Landlock features in Linux 7.3

Linux 7.3 (released 2026-10-18) introduces the following Landlock features:

• LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS flag for landlock_self_restrict(2).

  With this flag, you can skip the explicit prctl(2) syscall with PR_SET_NO_NEW_PRIVS, and Landlock will set up that prerequisite as part of the same syscall.

  This feature was built by Justin Suess.

• Landlock tracepoints define stable interfaces for tracing Landlock (and installing eBPF hooks).

  Mickaël Salaün’s landlock-observability library offers a more convenient Rust interface for observing Landlock through these tracepoints. He showed a demo of Landlock tracepoints in action at our recent talk at the Linux Security Summit EU.

  📃 Documentation 📃 Tracepoint reference

Overview on the Landlock ABI Versioning Page

Comments