# nftw(3) /dev with PANDORA_LIMIT=0

# /dev top-level
1 ^allow/readdir\+/dev$

# /dev subtree
1 ^allow/readdir\+/dev/pts$
1 ^allow/readdir\+/dev/shm$

# No network rules
0 ^allow/cnet
0 ^allow/bnet

# Landlock: nftw /dev produces lock/readdir entries
1 ^sandbox/lock:on$
1 ^allow/lock/readdir\+/dev$
0 ^allow/lock/write

0 ^allow/snet
