.access = LANDLOCK_ACCESS_FS_READ_FILE |
                                LANDLOCK_ACCESS_FS_WRITE_FILE,
                },
-               {}
+               {},
        };
        struct landlock_path_beneath_attr path_beneath;
        const int ruleset_fd = create_ruleset(_metadata, rules[0].access |
                        .path = dir_s1d2,
                        .access = ACCESS_RO,
                },
-               {}
+               {},
        };
        int ruleset_fd;
 
                        .access = LANDLOCK_ACCESS_FS_READ_FILE |
                                LANDLOCK_ACCESS_FS_WRITE_FILE,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules);
        char buf;
                        .path = dir_s1d2,
                        .access = ACCESS_RO,
                },
-               {}
+               {},
        };
        /* Here, we only handle read accesses, not write accesses. */
        const int ruleset_fd = create_ruleset(_metadata, ACCESS_RO, rules);
                        .access = LANDLOCK_ACCESS_FS_READ_FILE |
                                LANDLOCK_ACCESS_FS_READ_DIR,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules);
 
                        .path = dir_s1d2,
                        .access = LANDLOCK_ACCESS_FS_MAKE_REG,
                },
-               {}
+               {},
        };
        const struct rule layer2[] = {
                {
                        .path = dir_s1d3,
                        .access = LANDLOCK_ACCESS_FS_REMOVE_FILE,
                },
-               {}
+               {},
        };
        int ruleset_fd;
 
                        .path = file1_s1d3,
                        .access = LANDLOCK_ACCESS_FS_READ_FILE,
                },
-               {}
+               {},
        };
        /* First rule with write restrictions. */
        const struct rule layer2_read_write[] = {
                        .path = dir_s1d2,
                        .access = LANDLOCK_ACCESS_FS_WRITE_FILE,
                },
-               {}
+               {},
        };
        const struct rule layer3_read[] = {
                /* Allows read access via its great-grandparent directory. */
                        .path = dir_s1d1,
                        .access = LANDLOCK_ACCESS_FS_READ_FILE,
                },
-               {}
+               {},
        };
        const struct rule layer4_read_write[] = {
                /*
                        .path = dir_s1d2,
                        .access = LANDLOCK_ACCESS_FS_READ_FILE,
                },
-               {}
+               {},
        };
        const struct rule layer5_read[] = {
                /*
                        .path = dir_s1d2,
                        .access = LANDLOCK_ACCESS_FS_READ_FILE,
                },
-               {}
+               {},
        };
        const struct rule layer6_execute[] = {
                /*
                        .path = dir_s2d1,
                        .access = LANDLOCK_ACCESS_FS_EXECUTE,
                },
-               {}
+               {},
        };
        const struct rule layer7_read_write[] = {
                /*
                        .path = dir_s1d2,
                        .access = LANDLOCK_ACCESS_FS_WRITE_FILE,
                },
-               {}
+               {},
        };
        int ruleset_fd;
 
                        .access = LANDLOCK_ACCESS_FS_READ_FILE |
                                LANDLOCK_ACCESS_FS_READ_DIR,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules);
 
                        .path = dir_s1d3,
                        .access = ACCESS_RO,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules);
 
                        .path = dir_s1d2,
                        .access = ACCESS_RO,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules);
 
                        .path = dir_s3d2,
                        .access = ACCESS_RO,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules);
 
                        .path = dir_s3d1,
                        .access = ACCESS_RO,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules);
 
                        .path = "/",
                        .access = ACCESS_RO,
                },
-               {}
+               {},
        };
        int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules);
 
                        .path = "/",
                        .access = LANDLOCK_ACCESS_FS_READ_FILE,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules);
 
                        .path = "s3d3",
                        .access = ACCESS_RO,
                },
-               {}
+               {},
        };
        int ruleset_fd;
 
                        .path = dir_s3d2,
                        .access = ACCESS_RO,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules);
 
                        .path = dir_s3d2,
                        .access = ACCESS_RO,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules);
 
                        .path = dir_s3d3,
                        .access = ACCESS_RO,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules);
 
                        .path = TMP_DIR,
                        .access = ACCESS_RO,
                },
-               {}
+               {},
        };
        const struct rule layer2_subs[] = {
                {
                        .path = dir_s2d2,
                        .access = ACCESS_RO,
                },
-               {}
+               {},
        };
        int dirfd, ruleset_fd;
 
                        .path = dir_s1d2,
                        .access = LANDLOCK_ACCESS_FS_EXECUTE,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, rules[0].access,
                        rules);
                        .path = dir_s1d2,
                        .access = LANDLOCK_ACCESS_FS_MAKE_REG,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, rules[0].access,
                        rules);
                        .path = dir_s2d2,
                        .access = LANDLOCK_ACCESS_FS_REMOVE_FILE,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, rules[0].access,
                        rules);
                        .path = dir_s2d1,
                        .access = LANDLOCK_ACCESS_FS_REMOVE_DIR,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, rules[0].access,
                        rules);
                        .path = dir_s1d2,
                        .access = LANDLOCK_ACCESS_FS_REMOVE_DIR,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, rules[0].access,
                        rules);
                        .path = dir_s1d2,
                        .access = LANDLOCK_ACCESS_FS_REMOVE_FILE,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, rules[0].access,
                        rules);
                        .path = dir_s1d2,
                        .access = access,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, access, rules);
 
                        .path = dir_s1d2,
                        .access = LANDLOCK_ACCESS_FS_MAKE_SYM,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, rules[0].access,
                        rules);
                        .path = dir_s1d2,
                        .access = LANDLOCK_ACCESS_FS_MAKE_DIR,
                },
-               {}
+               {},
        };
        const int ruleset_fd = create_ruleset(_metadata, rules[0].access,
                        rules);
                        .path = file1_s1d2,
                        .access = LANDLOCK_ACCESS_FS_READ_FILE,
                },
-               {}
+               {},
        };
        int reg_fd, proc_fd;
        const int ruleset_fd = create_ruleset(_metadata,
                        .access = LANDLOCK_ACCESS_FS_READ_FILE |
                                LANDLOCK_ACCESS_FS_WRITE_FILE,
                },
-               {}
+               {},
        };
        /* Limits read and write access to files tied to the filesystem. */
        const int ruleset_fd = create_ruleset(_metadata, rules[0].access,
                        .path = dir_s2d1,
                        .access = ACCESS_RW,
                },
-               {}
+               {},
        };
        /*
         * Sets access rights on the same bind-mounted directories.  The result
                        .path = dir_s2d2,
                        .access = ACCESS_RW,
                },
-               {}
+               {},
        };
        /* Only allow read-access to the s1d3 hierarchies. */
        const struct rule layer3_source[] = {
                        .path = dir_s1d3,
                        .access = LANDLOCK_ACCESS_FS_READ_FILE,
                },
-               {}
+               {},
        };
        /* Removes all access rights. */
        const struct rule layer4_destination[] = {
                        .path = bind_file1_s1d3,
                        .access = LANDLOCK_ACCESS_FS_WRITE_FILE,
                },
-               {}
+               {},
        };
        int ruleset_fd;
 
 static const char (*lower_base_files[])[] = {
        &lower_fl1,
        &lower_fo1,
-       NULL
+       NULL,
 };
 static const char (*lower_base_directories[])[] = {
        &lower_dl1,
        &lower_do1,
-       NULL
+       NULL,
 };
 static const char (*lower_sub_files[])[] = {
        &lower_dl1_fl2,
        &lower_do1_fo2,
        &lower_do1_fl3,
-       NULL
+       NULL,
 };
 
 #define UPPER_BASE     TMP_DIR "/upper"
 static const char (*upper_base_files[])[] = {
        &upper_fu1,
        &upper_fo1,
-       NULL
+       NULL,
 };
 static const char (*upper_base_directories[])[] = {
        &upper_du1,
        &upper_do1,
-       NULL
+       NULL,
 };
 static const char (*upper_sub_files[])[] = {
        &upper_du1_fu2,
        &upper_do1_fo2,
        &upper_do1_fu3,
-       NULL
+       NULL,
 };
 
 #define MERGE_BASE     TMP_DIR "/merge"
        &merge_fl1,
        &merge_fu1,
        &merge_fo1,
-       NULL
+       NULL,
 };
 static const char (*merge_base_directories[])[] = {
        &merge_dl1,
        &merge_du1,
        &merge_do1,
-       NULL
+       NULL,
 };
 static const char (*merge_sub_files[])[] = {
        &merge_dl1_fl2,
        &merge_do1_fo2,
        &merge_do1_fl3,
        &merge_do1_fu3,
-       NULL
+       NULL,
 };
 
 /*
                        .path = MERGE_BASE,
                        .access = ACCESS_RW,
                },
-               {}
+               {},
        };
        const struct rule layer2_data[] = {
                {
                        .path = MERGE_DATA,
                        .access = ACCESS_RW,
                },
-               {}
+               {},
        };
        /* Sets access right on directories inside both layers. */
        const struct rule layer3_subdirs[] = {
                        .path = merge_do1,
                        .access = ACCESS_RW,
                },
-               {}
+               {},
        };
        /* Tighten access rights to the files. */
        const struct rule layer4_files[] = {
                        .access = LANDLOCK_ACCESS_FS_READ_FILE |
                                LANDLOCK_ACCESS_FS_WRITE_FILE,
                },
-               {}
+               {},
        };
        const struct rule layer5_merge_only[] = {
                {
                        .access = LANDLOCK_ACCESS_FS_READ_FILE |
                                LANDLOCK_ACCESS_FS_WRITE_FILE,
                },
-               {}
+               {},
        };
        int ruleset_fd;
        size_t i;