# multi-exec via fork: both child binaries appear

1 ^allow/exec\+.+/(true|busybox|coreutils)$
1 ^allow/exec\+.+/(false|busybox|coreutils)$
# both in force with full sha3-512 hashes
1 ^force\+.+/(true|busybox|coreutils):[a-z0-9-]+:[0-9a-f]{128}$
1 ^force\+.+/(false|busybox|coreutils):[a-z0-9-]+:[0-9a-f]{128}$
0 ^allow/cnet

# Landlock: multi-exec fork: each child binary gets lock/exec
1 ^sandbox/lock:on$
1 ^allow/lock/read,exec\+/.+/(true|busybox|coreutils)$
1 ^allow/lock/read,exec\+/.+/(false|busybox|coreutils)$
0 ^allow/lock/write
