# sha3-512 default: hashes are 128 hex chars

1 ^force\+.+:[a-z0-9-]+:[0-9a-f]{128}$
# no data paths in force
0 ^force\+/etc/
0 ^force\+/dev/
0 ^force\+/proc/

# Landlock: hash algorithm does not affect lock rules
1 ^sandbox/lock:on$
0 ^allow/lock/write
0 ^allow/lock/readdir
