#
#=Description ptrace regex peer rule
#=EXRESULT PASS
#

/usr/bin/foo {
  deny ptrace read peer=/{**/,}bin/{sh,true},

  }