# linkat(2): triggers cpath alias (create+delete+rename)

1 ^allow/cpath.+\*\*\*$

# Landlock: linkat cpath consolidated
1 ^sandbox/lock:on$
1 ^allow/lock/(?=.*cpath)(?=.*read)[a-z,]+\+.+$
1 ^allow/lock/(?=.*wpath)(?=.*read)[a-z,]+\+.+/target/[a-z]+$

0 ^allow/cnet
