system.landlock_restrict_self

Synopsis

local system = require "system"
system.landlock_restrict_self(ruleset_fd: file_descriptor)

Enforce a Landlock ruleset for the calling process.

Only the master VM is allowed to use this function.

Only available on Linux.

There’s a libpsx bug that prevents thread synchronization to work: https://bugzilla.kernel.org/show_bug.cgi?id=218607.