Comparator calls landrun with `--best-effort`

[tadamcz]

Problem

Landrun's --best-effort silently degrades to the best available Landlock version. For Linux older than 5.13 (June 2021) this means it falls back to no Landlock protections at all.

See https://github.com/zouuup/landrun#best-effort-mode

Potential solutions

I think there are two main options to improve this without making changes to landrun:

1. Comparator still passes --best-effort, but refuses to run on very old versions of Linux, printing a descriptive error message.
2. Comparator does not pass --best-effort. It thus requires Landlock >=v9, which was released with Kernel 7.1 in June 2026.

For more fine-grained control, a PR to landrun would be required.

[tadamcz]

Looks like it's already substantially addressed by this open PR #76. Could maintainers weigh in on that PR?

[hargoniX]

We already have a plan to address this type of stuff by moving off landrun.

[tadamcz]

What's the plan for moving off landrun? And do you have a timeline for that?

[hargoniX]

We plan to use bwrap instead, I hope to get to it in the coming weeks.