[wufocaculura]

There's a single dot in a line between #include <sys/prcntl.h> and void my_sandbox(void). It is easy to miss, but makes the compile to fail, thus resulting in HAVE_LINUX_LANDLOCK to be never enabled.

[arrowsmith]

Can someone explain to n00bs like me: what's "landlock" anyway and why is it significant here?

[Denvercoder9]

It's a Linux Security Module that allows to sandbox processes: https://docs.kernel.org/userspace-api/landlock.html

[Thorrez]

prctl, not prcntl