fix(sandbox): Landlock + relative-token block for workspace FS escapes - #74

Draft

cursor[bot] wants to merge 2 commits into

mainfrom

cursor/high-severity-issues-26f5

Commits on Aug 26, 2026

fix(sandbox): block workspace FS escapes via Landlock and relative tokens

cursoragent
and
adriannoes
committed
280a78a
fix(sandbox): probe Landlock ABI so rulesets apply on older kernels

cursoragent
and
adriannoes
committed
545508a