# access(2) with sandbox/lpath:on: walk+stat caps

1 ^allow/walk,stat\+/etc/hostname$
1 ^allow/walk,stat\+/etc/shadow$
# walk on parent dirs
1 ^allow/walk\+/etc$
0 ^allow/cnet

# Landlock: walk and stat have no Landlock equivalent
1 ^sandbox/lock:on$
0 ^allow/lock/walk
0 ^allow/lock/stat
