# chown -> fown

1 ^allow/(fown|chown)
0 ^allow/cnet

# Landlock: chown has no Landlock equivalent
1 ^sandbox/lock:on$
0 ^allow/lock/chown
0 ^allow/lock/chgrp
1 ^allow/lock/read,exec.*\+.+$
1 ^allow/lock/(?=.*wpath)(?=.*read)[a-z,]+\+.+/target/[a-z]+$
