[arrowsmith]

Can someone explain to n00bs like me: what's "landlock" anyway and why is it significant here?

[Denvercoder9]

It's a Linux Security Module that allows to sandbox processes: https://docs.kernel.org/userspace-api/landlock.html