# UNIX bind: bnet with path

1 ^allow/bnet\+.+t012\.sock

# Landlock: UNIX bind uses parent dir for lock/bind
1 ^sandbox/lock:on$
# bind is dir-only, applied to parent of socket path
1 ^allow/lock/.*bind\+
# bind must not appear on the socket file itself
0 ^allow/lock/bind\+.+\.sock
