# ioctl TIOCGWINSZ: ioctl sandbox and named grouping

1 ^sandbox/ioctl:on$
1 ^allow/ioctl\+TIOCGWINSZ$
1 ^allow/read,write\+/dev/null$
0 ^allow/cnet

# Landlock: ioctl has no Landlock equivalent
1 ^sandbox/lock:on$
0 ^allow/lock/ioctl

0 ^allow/bnet
