</item>
+		<item>typeattribute</item>
+		<item>typealias</item>
+		<item>tunable</item>
+		<item>sensitivity</item>
+		<item>sensitivityalias</item>
+		<item>category</item>
+		<item>categoryalias</item>
+		<item>categoryset</item>
+		<item>level</item>
+		<item>levelrange</item>
+		<item>context</item>
+		<item>ipaddr</item>
+		<item>macro</item>
+		<item>boolean</item>
+		<!-- policycap, classpermissionset -->
+	</list>
+	<list name="policy_config_statements">
+		<item>policycap</item>
+		<item>mls</item>
+		<item>handleunknown</item>
+	</list>
+	<list name="statements">
+		<!-- Container Statements.
+		     Also: block, optional, macro -->
+		<item>blockabstract</item>
+		<item>blockinherit</item>
+		<item>in</item>
+		<item>call</item>
+
+		<!-- Default Object Statements -->
+		<item>defaultuser</item>
+		<item>defaultrole</item>
+		<item>defaulttype</item>
+		<item>defaultrange</item>
+
+		<!-- User Statements.
+		     Also: user -->
+		<item>userrole</item>
+		<item>userattribute</item>
+		<item>userattributeset</item>
+		<item>userlevel</item>
+		<item>userrange</item>
+		<item>userbounds</item>
+		<item>userprefix</item>
+		<item>selinuxuser</item>
+		<item>selinuxuserdefault</item>
+
+		<!-- Role Statements.
+		     Also: role, roleattribute -->
+		<item>roletype</item>
+		<item>roleattributeset</item>
+		<item>roleallow</item>
+		<item>roletransition</item>
+		<item>rolebounds</item>
+
+		<!-- Type Statements.
+		     Also: type, typeattribute, typealias -->
+		<item>typealiasactual</item>
+		<item>typeattributeset</item>
+		<item>typebounds</item>
+		<item>typechange</item>
+		<item>typemember</item>
+		<item>typetransition</item>
+		<item>typepermissive</item>
+		<item>attributetype</item>
+
+		<item>expandtypeattribute</item>
+		<item>nametypetransition</item>
+
+		<!-- Class and Permission Statements.
+		     Also: common, class, classmap, classmapping, classpermission -->
+		<item>classcommon</item>
+		<item>classorder</item>
+		<item>permission</item>
+		<item>permissionset</item>
+		<item>classpermissionset</item>
+		<item>permissionx</item>
+
+		<!-- Conditional Statements.
+		     Also: tunable, boolean -->
+		<item>booleanif</item>
+		<item>tunableif</item>
+
+		<!-- Constraint Statements -->
+		<item>constrain</item>
+		<item>validatetrans</item>
+		<item>mlsconstrain</item>
+		<item>mlsvalidatetrans</item>
+
+		<!-- Multi-Level Security Labeling Statements.
+		     Also: sensitivity, sensitivityalias, category, categoryalias, categoryset, level, levelrange -->
+		<item>sensitivityaliasactual</item>
+		<item>sensitivityorder</item>
+		<item>categoryaliasactual</item>
+		<item>categoryorder</item>
+		<item>sensitivitycategory</item>
+		<item>rangetransition</item>
+		<item>categoryrange</item>
+
+		<!-- Context Statement: context -->
+		<!-- SID Statements.
+		     Also: sid -->
+		<item>sidorder</item>
+		<item>sidcontext</item>
+
+		<!-- File Labeling Statements -->
+		<item>filecon</item>
+		<item>fsuse</item>
+		<item>genfscon</item>
+		<item>fscon</item>
+		<item>fsusexattr</item>
+		<item>fsusetask</item>
+		<item>fsusetrans</item>
+
+		<!-- Network Labeling Statements.
+		     Also: ipaddr -->
+		<item>netifcon</item>
+		<item>nodecon</item>
+		<item>portcon</item>
+		<!-- ipv4_addr, ipv6_addr -->
+
+		<!-- Xen Statements -->
+		<item>iomemcon</item>
+		<item>ioportcon</item>
+		<item>pcidevicecon</item>
+		<item>pirqcon</item>
+		<item>devicetreecon</item>
+
+		<!-- Infiniband Statements -->
+		<item>ibpkeycon</item>
+		<item>ibendportcon</item>
+
+		<!-- Others -->
+		<item>dominance</item>
+		<item>allowxperm</item>
+		<item>auditallowxperm</item>
+		<item>dontauditxperm</item>
+		<item>neverallowxperm</item>
+	</list>
+
+	<list name="type_name">
+		<item>string</item>
+		<item>name</item>
+		<item>ioctl</item> <!-- permissionx -->
+	</list>
+
+	<list name="other_keywords">
+		<item>source</item>
+		<item>target</item>
+		<item>low</item>
+		<item>high</item>
+		<item>low-high</item>
+
+		<item>perm</item>
+		<item>object_r</item>
+		<item>t1</item>
+		<item>t2</item>
+		<item>t3</item>
+		<item>r1</item>
+		<item>r2</item>
+		<item>r3</item>
+		<item>u1</item>
+		<item>u2</item>
+		<item>u3</item>
+		<item>l1</item>
+		<item>l2</item>
+		<item>h1</item>
+		<item>h2</item>
+	</list>
+
+	<contexts>
+
+		<context name="_normal" attribute="Normal Text" lineEndContext="#stay">
+			<DetectChar context="_rule_bracket_level1" attribute="Brackets1" char="("/>
+			<DetectChar context="#stay" attribute="Error"  char=")"/>
+			<IncludeRules context="_common"/>
+			<IncludeRules context="_identifiers"/>
+		</context>
+		<context name="_common" attribute="Normal Text" lineEndContext="#stay">
+			<DetectChar context="_comment" attribute="Comment" char=";"/>
+			<DetectChar context="_quoted" attribute="Text Quoted" char="&quot;"/>
+			<DetectChar context="_path_content" attribute="Path" char="/"/>
+
+			<!-- IP Address -->
+			<IncludeRules context="_ip_addr##SELinux Policy"/>
+			<!-- Special Characters -->
+			<DetectChar context="#stay" attribute="Special Char" char="*"/>
+
+			<!-- File Contexts: user_u:role_r:type_t:s0:c0 -->
+			<RegExpr context="_file_contexts" attribute="File Contexts" String="\b&fullIdentifier;(:&fullIdentifier;){2}(:&mlsLevel;(\s*\-\s*&mlsLevel;)?)?([^&symbol;:]|\s|$)" lookAhead="true"/>
+			<!-- Global Namespace (this avoids highlighting keywords) -->
+			<RegExpr context="#stay" String="(\b&identifier;)?(\.&identifier;)+(?=\s|[^&symbol;]|$)"/>
+
+			<!-- Numbers -->
+			<HlCHex context="#stay" attribute="Hexadecimal"/>
+			<Float context="#stay" attribute="Number"/>
+			<Int context="#stay" attribute="Number"/>
+		</context>
+		<context name="_identifiers" attribute="Normal Text" lineEndContext="#stay">
+			<!-- Avoid highlighting numbers in identifiers.
+			     IMPORTANT: Do not put this rule before the keywords! -->
+			<RegExpr context="#stay" String="&identifier;"/>
+		</context>
+
+		<context name="_comment" attribute="Comment" lineEndContext="#pop">
+			<DetectSpaces />
+			<LineContinue context="#pop" attribute="Comment"/>
+			<IncludeRules context="##Alerts"/>
+			<IncludeRules context="##Modelines"/>
+			<IncludeRules context="_default_comment##SELinux Policy"/>
+		</context>
+
+		<context name="_quoted" attribute="Text Quoted" lineEndContext="#pop">
+			<DetectChar context="#pop" attribute="Text Quoted" char="&quot;"/>
+			<IncludeRules context="_regex_quoted##SELinux Policy"/> <!-- This does not support line breaks and line cont. escape -->
+			<RegExpr context="#stay" attribute="Text Quoted Open" String="[^\s&quot;\[\(\\](?=\s*$)"/>
+		</context>
+
+		<context name="_path_content" attribute="Path" lineEndContext="#pop">
+			<DetectSpaces context="#pop" attribute="Normal Text" lookAhead="true"/>
+			<RegExpr context="#pop" attribute="Normal Text" String="[^&symbol;]" lookAhead="true"/>
+
+			<IncludeRules context="_default_regex##SELinux Policy"/>
+			<DetectChar context="_square_brackets_cil_path" attribute="RegExp Brackets (Paths)" char="["/>
+		</context>
+		<context name="_square_brackets_cil_path" attribute="RegExp Brackets (Paths)"
+		         lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_square_brackets_cil_path_content">
+		<RegExpr context="#pop!_square_brackets_cil_path_content" attribute="Special Char of Brackets (Paths)" String="\^(?=[&symbol;])"/>
+		</context>
+		<context name="_square_brackets_cil_path_content" attribute="RegExp Brackets (Paths)" lineEndContext="#pop">
+			<DetectChar context="#pop" attribute="RegExp Brackets (Paths)" char="]"/>
+			<RegExpr context="#pop" String="[^&symbol;]" lookAhead="true"/>
+			<RegExpr context="#stay" attribute="Open RegExp Brackets (Paths)" String="[^\s\[\]\\](?![&symbol;])"/>
+			<DetectChar context="#stay" attribute="Error" char="["/>
+			<IncludeRules context="_special_chars##SELinux Policy"/>
+		</context>
+
+		<!-- RULES -->
+
+		<!-- Highlighting specific keywords in some rules -->
+		<context name="_filecon_statement" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_default_end"/>
+			<keyword context="#pop" attribute="Types" String="file_types"/>
+			<IncludeRules context="_default_rule"/>
+		</context>
+		<context name="_portcon_statement" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_default_end"/>
+			<keyword context="#pop" attribute="Types" String="protocols"/>
+			<IncludeRules context="_default_rule"/>
+		</context>
+		<context name="_fsuse_statement" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_default_end"/>
+			<keyword context="#pop" attribute="Types" String="fs_types"/>
+			<IncludeRules context="_default_rule"/>
+		</context>
+		<context name="_handleunknown_statement" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_default_end"/>
+			<keyword context="#pop" attribute="Access Keys" String="handleunknown_keys"/>
+			<IncludeRules context="_default_rule"/>
+		</context>
+		<context name="_policycap_statement" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_default_end"/>
+			<IncludeRules context="_policy_capabilities##SELinux Policy"/>
+			<IncludeRules context="_common"/>
+			<IncludeRules context="_identifiers"/>
+		</context>
+		<context name="_av_permissions_statement" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_default_end"/>
+			<IncludeRules context="_av_permissions##SELinux Policy"/>
+			<IncludeRules context="_default_rule"/>
+		</context>
+		<context name="_default_end" attribute="Normal Text" lineEndContext="#stay">
+			<AnyChar context="#pop" attribute="Normal Text" String=")(" lookAhead="true"/>
+		</context>
+
+		<context name="_find_ioctl_kind" attribute="Normal Text"
+		         lineEndContext="#pop!_av_permissions_statement" fallthrough="true" fallthroughContext="#pop!_av_permissions_statement">
+			<!-- ioctl is a kind in permissionx/accessx statement:
+			     (permissionx permissionx_id (ioctl class_id (permission ... | expr ...))) -->
+			<RegExpr context="#pop" attribute="Type Name Statements" String="ioctl(?=\s+[&symbol;]+\s*\()"/>
+			<!-- ioctl can be a kind of permissionx or AV permission -->
+			<RegExpr context="#pop!_av_permissions_statement" attribute="Type Name Statements" String="ioctl(?=(\s+[&symbol;]+)?\s*($|;))"/>
+			<RegExpr context="#pop!_av_permissions_statement" attribute="Type Name Statements" String="ioctl(?=\s+[&symbol;]+\s+\d)"/>
+		</context>
+
+		<context name="_default_statement" attribute="Normal Text" lineEndContext="#stay">
+			<WordDetect context="_handleunknown_statement" attribute="Policy Config. Statements" String="handleunknown"/>
+			<WordDetect context="_policycap_statement" attribute="Policy Config. Statements" String="policycap"/>
+			<WordDetect context="_filecon_statement" attribute="Statements" String="filecon"/>
+			<WordDetect context="_fsuse_statement" attribute="Statements" String="fsuse"/>
+			<WordDetect context="_portcon_statement" attribute="Statements" String="portcon"/>
+			<!-- Fix permissions list if the keywords "ioctl" or "call" are not statements,
+			     but a permissions (see "av_permissions" keyword list of "selinux.xml"). -->
+			<RegExpr context="_av_permissions_statement" String="\b(call|ioctl)\s*\)" lookAhead="true"/>
+			<WordDetect context="_find_ioctl_kind" String="ioctl" lookAhead="true"/>
+			<WordDetect context="_av_permissions_statement" attribute="Statements" String="call"/>
+
+			<keyword context="#stay" attribute="Policy Config. Statements" String="policy_config_statements"/>
+			<keyword context="#stay" attribute="Type Statements" String="type_statements"/>
+			<keyword context="#stay" attribute="Statements" String="statements"/>
+			<keyword context="#stay" attribute="Expression Keys" String="expr_keys"/>
+			<keyword context="#stay" attribute="Access Keys" String="access"/>
+
+			<keyword context="#stay" attribute="Booleans" String="booleans"/>
+			<keyword context="#stay" attribute="Type Name Statements" String="classorder_keys"/>
+			<keyword context="#stay" attribute="Type Name Statements" String="type_name"/>
+		</context>
+		<context name="_default_rule" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_common"/>
+			<keyword context="#stay" attribute="Booleans" String="booleans"/>
+			<keyword context="#stay" attribute="Special Keys" String="special_keys"/>
+
+			<WordDetect context="#stay" attribute="Other Keywords" String="&lt;root&gt;"/>
+			<WordDetect context="#stay" attribute="Other Keywords" String="&lt;node&gt;"/>
+			<WordDetect context="#stay" attribute="Other Keywords" String="&lt;src_info&gt;"/>
+			<WordDetect context="#stay" attribute="Other Keywords" String="&lt;src_cil&gt;"/>
+			<WordDetect context="#stay" attribute="Other Keywords" String="&lt;src_hll&gt;"/>
+			<keyword context="#stay" attribute="Other Keywords" String="other_keywords"/>
+			<IncludeRules context="_filesystem##SELinux Policy"/>
+
+			<IncludeRules context="_identifiers"/>
+		</context>
+		<context name="_default_rule_without_statement" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_av_permissions##SELinux Policy"/>
+		</context>
+		<context name="_default_rule_bracket" attribute="Normal Text" lineEndContext="#stay">
+			<DetectSpaces context="#stay" attribute="Normal Text"/>
+			<DetectChar context="_comment" attribute="Comment" char=";"/>
+		</context>
+
+		<!-- Levels of rule brackets.
+		     Only the first word of a rule can be highlighted as a statement keyword. -->
+		<context name="_rule_bracket_level1" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_without_statement_level1" lineEndContext="#stay">
+			<IncludeRules context="_default_rule_bracket"/> <!-- Detect spaces & comments -->
+			<!-- Detect first word -->
+			<RegExpr context="#pop!_statement_level1" attribute="Normal Text" String="&statementchar;" lookAhead="true"/>
+		</context>
+		<context name="_statement_level1" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_level1" lineEndContext="#pop!_rule_level1">
+			<!-- When writing a statement and then a delimiter (like a space), go to the context "_rule_level1" -->
+			<IncludeRules context="_default_statement"/>
+			<RegExpr context="#pop!_rule_without_statement_level1" attribute="Normal Text" String="&statementchar;+" lookAhead="true"/>
+		</context>
+		<context name="_rule_level1" attribute="Normal Text" lineEndContext="#stay"> <!-- Rule content -->
+			<DetectChar attribute="Brackets2" context="_rule_bracket_level2" char="("/>
+			<DetectChar attribute="Brackets1" context="#pop" char=")" />
+			<IncludeRules context="_default_rule"/>
+		</context>
+		<context name="_rule_without_statement_level1" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_default_rule_without_statement"/>
+			<IncludeRules context="_rule_level1"/>
+		</context>
+
+		<context name="_rule_bracket_level2" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_without_statement_level2" lineEndContext="#stay">
+			<IncludeRules context="_default_rule_bracket"/>
+			<RegExpr context="#pop!_statement_level2" attribute="Normal Text" String="&statementchar;" lookAhead="true"/>
+		</context>
+		<context name="_statement_level2" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_level2" lineEndContext="#pop!_rule_level2">
+			<IncludeRules context="_default_statement"/>
+			<RegExpr context="#pop!_rule_without_statement_level2" attribute="Normal Text" String="&statementchar;+" lookAhead="true"/>
+		</context>
+		<context name="_rule_level2" attribute="Normal Text" lineEndContext="#stay">
+			<DetectChar attribute="Brackets3" context="_rule_bracket_level3" char="("/>
+			<DetectChar attribute="Brackets2" context="#pop" char=")" />
+			<IncludeRules context="_default_rule"/>
+		</context>
+		<context name="_rule_without_statement_level2" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_default_rule_without_statement"/>
+			<IncludeRules context="_rule_level2"/>
+		</context>
+
+		<context name="_rule_bracket_level3" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_without_statement_level3" lineEndContext="#stay">
+			<IncludeRules context="_default_rule_bracket"/>
+			<RegExpr context="#pop!_statement_level3" attribute="Normal Text" String="&statementchar;" lookAhead="true"/>
+		</context>
+		<context name="_statement_level3" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_level3" lineEndContext="#pop!_rule_level3">
+			<IncludeRules context="_default_statement"/>
+			<RegExpr context="#pop!_rule_without_statement_level3" attribute="Normal Text" String="&statementchar;+" lookAhead="true"/>
+		</context>
+		<context name="_rule_level3" attribute="Normal Text" lineEndContext="#stay">
+			<DetectChar attribute="Brackets4" context="_rule_bracket_level4" char="("/>
+			<DetectChar attribute="Brackets3" context="#pop" char=")" />
+			<IncludeRules context="_default_rule"/>
+		</context>
+		<context name="_rule_without_statement_level3" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_default_rule_without_statement"/>
+			<IncludeRules context="_rule_level3"/>
+		</context>
+
+		<context name="_rule_bracket_level4" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_without_statement_level4" lineEndContext="#stay">
+			<IncludeRules context="_default_rule_bracket"/>
+			<RegExpr context="#pop!_statement_level4" attribute="Normal Text" String="&statementchar;" lookAhead="true"/>
+		</context>
+		<context name="_statement_level4" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_level4" lineEndContext="#pop!_rule_level4">
+			<IncludeRules context="_default_statement"/>
+			<RegExpr context="#pop!_rule_without_statement_level4" attribute="Normal Text" String="&statementchar;+" lookAhead="true"/>
+		</context>
+		<context name="_rule_level4" attribute="Normal Text" lineEndContext="#stay">
+			<DetectChar attribute="Brackets5" context="_rule_bracket_level5" char="("/>
+			<DetectChar attribute="Brackets4" context="#pop" char=")" />
+			<IncludeRules context="_default_rule"/>
+		</context>
+		<context name="_rule_without_statement_level4" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_default_rule_without_statement"/>
+			<IncludeRules context="_rule_level4"/>
+		</context>
+
+		<context name="_rule_bracket_level5" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_without_statement_level5" lineEndContext="#stay">
+			<IncludeRules context="_default_rule_bracket"/>
+			<RegExpr context="#pop!_statement_level5" attribute="Normal Text" String="&statementchar;" lookAhead="true"/>
+		</context>
+		<context name="_statement_level5" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_level5" lineEndContext="#pop!_rule_level5">
+			<IncludeRules context="_default_statement"/>
+			<RegExpr context="#pop!_rule_without_statement_level5" attribute="Normal Text" String="&statementchar;+" lookAhead="true"/>
+		</context>
+		<context name="_rule_level5" attribute="Normal Text" lineEndContext="#stay">
+			<DetectChar attribute="Brackets6" context="_rule_bracket_level6" char="("/>
+			<DetectChar attribute="Brackets5" context="#pop" char=")" />
+			<IncludeRules context="_default_rule"/>
+		</context>
+		<context name="_rule_without_statement_level5" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_default_rule_without_statement"/>
+			<IncludeRules context="_rule_level5"/>
+		</context>
+
+		<context name="_rule_bracket_level6" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_without_statement_level6" lineEndContext="#stay">
+			<IncludeRules context="_default_rule_bracket"/>
+			<RegExpr context="#pop!_statement_level6" attribute="Normal Text" String="&statementchar;" lookAhead="true"/>
+		</context>
+		<context name="_statement_level6" attribute="Normal Text" fallthrough="true" fallthroughContext="#pop!_rule_level6" lineEndContext="#pop!_rule_level6">
+			<IncludeRules context="_default_statement"/>
+			<RegExpr context="#pop!_rule_without_statement_level6" attribute="Normal Text" String="&statementchar;+" lookAhead="true"/>
+		</context>
+		<context name="_rule_level6" attribute="Normal Text" lineEndContext="#stay">
+			<DetectChar attribute="Brackets1" context="_rule_bracket_level1" char="("/>
+			<DetectChar attribute="Brackets6" context="#pop" char=")" />
+			<IncludeRules context="_default_rule"/>
+		</context>
+		<context name="_rule_without_statement_level6" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_default_rule_without_statement"/>
+			<IncludeRules context="_rule_level6"/>
+		</context>
+
+		<!-- File Contexts -->
+		<!-- user:role:type -->
+		<context name="_file_contexts" attribute="File Contexts" lineEndContext="#pop">
+			<DetectChar context="#pop!_fc_role" attribute="Normal Text" char=":"/>
+			<DetectSpaces context="#pop" attribute="Normal Text" lookAhead="true"/>
+		</context>
+		<context name="_fc_role" attribute="File Contexts" lineEndContext="#pop">
+			<DetectChar context="#pop!_fc_type" attribute="Normal Text" char=":"/>
+			<DetectSpaces context="#pop" attribute="Normal Text" lookAhead="true"/>
+		</context>
+		<context name="_fc_type" attribute="File Contexts (Type Enforcement)" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
+			<RegExpr context="#pop!_fc_mls" attribute="File Contexts (Type Enforcement)" String="&fullIdentifier;(?=:&mlsLevel;)"/> <!-- Find Level/Range -->
+			<RegExpr context="#pop" attribute="File Contexts (Type Enforcement)" String="&fullIdentifier;"/>
+		</context>
+		<!-- (MLS/MCS) user:role:type:level -->
+		<context name="_fc_mls" attribute="File Contexts" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
+			<DetectChar context="#pop!_fc_level_range_sen" attribute="Normal Text" char=":"/>
+		</context>
+		<context name="_fc_level_range_sen" attribute="File Contexts" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
+			<RegExpr context="#pop!_fc_level_range_cat" attribute="Normal Text" String=":(?=&identifier;)"/> <!-- Find Category -->
+			<RegExpr context="#pop!_fc_level_sen" attribute="Normal Text" String="\s*\-\s*(?=&mlsLevel;)"/> <!-- Find Range -->
+			<RegExpr context="#stay" attribute="Normal Text" String="\.(?=&identifier;)"/>
+			<IncludeRules context="_default_fc_level"/>
+		</context>
+		<context name="_fc_level_range_cat" attribute="File Contexts" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
+			<RegExpr context="#pop!_fc_level_sen" attribute="Normal Text" String="\s*\-\s*(?=&mlsLevel;)"/> <!-- Find Range -->
+			<RegExpr context="#stay" attribute="Normal Text" String="(\.|\s*,\s*)(?=&identifier;)"/>
+			<IncludeRules context="_default_fc_level"/>
+		</context>
+		<!-- (MLS/MCS) user:role:type:level-level -->
+		<context name="_fc_level_sen" attribute="File Contexts" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
+			<RegExpr context="#pop!_fc_level_cat" attribute="Normal Text" String=":(?=&identifier;)"/> <!-- Find Category -->
+			<RegExpr context="#stay" attribute="Normal Text" String="\.(?=&identifier;)"/>
+			<IncludeRules context="_default_fc_level"/>
+		</context>
+		<context name="_fc_level_cat" attribute="File Contexts" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
+			<RegExpr context="#stay" attribute="Normal Text" String="(\.|\s*,\s*)(?=&identifier;)"/>
+			<IncludeRules context="_default_fc_level"/>
+		</context>
+		<context name="_default_fc_level" attribute="File Contexts" lineEndContext="#pop">
+			<RegExpr context="#stay" attribute="File Contexts" String="\w+"/>
+			<DetectChar context="#stay" attribute="File Contexts" char="-"/>
+		</context>
+
+	</contexts>
+
+	<itemDatas>
+		<itemData name="Normal Text" defStyleNum="dsNormal" spellChecking="false"/>
+		<itemData name="Comment"     defStyleNum="dsComment"/>
+		<itemData name="Text Quoted" defStyleNum="dsString" spellChecking="false"/>
+		<itemData name="Path"        defStyleNum="dsNormal" spellChecking="false"/>
+
+		<itemData name="Statements"                defStyleNum="dsKeyword"      bold="1" spellChecking="false"/>
+		<itemData name="Type Statements"           defStyleNum="dsFunction"     bold="1" spellChecking="false"/>
+		<itemData name="Policy Config. Statements" defStyleNum="dsPreprocessor" bold="1" spellChecking="false"/>
+		<itemData name="Access Keys"               defStyleNum="dsWarning"      bold="1" spellChecking="false"/>
+		<itemData name="Expression Keys"           defStyleNum="dsVariable"     bold="1" spellChecking="false"/>
+		<itemData name="Type Name Statements"      defStyleNum="dsDataType"     bold="1" spellChecking="false"/>
+		<itemData name="Booleans"                  defStyleNum="dsExtension"    bold="1" spellChecking="false"/>
+
+		<itemData name="Types"                defStyleNum="dsDataType"      bold="0" spellChecking="false"/>
+		<itemData name="Special Keys"         defStyleNum="dsOthers"        spellChecking="false"/>
+		<itemData name="File Contexts"        defStyleNum="dsSpecialString" spellChecking="false"/>
+		<itemData name="File Contexts (Type Enforcement)" defStyleNum="dsInformation" spellChecking="false"/>
+		<itemData name="Other Keywords"       defStyleNum="dsNormal"        italic="1" spellChecking="false"/>
+
+		<itemData name="Number"      defStyleNum="dsDecVal" spellChecking="false"/>
+		<itemData name="Hexadecimal" defStyleNum="dsBaseN"  spellChecking="false"/>
+
+		<!-- Obtained from "scheme.xml" -->
+		<itemData name="Brackets1" defStyleNum="dsNormal" color="#ff0000" bold="1" />
+		<itemData name="Brackets2" defStyleNum="dsNormal" color="#ff8800" bold="1" />
+		<itemData name="Brackets3" defStyleNum="dsNormal" color="#888800" bold="1" />
+		<itemData name="Brackets4" defStyleNum="dsNormal" color="#008800" bold="1" />
+		<itemData name="Brackets5" defStyleNum="dsNormal" color="#000088" bold="1" />
+		<itemData name="Brackets6" defStyleNum="dsNormal" color="#880088" bold="1" />
+
+		<itemData name="Special Char"                     defStyleNum="dsSpecialChar"   spellChecking="false"/>
+		<itemData name="Special Char of Brackets (Paths)" defStyleNum="dsAnnotation"    spellChecking="false"/>
+		<itemData name="RegExp Brackets (Paths)"          defStyleNum="dsSpecialString" spellChecking="false"/>
+		<itemData name="Open RegExp Brackets (Paths)"     defStyleNum="dsSpecialString" underline="1" spellChecking="false"/>
+		<itemData name="Text Quoted Open"                 defStyleNum="dsString"        underline="1" spellChecking="false"/>
+
+		<itemData name="Error" defStyleNum="dsError" spellChecking="false"/>
+	</itemDatas>
+
+</highlighting>
+
+<general>
+	<keywords casesensitive="true" additionalDeliminator="&quot;&apos;&#096;" weakDeliminator="-"/>
+	<comments>
+		<comment name="singleLine" start=";"/>
+	</comments>
+</general>
 
 </language>
 <!-- kate: replace-tabs off; tab-width 3; indent-width 3; remove-trailing-spaces mod; dynamic-word-wrap off; -->
diff --git a/data/syntax/selinux-fc.xml b/data/syntax/selinux-fc.xml
--- a/data/syntax/selinux-fc.xml
+++ b/data/syntax/selinux-fc.xml
@@ -14,7 +14,7 @@
   ==========================================================================================
    This file is part of the KDE's KSyntaxHighlighting framework.
 
-   Copyright (c) 2018 Nibaldo González S. (nibgonz@gmail.com)
+   Copyright (c) 2018-2019 Nibaldo González S. (nibgonz@gmail.com)
 
    Permission is hereby granted, free of charge, to any person obtaining a copy of this
    software and associated documentation files (the "Software"), to deal in the Software
@@ -42,258 +42,259 @@
     - Policy Build Files: initial_sid_contexts, genfs_contexts, fs_use
 
   Change log:
-	* Version 3 [09-Sep-2018]:
-		- Update itemData's style for the new Solarized color schemes.
-	* Version 2 [28-Aug-2018]:
-		- Some improvements. RegExp and some rules are moved to "selinux.xml".
-		- Add statements keywords that use file contexts.
-	* Version 1 [26-Jan-2018, by Nibaldo González]:
-		- Initial version.
+   * Version 4 [02-Apr-2019]: Remove one indentation.
+   * Version 3 [09-Sep-2018]:
+      - Update itemData's style for the new Solarized color schemes.
+   * Version 2 [28-Aug-2018]:
+      - Some improvements. RegExp and some rules are moved to "selinux.xml".
+      - Add statements keywords that use file contexts.
+   * Version 1 [26-Jan-2018, by Nibaldo González]:
+      - Initial version.
 -->
 
 <language name="SELinux File Contexts"
-          version="3"
+          version="4"
           kateversion="5.0"
           section="Other"
           extensions="*.fc;file_contexts;file_contexts_*;file_contexts.local;file_contexts.homedirs;file_contexts.template;homedir_template;property_contexts;service_contexts;hwservice_contexts;initial_sid_contexts;genfs_contexts;fs_use"
           priority="3"
           mimetype=""
           author="Nibaldo González (nibgonz@gmail.com)"
           license="MIT">
 
-	<highlighting>
-
-		<contexts>
-
-			<context name="_normal" attribute="Normal Text" lineEndContext="#stay">
-				<IncludeRules context="_m4_preprocessor##SELinux Policy"/>
-				<IncludeRules context="_find_comments##SELinux Policy"/>
-				<RegExpr context="#stay" attribute="File Type" String="(\s|^)\-[bcdpls\-](?=\s|$)"/>
-
-				<DetectChar context="_path_content" attribute="Path" char="/"/>
-				<DetectChar context="_quoted" attribute="Text Quoted" char="&quot;"/>
-
-				<!-- Content Quoted (M4).
-				     NOTE: The default quotes (`text') are highlighted,
-				     but another type of quotation mark can be used. -->
-				<IncludeRules context="_m4_string_simple##SELinux Policy"/> <!-- `simple text' -->
-				<IncludeRules context="_m4_quotes##SELinux Policy"/>
-
-				<!-- File Contexts:  user:role:type:s0:c0 -->
-				<RegExpr context="_fc_user" attribute="User" String="&startIdentifier;(?=(\s*:\s*&identifier;){2}(\s*:\s*&mlsLevel;(\s*\-\s*&mlsLevel;)?)?\b)"/>
-				<WordDetect context="#stay" attribute="Other Keywords" String="&lt;&lt;none&gt;&gt;"/>
-
-				<!-- Java-Language-Style Package Name & other Names, for SE Android (this avoid highlighting keywords) -->
-				<RegExpr context="#stay" attribute="Path" String="\.?[a-zA-Z]\w*((\.|::)\w+)+(?=[^\(]|$)" firstNonSpace="true"/>
-
-				<!-- Functions -->
-				<DetectChar context="_parentheses_content" attribute="Normal Text" char="(" beginRegion="ParenthesesBlock"/>
-				<IncludeRules context="_refpolicy_keywords_fc##SELinux Policy"/>
-				<IncludeRules context="_m4_builtin_keywords##SELinux Policy"/>
-				<RegExpr context="#stay" attribute="Function" String="\b[a-zA-Z][\w\-]*(?=\()"/>
-
-				<IncludeRules context="_m4_special_arguments##SELinux Policy"/>
-				<IncludeRules context="_common_special_char##SELinux Policy"/>
-				<IncludeRules context="_line_continue_escape##SELinux Policy"/>
-
-				<!-- Default Variables -->
-				<StringDetect context="_path_content" attribute="Variable" String="HOME_DIR"/>
-				<StringDetect context="_path_content" attribute="Variable" String="HOME_ROOT"/>
-
-				<DetectChar context="_path_content" attribute="Path" char="[" lookAhead="true"/>
-				<Detect2Chars context="_path_content" char="%" char1="{" lookAhead="true"/>
-				<RegExpr context="_path_content" attribute="Path" String="\b[\w\[\]\.@\=\*\-\$%\+!\|&amp;\^~\{\}&lt;&gt;\?\\,]+[/\\\*\?\[\{]" lookAhead="true" firstNonSpace="true"/>
-
-				<DetectChar context="#stay" attribute="Symbol" char="{" beginRegion="Bracket"/>
-				<DetectChar context="#stay" attribute="Symbol" char="}" endRegion="Bracket"/>
-				<AnyChar context="#stay" attribute="Symbol" String=",;~[]"/>
-
-				<!-- Highlight only the statements that contain definition of file contexts -->
-				<IncludeRules context="_statements_file_contexts##SELinux Policy"/>
-				<RegExpr context="#stay" String="[a-zA-Z](\.?[\w\-]+)*"/>
-				<HlCHex context="#pop" attribute="Number"/>
-				<Int context="#pop" attribute="Number"/>
-			</context>
-
-			<context name="_parentheses_content" attribute="Normal Text" lineEndContext="#stay">
-				<DetectChar context="#pop" attribute="Normal Text" char=")" endRegion="ParenthesesBlock"/>
-				<!-- File Contexts:  (user:role:type,s0) -->
-				<RegExpr context="_gen_context_fc_user" attribute="User" String="&startIdentifier;(\s*:\s*&identifier;){2}(\s*,\s*&identifier;)*\b" lookAhead="true"/>
-				<IncludeRules context="_normal"/>
-			</context>
-
-			<context name="_path_content" attribute="Path" lineEndContext="#pop">
-				<DetectSpaces context="#pop" lookAhead="true"/>
-				<IncludeRules context="_regex##SELinux Policy"/>
-				<IncludeRules context="_variable"/>
-			</context>
-			<context name="_quoted" attribute="Text Quoted" lineEndContext="#pop">
-				<DetectChar context="#pop" attribute="Text Quoted" char="&quot;"/>
-				<IncludeRules context="_m4_special_arguments##SELinux Policy"/>
-				<IncludeRules context="_other_variable"/>
-				<IncludeRules context="_regex_quoted##SELinux Policy"/>
-				<RegExpr context="#stay" attribute="Text Quoted Open" String="[^\s&quot;\[\(\\](?=\s*$)"/>
-			</context>
-
-			<!-- Variables of "file_contexts", M4 & Refpolicy -->
-			<context name="_variable" attribute="Normal Text" lineEndContext="#stay">
-				<WordDetect context="#stay" attribute="Variable" String="HOME_DIR"/>
-				<WordDetect context="#stay" attribute="Variable" String="HOME_ROOT"/>
-				<StringDetect context="#stay" attribute="Variable" String="USER"/>
-				<StringDetect context="#stay" attribute="Variable" String="ROLE"/>
-				<IncludeRules context="_other_variable"/>
-			</context>
-			<context name="_other_variable" attribute="Normal Text" lineEndContext="#stay">
-				<RegExpr context="#stay" attribute="Variable" String="\%\{[a-zA-Z]\w*\}"/>
-			</context>
-			<context name="_fc_variable" attribute="Path" lineEndContext="#pop">
-				<IncludeRules context="_m4_special_arguments##SELinux Policy"/>
-				<IncludeRules context="_other_variable"/>
-			</context>
-
-			<!-- SELinux Security Contexts -->
-
-			<!-- User -->
-			<context name="_fc_user" attribute="User" lineEndContext="#pop">
-				<DetectChar context="#pop!_fc_role" attribute="Normal Text" char=":"/>
-			</context>
-			<!-- Role -->
-			<context name="_fc_role" attribute="Role" lineEndContext="#pop">
-				<DetectChar context="#pop!_fc_type" attribute="Normal Text" char=":"/>
-			</context>
-			<!-- Type Enforcement -->
-			<context name="_fc_type" attribute="Type Enforcement" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_after_fc">
-				<RegExpr context="#pop!_fc_mls" attribute="Type Enforcement" String="\s*&identifier;(?=\s*:\s*&mlsLevel;)"/> <!-- Find MLS/MCS -->
-				<RegExpr context="#pop" attribute="Type Enforcement" String="\s*&identifier;"/>
-			</context>
-
-			<!-- Start MLS/MCS -->
-			<context name="_fc_mls" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_after_fc">
-				<DetectChar context="#pop!_fc_find_level_range" attribute="Normal Text" char=":"/>
-				<DetectSpaces context="#stay" attribute="Normal Text"/>
-			</context>
-			<context name="_fc_find_level_range" attribute="MLS/MCS Level"
-			         lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_fc_level_range">
-				<DetectSpaces context="#stay" attribute="Normal Text"/>
-			</context>
-			<!-- MLS/MCS Range (Sensitivity:Category - Sensitivity:Category) -->
-			<!-- Sensitivity -->
-			<context name="_fc_level_range" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_after_fc">
-				<RegExpr context="#pop!_fc_level_range_cat" attribute="Normal Text" String="\s*:\s*(?=&identifier;)"/> <!-- Find Category -->
-				<RegExpr context="#pop!_fc_level" attribute="Normal Text" String="\s*\-\s*(?=&mlsLevel;)"/> <!-- Find Range -->
-				<IncludeRules context="_default_level"/>
-			</context>
-			<!-- Category -->
-			<context name="_fc_level_range_cat" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_after_fc">
-				<RegExpr context="#pop!_fc_level" attribute="Normal Text" String="\s*\-\s*(?=&mlsLevel;)"/> <!-- Find Range -->
-				<RegExpr context="#stay" attribute="Normal Text" String="\s*,\s*(?=&simpleIdentifier;)"/>
-				<IncludeRules context="_default_level"/>
-			</context>
-			<!-- MLS/MCS Level (Sensitivity:Category) -->
-			<!-- Sensitivity -->
-			<context name="_fc_level" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_after_fc">
-				<RegExpr context="#pop!_fc_level_cat" attribute="Normal Text" String="\s*:\s*(?=&identifier;)"/> <!-- Find Category -->
-				<IncludeRules context="_default_level"/>
-			</context>
-			<!-- Category -->
-			<context name="_fc_level_cat" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_after_fc">
-				<RegExpr context="#stay" attribute="Normal Text" String="\s*,\s*(?=&simpleIdentifier;)"/>
-				<IncludeRules context="_default_level"/>
-			</context>
-
-			<context name="_default_level" attribute="Normal Text" lineEndContext="#pop">
-				<RegExpr context="#stay" attribute="Normal Text" String="\s*\.\s*(?=&charIden;)"/>
-				<DetectChar  context="_default_level_arg" attribute="MLS/MCS Level" char="$"/>
-				<DetectChar  context="_default_level_var" attribute="MLS/MCS Level" char="%"/>
-				<RegExpr context="#stay" attribute="MLS/MCS Level" String="\w+"/>
-				<DetectChar context="#stay" attribute="MLS/MCS Level" char="-"/>
-			</context>
-			<context name="_default_level_arg" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
-				<!-- M4 Args. It is not exact -->
-				<Int context="#pop" attribute="MLS/MCS Level"/>
-				<AnyChar context="#pop" attribute="MLS/MCS Level" String="#*@"/>
-				<RegExpr context="#pop" attribute="MLS/MCS Level" String="\{\d+\}"/>
-			</context>
-			<context name="_default_level_var" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
-				<RegExpr context="#pop" attribute="MLS/MCS Level" String="{[A-Za-z]\w*\}"/>
-			</context>
-
-			<context name="_after_fc" attribute="Normal Text" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
-				<RegExpr context="#stay" attribute="Normal Text" String="\s*:\s*\w*"/>
-				<RegExpr context="#stay" attribute="Normal Text" String="[:\.\w]+"/>
-			</context>
-
-			<!-- Within function "gen_context" (highlight variables and M4 args.) -->
-			<!-- User -->
-			<context name="_gen_context_fc_user" attribute="User" lineEndContext="#pop">
-				<DetectChar context="#pop!_gen_context_role" attribute="Normal Text" char=":"/>
-				<IncludeRules context="_fc_variable"/>
-			</context>
-			<!-- Role -->
-			<context name="_gen_context_role" attribute="Role" lineEndContext="#pop">
-				<DetectChar context="#pop!_before_gen_context_type" attribute="Normal Text" char=":"/>
-				<IncludeRules context="_fc_variable"/>
-			</context>
-			<!-- Type Enforcement -->
-			<context name="_before_gen_context_type" attribute="Type Enforcement"
-			         lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_gen_context_type">
-				<DetectSpaces context="#stay" attribute="Normal Text"/>
-			</context>
-			<context name="_gen_context_type" attribute="Type Enforcement"
-			         lineEndContext="#pop!_fc_find_comma" fallthrough="true" fallthroughContext="#pop!_fc_find_comma">
-				<RegExpr context="#pop!_fc_level_range" attribute="Normal Text" String="\s*:\s*(?=&identifier;)"/> <!-- Find MLS/MCS -->
-				<IncludeRules context="_fc_variable"/>
-				<RegExpr context="#stay" attribute="Type Enforcement" String="[\w\-]+"/>
-			</context>
-			<!-- Comma after file contexts -->
-			<context name="_fc_find_comma" attribute="Normal Text" lineEndContext="#stay" fallthrough="true" fallthroughContext="#pop">
-				<DetectChar context="#pop!_fc_after_comma" attribute="Normal Text" char=","/>
-				<RegExpr context="#pop" String="\s*[^,\s]" lookAhead="true"/>
-				<DetectSpaces />
-			</context>
-			<context name="_fc_after_comma" attribute="Normal Text"
-			         lineEndContext="#stay" fallthrough="true" fallthroughContext="#pop!_gen_context_level">
-				<DetectSpaces context="#stay"/>
-			</context>
-			<!-- MLS/MCS -->
-			<context name="_gen_context_level" attribute="MLS/MCS Level" lineEndContext="#stay" fallthrough="true" fallthroughContext="#pop">
-				<RegExpr context="#stay" attribute="Normal Text" String="\-\s*(?=&simpleIdentifier;)"/>
-				<IncludeRules context="_fc_variable"/>
-				<RegExpr context="#stay" attribute="MLS/MCS Level" String="\w+"/>
-				<DetectChar context="#stay" attribute="MLS/MCS Level" char="-"/>
-				<AnyChar context="#stay" attribute="Normal Text" String=":.,"/>
-				<DetectSpaces />
-			</context>
-
-		</contexts>
-
-		<itemDatas>
-			<itemData name="Normal Text" defStyleNum="dsNormal"   spellChecking="false"/>
-			<itemData name="Text Quoted" defStyleNum="dsString"   spellChecking="false"/>
-			<itemData name="Path"        defStyleNum="dsNormal"   spellChecking="false"/>
-			<itemData name="Variable"    defStyleNum="dsVariable" spellChecking="false"/>
-			<itemData name="File Type"   defStyleNum="dsKeyword"  spellChecking="false"/>
-
-			<itemData name="User"             defStyleNum="dsPreprocessor"   spellChecking="false"/>
-			<itemData name="Role"             defStyleNum="dsInformation"    spellChecking="false"/>
-			<itemData name="Type Enforcement" defStyleNum="dsAttribute"      spellChecking="false"/>
-			<itemData name="MLS/MCS Level"    defStyleNum="dsVerbatimString" spellChecking="false"/>
-
-			<itemData name="Other Keywords"   defStyleNum="dsNormal"   italic="1" spellChecking="false"/>
-			<itemData name="Function"         defStyleNum="dsNormal"   bold="1" spellChecking="false"/>
-			<itemData name="Symbol"           defStyleNum="dsOperator" spellChecking="false"/>
-			<itemData name="Number"           defStyleNum="dsComment"  italic="0" underline="0" spellChecking="false"/>
-			<itemData name="Text Quoted Open" defStyleNum="dsString"   underline="1" spellChecking="false"/>
-		</itemDatas>
-
-	</highlighting>
-
-	<general>
-		<keywords casesensitive="true" additionalDeliminator="&quot;&apos;&#096;" weakDeliminator="*?+.-"/>
-		<comments>
-			<comment name="singleLine" start="#"/>
-		</comments>
-	</general>
+<highlighting>
+
+	<contexts>
+
+		<context name="_normal" attribute="Normal Text" lineEndContext="#stay">
+			<IncludeRules context="_m4_preprocessor##SELinux Policy"/>
+			<IncludeRules context="_find_comments##SELinux Policy"/>
+			<RegExpr context="#stay" attribute="File Type" String="(\s|^)\-[bcdpls\-](?=\s|$)"/>
+
+			<DetectChar context="_path_content" attribute="Path" char="/"/>
+			<DetectChar context="_quoted" attribute="Text Quoted" char="&quot;"/>
+
+			<!-- Content Quoted (M4).
+			     NOTE: The default quotes (`text') are highlighted,
+			     but another type of quotation mark can be used. -->
+			<IncludeRules context="_m4_string_simple##SELinux Policy"/> <!-- `simple text' -->
+			<IncludeRules context="_m4_quotes##SELinux Policy"/>
+
+			<!-- File Contexts:  user:role:type:s0:c0 -->
+			<RegExpr context="_fc_user" attribute="User" String="&startIdentifier;(?=(\s*:\s*&identifier;){2}(\s*:\s*&mlsLevel;(\s*\-\s*&mlsLevel;)?)?\b)"/>
+			<WordDetect context="#stay" attribute="Other Keywords" String="&lt;&lt;none&gt;&gt;"/>
+
+			<!-- Java-Language-Style Package Name & other Names, for SE Android (this avoid highlighting keywords) -->
+			<RegExpr context="#stay" attribute="Path" String="\.?[a-zA-Z]\w*((\.|::)\w+)+(?=[^\(]|$)" firstNonSpace="true"/>
+
+			<!-- Functions -->
+			<DetectChar context="_parentheses_content" attribute="Normal Text" char="(" beginRegion="ParenthesesBlock"/>
+			<IncludeRules context="_refpolicy_keywords_fc##SELinux Policy"/>
+			<IncludeRules context="_m4_builtin_keywords##SELinux Policy"/>
+			<RegExpr context="#stay" attribute="Function" String="\b[a-zA-Z][\w\-]*(?=\()"/>
+
+			<IncludeRules context="_m4_special_arguments##SELinux Policy"/>
+			<IncludeRules context="_common_special_char##SELinux Policy"/>
+			<IncludeRules context="_line_continue_escape##SELinux Policy"/>
+
+			<!-- Default Variables -->
+			<StringDetect context="_path_content" attribute="Variable" String="HOME_DIR"/>
+			<StringDetect context="_path_content" attribute="Variable" String="HOME_ROOT"/>
+
+			<DetectChar context="_path_content" attribute="Path" char="[" lookAhead="true"/>
+			<Detect2Chars context="_path_content" char="%" char1="{" lookAhead="true"/>
+			<RegExpr context="_path_content" attribute="Path" String="\b[\w\[\]\.@\=\*\-\$%\+!\|&amp;\^~\{\}&lt;&gt;\?\\,]+[/\\\*\?\[\{]" lookAhead="true" firstNonSpace="true"/>
+
+			<DetectChar context="#stay" attribute="Symbol" char="{" beginRegion="Bracket"/>
+			<DetectChar context="#stay" attribute="Symbol" char="}" endRegion="Bracket"/>
+			<AnyChar context="#stay" attribute="Symbol" String=",;~[]"/>
+
+			<!-- Highlight only the statements that contain definition of file contexts -->
+			<IncludeRules context="_statements_file_contexts##SELinux Policy"/>
+			<RegExpr context="#stay" String="[a-zA-Z](\.?[\w\-]+)*"/>
+			<HlCHex context="#pop" attribute="Number"/>
+			<Int context="#pop" attribute="Number"/>
+		</context>
+
+		<context name="_parentheses_content" attribute="Normal Text" lineEndContext="#stay">
+			<DetectChar context="#pop" attribute="Normal Text" char=")" endRegion="ParenthesesBlock"/>
+			<!-- File Contexts:  (user:role:type,s0) -->
+			<RegExpr context="_gen_context_fc_user" attribute="User" String="&startIdentifier;(\s*:\s*&identifier;){2}(\s*,\s*&identifier;)*\b" lookAhead="true"/>
+			<IncludeRules context="_normal"/>
+		</context>
+
+		<context name="_path_content" attribute="Path" lineEndContext="#pop">
+			<DetectSpaces context="#pop" lookAhead="true"/>
+			<IncludeRules context="_regex##SELinux Policy"/>
+			<IncludeRules context="_variable"/>
+		</context>
+		<context name="_quoted" attribute="Text Quoted" lineEndContext="#pop">
+			<DetectChar context="#pop" attribute="Text Quoted" char="&quot;"/>
+			<IncludeRules context="_m4_special_arguments##SELinux Policy"/>
+			<IncludeRules context="_other_variable"/>
+			<IncludeRules context="_regex_quoted##SELinux Policy"/>
+			<RegExpr context="#stay" attribute="Text Quoted Open" String="[^\s&quot;\[\(\\](?=\s*$)"/>
+		</context>
+
+		<!-- Variables of "file_contexts", M4 & Refpolicy -->
+		<context name="_variable" attribute="Normal Text" lineEndContext="#stay">
+			<WordDetect context="#stay" attribute="Variable" String="HOME_DIR"/>
+			<WordDetect context="#stay" attribute="Variable" String="HOME_ROOT"/>
+			<StringDetect context="#stay" attribute="Variable" String="USER"/>
+			<StringDetect context="#stay" attribute="Variable" String="ROLE"/>
+			<IncludeRules context="_other_variable"/>
+		</context>
+		<context name="_other_variable" attribute="Normal Text" lineEndContext="#stay">
+			<RegExpr context="#stay" attribute="Variable" String="\%\{[a-zA-Z]\w*\}"/>
+		</context>
+		<context name="_fc_variable" attribute="Path" lineEndContext="#pop">
+			<IncludeRules context="_m4_special_arguments##SELinux Policy"/>
+			<IncludeRules context="_other_variable"/>
+		</context>
+
+		<!-- SELinux Security Contexts -->
+
+		<!-- User -->
+		<context name="_fc_user" attribute="User" lineEndContext="#pop">
+			<DetectChar context="#pop!_fc_role" attribute="Normal Text" char=":"/>
+		</context>
+		<!-- Role -->
+		<context name="_fc_role" attribute="Role" lineEndContext="#pop">
+			<DetectChar context="#pop!_fc_type" attribute="Normal Text" char=":"/>
+		</context>
+		<!-- Type Enforcement -->
+		<context name="_fc_type" attribute="Type Enforcement" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_after_fc">
+			<RegExpr context="#pop!_fc_mls" attribute="Type Enforcement" String="\s*&identifier;(?=\s*:\s*&mlsLevel;)"/> <!-- Find MLS/MCS -->
+			<RegExpr context="#pop" attribute="Type Enforcement" String="\s*&identifier;"/>
+		</context>
+
+		<!-- Start MLS/MCS -->
+		<context name="_fc_mls" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_after_fc">
+			<DetectChar context="#pop!_fc_find_level_range" attribute="Normal Text" char=":"/>
+			<DetectSpaces context="#stay" attribute="Normal Text"/>
+		</context>
+		<context name="_fc_find_level_range" attribute="MLS/MCS Level"
+		         lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_fc_level_range">
+			<DetectSpaces context="#stay" attribute="Normal Text"/>
+		</context>
+		<!-- MLS/MCS Range (Sensitivity:Category - Sensitivity:Category) -->
+		<!-- Sensitivity -->
+		<context name="_fc_level_range" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_after_fc">
+			<RegExpr context="#pop!_fc_level_range_cat" attribute="Normal Text" String="\s*:\s*(?=&identifier;)"/> <!-- Find Category -->
+			<RegExpr context="#pop!_fc_level" attribute="Normal Text" String="\s*\-\s*(?=&mlsLevel;)"/> <!-- Find Range -->
+			<IncludeRules context="_default_level"/>
+		</context>
+		<!-- Category -->
+		<context name="_fc_level_range_cat" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_after_fc">
+			<RegExpr context="#pop!_fc_level" attribute="Normal Text" String="\s*\-\s*(?=&mlsLevel;)"/> <!-- Find Range -->
+			<RegExpr context="#stay" attribute="Normal Text" String="\s*,\s*(?=&simpleIdentifier;)"/>
+			<IncludeRules context="_default_level"/>
+		</context>
+		<!-- MLS/MCS Level (Sensitivity:Category) -->
+		<!-- Sensitivity -->
+		<context name="_fc_level" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_after_fc">
+			<RegExpr context="#pop!_fc_level_cat" attribute="Normal Text" String="\s*:\s*(?=&identifier;)"/> <!-- Find Category -->
+			<IncludeRules context="_default_level"/>
+		</context>
+		<!-- Category -->
+		<context name="_fc_level_cat" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_after_fc">
+			<RegExpr context="#stay" attribute="Normal Text" String="\s*,\s*(?=&simpleIdentifier;)"/>
+			<IncludeRules context="_default_level"/>
+		</context>
+
+		<context name="_default_level" attribute="Normal Text" lineEndContext="#pop">
+			<RegExpr context="#stay" attribute="Normal Text" String="\s*\.\s*(?=&charIden;)"/>
+			<DetectChar  context="_default_level_arg" attribute="MLS/MCS Level" char="$"/>
+			<DetectChar  context="_default_level_var" attribute="MLS/MCS Level" char="%"/>
+			<RegExpr context="#stay" attribute="MLS/MCS Level" String="\w+"/>
+			<DetectChar context="#stay" attribute="MLS/MCS Level" char="-"/>
+		</context>
+		<context name="_default_level_arg" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
+			<!-- M4 Args. It is not exact -->
+			<Int context="#pop" attribute="MLS/MCS Level"/>
+			<AnyChar context="#pop" attribute="MLS/MCS Level" String="#*@"/>
+			<RegExpr context="#pop" attribute="MLS/MCS Level" String="\{\d+\}"/>
+		</context>
+		<context name="_default_level_var" attribute="MLS/MCS Level" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
+			<RegExpr context="#pop" attribute="MLS/MCS Level" String="{[A-Za-z]\w*\}"/>
+		</context>
+
+		<context name="_after_fc" attribute="Normal Text" lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop">
+			<RegExpr context="#stay" attribute="Normal Text" String="\s*:\s*\w*"/>
+			<RegExpr context="#stay" attribute="Normal Text" String="[:\.\w]+"/>
+		</context>
+
+		<!-- Within function "gen_context" (highlight variables and M4 args.) -->
+		<!-- User -->
+		<context name="_gen_context_fc_user" attribute="User" lineEndContext="#pop">
+			<DetectChar context="#pop!_gen_context_role" attribute="Normal Text" char=":"/>
+			<IncludeRules context="_fc_variable"/>
+		</context>
+		<!-- Role -->
+		<context name="_gen_context_role" attribute="Role" lineEndContext="#pop">
+			<DetectChar context="#pop!_before_gen_context_type" attribute="Normal Text" char=":"/>
+			<IncludeRules context="_fc_variable"/>
+		</context>
+		<!-- Type Enforcement -->
+		<context name="_before_gen_context_type" attribute="Type Enforcement"
+		         lineEndContext="#pop" fallthrough="true" fallthroughContext="#pop!_gen_context_type">
+			<DetectSpaces context="#stay" attribute="Normal Text"/>
+		</context>
+		<context name="_gen_context_type" attribute="Type Enforcement"
+		         lineEndContext="#pop!_fc_find_comma" fallthrough="true" fallthroughContext="#pop!_fc_find_comma">
+			<RegExpr context="#pop!_fc_level_range" attribute="Normal Text" String="\s*:\s*(?=&identifier;)"/> <!-- Find MLS/MCS -->
+			<IncludeRules context="_fc_variable"/>
+			<RegExpr context="#stay" attribute="Type Enforcement" String="[\w\-]+"/>
+		</context>
+		<!-- Comma after file contexts -->
+		<context name="_fc_find_comma" attribute="Normal Text" lineEndContext="#stay" fallthrough="true" fallthroughContext="#pop">
+			<DetectChar context="#pop!_fc_after_comma" attribute="Normal Text" char=","/>
+			<RegExpr context="#pop" String="\s*[^,\s]" lookAhead="true"/>
+			<DetectSpaces />
+		</context>
+		<context name="_fc_after_comma" attribute="Normal Text"
+		         lineEndContext="#stay" fallthrough="true" fallthroughContext="#pop!_gen_context_level">
+			<DetectSpaces context="#stay"/>
+		</context>
+		<!-- MLS/MCS -->
+		<context name="_gen_context_level" attribute="MLS/MCS Level" lineEndContext="#stay" fallthrough="true" fallthroughContext="#pop">
+			<RegExpr context="#stay" attribute="Normal Text" String="\-\s*(?=&simpleIdentifier;)"/>
+			<IncludeRules context="_fc_variable"/>
+			<RegExpr context="#stay" attribute="MLS/MCS Level" String="\w+"/>
+			<DetectChar context="#stay" attribute="MLS/MCS Level" char="-"/>
+			<AnyChar context="#stay" attribute="Normal Text" String=":.,"/>
+			<DetectSpaces />
+		</context>
+
+	</contexts>
+
+	<itemDatas>
+		<itemData name="Normal Text" defStyleNum="dsNormal"   spellChecking="false"/>
+		<itemData name="Text Quoted" defStyleNum="dsString"   spellChecking="false"/>
+		<itemData name="Path"        defStyleNum="dsNormal"   spellChecking="false"/>
+		<itemData name="Variable"    defStyleNum="dsVariable" spellChecking="false"/>
+		<itemData name="File Type"   defStyleNum="dsKeyword"  spellChecking="false"/>
+
+		<itemData name="User"             defStyleNum="dsPreprocessor"   spellChecking="false"/>
+		<itemData name="Role"             defStyleNum="dsInformation"    spellChecking="false"/>
+		<itemData name="Type Enforcement" defStyleNum="dsAttribute"      spellChecking="false"/>
+		<itemData name="MLS/MCS Level"    defStyleNum="dsVerbatimString" spellChecking="false"/>
+
+		<itemData name="Other Keywords"   defStyleNum="dsNormal"   italic="1" spellChecking="false"/>
+		<itemData name="Function"         defStyleNum="dsNormal"   bold="1" spellChecking="false"/>
+		<itemData name="Symbol"           defStyleNum="dsOperator" spellChecking="false"/>
+		<itemData name="Number"           defStyleNum="dsComment"  italic="0" underline="0" spellChecking="false"/>
+		<itemData name="Text Quoted Open" defStyleNum="dsString"   underline="1" spellChecking="false"/>
+	</itemDatas>
+
+</highlighting>
+
+<general>
+	<keywords casesensitive="true" additionalDeliminator="&quot;&apos;&#096;" weakDeliminator="*?+.-"/>
+	<comments>
+		<comment name="singleLine" start="#"/>
+	</comments>
+</general>
 
 </language>
 <!-- kate: replace-tabs off; tab-width 3; indent-width 3; remove-trailing-spaces mod; dynamic-word-wrap off; -->