[Denvercoder9]

It's a Linux Security Module that allows to sandbox processes: https://docs.kernel.org/userspace-api/landlock.html