For the latest stable version, please use Emilua API 0.10!

system.landlock_restrict_self

Synopsis

local system = require "system"
system.landlock_restrict_self(ruleset_fd: file_descriptor)

Description

Enforce a Landlock ruleset for the calling process.

Only the master VM is allowed to use this function.
Only available on Linux.

Bugs

There’s a libpsx bug that prevents thread synchronization to work: https://bugzilla.kernel.org/show_bug.cgi?id=218607.