# pipe chain: cat /etc/hostname | wc > /dev/null

1 ^allow/exec\+.+/(cat|busybox|coreutils)$
1 ^allow/exec\+.+/(wc|busybox|coreutils)$
1 ^allow/read\+/etc/hostname$
1 ^allow/wpath\+/dev/null$
# no bnet from pipe
0 ^allow/bnet

# Landlock: pipe chain, cat+wc both get lock/exec
1 ^sandbox/lock:on$
1 ^allow/lock/read,exec\+/.+/(cat|busybox|coreutils)$
1 ^allow/lock/read,exec\+/.+/(wc|busybox|coreutils)$
1 ^allow/lock/read\+/etc/hostname$
1 ^allow/lock/wpath\+/dev/null$
