# memfd_create: !memfd:** glob and create cap

1 ^allow/create\+!memfd:\*\*$
0 ^allow/write
0 ^allow/cnet

# Landlock: memfd has no filesystem path, no lock/create
1 ^sandbox/lock:on$
0 ^allow/lock/create\+!memfd

0 ^allow/bnet
