Landlock Sandbox Access Denial Attempt

Tim Peck@timpeck

•updated Jan 14, 2026•1•1•45

Detects when the Landlock Linux Security Module (LSM) denies an access request from a sandboxed application. This indicates that a process is attempting to perform an action that violates its predefined security policy, which can be a sign of misconfiguration or malicious activity such as exploitation.