{"record":{"id":"745cd1d7a5b7a12c","repo":"deepseek-ai/deepseek-harness","slug":"landlock-run-partial-enforcement-older-landlock","errorCode":null,"errorMessage":"landlock-run: partial enforcement (older Landlock ABI)","messagePattern":"landlock-run: partial enforcement \\(older Landlock ABI\\)","errorType":"console","errorClass":null,"httpStatus":null,"severity":"error","filePath":"native/landlock-run/packages/entry/src/main.c","lineNumber":292,"sourceCode":"     * report line is part of the launcher CLI contract — the executor reads\n     * enforcement completeness from it. */\n    static const char *probe_root = \"/\";\n    struct cli probe = { .ro = &probe_root, .ro_count = 1 };\n    int partial = 0;\n    code = restrict_self(&probe, &partial);\n    if (code != 0) return code;\n    printf(\"landlock: %s\\n\", partial ? \"partially enforced (older ABI)\" : \"fully enforced\");\n    return 0;\n  }\n\n  int partial = 0;\n  code = restrict_self(&cli, &partial);\n  if (code != 0) return code;\n  if (partial) {\n    /* Older ABI: some handled accesses are not governed (e.g. truncate\n     * before ABI 3). Still confined for everything the kernel supports —\n     * report, do not refuse. */\n    fprintf(stderr, \"landlock-run: partial enforcement (older Landlock ABI)\\n\");\n  }\n\n  execvp(cli.command[0], cli.command);\n  /* exec only returns on failure. */\n  return fail(\"exec failed\", strerror(errno));\n}\n","sourceCodeStart":274,"sourceCodeEnd":299,"githubUrl":"https://github.com/deepseek-ai/deepseek-harness/blob/b150a551b8d465e31e418e1b2eaf5e79bbb7d28e/native/landlock-run/packages/entry/src/main.c#L274-L299","documentation":"Error \"landlock-run: partial enforcement (older Landlock ABI)\" thrown in deepseek-ai/deepseek-harness.","triggerScenarios":"Thrown at native/landlock-run/packages/entry/src/main.c:292 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Upgrade the kernel for full Landlock enforcement or accept the reduced sandbox coverage."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"b150a551b8d465e31e418e1b2eaf5e79bbb7d28e","analyzedAt":"2026-08-24T18:12:29.105Z","schemaVersion":2},"datasetVersion":"2026-08-24T22:17:12.610Z"}