# multiple connects -> distinct cnet per port

1 ^allow/cnet\+127\.0\.0\.1!8080$
1 ^allow/cnet\+127\.0\.0\.1!8443$

# Landlock: two non-consecutive ports stay distinct
1 ^sandbox/lock:on$
1 ^allow/lock/connect\+8080$
1 ^allow/lock/connect\+8443$
# not collapsed into a range since 8080 and 8443 are not consecutive
0 ^allow/lock/connect\+8080-8443$
0 ^allow/lock/bind\+[0-9]
