# ioctl: TCGETS on pty

1 ^sandbox/ioctl:on$
1 ^allow/ioctl\+.*TCGETS

# Landlock: pty write produces lock/wpath on /dev/ptmx
1 ^sandbox/lock:on$
1 ^allow/lock/wpath.*\+/dev/ptmx$
# ioctl has no Landlock equivalent
0 ^allow/lock/ioctl
