# symlink on CWD-local temp

# symlink appears in CWD glob caps (spath needs mkfifo too, so just symlink)
1 ^allow/.+symlink.+\*\*\*$
0 ^allow/cnet

# Landlock: symlink is dir-only, applied to parent
1 ^sandbox/lock:on$
1 ^allow/lock/.*symlink\+
0 ^allow/lock/symlink\+.+XXXXXX
