# exec chain: child exec visible with its own force entry

1 ^allow/exec\+.+/(true|busybox|coreutils)$
1 ^force\+.+/(true|busybox|coreutils):[a-z0-9-]+:[0-9a-f]{128}$
# parent binary also in force
1 ^force\+.+/t029:[a-z0-9-]+:[0-9a-f]{128}$
# no read/write from this test
0 ^allow/read\+/etc/host
0 ^allow/write
0 ^allow/cnet

# Landlock: exec chain consolidated
1 ^sandbox/lock:on$
1 ^allow/lock/read,exec\+/.+/(true|busybox|coreutils)$
1 ^allow/lock/read,exec\+.+$
0 ^allow/lock/write
