Linux 7.3 (released 2026-10-18) introduces the following Landlock features:

* **`LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS`** flag for
  [*landlock_self_restrict*(2)](https://man.gnoack.org/2/landlock_self_restrict).

  With this flag, you can skip the explicit
  [*prctl*(2)](https://man.gnoack.org/2/prctl)
  syscall with [`PR_SET_NO_NEW_PRIVS`](https://man.gnoack.org/3const/PR_SET_NO_NEW_PRIVS),
  and Landlock will set up that prerequisite
  as part of the same syscall.

  This feature was built by Justin Suess.

* **Landlock tracepoints** define stable interfaces for tracing Landlock
  (and installing eBPF hooks).

  Mickaël Salaün's [landlock-observability](https://github.com/landlock-lsm/landlock-observability) library offers a more convenient Rust interface for observing Landlock through these tracepoints.  He showed a [demo of Landlock tracepoints in action](https://hosted-files.sched.co/lsseu2026/2f/demo-lltop.webm) at our [recent talk at the Linux Security Summit EU](https://sched.co/2QmU9).

  📃 [Documentation](https://docs.kernel.org/admin-guide/LSM/landlock.html#tracepoints)
  📃 [Tracepoint reference](https://docs.kernel.org/trace/events-landlock.html)

Overview on the [Landlock ABI Versioning Page](https://wiki.gnoack.org/LandlockAbiVersioning)