# mkdir+rmdir -> tpath

1 ^allow/(tpath|mkdir)
0 ^allow/cnet
0 ^allow/bnet

# Landlock: tpath (mkdir+rmdir) are dir-only
1 ^sandbox/lock:on$
1 ^allow/lock/tpath\+
0 ^allow/lock/write
0 ^allow/lock/bind
