Landlock Multithreaded Policy Enforcement

&#xA; With Linux 7.0, Landlock gains the new LANDLOCK_RESTRICT_SELF_TSYNC feature . &#xA; With this new flag to the landlock_restrict_self(2) system call,&#xA;the Landlock policy enforcement is applied to the entire process &#xA;rather than just the calling thread. (The naming is analogous to&#xA;the similarly named SECCOMP_FILTER_FLAG_TSYNC flag for Seccomp-BPF.) &#xA; The old workaround &#xA;…