# unnamed socket: socat uses it internally for OPEN

1 ^allow/bnet\+!unnamed$
1 ^allow/read\+/etc/hostname$
0 ^allow/cnet

# Landlock: unnamed sockets have no path, no lock/bind
1 ^sandbox/lock:on$
0 ^allow/lock/bind
0 ^allow/lock/connect\+[0-9]
