I don’t know if landlock does this, but what I want is safe application sandboxing. I have zoom installed on my Linux machine. I don’t trust the zoom developers, and zoom only really needs a few permissions. Right now there’s nothing stopping zoom from recording key presses, or uploading my sensitive files to their servers. I wouldn’t even notice. With stuff like this, ideally zoom would have limited access to other areas of my computer so it just wouldn’t be able to do anything nasty without my consent or knowledge.

I always find it weird - linux’s security model obsesses about user accounts and user security. I don’t care about that - I’m the only user! But on the flip side there’s very little effort put in to application / developer specific access control. All applications I run can read, exfiltrate or ransomware all my stuff. That seems reckless and dangerous.

I’m a huge fan of efforts like this - security is never sexy, but it’s extremely important. Let’s make Linux as secure for end users as iOS.