# SCM_RIGHTS sendmsg: net/sendfd with unnamed sockets

1 ^allow/snet\+!unnamed$
1 ^allow/bnet\+!unnamed$
1 ^allow/read\+/dev/null$

# Landlock: SCM_RIGHTS sendmsg, lock/read on /dev/null
1 ^sandbox/lock:on$
1 ^allow/lock/read\+/dev/null$

0 ^allow/cnet
