Landlock Namespace And Capability Control

Review: https://lore.kernel.org/all/20260726161400.3010511-1-mic@digikod.net/ (Pending)