# stat(2) with sandbox/lpath:on: walk+stat caps

1 ^allow/walk,stat\+/etc/hostname$
1 ^allow/walk,stat\+/usr/bin$
# walk on parent directories
1 ^allow/walk\+/etc$
1 ^allow/walk\+/usr$
0 ^allow/cnet

# Landlock: stat and walk have no Landlock equivalent
1 ^sandbox/lock:on$
0 ^allow/lock/stat
0 ^allow/lock/walk

0 ^allow/bnet
