Landlock Domain Is Scoped
The domain_is_scoped() helper implements the following predicate:
That is, we require for each layer l nesting depth that:
- If scoping is active at the layer,
- Then the domains of self and other are the same at the given nesting depth.
For example: