[ximm]

This looks nice, but I fail to see any use cases that cannot be handled with bwrap and mount namespaces.

[amarshall]

Some systems or admins may not trust unprivileged namespacing (thus disabling and its use requiring root), while Landlock may be enabled (and is specifically designed to be used by unprivileged processes).

[1oooqooq]

namespace, specially user and net, are terrible to setup and use.

I'm not sure this is better, but assuming it is by the author into.