# /proc/self reads: proc fs type, literal /proc/self paths

1 ^allow/read\+/proc/self/status$
1 ^allow/read\+/proc/self/cmdline$
1 ^allow/read\+/proc/self/stat$
1 ^allow/fs\+.*proc
0 ^allow/write
0 ^allow/cnet

# Landlock: /proc/self reads get file-level lock/read
1 ^sandbox/lock:on$
1 ^allow/lock/read\+/proc/self/status$
1 ^allow/lock/read\+/proc/self/cmdline$
1 ^allow/lock/read\+/proc/self/stat$
0 ^allow/lock/write
