Landlock features in Linux 7.3

Linux 7.3 (released 2026-10-18) introduces the following Landlock features: LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS flag for landlock_self_restrict(2). With this flag, you can skip the explicit prctl(2) syscall with PR_SET_NO_NEW_PRIVS, and Landlock will set up that prerequisite as part of the same syscall. This feature was built by Justin Suess. Landlock tracepoints define stable interfaces for tracing Landlock (and installing eBPF hooks). Mickaël Salaün’s landlock-observability library offers a more convenient Rust interface for observing Landlock through these tracepoints. He showed a demo of Landlock tracepoints in action at our recent talk at the Linux Security Summit EU. 📃 Documentation 📃 Tracepoint reference Overview on the Landlock ABI Versioning Page