# /proc/self/task/tid: glob with ***

1 ^allow/read\+/proc/self/task/\[0-9\]\*
1 ^allow/fs\+.*proc

# Landlock: /proc/self/task paths get lock/read
1 ^sandbox/lock:on$
0 ^allow/lock/write

0 ^allow/write
