# /proc/self/maps: path in rule

1 ^allow/read\+/proc/(self|\[0-9\]\*)/maps$

# Landlock: /proc/self/maps gets file-level lock/read
1 ^sandbox/lock:on$
1 ^allow/lock/read\+/proc/self/maps$
# not collapsed to parent
0 ^allow/lock/read\+/proc/self$
