# OPENSSL -> cnet

1 ^allow/cnet\+127\.0\.0\.1!443$
# socat links libssl
1 ^force\+.+libssl
1 ^force\+.+libcrypto

# Landlock: TLS connect port 443, CA cert read
1 ^sandbox/lock:on$
1 ^allow/lock/connect\+443$
1 ^allow/lock/read\+/etc/(ca-certificates|ssl|pki/(ca-trust|tls))
0 ^allow/lock/bind\+[0-9]
