Would be cool to see integration of landlock with configuration file in a way that a service launched by systemd can apply the configuration to the executable.

Would be cool to see integration of landlock with configuration file in a way that a service launched by systemd can apply the configuration to the executable. Akin to systemd SystemCallFilter directive for no-code application of seccomp filters to the sandboxed process https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#SystemCallFilter= https://www.freedesktop.org/software/systemd/man/latest/syst...