# inotify_add_watch on /etc -> notify cap

1 ^allow/notify\+/etc$
# no read cap from inotify alone
0 ^allow/read\+/etc$
0 ^allow/cnet
0 ^allow/bnet

# Landlock: notify has no Landlock equivalent
1 ^sandbox/lock:on$
0 ^allow/lock/notify
