Linux Landlock LSM for Agent Sandboxing: Lightest Kernel-Level Filesystem and Network Controls Without Containers — Fastest Growing Agent Isolation Approach

Northflank Blog·medium signal

Linux Landlock LSM has emerged as the lightest and most popular kernel-level agent sandboxing approach in 2026, providing filesystem and network access controls without requiring any containers or VMs. Unlike gVisor (user-space kernel) or Firecracker (microVMs), Landlock works directly with the Linux kernel's security module system, adding minimal overhead. Tools like landrun wrap AI agents with Landlock policies, restricting file access, network connections, and system calls. The market now splits between permissive tools (yolobox) for agent productivity and restrictive tools (shai, yolo-cage, landrun) for damage limitation.