# noop: baseline profile structure

1 ^# PROG: .+t001$
1 ^# DATE: \d{8}T\d{6}Z$
1 ^# ARGS: \[".+target/[a-z]+"\]$
1 ^sandbox/force:on$
1 ^force\+.+:[a-z0-9-]+:[0-9a-f]{32,}$
1 ^allow/exec\+.+\*\*\*$
# noop: no write/net/rename/mutating caps
0 ^allow/(write|wpath|cnet|bnet|snet|rename|symlink|mkdir|delete|truncate|chmod|create|utime|cpath|dpath|spath|tpath|fown|fattr)
# no data files in force
0 ^force\+/etc/
0 ^force\+/dev/
0 ^force\+/proc/

# Landlock: noop baseline
1 ^sandbox/lock:on$
# exec consolidated into parent
1 ^allow/lock/read,exec\+.+$
# noop must not produce dir-category or mutating lock rules.
0 ^allow/lock/readdir
0 ^allow/lock/write
0 ^allow/lock/truncate
0 ^allow/lock/bind
0 ^allow/lock/create\+
0 ^allow/lock/delete\+
0 ^allow/lock/stat
0 ^allow/lock/walk
0 ^allow/lock/chdir
