rule to a ruleset; • landlock_restrict_self (2) enforces a ruleset on the calling thread ... sandbox itself with the ruleset. if (landlock_restrict_self(ruleset_fd, 0)) { perror("F…