Landlock's goal is to make it possible for Linux applications to sandbox themselves. On Linux, many traditional access control mechanisms are only available to the system administrator, which do not follow the principle of least privilege. As a result, sandboxing policies were created independently of an actual program execution, leading to unnecessarily broad policies. With Landlock, unprivileged processes can safely create sandboxing policies well-tailored to the expected needs of a running application. Landlock also solves the organizational aspect of keeping policy and software in sync with each other, by putting the policy definition and maintenance in the developer's hands.

1. Jakob's Law of the Internet User Experience

Users spend most of their time on other sites. This means that users prefer your site to work the same way as all the other sites they already know. (See 2-minute video discussing Jakob's Law in further depth.)

This Law is not even a future trend since it has been ruling the Web for several years. It has long been true that websites do more business the more standardized their design is. Think Yahoo and Amazon. Think "shopping cart" and the silly little icon. Think blue text links.