# chmod+utime on CWD-local temp

# fattr needs chattr too, so without chattr we get individual chmod,utime caps
1 ^allow/.+chmod.+\*\*\*$
1 ^allow/.+utime.+\*\*\*$
0 ^allow/cnet
0 ^allow/bnet

# Landlock: chmod and utime have no Landlock equivalent
1 ^sandbox/lock:on$
0 ^allow/lock/chmod
0 ^allow/lock/utime
1 ^allow/lock/read,exec.*\+.+$
1 ^allow/lock/(?=.*wpath)(?=.*read)[a-z,]+\+.+/target/[a-z]+$
